An intelligent campus OA office data interaction method, device, equipment and medium

By encrypting odd and even data blocks in OA system based on data sensitivity levels and using dynamic key sets to encrypt odd and even data blocks, the problem of lack of flexibility in data encryption in the prior art is solved, and data security and interaction efficiency are improved.

CN119363480BActive Publication Date: 2025-07-25QIANCHENG IDEAL (SHENZHEN) INFORMATION TECH CO LTD
View PDF 3 Cites 0 Cited by

Patent Information

Application Number
CN202411908607.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-12-24
Publication Date
2025-07-25
Estimated Expiration
2044-12-24

AI Technical Summary

Technical Problem

The data encryption methods in existing OA systems lack flexibility for different types of data, resulting in insufficient data security.

Method used

Cloud servers dynamically select key sets based on the sensitivity level of data, encrypt the original data in blocks, and use different keys to encrypt the odd and even data blocks respectively, and generate complex key sets through convolutional calculations, and data packet encapsulation ensures transmission security.

Benefits of technology

It improves the flexibility and security of data encryption, reduces processing delays, improves data interaction speed and system performance, and ensures the confidentiality and integrity of data during transmission.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119363480B_ABST
    Figure CN119363480B_ABST
Patent Text Reader

Abstract

The present invention is applicable to the technical field of data encryption, and provides an intelligent campus OA office data interaction method, device, equipment and medium. The intelligent campus OA office data interaction method includes: the cloud server receives a data extraction request sent by the OA client and extracts the original data corresponding to the data extraction request; the cloud server divides the original data into fixed-size chunks to obtain a plurality of original data blocks; the cloud server encrypts the odd original data block set and the even original data block set respectively through a key set to obtain a first ciphertext corresponding to the odd original data block set and a second ciphertext corresponding to the even original data block set; the cloud server sequentially sends the first ciphertext and the second ciphertext to the OA client. Through the data block encryption mechanism, this technical solution not only improves the security of data interaction in the OA system, but also greatly improves the flexibility of data processing and the system performance.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention belongs to the technical field of data encryption, and particularly relates to an intelligent campus OA office data interaction method, device, equipment and medium. Background Art

[0002] With the rapid development of the information age, digital office work has become an important part of modern campus management. The office automation system (OA system for short) in campus management is increasingly applied to administrative management, teaching arrangement, student affairs, financial management and other fields, greatly improving the efficiency of various office activities and information processing capabilities within the campus. The OA system usually consists of a cloud server and various clients (such as PC terminals, mobile terminals, etc.). Through the real-time data interaction between the cloud server and the clients, the storage, processing, sharing and application of data are made more efficient.

[0003] However, with the wide application of the OA system in the campus, data security and privacy protection have become problems to be solved urgently. A large amount of sensitive data is involved in the OA system, such as classified files, academic materials, financial information or faculty information, etc. Once these data are leaked or maliciously tampered with, it may have a serious impact on the school's management work and even pose a threat to the personal privacy of students, teachers and other relevant personnel. Therefore, how to ensure the security of data in the OA system, especially during the data transmission and storage processes, has become an important issue in the current design and implementation of the campus OA system.

[0004] Currently, for data security, certain encryption technologies have been widely applied in the OA system. For example, by encrypting sensitive data, it can effectively prevent the data from being intercepted or tampered with during the transmission process. However, the existing data encryption methods often have some deficiencies. For example, data encryption usually encrypts the overall data, lacking flexibility for different types of data. Summary of the Invention

[0005] In view of this, embodiments of the present invention provide an intelligent campus OA office data interaction method, device, equipment and medium to solve the technical problem that data encryption usually encrypts the overall data, lacking flexibility for different types of data.

[0006] The first aspect of the embodiments of the present invention provides an intelligent campus OA office data interaction method. The intelligent campus OA office data interaction method is applied to an OA system. The OA system includes a cloud server and an OA client. The intelligent campus OA office data interaction method includes:

[0007] The cloud server receives a data extraction request sent by the OA client and extracts the original data corresponding to the data extraction request;

[0008] The cloud server matches a preset key set corresponding to the sensitivity level according to the sensitivity level of the original data;

[0009] The cloud server divides the original data into fixed - size chunks to obtain multiple original data chunks;

[0010] The cloud server extracts an odd - numbered original data chunk set and an even - numbered original data chunk set respectively in the order of the multiple original data chunks in the original data;

[0011] The cloud server encrypts the odd - numbered original data chunk set and the even - numbered original data chunk set respectively through the key set to obtain a first ciphertext corresponding to the odd - numbered original data chunk set and a second ciphertext corresponding to the even - numbered original data chunk set;

[0012] The cloud server sends the first ciphertext and the second ciphertext to the OA client in sequence.

[0013] Further, before the step where the cloud server matches a preset key set corresponding to the sensitivity level according to the sensitivity level of the original data, it further includes:

[0014] Randomly generate initial keys corresponding to different sensitivity levels and send the initial keys to the OA client; the OA client is used to generate a key set according to the initial keys;

[0015] Perform a splitting process on the initial keys to obtain multiple first sub - keys;

[0016] Perform a cyclic shift process on the multiple first sub - keys to obtain multiple second sub - keys;

[0017] Perform a convolution calculation based on the multiple first sub - keys and the multiple second sub - keys to obtain the key set.

[0018] Further, the step of performing a convolution calculation based on the multiple first sub - keys and the multiple second sub - keys to obtain the key set includes:

[0019] Based on the multiple first sub - keys, construct a first convolution kernel;

[0020] Arrange the multiple first sub - keys in a preset position to construct a first data matrix;

[0021] Perform convolution processing on multiple first data matrices respectively through the first convolution kernel to obtain multiple first target keys;

[0022] Construct a second convolution kernel based on the multiple second sub-keys;

[0023] Arrange the multiple second sub-keys according to a preset position to construct a second data matrix;

[0024] Perform convolution processing on the multiple second data matrices respectively through the second convolution kernel to obtain multiple second target keys;

[0025] Use the multiple first target keys and the multiple second target keys as the key set.

