A data encryption authentication method and system based on data information protection

Abstract

The present invention discloses a data encryption authentication method and system based on data information protection, and the present invention relates to the field of computer data technology. Data transmission unit: a first user encrypts computer data, and a second user decrypts computer data. A classification mechanism is added according to the encryption and decryption process, so that the second user automatically sorts the computer data; the data encryption authentication method and system based on data information protection automatically sorts computer data by adding a classification mechanism in the encryption and decryption process, so that after the file is transferred, it can be automatically sorted according to the level of the file type, and the transferred file can be more intuitively classified. When decrypting the computer data according to the preset database, the file can be encrypted and protected, and can be automatically decrypted when reading, so as to achieve a dual effect in the process of computer data interaction.

Description

Technical Field

[0001] The present invention relates to the field of computer data technology, and in particular to a data encryption authentication method and system based on data information protection. Background Art

[0002] With the rapid development of computer informatization, computers have been popularized in every household and can be applied to every scene in life. They can not only be used for office work, but also for games and entertainment. It can be said that they are widely used. However, it is inevitable that computer network security is also facing unprecedented threats. Computer viruses are everywhere and hackers are rampant and hard to guard against.

[0003] Referring to the Chinese patent, a data encryption authentication method and system based on data information protection, the patent confirms key information by analyzing the closeness of each block node of the data to be processed in the cloud platform, and analyzes the similarity between each user's historical data and the key information of any block, confirms the block data that the user can process, and further analyzes the user's access rights to the target data based on the number of similar blocks, similarity and system defense index, adapts to open data areas, reduces data exposure, and improves data security: sorts the order in which users process data by their importance, calculates the degree of danger of users processing data based on the user sorting order and distance deviation, and further intelligently controls users of data interaction processing, which not only improves the progress of data processing, but also greatly improves data security.

[0004] However, there are still other problems in the existing computer data interaction process. For example, after the files are transmitted and received, they are mostly in a specific order, such as the order of the time when the files are received or the alphabetical order of the file names. Therefore, after receiving the files, they need to be sorted twice when they are classified according to their importance. In addition, when the overall file encryption measure is used to protect the file transmission, the overall encryption area will occupy a large amount of computing resources, affecting the computer performance. In addition, when it comes to important computer data, the deleted content is often limited to the recycle bin. Due to forgetting to delete it further, it is very easy to cause the leakage of important files. For this reason, the present invention proposes a data encryption authentication method and system based on data information protection to solve the above-mentioned problems. Summary of the invention

[0005] In view of the deficiencies in the prior art, the present invention provides a data encryption authentication method and system based on data information protection, which solves the problems mentioned in the above background technology.

[0006] To achieve the above objectives, the present invention is implemented through the following technical solutions: A data encryption authentication system based on data information protection, comprising:

[0007] Data transmission unit: a first user encrypts computer data, a second user decrypts computer data, and a classification mechanism is added according to the encryption and decryption process so that the second user automatically sorts the computer data, wherein the first user and the second user are connected based on a network;

[0008] The first user is a preset default computer terminal, and the second user is another computer terminal;

[0009] Data interaction unit: the second user reads the computer data content and sends a decryption request to the first user, the first user reads the computer data type and decrypts the computer data according to a preset database, wherein the database is specifically a preset decryption code;

[0010] Data deletion unit: The second user issues a deletion instruction to the computer data, sets deletion methods for different types of computer data according to the different types of computer data, and distinguishes the deletion process of the computer data, wherein the computer data is divided into Class A and other types.

[0011] As an improved technical solution, a classification mechanism is added to the data transmission unit according to the encryption and decryption process, so that the second user can automatically sort the computer data in the following specific manner:

[0012] S1: First, the first user marks the file as H, and then divides the file H into several groups. The data of each group is recorded as Hj, where j is the serial number of the data group. Then, n groups of data are selected from Hj. Among the n groups of data, each group of data represents a file type. The corresponding group of data is encrypted according to the file type to be transmitted;

[0013] S2: After the second user receives the file, the encrypted files at the same position are arranged in order according to the encrypted file type, and the higher the file type level, the higher the file arrangement order, until the transmitted files are automatically sorted.

[0014] As an improved technical solution, when the file type in S1 is encrypted in the corresponding group data, the higher the file type level, the closer the encrypted position in the n groups of data.

