Data processing method and device

Abstract

The invention relates to a data processing method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the steps that an encryption request sent by a first terminal is received, the encryption request comprises an identifier of a target combined encryption algorithm, to-be-encrypted data and key combination information, and the target combined encryption algorithm is an encryption algorithm customized by the first terminal; and in response to the encryption request, determining a key corresponding to each encryption algorithm in the target combined encryption algorithm from the key combination information, and calling each encryption algorithm from an algorithm library in sequence to perform encryption processing on the to-be-encrypted data based on the encryption expression of the target combined encryption algorithm and the key corresponding to each encryption algorithm, obtaining ciphertext data corresponding to the to-be-encrypted data; and sending the ciphertext data and the key identifier corresponding to the key combination information to the first terminal. By adopting the method, the flexibility of a combined encryption algorithm can be improved, and the data security is improved.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a data processing method, apparatus, computer equipment, computer-readable storage medium, and computer program product. Background Art

[0002] In the field of information security, encryption technology has always played a vital role. Although traditional single encryption algorithms, such as symmetric encryption, asymmetric encryption and hash functions, have their own unique advantages and applicability, their security is gradually challenged in the face of increasingly complex network environments and increasing computing power.

[0003] Therefore, how to design a more secure, reliable and flexible encryption method has become an urgent problem to be solved in the field of information security. Summary of the invention

[0004] Based on this, it is necessary to provide a data processing method, device, computer equipment, computer-readable storage medium and computer program product that can improve the flexibility of data encryption and improve data security in response to the above-mentioned technical problems.

[0005] In a first aspect, the present application provides a data processing method, which is applied to a data encryption system, and the method comprises:

[0006] Receiving an encryption request sent by the first terminal, the encryption request including an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, the target combined encryption algorithm being an encryption algorithm customized by the first terminal;

[0007] In response to the encryption request, determine the key corresponding to each encryption algorithm in the target combined encryption algorithm from the key combination information, and based on the encryption expression of the target combined encryption algorithm and the key corresponding to each encryption algorithm, call each encryption algorithm from the algorithm library in sequence to perform encryption processing on the data to be encrypted, so as to obtain ciphertext data corresponding to the data to be encrypted;

[0008] The ciphertext data and the key identifier corresponding to the key combination information are sent to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal.

[0009] In one of the embodiments, before receiving the encryption request sent by the first terminal, the method further includes:

[0010] receiving a combined algorithm request sent by the first terminal, where the combined algorithm request is used to indicate at least one encryption algorithm corresponding to a target combined encryption algorithm and an encryption order corresponding to each of the encryption algorithms in the target combined encryption algorithm;

[0011] According to the combined algorithm request, an encryption expression corresponding to the target combined encryption algorithm is determined, and the target combined encryption algorithm is created according to the encryption expression.

[0012] In one embodiment, the method further comprises:

[0013] The key combination information is encrypted using a preset encryption algorithm and a preset key to obtain encrypted key data, and a unique key identifier is generated for the encrypted key data, and the encrypted key data and the key identifier are stored.

[0014] In one embodiment, the method further comprises:

[0015] receiving a decryption request sent by the second terminal, wherein the decryption request includes the ciphertext data, the key identifier, and an identifier of the target combined encryption algorithm;

[0016] Acquire corresponding encryption key data according to the key identifier, and perform decryption processing based on a preset encryption algorithm and the encryption key data to obtain the key combination information;

[0017] Based on the target combined encryption algorithm and the key combination information, the ciphertext data is decrypted to obtain decrypted data;

[0018] The decrypted data is sent to the second terminal.

[0019] In one embodiment, the method further comprises:

[0020] Detecting abnormal data from the encryption request and / or decryption request according to an abnormal behavior detection dimension;

[0021] When the detected abnormal data meets the alarm condition, an alarm message is sent to the preset terminal.

[0022] In a second aspect, the present application provides a data processing method, applied to a first terminal, the method comprising:

[0023] Sending an encryption request to the data encryption system, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, wherein the target combined encryption algorithm is an encryption algorithm customized by the first terminal;

[0024] Receiving the ciphertext data sent by the data encryption system and the key identifier corresponding to the key combination information, wherein the ciphertext data is obtained by the data encryption system encrypting the data to be encrypted by using the target combined encryption algorithm and the key combination information;

[0025] The ciphertext data and the key identifier are sent to the second terminal.