[0026] Further, the step of constructing a first convolution kernel based on the multiple first sub-keys includes:

[0027] Extract the first two characters and the last two characters of the multiple first sub-keys respectively;

[0028] Construct a first convolution kernel by arranging the first two characters and the last two characters corresponding to each of the multiple first sub-keys according to a preset element position;

[0029] Correspondingly, the step of constructing a second convolution kernel based on the multiple second sub-keys includes:

[0030] Extract the first two characters and the last two characters of the multiple second sub-keys respectively;

[0031] Construct a second convolution kernel by arranging the first two characters and the last two characters corresponding to each of the multiple second sub-keys according to a preset element position.

[0032] Further, the step that the cloud server encrypts the odd original data block set and the even original data block set respectively through the key set to obtain a first ciphertext corresponding to the odd original data block set and a second ciphertext corresponding to the even original data block set includes:

[0033] Based on the multiple first target keys in the key set, encrypt the odd original data block set in sequence to obtain a first ciphertext corresponding to the odd original data block set;

[0034] Based on the multiple second target keys in the key set, encrypt the even original data block set in sequence to obtain a second ciphertext corresponding to the even original data block set.

[0035] Further, the step that the cloud server sends the first ciphertext and the second ciphertext to the OA client in sequence includes:

[0036] Separate the first ciphertext, the serial number corresponding to the sensitivity level, the serial number of the original data, the serial number corresponding to the first ciphertext, and the number of ciphertexts, and perform data packet encapsulation to obtain multiple first data packets corresponding to the first ciphertext; the serial number corresponding to the first ciphertext is used to instruct the OA client to combine the original data blocks corresponding to the first ciphertext according to the order to obtain the original data;

[0037] Separate the second ciphertext, the serial number corresponding to the sensitivity level, the serial number of the original data, the serial number corresponding to the second ciphertext, and the number of ciphertexts, and perform data packet encapsulation to obtain multiple second data packets corresponding to the second ciphertext; the serial number corresponding to the second ciphertext is used to instruct the OA client to combine the original data blocks corresponding to the second ciphertext according to the order to obtain the original data;

[0038] Send multiple first data packets and multiple second data packets to the OA client in sequence.

[0039] Further, after the step of sending multiple first data packets and multiple second data packets to the OA client in sequence, it further includes:

[0040] The OA client receives multiple first data packets and multiple second data packets sent by the cloud server;

[0041] If the number of multiple first data packets and multiple second data packets is consistent with the number of ciphertexts, the OA client matches the corresponding sensitivity level according to the serial number corresponding to the sensitivity level;

[0042] The OA client matches the initial key corresponding to the sensitivity level, and generates a key set according to the initial key;

[0043] The OA client decrypts the first ciphertext and the second ciphertext according to the key set, the serial number corresponding to the first ciphertext, and the serial number corresponding to the second ciphertext to obtain multiple original data blocks;

[0044] The OA client combines multiple original data blocks according to the serial number corresponding to the corresponding first ciphertext and the serial number corresponding to the second ciphertext to obtain the original data.

[0045] The second aspect of the embodiments of the present invention provides an intelligent campus OA office data interaction device, including:

[0046] A first extraction unit, configured to receive a data extraction request sent by the OA client by the cloud server, and extract the original data corresponding to the data extraction request;

[0047] A matching unit, configured to match a preset key set corresponding to the sensitivity level by the cloud server according to the sensitivity level of the original data;

[0048] The splitting unit is used for the cloud server to split the original data into multiple original data blocks according to a fixed size;

[0049] The second extraction unit is used for the cloud server to extract the odd original data block set and the even original data block set respectively according to the order of the multiple original data blocks in the original data;

[0050] The encryption unit is used for the cloud server to perform encryption processing on the odd original data block set and the even original data block set respectively through the key set, so as to obtain the first ciphertext corresponding to the odd original data block set and the second ciphertext corresponding to the even original data block set;

[0051] The sending unit is used for the cloud server to send the first ciphertext and the second ciphertext to the OA client in sequence.

[0052] In the third aspect of the embodiments of the present invention, a terminal device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the intelligent campus OA office data interaction method described in the first aspect are implemented.

[0053] In the fourth aspect of the embodiments of the present invention, a computer-readable storage medium is provided. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the intelligent campus OA office data interaction method described in the first aspect are implemented.

[0054] The beneficial effects of the embodiments of the present invention compared with the prior art are as follows: According to the sensitivity level of the data, an appropriate encryption key is dynamically selected for encryption processing, avoiding the one-size-fits-all approach in traditional encryption methods. Different encryption strategies are used to process data with different sensitivity levels to ensure that important data is protected with a higher strength. In this solution, the original data is segmented according to a fixed size and grouped for encryption based on the parity of the data blocks, making the data encryption process more flexible and refined. Different data blocks are encrypted with different keys, enhancing the system's processing ability for different types of data. In addition, the block processing of data enables the cloud server to process different data blocks in parallel or asynchronously, thereby improving the encryption efficiency and reducing the processing delay. Especially in the case of a large amount of data, this method can better optimize the encryption process, reduce the server load, and improve the data interaction speed and response performance of the OA system. Through the segmentation, parallel encryption, and on-demand encryption of data blocks, this solution not only ensures the security of data but also improves the efficiency of data interaction on the premise of ensuring security. The cloud server can quickly send the encrypted data to the OA client, ensuring the confidentiality of the data during transmission, avoiding the leakage of sensitive data, and improving the fluency of data exchange. Through the data block encryption mechanism, this technical solution not only improves the security of data interaction in the OA system but also greatly improves the flexibility of data processing and the system performance, which has important application value for building a secure, efficient, and easy-to-manage intelligent campus OA office system. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the drawings required for use in the embodiments or the description of related technologies. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0056] Figure 1 FIG. shows a schematic flowchart of an intelligent campus OA office data interaction method provided by the present invention;

[0057] Figure 2 FIG. shows a schematic diagram of an intelligent campus OA office data interaction device provided by an embodiment of the present invention;

[0058] Figure 3 FIG. shows a schematic diagram of a terminal device provided by an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0059] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present invention. However, it should be clear to those skilled in the art that the present invention may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present invention.

[0060] The embodiments of the present invention provide a smart campus OA office data interaction method, device, equipment and medium to solve the technical problem that data encryption usually encrypts the entire data and lacks flexibility for different types of data.