[0015] As an improved technical solution, in S2, the higher the file type level, the higher the file arrangement order, which is the default sorting method. The second user can modify the file sorting, specifically: sorting by time, by file size, and by alphabetical order of name.

[0016] As an improved technical solution, the first user in the data interaction unit reads the type of computer data and decrypts the computer data according to a preset database in a specific manner as follows:

[0017] P1: First, during the encryption process, the code of the data Hj at the selected position is changed so that the file is garbled when it is read. Then, a preset database is established in the first user and recorded as Sj, where j is the code sequence number of different types of files. Sj records the change method of the selected position code, where the corresponding Sj can be matched in all n sets of data;

[0018] P2: Then when the second user reads the file, a request is sent to the first user's database, and the database reads the type of the file. At this time, the database will delete the redundant code at the selected position according to the change method of the selected position code recorded in Sj, and the second user can read the file.

[0019] As an improved technical solution, the code of the data Hj at the selected position in P1 is changed so that the file is garbled when read. The specific method is to add one or more bits of code on the basis of the original code.

[0020] As an improved technical solution, the data deletion unit sets the deletion method of different types of computer data according to the different types of computer data as follows:

[0021] M1: First, mark the computer data of category A as SD, and then mark the computer data of other categories as SG. When deleting the SD data, the computer data of category A is completely deleted directly without going through the Recycle Bin. When deleting the SG data, the computer data of other categories is completely deleted through the Recycle Bin.

[0022] M2: Then set the time threshold YT. After the second user receives Class A computer data, when the time threshold YT is reached, the file will automatically prompt whether to delete it. If deleted, the steps of directly and completely deleting Class A computer data without going through the Recycle Bin in M1 will be executed. If not deleted, it will prompt again after the next time threshold YT.

[0023] As an improved technical solution, when the Class A computer data in M1 is directly and completely deleted without passing through the Recycle Bin, 2-3 prompts will be given. After confirmation of deletion, the Class A computer data is directly and completely deleted.

[0024] The present invention also discloses a data encryption authentication method based on data information protection, which specifically comprises the following steps:

[0025] Step 1: The first user encrypts the computer data, and the second user decrypts the computer data, and a classification mechanism is added according to the encryption and decryption process, so that the second user automatically sorts the computer data;

[0026] Step 2: The second user reads the computer data content and sends a decryption request to the first user. The first user reads the computer data type and decrypts the computer data according to a preset database.

[0027] Step 3: The second user issues a deletion instruction for the computer data, sets deletion methods for different types of computer data according to the different types of computer data, and distinguishes the deletion process of the computer data.

[0028] The present invention provides a data encryption authentication method and system based on data information protection. Compared with the prior art, it has the following beneficial effects:

[0029] The data encryption authentication method and system based on data information protection automatically sorts computer data by adding a classification mechanism in the encryption and decryption process. In this way, after the file is transmitted, it can be automatically sorted according to the level of the file type, and the transmitted file can be classified more intuitively. When decrypting the computer data according to the preset database, the file can be encrypted and protected, and can be automatically decrypted when reading, achieving a dual effect in the process of computer data interaction. According to different types of computer data, different types of computer data deletion methods are set, and important files are deleted in time to avoid leakage of important files. In the process of computer data interaction, security is effectively enhanced. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 A flow chart of a data encryption authentication method based on data information protection shown in an embodiment of the present application;

[0031] Figure 2 A schematic diagram of the structure of an electronic device shown in an embodiment of the present application;

[0032] Figure 3 This is a block diagram of a data encryption and authentication system based on data information protection shown in an embodiment of the present application. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] See also Figure 1-Figure 3 , the embodiment of the present invention provides five technical solutions:

[0035] Embodiment 1

[0036] A data encryption authentication system based on data information protection, comprising:

[0037] Data transmission unit: the first user encrypts the computer data, the second user decrypts the computer data, and a classification mechanism is added according to the encryption and decryption process so that the second user automatically sorts the computer data, wherein the first user and the second user are connected based on a network;

[0038] The first user is a preset default computer terminal, and the second user is another computer terminal; a classification mechanism is added to the data transmission unit according to the encryption and decryption process, so that the second user can automatically sort the computer data in the following specific manner:

[0039] S1: First, the first user marks the file as H, and then divides the file H into several groups. The data of each group is recorded as Hj, where j is the serial number of the data group. Then, n groups of data are selected from Hj. In the n groups of data, each group of data represents a file type. The file type to be transmitted is encrypted in the corresponding group of data. In S1, when the file type is encrypted in the corresponding group of data, the higher the file type level, the closer the encrypted position is in the n groups of data.