[0026] In a third aspect, the present application provides a data processing method, which is applied to a second terminal, and the method includes:

[0027] Receiving the ciphertext data and the key identifier sent by the first terminal;

[0028] Sending a decryption request to a data encryption system, wherein the decryption request includes the ciphertext data, the key identifier, and an identifier of the target combined encryption algorithm;

[0029] The decrypted data sent by the data encryption system is received, wherein the decrypted data is obtained by the data encryption system after obtaining the corresponding encryption key data according to the key identifier and decrypting the ciphertext data based on a preset encryption algorithm and the encryption key data.

[0030] In a fourth aspect, the present application further provides a data processing device, applied to a data encryption system, the device comprising:

[0031] A first receiving module is used to receive an encryption request sent by a first terminal, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, and the target combined encryption algorithm is an encryption algorithm customized by the first terminal;

[0032] A first encryption module, configured to, in response to the encryption request, determine the key corresponding to each encryption algorithm in the target combined encryption algorithm from the key combination information, and based on the encryption expression of the target combined encryption algorithm and the key corresponding to each encryption algorithm, sequentially call each encryption algorithm from an algorithm library to perform encryption processing on the data to be encrypted, so as to obtain ciphertext data corresponding to the data to be encrypted;

[0033] The first sending module is used to send the ciphertext data and the key identifier corresponding to the key combination information to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal.

[0034] In one embodiment, the device further comprises:

[0035] A second receiving module is used to receive a combined algorithm request sent by the first terminal, where the combined algorithm request is used to indicate at least one encryption algorithm corresponding to a target combined encryption algorithm and an encryption order corresponding to each of the encryption algorithms in the target combined encryption algorithm;

[0036] A creation module is used to determine the encryption expression corresponding to the target combined encryption algorithm according to the combined algorithm request, and create the target combined encryption algorithm according to the encryption expression.

[0037] In one embodiment, the device further comprises:

[0038] The second encryption module is used to encrypt the key combination information using a preset encryption algorithm and a preset key to obtain encryption key data, generate a unique key identifier for the encryption key data, and store the encryption key data and the key identifier.

[0039] In one embodiment, the device further comprises:

[0040] A third receiving module is used to receive a decryption request sent by the second terminal, wherein the decryption request includes the ciphertext data, the key identifier and the identifier of the target combined encryption algorithm;

[0041] A first decryption module, used to obtain corresponding encryption key data according to the key identifier, and perform decryption processing based on a preset encryption algorithm and the encryption key data to obtain the key combination information;

[0042] A second decryption module is used to decrypt the ciphertext data based on the target combined encryption algorithm and the key combination information to obtain decrypted data;

[0043] The second sending module is used to send the decrypted data to the second terminal.

[0044] In one embodiment, the device further comprises:

[0045] A detection module, configured to detect abnormal data from the encryption request and / or decryption request according to an abnormal behavior detection dimension;

[0046] The alarm module is used to send alarm information to a preset terminal when the detected abnormal data meets the alarm condition.

[0047] In a fifth aspect, the present application further provides a data processing device, applied to a first terminal, the device comprising:

[0048] A first sending module, configured to send an encryption request to a data encryption system, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, wherein the target combined encryption algorithm is an encryption algorithm customized by the first terminal;

[0049] A receiving module, used for receiving the ciphertext data sent by the data encryption system and the key identifier corresponding to the key combination information, wherein the ciphertext data is obtained by the data encryption system encrypting the data to be encrypted by using the target combined encryption algorithm and the key combination information;

[0050] The second sending module is used to send the ciphertext data and the key identifier to the second terminal.

[0051] In a sixth aspect, the present application further provides a data processing device, applied to a second terminal, the device comprising:

[0052] A first receiving module, used to receive the ciphertext data and the key identifier sent by the first terminal;

[0053] A sending module, used to send a decryption request to the data encryption system, wherein the decryption request includes the ciphertext data, the key identifier and the identifier of the target combined encryption algorithm;

[0054] The second receiving module is used to receive the decrypted data sent by the data encryption system, and the decrypted data is obtained by the data encryption system after obtaining the corresponding encryption key data according to the key identifier and decrypting the ciphertext data based on a preset encryption algorithm and the encryption key data.

