Encryption and decryption capability improvement method based on network encryption equipment

Abstract

An encryption and decryption capability improving method based on network encryption equipment comprises the following steps: firstly caching data to be encrypted and decrypted, then taking out first cached data, judging whether the data is the data to be encrypted or the data to be decrypted, and if the data is the data to be encrypted, carrying out limited splicing on the data to be encrypted generated within specified time; if the data is to-be-decrypted data, the data is not processed, and finally, the spliced to-be-encrypted data or the spliced to-be-decrypted data is sent to the network encryption equipment after being spliced to encrypt and decrypt a message header. According to the invention, the to-be-encrypted data is subjected to packet splicing and overall encryption, the number of times of occupying the network encryption equipment is reduced and the encryption capability of the short message in unit time is improved aiming at the scene that the data packet is short and multiple, and meanwhile, the splicing waiting time is controlled and the encryption and decryption waiting interval of the network encryption equipment is fully utilized, so that the encryption efficiency is improved. The data time delay caused by data splicing is reduced, and the data timeliness is ensured as much as possible.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, in particular to data encryption and decryption, and specifically to a method for improving encryption and decryption capabilities based on a network encryption device. Background Art

[0002] With the extensive use of wireless satellite communications in the field of training, the data security issues between communication nodes have become increasingly prominent. The military requires industrial departments to adopt channel encryption, source encryption and other methods to ensure data security. However, at present, some source encryption devices designated by the military have limited encryption and decryption capabilities per unit time, resulting in the maximum amount of data that can be transmitted per unit time being limited, and the wireless communication bandwidth cannot be fully utilized, which restricts the development of our military training field.

[0003] Therefore, it is increasingly important to study a method to improve the encryption and decryption capabilities based on network encryption devices. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide a method for improving the encryption and decryption capabilities based on network encryption equipment, which can improve the data encryption and decryption capabilities as much as possible without increasing the source encryption and decryption equipment, improve the utilization rate of wireless satellite communication bandwidth, and support larger-scale actual military training.

[0005] The technical problem to be solved by the present invention is achieved through the following technical solutions. The present invention is a method for improving the encryption and decryption capabilities based on a network encryption device, firstly caches the data to be encrypted and decrypted, then takes out the first cached data, determines whether the data is data to be encrypted or data to be decrypted, and if the data is data to be encrypted, performs limited splicing on the data to be encrypted generated within a specified time; if the data is data to be decrypted, no processing is performed, and finally the spliced ​​data to be encrypted or decrypted is spliced ​​with the encryption and decryption message header and sent to the network encryption device.

[0006] The technical problem to be solved by the present invention can also be further achieved by the following technical solution. For the above-mentioned method for improving the encryption and decryption capabilities based on the network encryption device, the method comprises the following steps:

[0007] Step 1: Create a data set C to be encrypted and decrypted, with the creation time being BT;

[0008] Step 2: Determine whether there is data to be encrypted and decrypted. If not, wait for the minimum time interval for generating data to be encrypted and decrypted, and the minimum time interval is ≥ 1 millisecond; if yes, obtain the data D to be encrypted and decrypted;

[0009] Step 3: Determine whether D is to be encrypted. If not, append D to C and proceed to step 6; if yes, proceed to step 4;

[0010] Step 4: Determine whether the length of D is greater than the maximum length of a single encryption minus the current length of C minus the length of SL. If yes, proceed to step 6; if not, proceed to step 5;

[0011] Among them, SL refers to the structure added before the original data to be encrypted for storing the length of the original data to be encrypted;

[0012] Step 5: After splicing SL before D and appending it to C, determine whether the current time minus BT is greater than the maximum waiting time. If yes, go to step 2; if not, go to step 6;

[0013] Step 6: Determine whether the interval DT between the current time and the last encryption and decryption time is greater than or equal to the minimum encryption and decryption time interval. If so, concatenate C with the encryption and decryption message header and send it to the network encryption device for encryption and decryption; if not, wait for DT and enter step 5.

[0014] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities based on network encryption devices, in step 1, the data set C to be encrypted and decrypted is used to store the data that is ultimately to be sent to the network encryption device; the creation time BT is the current time of the computer, in milliseconds.

[0015] The technical problem to be solved by the present invention can also be further achieved by the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities of a network encryption device, in step 2, judging whether there is data to be encrypted and decrypted means judging whether there is data to be encrypted and decrypted in the data cache to be encrypted and decrypted, and all data to be encrypted and decrypted will first be stored in the data cache to be encrypted and decrypted;

[0016] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities based on network encryption equipment, in step 2, the minimum time interval for generating data to be encrypted and decrypted refers to the minimum time interval for the entire system to generate data that needs to be encrypted and decrypted. The minimum time interval is greater than or equal to 1 millisecond. If the minimum time interval is less than 1 millisecond, the value is 1 millisecond.

[0017] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities based on network encryption devices, in step 4, the maximum length of a single encryption refers to the maximum data length supported by a single encryption of the network encryption device.