[0040] S2: After the second user receives the file, the encrypted files in the same location are arranged in order according to the encrypted file type, and the higher the file type level, the higher the file arrangement order, until the transmitted files are automatically sorted. In S2, when the file type level is higher and the file arrangement order is higher, it is the default sorting method, and the second user can modify the file sorting, specifically: sorting by time, by file size, and by alphabetical name.

[0041] Combined with the analysis of specific examples, taking n as 3 as an example, the transmitted files are divided into Class A, Class B and Class C, and the files are divided into 100 groups. Class A files make code changes at the 10th group of data positions, Class B files make code changes at the 30th group of data positions, and Class C files make code changes at the 60th group of data positions. This forms an encryption rule. The higher the file type level, the higher the file encryption arrangement order. After receiving the file, the file will be arranged in the order of Class A, Class B and Class C. In this way, after receiving the file, in addition to the default time order, file size and alphabetical order of name, it can also be automatically sorted according to the level of the file type, so that the transmitted files can be classified more intuitively.

[0042] Data interaction unit: The second user reads the computer data content and sends a decryption request to the first user. The first user reads the computer data type and decrypts the computer data according to a preset database, where the database is specifically a preset decryption code. The specific method in which the first user reads the computer data type and decrypts the computer data according to the preset database in the data interaction unit is:

[0043] P1: First, during the encryption process, the code of the data Hj at the selected position is changed so that the file is garbled when it is read, and then a preset database is established in the first user and recorded as Sj, where j is the code serial number of different types of files, and Sj records the change method of the selected position code, wherein the corresponding Sj can be matched in n sets of data; the specific method of changing the code of the data Hj at the selected position in P1 so that the file is garbled when it is read is to add one or more codes on the basis of the original code;

[0044] P2: Then when the second user reads the file, a request is sent to the first user's database, and the database reads the type of the file. At this time, the database will delete the redundant code at the selected position according to the change method of the selected position code recorded in Sj, and the second user can read the file.

[0045] Combined with the analysis of specific examples, in the database, Sj records the change method of the selected position code. For example, class A files add a code 0 to the last digit of the 10th group of data, class B files add a code 1 to the last digit of the 30th group of data, and class C files add a code 0 to the last digit of the 60th group of data and a code 1 to the first digit. In this way, after database recognition, the redundant codes are deleted at the corresponding positions, which can not only encrypt and protect the files, but also automatically decrypt them when reading.

[0046] Embodiment 2

[0047] This embodiment is based on the first embodiment, and differs from the first embodiment in that it further includes a data deletion unit: the second user makes a deletion instruction for the computer data, and sets the deletion methods of different types of computer data according to the different types of computer data, and distinguishes the deletion process of the computer data, wherein the computer data is divided into Class A and other types. The specific method of setting the deletion methods of different types of computer data according to the different types of computer data in the data deletion unit is:

[0048] M1: First, class A computer data is marked as SD, and then other computer data is marked as SG. When deleting SD data, class A computer data is directly and completely deleted without going through the Recycle Bin. When deleting SG data, other computer data is completely deleted through the Recycle Bin. In M1, when class A computer data is directly and completely deleted without going through the Recycle Bin, there will be 2-3 prompts. After confirming the deletion, the class A computer data is directly and completely deleted.

[0049] M2: Then set the time threshold YT. After the second user receives Class A computer data, when the time threshold YT is reached, the file will automatically prompt whether to delete it. If deleted, the steps of directly and completely deleting Class A computer data without going through the Recycle Bin in M1 will be executed. If not deleted, it will prompt again after the next time threshold YT.

[0050] Combined with the analysis of specific examples, taking the transmission files divided into Class A, Class B and Class C as an example, Class A data is important data, Class B and Class C are relatively minor data, so they are summarized as other types of data. Then, when deleting Class A data, two pop-ups will appear to confirm the deletion. After clicking confirm, the Class A data is completely deleted without going through the Recycle Bin. And when the time threshold YT is 1 month, after 1 month, Class A data will automatically prompt whether to delete. Two pop-ups will appear to confirm the deletion. After clicking confirm, the Class A data is completely deleted without going through the Recycle Bin. If you click no, the prompt will continue for the second month, and so on. This design can avoid the timely deletion of important Class A data after it is not used, and reduce the risks caused by the storage of Class A data on the client. Of course, according to needs, more grades can be divided and more types of data can be extended to Class A data.