[0061] First, the present invention provides a smart campus OA office data interaction method. Figure 1 , Figure 1 FIG. 1 is a schematic flow chart of a smart campus OA office data interaction method provided by the present invention. Figure 1 As shown, the smart campus OA office data interaction method may include the following steps:

[0062] Step 101: The cloud server receives a data extraction request sent by the OA client, and extracts original data corresponding to the data extraction request;

[0063] The OA client initiates a request to the cloud server. The data extraction request includes the identification or other filtering information about the required data. The cloud server extracts the corresponding raw data from the database based on the received request.

[0064] Step 102: The cloud server matches a preset key set corresponding to the sensitivity level according to the sensitivity level of the original data;

[0065] After extracting the original data, the cloud server extracts the sensitivity level of the data. Data of different sensitivity levels need to be encrypted using different keys. Sensitivity levels include but are not limited to low sensitivity level, medium sensitivity level and high sensitivity level. According to the sensitivity level, the cloud server selects a preset key set. The key set contains multiple subkeys to ensure the security and diversity of the encryption process. The calculation process of the key set is as follows:

[0066] Optionally, before step 102, steps A1 to A4 are also included:

[0067] Step A1: randomly generating initial keys corresponding to different sensitivity levels, and sending the initial keys to the OA client; the OA client is used to generate a key set according to the initial keys;

[0068] Generate corresponding initial keys for different sensitivity levels (such as high sensitivity, medium sensitivity, low sensitivity, etc.). This is to ensure that the system can use different keys for encryption according to different security requirements. The keys can be generated by a pseudo-random number generator to ensure that the generated keys have different characteristics for each sensitivity level, thereby enhancing the security of the system.

[0069] Among them, the logic for the OA client to generate the key set is the same as that of the cloud server, which will not be elaborated here.

[0070] Step A2: Perform a splitting process on the initial key to obtain multiple first sub-keys;

[0071] Perform a "splitting" operation on the initial key to divide the initial key into multiple small sub-keys, improving the flexibility and security of key usage. Each sub-key will participate in different encryption operations in subsequent processing.

[0072] Step A3: Perform a cyclic shift process on the multiple first sub-keys to obtain multiple second sub-keys;

[0073] Performing a "cyclic shift" process on the first sub-keys can increase the complexity of the keys, making them more difficult to be cracked. Cyclic shift means shifting the bits in the key in a circular manner, which can be achieved by bitwise shift operations. The result of the cyclic shift is to generate multiple new "second sub-keys", which help to enhance the unpredictability of the subsequent encryption process.

[0074] For example: if the first sub-key is "100011101011", after a one-bit right cyclic shift, the second sub-key obtained is "110001110101".

[0075] Step A4: Perform a convolution calculation based on the multiple first sub-keys and the multiple second sub-keys to obtain the key set.

[0076] Using convolution calculation, combine the multiple first sub-keys and second sub-keys to generate a new key set. It can be understood as fusing two sequences through a specific mathematical method. By combining sub-keys from different sources, a key set more complex than the initial key can be generated, increasing the security of the system.

[0077] Specifically, step A4 includes steps A41 to A47:

[0078] Step A41: Based on the multiple first sub-keys, construct a first convolution kernel;

[0079] Multiple first sub - keys are used to construct a convolutional kernel, which is used to process a data matrix in subsequent calculations. A convolutional kernel is usually a small - sized matrix that slides on the data matrix to perform a convolution operation, thereby extracting features from the data. Here, the "convolutional kernel" is actually a mathematical object containing partial information of multiple first sub - keys. The convolutional kernel can be regarded as a fixed pattern or template extracted from the first sub - keys for feature extraction or encryption of the input data.

[0080] Specifically, step A41 specifically includes: respectively extracting the first two characters and the last two characters of multiple said first sub - keys; constructing the first two characters and the last two characters corresponding to each of the multiple first sub - keys into a first convolutional kernel according to a preset element position.

[0081] Step A42: Arrange multiple first sub - keys in a preset position to construct a first data matrix;

[0082] Arrange multiple first sub - keys according to a rule (such as a preset order or position) to form a data matrix. Among them, if the number of digits between the first sub - keys is inconsistent, the number of digits between multiple first sub - keys can be aligned by padding with a preset value.

[0083] Step A43: Perform convolution processing on multiple said first data matrices respectively through the first convolutional kernel to obtain multiple first target keys;

[0084] Convolution is performed by sliding the convolutional kernel on the data matrix. At each position, the convolutional kernel performs element - by - element multiplication with a part of the data matrix, and then sums the results to generate a new key element. The result obtained from each convolution is a "first target key".

[0085] Step A44: Based on multiple said second sub - keys, construct a second convolutional kernel;

[0086] Specifically, step A44 specifically includes: respectively extracting the first two characters and the last two characters of multiple said second sub - keys; constructing the first two characters and the last two characters corresponding to each of the multiple second sub - keys into a second convolutional kernel according to a preset element position.

[0087] Step A45: Arrange multiple second sub - keys in a preset position to construct a second data matrix;

[0088] Step A46: Perform convolution processing on multiple said second data matrices respectively through the second convolutional kernel to obtain multiple second target keys;

[0089] Steps A44 to A46 are similar in logic to steps A41 to A43, and will not be elaborated here.

[0090] Step A47: Use multiple first target keys and multiple second target keys as the key set.

[0091] By constructing multiple first sub - keys and second sub - keys into a data matrix and performing convolution calculations using a convolution kernel, target keys with high complexity and unpredictability can be generated. This process makes the generation of keys not only depend on simple operations of the initial key, but increases the diversity of the key space through complex mathematical transformations, thus greatly enhancing the difficulty of key cracking and the security of the system. By separately using the convolution kernel to perform convolution processing on the first data matrix and the second data matrix, not only is the randomness of key distribution improved, but also potential security risks caused by simple key relationships are effectively avoided. Convolution calculations can capture and retain the complex correlations between sub - keys, ensuring that the generation of each target key has sufficient confidentiality and anti - attack capabilities. This technical solution ensures the structuring and standardization of the key generation process by constructing a convolution kernel and arranging sub - keys as a data matrix at preset positions. By separately performing convolution processing on the first sub - keys and the second sub - keys, multiple generated first target keys and multiple second target keys are combined into a key set, which can ensure the diversity within the key set. This solution can be adjusted according to different key lengths and structure requirements in practical applications through flexible convolution kernel design and matrix construction methods. Through the method of arranging at preset positions and constructing a structured data matrix, the convolution calculation of keys can be efficiently carried out. In summary, the technical solution of the present invention generates a complex, diverse and highly secure key set through a convolution calculation method, combined with multiple transformations of multiple first sub - keys and second sub - keys, and has remarkable security, efficiency and flexibility.