[0018] The technical problem to be solved by the present invention can be further achieved through the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities based on a network encryption device, in step 4, the length of SL is 2 bytes.

[0019] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities based on network encryption equipment, in step 5, the maximum waiting time refers to the maximum time interval for splicing data, and the maximum waiting time is configured according to the encryption and decryption time interval supported by the network encryption equipment.

[0020] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities based on a network encryption device, in step 6, the network encryption device refers to a device that performs data encryption and decryption through a network, and is used to send data to the network encryption device by splicing encryption and decryption message headers to indicate whether it is encryption or decryption. Encryption and decryption share the same network port, and there is a sending time interval requirement.

[0021] The technical problem to be solved by the present invention can also be further achieved through the following technical solutions. For the above-mentioned method for improving the encryption and decryption capabilities based on network encryption devices, in step 6, the minimum encryption and decryption time interval refers to the minimum encryption and decryption time interval that the network encryption device can support.

[0022] Compared with the prior art, the present invention encrypts the data to be encrypted as a whole after splicing them together. For scenarios with short and numerous data packets, this reduces the number of times the network encryption equipment is occupied and improves the encryption capability of short messages per unit time. At the same time, by controlling the splicing waiting time, the encryption and decryption waiting interval of the network encryption equipment is fully utilized, reducing the data delay caused by data splicing and ensuring the data timeliness as much as possible. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A schematic diagram of a process of the present invention;

[0024] Figure 2 It is a specific schematic diagram of the process of the present invention. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0026] Reference Figure 1-2, a method for improving the encryption and decryption capability based on a network encryption device, firstly caches the data to be encrypted and decrypted, then takes out the first cached data, determines whether the data is data to be encrypted or data to be decrypted, if the data is data to be encrypted, performs limited splicing on the data to be encrypted generated within a specified time; if the data is data to be decrypted, no processing is performed, and finally the spliced ​​data to be encrypted or decrypted is spliced ​​with the encryption and decryption message header and sent to the network encryption device;

[0027] The method comprises the following steps:

[0028] Step 1: Create a data set C to be encrypted and decrypted, with the creation time being BT;

[0029] The data set C to be encrypted and decrypted is used to store the data to be sent to the network encryption device; the creation time BT is the current time of the computer, in milliseconds;

[0030] Step 2: Determine whether there is data to be encrypted and decrypted. If not, wait for the minimum time interval for generating data to be encrypted and decrypted, and the minimum time interval is ≥ 1 millisecond; if yes, obtain the data D to be encrypted and decrypted;

[0031] Among them, judging whether there is data to be encrypted and decrypted means judging whether there is data to be encrypted and decrypted in the data cache to be encrypted and decrypted. All data to be encrypted and decrypted will be stored in the data cache to be encrypted and decrypted first;

[0032] The minimum time interval for generating data to be encrypted and decrypted refers to the minimum time interval for the entire system to generate data to be encrypted and decrypted. The minimum time interval is greater than or equal to 1 millisecond. If the minimum time interval is less than 1 millisecond, it is 1 millisecond.

[0033] Step 3: Determine whether D is to be encrypted. If not, append D to C and proceed to step 6; if yes, proceed to step 4;

[0034] Step 4: Determine whether the length of D is greater than the maximum length of a single encryption minus the current length of C minus the length of SL. If yes, proceed to step 6; if not, proceed to step 5;

[0035] Among them, SL refers to the structure added before the original data to be encrypted for storing the length of the original data to be encrypted; the length of SL is 2 bytes;'

[0036] The maximum length of a single encryption refers to the maximum length of data supported by a single encryption of a network encryption device;

[0037] Step 5: After splicing SL before D and appending it to C, determine whether the current time minus BT is greater than the maximum waiting time. If yes, go to step 2; if not, go to step 6;

[0038] The maximum waiting time refers to the maximum time interval for splicing data, and the maximum waiting time is configured according to the encryption and decryption time interval supported by the network encryption device;

[0039] Step 6: Determine whether the interval DT between the current time and the last encryption and decryption time is greater than or equal to the minimum encryption and decryption time interval. If yes, concatenate C with the encryption and decryption message header and send it to the network encryption device for encryption and decryption; if no, wait for DT and go to step 5;

[0040] Among them, network encryption equipment refers to a device that performs data encryption and decryption over the network. When sending data to the network encryption equipment, encryption and decryption message headers are spliced ​​to identify whether it is encryption or decryption. Encryption and decryption share the same network port and have a sending time interval requirement.

[0041] The minimum encryption and decryption time interval refers to the minimum encryption and decryption time interval that the network encryption device can support.