[0051] Embodiment 3

[0052] Compared with the first and second embodiments, the technical solution of this embodiment is to combine the solutions of the first and second embodiments for implementation.

[0053] Embodiment 4

[0054] A data encryption authentication method based on data information protection specifically comprises the following steps:

[0055] Step 1: The first user encrypts the computer data, and the second user decrypts the computer data, and a classification mechanism is added according to the encryption and decryption process, so that the second user automatically sorts the computer data;

[0056] Step 2: The second user reads the computer data content and sends a decryption request to the first user. The first user reads the computer data type and decrypts the computer data according to a preset database.

[0057] Step 3: The second user issues a deletion instruction for the computer data, sets deletion methods for different types of computer data according to the different types of computer data, and distinguishes the deletion process of the computer data.

[0058] Meanwhile, the contents not described in detail in this specification belong to the prior art known to those skilled in the art.

[0059] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0060] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to these embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the appended claims and their equivalents.

[0061] Corresponding to the aforementioned application function implementation method embodiment, the present application also provides an electronic device and corresponding embodiments.

[0062] See also Figure 2 , the electronic device 1000 includes a memory 1010 and a processor 1020 .

[0063] The processor 1020 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0064] The memory 1010 may include various types of storage units, such as system memory, read-only memory (ROM), and permanent storage devices. Among them, ROM can store static data or instructions required by the processor 1020 or other modules of the computer. The permanent storage device may be a readable and writable storage device. The permanent storage device may be a non-volatile storage device that does not lose the stored instructions and data even after the computer is powered off. In some embodiments, the permanent storage device uses a large-capacity storage device (such as a magnetic or optical disk, flash memory) as a permanent storage device. In some other embodiments, the permanent storage device may be a removable storage device (such as a floppy disk, optical drive). The system memory may be a readable and writable storage device or a volatile readable and writable storage device, such as a dynamic random access memory. The system memory may store some or all instructions and data required by the processor at runtime. In addition, the memory 1010 may include any combination of computer-readable storage media, including various types of semiconductor memory chips (DRAM, SRAM, SDRAM, flash memory, programmable read-only memory), and disks and / or optical disks may also be used. In some embodiments, the memory 1010 may include a readable and / or writable removable storage device, such as a laser disc (CD), a read-only digital versatile disc (such as a DVD-ROM, a double-layer DVD-ROM), a read-only Blu-ray disc, an ultra-density optical disc, a flash memory card (such as an SD card, a mini SD card, a Micro-SD card, etc.), a magnetic floppy disk, etc. The computer-readable storage medium does not include carrier waves and transient electronic signals transmitted wirelessly or wired.

[0065] The memory 1010 stores executable codes, and when the executable codes are processed by the processor 1020 , the processor 1020 can execute part or all of the methods described above.

[0066] The scheme of the present application has been described in detail above with reference to the accompanying drawings. In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments. Those skilled in the art should also be aware that the actions and modules involved in the description are not necessarily required for the present application. In addition, it can be understood that the steps in the method of the embodiment of the present application can be adjusted in order, merged and deleted according to actual needs, and the modules in the device of the embodiment of the present application can be merged, divided and deleted according to actual needs.

[0067] In addition, the method according to the present application may also be implemented as a computer program or a computer program product, which includes computer program code instructions for executing some or all of the steps in the above method of the present application.

[0068] Alternatively, the present application can also be implemented as a non-temporary machine-readable storage medium (or computer-readable storage medium, or machine-readable storage medium) on which executable code (or computer program, or computer instruction code) is stored. When the executable code (or computer program, or computer instruction code) is executed by a processor of an electronic device (or electronic device, server, etc.), the processor executes part or all of the steps of the above-mentioned method according to the present application.

[0069] Those skilled in the art will further appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the application herein may be implemented as electronic hardware, computer software, or combinations of both.