[0092] In this embodiment, by randomly generating initial keys corresponding to different sensitivity levels and sending these initial keys to the OA client for further processing, the risk of using static keys is avoided, the randomness and unpredictability of the keys are improved, and thus the security of the overall system is enhanced. After the initial keys are segmented and circularly shifted, multiple sub - keys are generated. Through the convolution calculation of multiple first sub - keys and second sub - keys, a key set with a complex structure is formed. This multi - level processing method not only increases the complexity of the keys, but also makes the key set difficult to be inversely deduced, enhancing the anti - cracking ability of the system. Through multiple processing links such as segmentation, shifting and convolution calculation, the probability of key collision is effectively reduced, preventing possible key leakage problems. Even if an attacker obtains partial key information, it is difficult to recover the complete key set through mathematical analysis, greatly enhancing the confidentiality of the keys. In summary, this technical solution enhances the security, flexibility and anti - attack ability of key management through a multi - level and dynamically generated key set design.

[0093] As an alternative embodiment of the present application, the generation of the key set can also be performed in the following manner:

[0094] The initial key is segmented to obtain a plurality of first sub-keys, and the plurality of first sub-keys are substituted into the following function to obtain a plurality of first target keys:

[0095] ;

[0096] Where represents the ASCII code of the j-th character of the i-th first target key, represents the ASCII code of the j-th character of the i-th first sub-key, represents the ASCII code of the (j - 1)-th character of the (i - 1)-th first sub-key, represents the ASCII code of the (j + 1)-th character of the i-th first sub-key, represents the ASCII code of the (j - 1)-th character of the i-th first sub-key, represents taking the modulus to ensure that the result is within the range of ASCII codes, represents the bitwise exclusive OR operation, represents rounding down.

[0097] Boundary handling in this function:

[0098] For j = 1, loop processing is used, that is is regarded as , where m is the number of characters of the sub-key.

[0099] For j = m, loop processing is used, that is is regarded as .

[0100] For i = 1, that is, the initial sub-key, a virtual pre-sub-key can be set, which can be set to all zeros or all a specific value.

[0101] The plurality of first sub-keys are circularly shifted to obtain a plurality of second sub-keys. The plurality of second keys are substituted into the above function to obtain a plurality of second target keys.

[0102] In cryptography, the exclusive OR operation is used to implement simple encryption and decryption because it is a symmetric operation, that is, performing the exclusive OR operation twice on the same number can restore the original value. In the above function, the purpose of the exclusive OR operation is mainly to confuse and increase the computational complexity to ensure that the change of each character is not easily predictable. Each term in the function mixes the ASCII code of the current sub-key character with the character of the previous sub-key through the exclusive OR operation, so that each character of the new sub-key is affected by the character of the previous sub-key.

[0103] This section is used to further introduce ambiguity and nonlinear changes. In cryptography, by averaging, weighting, rounding, and other operations on input data (such as the ASCII value of a character), unpredictability can be effectively increased, making the generated new subkey more complex and difficult to recover by simple speculation. By adding and averaging the ASCII codes of two characters, the calculation of the current character can be combined with the relationship between the two characters before and after, avoiding relying on information from only a single character. This operation also introduces randomness and changes, so that each newly generated subkey character does not completely depend on its previous character, but on the historical information of the entire character sequence.

[0104] The above function performs a complex transformation on the characters of the subkey by taking an average and combining it with XOR, so that the calculation process of the new key characters is not linear, that is, it is not easy to deduce the new key through the simple mathematical relationship of the current characters. This nonlinearity helps to increase the difficulty for attackers to guess the new subkey. The function combines multiple operations such as XOR operation, weighted average, and modulus, which increases the difficulty for attackers to analyze the key pattern through simple algorithms. Even if the attacker can obtain part of the key or observe the law of key change, all these complex operations will bring huge computational challenges to the attacker. In the calculation process, the influence of the previous and next characters is cyclical, that is, the current character depends on the previous and next characters of the previous character. This feedback iterative process makes any slight change to the initial subkey be significantly reflected in the new subkey, increasing the difficulty of predicting the new subkey.

[0105] Step 103: The cloud server divides the original data into fixed sizes to obtain multiple original data blocks;

[0106] The cloud server divides the original data into certain sizes. Usually, the size of each data block is fixed, which can facilitate subsequent parallel processing or encryption operations. After the division, the original data is split into multiple data blocks, each of which is a fragment of the original data.

[0107] Step 104: the cloud server extracts an odd-numbered original data block set and an even-numbered original data block set respectively according to the order of the multiple original data blocks in the original data;

[0108] The cloud server divides the data blocks into two sets according to their order in the original data: one set contains data blocks with odd indexes and the other set contains data blocks with even indexes. This odd-even classification is to increase the complexity of the encryption process or to ensure the diversity of the encryption algorithm.

[0109] Step 105: The cloud server encrypts the odd original data block set and the even original data block set respectively through the key set, to obtain the first ciphertext corresponding to the odd original data block set and the second ciphertext corresponding to the even original data block set;

[0110] The cloud server encrypts the odd data block set and the even data block set respectively according to the previously matched key set. The two sets use different keys respectively. After encryption, the odd data block set generates the first ciphertext, and the even data block set generates the second ciphertext. In this way, the encryption of the original data is more meticulous, avoiding the potential risks brought by using the same encryption method for all data blocks.

[0111] Specifically, step 105 specifically includes: encrypting the odd original data block set in sequence based on multiple first target keys in the key set, to obtain the first ciphertext corresponding to the odd original data block set; encrypting the even original data block set in sequence based on multiple second target keys in the key set, to obtain the second ciphertext corresponding to the even original data block set.

[0112] Wherein, if the number of original data blocks is greater than the target key, the target key is cyclically used for encryption processing. The specific process of encrypting data with keys is a conventional technology and will not be elaborated here.

[0113] Step 106: The cloud server sequentially sends the first ciphertext and the second ciphertext to the OA client.