[0055] In a seventh aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements any of the above data processing methods when executing the computer program.

[0056] In an eighth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program implements any of the above data processing methods when executed by a processor.

[0057] In a ninth aspect, the present application also provides a computer program product, including a computer program, which implements any of the above data processing methods when executed by a processor.

[0058] In the above-mentioned data processing method, device, computer equipment, computer-readable storage medium and computer program product, the data encryption system can customize the target combination encryption algorithm based on the first terminal in advance, and when receiving the encryption request sent by the first terminal, it can respond to the encryption request, determine the key corresponding to each encryption algorithm in the target combination encryption algorithm from the key combination information carried in the encryption request, and based on the encryption expression of the target combination encryption algorithm and the key corresponding to each encryption algorithm, call each encryption algorithm from the algorithm library in sequence to perform encryption processing on the data to be encrypted, obtain the ciphertext data corresponding to the data to be encrypted, and send the ciphertext data and the key identifier corresponding to the key combination information to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal, and the second terminal can perform data decryption in the data encryption system based on the key identifier. Using the data processing method, device, computer equipment, computer-readable storage medium and computer program product provided by the embodiments of the present disclosure, the user can customize the target combination encryption algorithm based on at least one encryption algorithm maintained in the algorithm library in the data encryption system, and use the customized target combination encryption algorithm to encrypt data, and the mode, complexity and randomness of data encryption are greatly increased, so the flexibility of data encryption and data security can be greatly improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0060] FIG1 is an application environment diagram of a data processing method in one embodiment;

[0061] FIG2 is a schematic flow chart of a data processing method in one embodiment;

[0062] FIG3 is a schematic diagram of a flow chart of steps of customizing a target combination encryption algorithm in one embodiment;

[0063] FIG4 is a schematic diagram of a flow chart of a data decryption step in one embodiment;

[0064] FIG5 is a schematic diagram of a flow chart of an abnormality detection step in one embodiment;

[0065] FIG6 is a schematic flow chart of a data processing method in another embodiment;

[0066] FIG7 is a schematic flow chart of a data processing method in another embodiment;

[0067] FIG8 is a schematic diagram of a flow chart of an encryption system in one embodiment;

[0068] FIG9 is a signaling interaction diagram of a process of customizing a combined encryption algorithm in another embodiment;

[0069] FIG10 is a signaling interaction diagram of a data encryption process in another embodiment;

[0070] FIG11 is a signaling interaction diagram of a data decryption process in another embodiment;

[0071] FIG12 is a block diagram of a data processing device in one embodiment;

[0072] FIG13 is a block diagram of a data processing device in another embodiment;

[0073] FIG14 is a block diagram of a data processing device in another embodiment;

[0074] FIG15 is a diagram showing the internal structure of a computer device in one embodiment;

[0075] FIG. 16 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0076] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0077] The data processing method provided in the embodiment of the present application can be applied to the application environment shown in Figure 1. Among them, the first terminal 102 and the second terminal 104 communicate with the data encryption system 106 through the network, and the first terminal 102 communicates with the second terminal 104 through the network. The data storage system can store data that the data encryption system 106 needs to process. The data storage system can be integrated on the data encryption system 106, or it can be placed on the cloud or other network servers. An algorithm library is deployed in the data encryption system 106, and a variety of encryption algorithms are maintained in the algorithm library. Users can use the encryption algorithms in the algorithm library to customize the target combination encryption algorithm in the data encryption system, and use the customized target combination encryption algorithm to encrypt data. When receiving the encryption request sent by the first terminal 102, the data encryption system 106 can respond to the encryption request, determine the key corresponding to each encryption algorithm in the target combination encryption algorithm from the key combination information carried in the encryption request, and call each encryption algorithm from the algorithm library in order to perform encryption processing on the data to be encrypted based on the encryption expression of the target combination encryption algorithm and the key corresponding to each encryption algorithm, obtain the ciphertext data corresponding to the data to be encrypted, and send the ciphertext data and the key identifier corresponding to the key combination information to the first terminal 102. The first terminal 102 can send the ciphertext data and the key identifier to the second terminal 104, and the second terminal 104 can decrypt the data in the data encryption system 106 based on the key identifier. Among them, the first terminal 102 and the second terminal 104 can be, but not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices, and the Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car devices, projection devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The head mounted device may be a virtual reality (VR) device, an augmented reality (AR) device, smart glasses, etc. The data encryption system 106 may be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services.