[0070] The flow chart and block diagram in the accompanying drawings show the possible architecture, function and operation of the system and method according to multiple embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a part of a module, a program segment or a code, and the part of the module, the program segment or the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two continuous square boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or the flow chart, and the combination of the square boxes in the block diagram and / or the flow chart can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0071] The embodiments of the present application have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and changes will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The selection of terms used herein is intended to best explain the principles of the embodiments, practical applications, or improvements to the technology in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A data encryption authentication system based on data information protection, characterized in that: include: Data transmission unit: a first user encrypts computer data, a second user decrypts computer data, and a classification mechanism is added according to the encryption and decryption process so that the second user automatically sorts the computer data, wherein the first user and the second user are connected based on a network; The first user is a preset default computer terminal, and the second user is another computer terminal; Data interaction unit: the second user reads the computer data content and sends a decryption request to the first user, the first user reads the computer data type and decrypts the computer data according to a preset database, wherein the database is specifically a preset decryption code; Data deletion unit: the second user issues a deletion instruction to the computer data, sets deletion methods for different types of computer data according to the types of computer data, and distinguishes the deletion process of the computer data, wherein the computer data is divided into Class A, Class B and Class C; The data transmission unit adds a classification mechanism according to the encryption and decryption process so that the second user can automatically sort the computer data in the following specific manner: S1: First, the first user marks the file as H, and then divides the file H into several groups. The data of each group is recorded as Hj, where j is the serial number of the data group. Then, n groups of data are selected from Hj. Among the n groups of data, each group of data represents a file type. The corresponding group of data is encrypted according to the file type to be transmitted; S2: After the second user receives the file, the encrypted files at the same position are arranged in order according to the encrypted file type, and the higher the file type level, the higher the file arrangement order, until the automatic sorting of the transferred files is completed; The specific manner in which the first user in the data interaction unit reads the type of computer data and decrypts the computer data according to a preset database is: P1: First, during the encryption process, the code of the data Hj at the selected position is changed so that the file is garbled when it is read. Then, a preset database is established in the first user and recorded as Sj, where j is the code sequence number of different types of files. Sj records the change method of the selected position code, where the corresponding Sj can be matched in all n sets of data; P2: Then when the second user reads the file, a request is sent to the first user's database, and the database reads the type of the file. At this time, the database will delete the redundant code at the selected position according to the change method of the selected position code recorded in Sj, and the second user can read the file.

2. A data encryption authentication system based on data information protection according to claim 1, characterized in that: When the file type in S1 is encrypted in the corresponding group data, the higher the file type level is, the earlier the encrypted position in the n groups of data is.

3. A data encryption authentication system based on data information protection according to claim 2, characterized in that: In S2, when the file type level is higher and the file arrangement order is higher, it is the default sorting method. The second user can modify the file sorting, specifically: sorting by time, by file size and by alphabetical name.

4. A data encryption authentication system based on data information protection according to claim 1, characterized in that: The specific method of changing the code of the data Hj at the selected position in P1 so that the file is garbled when read is to add one or more codes on the basis of the original code.

5. A data encryption authentication system based on data information protection according to claim 1, characterized in that: The specific method of setting the deletion method of different types of computer data in the data deletion unit according to the different types of computer data is as follows: M1: First, mark the computer data of category A as SD, and then mark the computer data of category B and category C as SG. When deleting the SD data, the computer data of category A is completely deleted directly without going through the Recycle Bin. When deleting the SG data, the computer data of category B and category C is completely deleted through the Recycle Bin. M2: Then set the time threshold YT. After the second user receives Class A computer data, when the time threshold YT is reached, the file will automatically prompt whether to delete it. If deleted, the steps of directly and completely deleting Class A computer data without going through the Recycle Bin in M1 will be executed. If not deleted, it will prompt again after the next time threshold YT.

6. A data encryption authentication system based on data information protection according to claim 5, characterized in that: When the Class A computer data in the M1 is directly and completely deleted without passing through the Recycle Bin, there will be 2-3 prompts. After confirmation of deletion, the Class A computer data is directly and completely deleted.

7. A data encryption authentication method based on data information protection, which is applied to a data encryption authentication system based on data information protection as claimed in claim 1, characterized in that: The specific steps include: Step 1: The first user encrypts the computer data, and the second user decrypts the computer data, and a classification mechanism is added according to the encryption and decryption process, so that the second user automatically sorts the computer data; Step 2: The second user reads the computer data content and sends a decryption request to the first user. The first user reads the computer data type and decrypts the computer data according to a preset database. Step 3: The second user issues a deletion instruction for the computer data, sets deletion methods for different types of computer data according to the different types of computer data, and distinguishes the deletion process of the computer data.

Images