[0114] The cloud server sequentially sends the two generated ciphertexts (the first ciphertext and the second ciphertext) to the OA client. After receiving the ciphertexts, the OA client decrypts them.

[0115] Specifically, step 106 specifically includes steps 1061 to 1063:

[0116] Step 1061: Package the first ciphertext, the serial number corresponding to the sensitivity level, the original data serial number, the serial number corresponding to the first ciphertext, and the ciphertext quantity respectively, to obtain multiple first data packets corresponding to the first ciphertext; the serial number corresponding to the first ciphertext is used to instruct the OA client to combine the original data blocks corresponding to the first ciphertext according to the order to obtain the original data;

[0117] Wherein, the packaging content includes:

[0118] ① The first ciphertext: The encrypted data, which is the core content to be transmitted.

[0119] ② Serial number corresponding to the sensitivity level: Indicates the sensitivity level corresponding to the ciphertext, and is used to instruct the OA client to perform encryption processing at the corresponding sensitivity level.

[0120] ③ Serial number of the original data: Identifies the position or number of the original data to which the ciphertext belongs, and instructs the OA client to correctly splice data blocks after decryption.

[0121] ④ Serial number corresponding to the first ciphertext: Represents the position of this ciphertext in the data block, ensuring that the OA client can recombine the original data in order.

[0122] ⑤ Number of ciphertexts: Indicates how many parts are included in a group of ciphertexts, helping the client to confirm whether all data has been received.

[0123] Step 1062: Respectively encapsulate the second ciphertext, the serial number corresponding to the sensitivity level, the serial number of the original data, the serial number corresponding to the second ciphertext, and the number of ciphertexts into data packets to obtain multiple second data packets corresponding to the second ciphertext; the serial number corresponding to the second ciphertext is used to instruct the OA client to combine the original data blocks corresponding to the second ciphertext according to the order to obtain the original data;

[0124] Step 1063: Sequentially send multiple first data packets and multiple second data packets to the OA client.

[0125] By encapsulating the first ciphertext, the second ciphertext and their related information (such as sensitivity level, serial number, serial number of the original data, etc.) into data packets and then sending them, the integrity and confidentiality of the data during the transmission process are effectively guaranteed. Each data packet contains the necessary context information, enabling the OA client to accurately restore the original data, while avoiding the risks of data loss, tampering or leakage during the transmission process. The encapsulation of the ciphertext not only protects the privacy of the data, but also ensures that each data block can be recombined in the correct order when the client decrypts the data by dividing the data into multiple packets for sequential transmission. By instructing the OA client to combine the original data blocks according to the serial number corresponding to the ciphertext, man-in-the-middle attacks or other forms of tampering can be effectively prevented, ensuring the security of sensitive data. This solution provides good flexibility and scalability by independently encapsulating different ciphertexts and their related information. In practical applications, the cloud server can send different numbers of ciphertext data packets according to needs, supporting data transmission requirements of different scales and security levels. This technical solution adapts to the needs in a variety of different scenarios, and can be efficiently implemented whether it is for the transmission of a large amount of data or for separately processing data of different sensitivity levels.

[0126] Optionally, after step 106, it includes steps 107 to 111:

[0127] Step 107: The OA client receives multiple first data packets and multiple second data packets sent by the cloud server;

[0128] The OA client receives data composed of multiple first data packets and second data packets from the cloud server. Each data packet contains metadata such as encrypted ciphertext, sensitivity level, and sequence information of the ciphertext. The OA client needs to correctly decrypt and restore the original data based on this metadata.

[0129] Step 108: If the number of multiple first data packets and multiple second data packets is consistent with the number of ciphertexts, the OA client matches the corresponding sensitivity level according to the serial number corresponding to the sensitivity level;

[0130] The OA client checks whether the number of multiple first data packets and second data packets received is consistent with the number of ciphertexts to ensure that no data is lost. If the number of data packets is consistent, the OA client matches the corresponding sensitivity level according to the serial number corresponding to the sensitivity level. The role of the sensitivity level is usually to distinguish different levels of data protection.

[0131] Step 109: The OA client matches the initial key corresponding to the sensitivity level and generates a key set according to the initial key;

[0132] The logic for the OA client to generate a key set according to the initial key is the same as that of the cloud server to generate a key set, so it will not be elaborated here.

[0133] Step 110: The OA client decrypts the first ciphertext and the second ciphertext according to the key set, the serial number corresponding to the first ciphertext, and the serial number corresponding to the second ciphertext, and obtains multiple original data blocks;

[0134] The OA client uses the generated key set, combined with the serial number corresponding to the first ciphertext and the serial number corresponding to the second ciphertext, to decrypt the received first ciphertext and second ciphertext. The role of the serial number corresponding to the first ciphertext and the serial number corresponding to the second ciphertext here is to help the OA client understand the position of the ciphertext in the overall data and ensure the correct order of the decrypted data blocks.

[0135] Step 111: The OA client combines multiple original data blocks according to the serial number corresponding to the corresponding first ciphertext and the serial number corresponding to the second ciphertext to obtain the original data.

[0136] The multiple original data blocks obtained by decryption are sequentially combined on the OA client according to their corresponding first ciphertext serial numbers and second ciphertext serial numbers. Each original data block has a corresponding serial number, and the OA client stitches the data blocks together according to these serial numbers to ensure the integrity of data restoration.

[0137] The OA client ensures the correctness and integrity of each data packet during the data decryption process based on the consistency between the quantities of multiple first data packets and multiple second data packets and the quantity of ciphertext. Through this verification mechanism, the OA client can determine whether it has received complete data packets, avoiding decryption failures or data losses caused by missing or incorrect data. The OA client automatically matches the corresponding sensitivity level according to the serial number corresponding to the sensitivity level, and matches the initial key according to the sensitivity level to generate an adapted key set. This design makes the generation of keys more flexible and dynamic, capable of automatically adjusting the complexity and security of the keys according to different sensitivity levels, improving the security of the system when processing various sensitive data. By precisely matching and combining the serial numbers of multiple original data blocks, the OA client can effectively combine the decrypted data blocks into a complete original data in the correct order. Even if there are delays or packet losses during network transmission, as long as the OA client receives complete multiple data packets, it can rely on this serial number information to accurately restore the original data, enhancing the reliability of the decryption process. Through the matching of ciphertext serial numbers and the key set and strict data packet encapsulation, the OA client can ensure the integrity of each ciphertext block during the decryption process. If the data is tampered with or lost during transmission, the OA client can identify potential security issues by checking the consistency between the serial number and the ciphertext, enhancing the system's protection against data tampering. The technical solution of the present invention, by implementing dynamic key generation based on sensitivity levels and precise ciphertext serial number matching in the OA client, not only improves the security, accuracy, and efficiency of data decryption, but also enhances the flexibility, reliability, and anti-tampering ability of the system.