[0078] In an exemplary embodiment, as shown in FIG. 2 , a data processing method is provided, which is described by taking the method applied to the data encryption system 106 in FIG. 1 as an example, and includes the following steps 202 to 206, wherein:

[0079] Step 202: receiving an encryption request sent by the first terminal, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, and the target combined encryption algorithm is an encryption algorithm customized by the first terminal.

[0080] In the disclosed embodiment, after encrypting the data to be encrypted, the first terminal may send a corresponding encryption request to the data encryption system, and the encryption request may include the identifier of the target combined encryption algorithm, the data to be encrypted, and the key combination information, wherein the target combined encryption algorithm is a combined encryption algorithm customized by the first terminal in the data encryption system based on each encryption algorithm provided in the algorithm library, and the target combined encryption algorithm includes at least one encryption algorithm, and the at least one encryption algorithm performs encryption processing on the data in a preset order. The customization process for the target combined encryption algorithm will be described in detail in the following embodiments, and will not be repeated in the disclosed embodiment.

[0081] In one example, a user can pre-set an object that uses a target combination encryption algorithm, for example, pre-set the second terminal to use a target combination encryption algorithm for data encryption. In this way, when the first terminal sends data to the second terminal, the first terminal can determine that the encryption algorithm corresponding to the second terminal is the target combination encryption algorithm, and send a corresponding encryption request to the data encryption system based on the identifier of the target combination encryption algorithm; alternatively, the user can also set the encryption algorithm to be used before sending data, for example: before sending data to the second terminal, the encryption algorithm can be set to the target combination encryption algorithm through the human-computer interaction interface, and a corresponding encryption request can be sent to the data encryption system based on the identifier of the target combination encryption algorithm, and after obtaining the ciphertext data fed back by the data encryption system, the ciphertext data is sent to the second terminal.

[0082] The key combination information may include the keys corresponding to each encryption algorithm in the target combination encryption algorithm. The user may pre-set the key corresponding to the target combination encryption algorithm, or may set the key corresponding to the target combination encryption algorithm through the human-computer interaction interface before sending data. For example, if the key combination information corresponding to the target combination encryption algorithm is pre-set, when it is determined that the target combination encryption algorithm is used for data encryption, the key combination information corresponding to the target combination encryption algorithm may be obtained, and the corresponding encryption request may be sent to the data encryption system based on the target combination encryption algorithm and the key combination information. The method of pre-setting the key combination information may also set the validity period of the key combination information. After the key combination information expires, the key combination information needs to be reset or manually input. Alternatively, the user may also set the corresponding key combination information before sending data, for example, before sending data to the second terminal, the encryption algorithm may be set to the target combination encryption algorithm through the human-computer interaction interface, and the corresponding encryption request may be sent to the data encryption system based on the identifier of the target combination encryption algorithm and the key combination information, and the ciphertext data fed back by the data encryption system may be obtained, and the ciphertext data may be sent to the second terminal.

[0083] Step 204, in response to the encryption request, determines the key corresponding to each encryption algorithm in the target combined encryption algorithm from the key combination information, and based on the encryption expression of the target combined encryption algorithm and the key corresponding to each encryption algorithm, calls each encryption algorithm from the algorithm library in sequence to perform encryption processing on the data to be encrypted, and obtains the ciphertext data corresponding to the data to be encrypted.

[0084] In the disclosed embodiment, the data encryption system can obtain the identifier of the target combined encryption algorithm, the key combination information and the data to be encrypted from the encryption request, and determine the key corresponding to each encryption algorithm used in the target combined encryption algorithm from the key combination. Based on the encryption expression of the target combined encryption algorithm, each encryption algorithm is called from the algorithm library in sequence, and encryption processing of the data to be encrypted is performed based on the key to obtain the ciphertext data corresponding to the data to be encrypted.