[0042] The minimum encryption interval of a typical network encryption device is 20 milliseconds, the maximum number of bytes encrypted each time is 1000, and encryption and decryption use independent devices. Before optimization by this patented method, the encryption efficiency after running for 1 minute is as follows:

[0043] Number of bytes in a single message 50 50 100 100 200 200 Message generation interval (milliseconds) 1 5 1 5 1 5 Total number of messages 56432 11842 56438 11841 56443 11841 Number of encryption and decryption 2979 2980 2956 2963 2969 2970

[0044] After optimization by this patented method, the maximum waiting time is set to 10 milliseconds, and the encryption efficiency after running for 1 minute is as follows:

[0045] Number of bytes in a single message 50 50 100 100 200 200 Message generation interval (milliseconds) 1 5 1 5 1 5 Total number of messages 56398 11841 56430 11841 56449 11841 Number of encryption and decryption 56382 11796 38561 11800 17832 11802

[0046] Under various working conditions, the efficiency is improved as follows:

[0047] Number of bytes in a single message 50 50 100 100 200 200 Message generation interval (milliseconds) 1 5 1 5 1 5 Efficiency improvement (≈) 18 times 3 times 12 times 3 times 5 times 3 times

[0048] It can be seen from the statistical data that before the optimization of this patent, the number of encryption and decryption basically remained at around 2970. After the optimization of this patent, the encryption and decryption efficiency was increased by about 18 times at most, and the number of encryption and decryption reached 56382, and the minimum was increased by about 3 times. It can be seen that the present invention has improved the encryption and decryption efficiency to a certain extent, especially in the scenario of short and large data, and thus improved the overall performance of the system.

Claims

1. A method for improving encryption and decryption capabilities based on a network encryption device, characterized in that: First, cache the data to be encrypted and decrypted, then take out the first cached data, determine whether the data is data to be encrypted or data to be decrypted, if the data is data to be encrypted, perform limited splicing on the data to be encrypted generated within the specified time; if the data is data to be decrypted, do not process it, and finally send the spliced ​​data to be encrypted or decrypted to the network encryption device after splicing the encryption and decryption message header.

2. The method for improving the encryption and decryption capabilities of a network encryption device according to claim 1, characterized in that: The method comprises the following steps: Step 1: Create a data set C to be encrypted and decrypted, with the creation time being BT; Step 2: Determine whether there is data to be encrypted and decrypted. If not, wait for the minimum time interval for generating data to be encrypted and decrypted, and the minimum time interval is ≥ 1 millisecond; if yes, obtain the data D to be encrypted and decrypted; Step 3: Determine whether D is to be encrypted. If not, append D to C and proceed to step 6; if yes, proceed to step 4; Step 4: Determine whether the length of D is greater than the maximum length of a single encryption minus the current length of C minus the length of SL. If yes, proceed to step 6; if not, proceed to step 5; Among them, SL refers to the structure added before the original data to be encrypted for storing the length of the original data to be encrypted; Step 5: After splicing SL before D and appending it to C, determine whether the current time minus BT is greater than the maximum waiting time. If yes, go to step 2; if not, go to step 6; Step 6: Determine whether the interval DT between the current time and the last encryption and decryption time is greater than or equal to the minimum encryption and decryption time interval. If so, concatenate C with the encryption and decryption message header and send it to the network encryption device for encryption and decryption; if not, wait for DT and enter step 5.

3. The method for improving the encryption and decryption capabilities of a network encryption device according to claim 1, characterized in that: In step 1, the data set C to be encrypted and decrypted is used to store data to be eventually sent to the network encryption device; the creation time BT is the current time of the computer, in milliseconds.

4. The method for improving the encryption and decryption capabilities of a network encryption device according to claim 1, characterized in that: In step 2, judging whether there is data to be encrypted or decrypted refers to judging whether there is data to be encrypted or decrypted in the data cache to be encrypted or decrypted. All data to be encrypted or decrypted will be first stored in the data cache to be encrypted or decrypted.

5. The method for improving encryption and decryption capabilities based on a network encryption device according to claim 1 or 4, characterized in that: In step 2, the minimum time interval for generating data to be encrypted and decrypted refers to the minimum time interval for the entire system to generate data to be encrypted and decrypted. The minimum time interval is greater than or equal to 1 millisecond. If the minimum time interval is less than 1 millisecond, it is 1 millisecond.

6. The method for improving encryption and decryption capabilities based on a network encryption device according to claim 1, characterized in that: In step 4, the maximum length of a single encryption refers to the maximum data length supported by a single encryption of the network encryption device.

7. The method for improving encryption and decryption capabilities based on a network encryption device according to claim 1 or 6, characterized in that: In step 4, the length of SL is 2 bytes.

8. The method for improving encryption and decryption capabilities based on a network encryption device according to claim 1, characterized in that: In step 5, the maximum waiting time refers to the maximum time interval for splicing data, and the maximum waiting time is configured according to the encryption and decryption time interval supported by the network encryption device.

9. The method for improving encryption and decryption capabilities based on a network encryption device according to claim 1, characterized in that: In step 6, the network encryption device refers to a device that performs data encryption and decryption over the network. When sending data to the network encryption device, the encryption and decryption message headers are spliced ​​to identify whether it is encryption or decryption. Encryption and decryption share the same network port and have a sending time interval requirement.

10. The method for improving encryption and decryption capabilities based on a network encryption device according to claim 1 or 9, characterized in that: In step 6, the minimum encryption and decryption time interval refers to the minimum encryption and decryption time interval that can be supported by the network encryption device.

Images