[0138] In this embodiment, according to the sensitivity level of the data, an appropriate encryption key is dynamically selected for encryption processing, avoiding the one-size-fits-all approach in traditional encryption methods. Different sensitivity level data is processed using different encryption strategies to ensure that important data is protected with a higher strength. This solution makes the data encryption process more flexible and refined by splitting the original data into fixed sizes and encrypting them in groups according to the parity of the data blocks. Different data blocks are encrypted with different keys, enhancing the system's processing ability for different types of data. In addition, the block processing of the data enables the cloud server to process different data blocks in parallel or asynchronously, thereby improving the encryption efficiency and reducing the processing latency. Especially in the case of a large amount of data, this method can better optimize the encryption process, reduce the server burden, and improve the data interaction speed and response performance of the OA system. This solution not only ensures the security of the data through the segmentation, parallel encryption, and on-demand encryption of the data blocks, but also improves the efficiency of data interaction on the premise of ensuring security. The cloud server can quickly send the encrypted data to the OA client, ensuring the confidentiality of the data during transmission, avoiding the leakage of sensitive data, and at the same time improving the fluency of data exchange. Through the data block encryption mechanism, this technical solution not only improves the security of data interaction in the OA system, but also greatly improves the flexibility of data processing and the system performance, which has important application value for building a secure, efficient, and easy-to-manage intelligent campus OA office system.

[0139] As Figure 2 The present invention provides an intelligent campus OA office data interaction device. Please refer to Figure 2 , Figure 2 which shows a schematic diagram of an intelligent campus OA office data interaction device provided by the present invention. As Figure 2 shown, an intelligent campus OA office data interaction device includes:

[0140] A first extraction unit 21, configured to receive a data extraction request sent by an OA client by a cloud server and extract the original data corresponding to the data extraction request;

[0141] A matching unit 22, configured to match a preset key set corresponding to the sensitivity level by the cloud server according to the sensitivity level of the original data;

[0142] A splitting unit 23, configured to split the original data into fixed sizes by the cloud server to obtain a plurality of original data blocks;

[0143] A second extraction unit 24, configured to respectively extract an odd original data block set and an even original data block set by the cloud server in the order of the plurality of original data blocks in the original data;

[0144] An encryption unit 25, configured to encrypt the odd original data block set and the even original data block set respectively by the cloud server using the key set, to obtain a first ciphertext corresponding to the odd original data block set and a second ciphertext corresponding to the even original data block set;

[0145] A sending unit 26, configured to send the first ciphertext and the second ciphertext by the cloud server to the OA client in sequence.

[0146] An intelligent campus OA office data interaction device provided by the present invention dynamically selects an appropriate encryption key for encryption processing according to the sensitivity level of data, avoiding the one-size-fits-all approach in traditional encryption methods. Different encryption strategies are used to process data with different sensitivity levels to ensure that important data is protected with a higher strength. This solution makes the data encryption process more flexible and refined by splitting the original data into fixed-size chunks and encrypting them in groups according to the parity of the data blocks. Different data blocks are encrypted with different keys, enhancing the system's processing ability for different types of data. In addition, the chunking of data enables the cloud server to process different data blocks in parallel or asynchronously, thereby improving the encryption efficiency and reducing the processing latency. Especially in the case of a large amount of data, this method can better optimize the encryption process, reduce the server burden, and improve the data interaction speed and response performance of the OA system. This solution not only ensures the security of data through the splitting, parallel encryption, and on-demand encryption of data blocks, but also improves the efficiency of data interaction on the premise of ensuring security. The cloud server can quickly send the encrypted data to the OA client, ensuring the confidentiality of data during transmission, avoiding the leakage of sensitive data, and at the same time improving the fluency of data exchange. This technical solution not only improves the security of data interaction in the OA system through the data chunk encryption mechanism, but also greatly improves the flexibility of data processing and the system performance, having important application value for building a secure, efficient, and easy-to-manage intelligent campus OA office system.

[0147] Figure 3 is a schematic diagram of a terminal device provided by an embodiment of the present invention. As Figure 3 shown, a terminal device 3 of this embodiment includes: a processor 30, a memory 31, and a computer program 32 stored in the memory 31 and executable on the processor 30, such as an intelligent campus OA office data interaction program. When the processor 30 executes the computer program 32, it implements the steps in each of the above embodiments of the intelligent campus OA office data interaction method, such as Figure 1 the steps 101 to 105 shown. Alternatively, when the processor 30 executes the computer program 32, it implements the functions of each unit in each of the above device embodiments, such as Figure 2 the functions of the units shown.

[0148] Exemplarily, the computer program 32 may be divided into one or more units, which are stored in the memory 31 and executed by the processor 30 to implement the present invention. The one or more units may be a series of computer program instruction segments capable of performing specific functions, and these instruction segments are used to describe the execution process of the computer program 32 in the terminal device 3. For example, the specific functions of the computer program 32 divided into each unit are as follows:

[0149] A first extraction unit, configured to receive a data extraction request sent by an OA client by a cloud server and extract the original data corresponding to the data extraction request;

[0150] A matching unit, configured to match a preset key set corresponding to the sensitivity level according to the sensitivity level of the original data by the cloud server;

[0151] A slicing unit, configured to slice the original data into a fixed size by the cloud server to obtain a plurality of original data blocks;

[0152] A second extraction unit, configured to sequentially extract an odd original data block set and an even original data block set according to the order of the plurality of original data blocks in the original data by the cloud server;

[0153] An encryption unit, configured to perform encryption processing on the odd original data block set and the even original data block set respectively by the cloud server through the key set to obtain a first ciphertext corresponding to the odd original data block set and a second ciphertext corresponding to the even original data block set;

[0154] A sending unit, configured to sequentially send the first ciphertext and the second ciphertext to the OA client by the cloud server.

[0155] The terminal device includes, but is not limited to, a processor 30 and a memory 31. Those skilled in the art can understand that Figure 3 This is only an example of a terminal device 3, and does not constitute a limitation on a terminal device 3. It may include more or fewer components than shown in the figure, or combine some components, or different components. For example, the terminal device may further include input / output devices, network access devices, buses, etc.

[0156] The processor 30 may be a Central Processing Unit (CPU), or may also be other general-purpose processors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field-Programmable Gate Arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0157] The memory 31 may be an internal storage unit of the terminal device 3, such as a hard disk or memory of a terminal device 3. The memory 31 may also be an external storage device of the terminal device 3, such as a plug-in hard disk, Smart Media Card (SMC), Secure Digital (SD) card, Flash Card, etc. equipped on the terminal device 3. Further, the memory 31 may also include both the internal storage unit and the external storage device of the terminal device 3. The memory 31 is used to store the computer program and other programs and data required by the roaming control device. The memory 31 may also be used to temporarily store the data that has been output or will be output.

[0158] It should be understood that the magnitudes of the sequence numbers of the steps in the above embodiments do not mean the order of execution is prior or posterior. The execution order of each process should be determined according to its function and internal logic, and should not constitute any limitation to the implementation process of the embodiments of the present invention.

[0159] It should be noted that the content such as information interaction and execution process between the above devices / units, because it is based on the same concept as the method embodiment of the present invention, for its specific functions and the technical effects brought, please refer to the method embodiment part specifically, and will not be elaborated here.

[0160] Those skilled in the art can clearly understand that, for the convenience and conciseness of description, only the above division of each functional unit and module is used as an example. In actual applications, the above functions can be allocated to different functional units and modules according to needs, that is, the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above. Each functional unit and module in the embodiments can be integrated into a processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit. In addition, the specific names of each functional unit and module are only for the convenience of mutual distinction and do not limit the protection scope of the present invention. The specific working processes of the units and modules in the above system can refer to the corresponding processes in the foregoing method embodiments and will not be elaborated herein.

[0161] An embodiment of the present invention also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the foregoing method embodiments can be implemented.

[0162] An embodiment of the present invention provides a computer program product. When the computer program product runs on a mobile terminal, the mobile terminal can implement the steps in the foregoing method embodiments when executed.

[0163] If the above integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, to implement all or part of the processes in the above method embodiments of the present invention, a computer program can be used to instruct the relevant hardware to complete. The computer program can be stored in a computer-readable storage medium. When the computer program is executed by a processor, the steps in the foregoing method embodiments can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in the form of source code, object code, executable file or some intermediate form, etc. The computer-readable medium can at least include: any entity or device that can carry the computer program code to the photographing device / terminal device, recording medium, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signal, telecommunication signal, and software distribution medium. For example, a USB flash drive, a mobile hard disk, a magnetic disk, or an optical disc, etc.

[0164] In the above embodiments, the descriptions of the various embodiments have their own emphases. For the parts not detailed or recorded in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0165] Those of ordinary skill in the art will recognize that the units and algorithm steps of each example described in connection with the embodiments disclosed herein can be implemented in electronic hardware, or in a combination of computer software and electronic hardware. Whether these functions are executed in hardware or software depends on the specific application and design constraints of the technical solution. A professional technician can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

[0166] In the embodiments provided by the present invention, it should be understood that the disclosed apparatus / network device and method can be implemented in other ways. For example, the apparatus / network device embodiments described above are merely illustrative. For example, the division of the modules or units is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the couplings or direct couplings or communication connections shown or discussed with each other can be through some interfaces, and the indirect couplings or communication connections of the devices or units can be in electrical, mechanical or other forms.

[0167] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units. They can be located in one place or distributed to multiple network units.

[0168] It should be understood that when used in the specification of the present invention and the appended claims, the term "comprising" indicates the presence of the described features, wholes, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or their combinations.

[0169] It should also be understood that the term "and / or" used in the specification of the present invention and the appended claims refers to any combination and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0170] As used in the specification of the present invention and the appended claims, the term "if" can be interpreted as "when", "once", "in response to determining", or "in response to detecting" depending on the context. Similarly, the phrase "if determined" or "if [the described condition or event] is detected" can be interpreted as meaning "once determined", "in response to determining", "once [the described condition or event] is detected", or "in response to detecting [the described condition or event]" depending on the context.

[0171] In addition, in the description of the specification and the appended claims of the present invention, the terms "first", "second", "third", etc. are only used for differential description and cannot be construed as indicating or implying relative importance.

[0172] Reference to "one embodiment" or "some embodiments" etc. described in the specification of the present invention means that a specific feature, structure, or characteristic described in connection with that embodiment is included in one or more embodiments of the present invention. Thus, statements such as "in one embodiment", "in some embodiments", "in other some embodiments", "in still other embodiments", etc. that appear in different places in this specification do not necessarily all refer to the same embodiment, but mean "one or more but not all of the embodiments", unless otherwise specifically emphasized in another way. The terms "comprise", "include", "have" and their variants all mean "including but not limited to", unless otherwise specifically emphasized in another way.

[0173] The above-described embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some of the technical features; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention, and should all be included within the protection scope of the present invention.

Claims

1. An intelligent campus OA office data interaction method, characterized in that The intelligent campus OA office data interaction method is applied to an OA system. The OA system includes a cloud server and an OA client. The intelligent campus OA office data interaction method includes: Randomly generate initial keys corresponding to different sensitivity levels and send the initial keys to the OA client; the OA client is used to generate a key set according to the initial keys; Perform a splitting process on the initial keys to obtain a plurality of first sub-keys; Perform a cyclic shift process on the plurality of first sub-keys to obtain a plurality of second sub-keys; Extract the first two characters and the last two characters of the plurality of first sub-keys respectively; Construct a first convolution kernel with the first two characters and the last two characters corresponding to each of the plurality of first sub-keys according to a preset element position; List the plurality of first sub-keys according to a preset position to construct a first data matrix; Perform convolution processing on the plurality of first data matrices respectively through the first convolution kernel to obtain a plurality of first target keys; Extract the first two characters and the last two characters of the plurality of second sub-keys respectively; Construct a second convolution kernel with the first two characters and the last two characters corresponding to each of the plurality of second sub-keys according to a preset element position; List the plurality of second sub-keys according to a preset position to construct a second data matrix; Perform convolution processing on the plurality of second data matrices respectively through the second convolution kernel to obtain a plurality of second target keys; Use the plurality of first target keys and the plurality of second target keys as the key set; The cloud server receives a data extraction request sent by the OA client and extracts the original data corresponding to the data extraction request; The cloud server matches the preset key set corresponding to the sensitivity level according to the sensitivity level of the original data; The cloud server splits the original data according to a fixed size to obtain a plurality of original data blocks; The cloud server extracts an odd original data block set and an even original data block set respectively according to the order of the plurality of original data blocks in the original data; The cloud server performs encryption processing on the odd original data block set and the even original data block set respectively through the key set to obtain a first ciphertext corresponding to the odd original data block set and a second ciphertext corresponding to the even original data block set; wherein, if the number of original data blocks is greater than the target key, the target key is cyclically used for encryption processing; The cloud server sends the first ciphertext and the second ciphertext to the OA client in sequence.

2. The intelligent campus OA office data interaction method according to claim 1, wherein, The step that the cloud server performs encryption processing on the odd original data block set and the even original data block set respectively through the key set to obtain a first ciphertext corresponding to the odd original data block set and a second ciphertext corresponding to the even original data block set includes: Based on the plurality of first target keys in the key set, perform encryption processing on the odd original data block set in sequence to obtain a first ciphertext corresponding to the odd original data block set; Based on the plurality of second target keys in the key set, perform encryption processing on the even original data block set in sequence to obtain a second ciphertext corresponding to the even original data block set.

3. The intelligent campus OA office data interaction method according to claim 1, wherein The steps for the cloud server to send the first ciphertext and the second ciphertext to the OA client in sequence include: Respectively encapsulate the first ciphertext, the serial number corresponding to the sensitivity level, the original data serial number, the serial number corresponding to the first ciphertext, and the number of ciphertexts into data packets to obtain a plurality of first data packets corresponding to the first ciphertext; the serial number corresponding to the first ciphertext is used to instruct the OA client to combine the original data blocks corresponding to the first ciphertext according to the order to obtain the original data; Respectively encapsulate the second ciphertext, the serial number corresponding to the sensitivity level, the original data serial number, the serial number corresponding to the second ciphertext, and the number of ciphertexts into data packets to obtain a plurality of second data packets corresponding to the second ciphertext; the serial number corresponding to the second ciphertext is used to instruct the OA client to combine the original data blocks corresponding to the second ciphertext according to the order to obtain the original data; Send the plurality of first data packets and the plurality of second data packets to the OA client in sequence.

4. The intelligent campus OA office data interaction method according to claim 3, characterized in that, After the step of sending the plurality of first data packets and the plurality of second data packets to the OA client in sequence, it further includes: The OA client receives the plurality of first data packets and the plurality of second data packets sent by the cloud server; If the number of the plurality of first data packets and the plurality of second data packets is consistent with the number of ciphertexts, the OA client matches the corresponding sensitivity level according to the serial number corresponding to the sensitivity level; The OA client matches the initial key corresponding to the sensitivity level and generates a key set according to the initial key; The OA client decrypts the first ciphertext and the second ciphertext according to the key set, the serial number corresponding to the first ciphertext, and the serial number corresponding to the second ciphertext to obtain a plurality of original data blocks; The OA client combines the plurality of original data blocks according to the serial number corresponding to the corresponding first ciphertext and the serial number corresponding to the second ciphertext to obtain the original data.

5. An intelligent campus OA office data interaction device, characterized in that, The intelligent campus OA office data interaction device includes: Randomly generate initial keys corresponding to different sensitivity levels and send the initial keys to the OA client; the OA client is used to generate a key set according to the initial key; perform a splitting process on the initial key to obtain a plurality of first sub-keys; perform a cyclic shift process on the plurality of first sub-keys to obtain a plurality of second sub-keys; respectively extract the first two characters and the last two characters of the plurality of first sub-keys; construct the first two characters and the last two characters corresponding to each of the plurality of first sub-keys into a first convolution kernel according to a preset element position; list the plurality of first sub-keys in a preset position to construct a first data matrix; perform convolution processing on the plurality of first data matrices respectively through the first convolution kernel to obtain a plurality of first target keys; respectively extract the first two characters and the last two characters of the plurality of second sub-keys; construct the first two characters and the last two characters corresponding to each of the plurality of second sub-keys into a second convolution kernel according to a preset element position; list the plurality of second sub-keys in a preset position to construct a second data matrix; perform convolution processing on the plurality of second data matrices respectively through the second convolution kernel to obtain a plurality of second target keys; use the plurality of first target keys and the plurality of second target keys as the key set; The first extraction unit is used for the cloud server to receive a data extraction request sent by the OA client and extract the original data corresponding to the data extraction request; The matching unit is used for the cloud server to match a preset key set corresponding to the sensitivity level according to the sensitivity level of the original data; The splitting unit is used for the cloud server to split the original data into a fixed size to obtain a plurality of original data blocks; The second extraction unit is used for the cloud server to extract an odd original data block set and an even original data block set respectively according to the order of the plurality of original data blocks in the original data; The encryption unit is used for the cloud server to perform encryption processing on the odd original data block set and the even original data block set respectively through the key set to obtain a first ciphertext corresponding to the odd original data block set and a second ciphertext corresponding to the even original data block set; wherein, if the number of original data blocks is greater than the target key, the target key is cyclically used for encryption processing; The sending unit is used for the cloud server to send the first ciphertext and the second ciphertext to the OA client in sequence.

6. A terminal device, characterized in that, The terminal device includes: a memory, a processor, and an intelligent campus OA office data interaction program stored on the memory and executable on the processor, and the intelligent campus OA office data interaction program is configured to implement the steps in the intelligent campus OA office data interaction method according to any one of claims 1 to 4.

7. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps in the intelligent campus OA office data interaction method according to any one of claims 1 to 4.

Citation Information

Patent Citations

  • Method for efficiently, parallelly and safely encrypting and decrypting high-capacity data packets

    CN102148798A

  • Data encryption method and device, electronic equipment and storage medium

    CN115473722A

  • Banking business data intelligent cloud storage method and device and storage medium

    CN117332438A