[0085] The algorithm library collects all common encryption algorithms in related technologies, such as symmetric encryption (AES (Advanced Encryption Standard, symmetric encryption algorithm), DES (Data Encryption Standard, Data Encryption Standard)), asymmetric encryption (RSA (RSA algorithm, RSA asymmetric encryption), DSA (Digital Signature Algorithm, Digital Signature Algorithm)), hash functions (MD5 (Message Digest Algorithm MD5, message digest algorithm), SHA-1 (Secure Hash Algorithm 1, secure hash algorithm 1), SHA-256 (Secure Hash Algorithm 256, secure hash algorithm 256-bit)) and other encryption algorithms with high security and stability. When building a custom composite encryption algorithm, users can select appropriate algorithms from this library to combine to meet different security requirements. The algorithm library can be updated and maintained regularly to ensure that the algorithms in it are always kept up to date, providing users with the most advanced data protection technology.

[0086] In an example, assuming that the encryption expression 1 corresponding to the target combined encryption algorithm 1 is: ciphertext =RSA(DES(AES(data, secret1), secret2), secret3), in the key combination information, the key corresponding to RSA is key 1, the key corresponding to DES is key 2, and the key corresponding to AES is key 3. Among them, ciphertext is the encrypted ciphertext data, and the data encryption system treats the encryption processing process of the encrypted data based on the encryption expression and the key combination information as follows:

[0087] (1) Use the AES algorithm and key 1 to encrypt the data to obtain ciphertext 1.

[0088] (2) Use the DES algorithm and key 2 to encrypt ciphertext 1 to obtain ciphertext 2.

[0089] (3) Use the RSA algorithm and key 3 to encrypt ciphertext 2 to obtain ciphertext 3, which is the final ciphertext data ciphertext.

[0090] In another example, assuming that the encryption expression 2 corresponding to the target combined encryption algorithm 2 is: ciphertext =RSA((AES(data, secret1) + "identifier" DES(data, secret2), secret3), in the key combination information, the key corresponding to RSA is key 1, the key corresponding to DES is key 2, and the key corresponding to AES is key 3. Then the data encryption system treats the encryption processing process of the encrypted data based on the encryption expression and the key combination information as follows:

[0091] (1) Use the AES algorithm and key 1 to encrypt the data to obtain ciphertext 1.

[0092] (2) Use the DES algorithm and key 2 to encrypt the data to obtain ciphertext 2.

[0093] (3) Concatenate ciphertext 1 and ciphertext 2 using a special identifier to obtain concatenated ciphertext 3.

[0094] (4) Use the RSA algorithm and key 3 to encrypt ciphertext 3 to obtain ciphertext 4, which is the final ciphertext data ciphertext.

[0095] Step 206: Send the ciphertext data and the key identifier corresponding to the key combination information to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal.

[0096] In the disclosed embodiment, after completing the encryption processing corresponding to the data to be encrypted, the obtained ciphertext data can be sent to the first terminal. At the same time, the key combination information can be stored, and a unique key identifier can be generated for the key combination information. The key identifier is fed back to the first terminal together with the ciphertext data, so that the first terminal can send the corresponding key identifier when sending the ciphertext data to the second terminal, so that the second terminal can request the data encryption system to decrypt the ciphertext data based on the key identifier, thereby improving data security.

[0097] In the above data processing method, the data encryption system can customize the target combination encryption algorithm based on the first terminal's customized behavior for the encryption algorithm in advance, and when receiving the encryption request sent by the first terminal, it can respond to the encryption request, determine the key corresponding to each encryption algorithm in the target combination encryption algorithm from the key combination information carried in the encryption request, and based on the encryption expression of the target combination encryption algorithm and the key corresponding to each encryption algorithm, call each encryption algorithm from the algorithm library in sequence to perform encryption processing on the data to be encrypted, obtain the ciphertext data corresponding to the data to be encrypted, and send the ciphertext data and the key identifier corresponding to the key combination information to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal, and the second terminal can perform data decryption in the data encryption system based on the key identifier. Using the data processing method provided by the embodiment of the present disclosure, the user can customize the target combination encryption algorithm based on at least one encryption algorithm maintained in the algorithm library in the data encryption system, and use the customized target combination encryption algorithm to encrypt data, and the data encryption method, complexity and randomness are greatly increased, so the data encryption flexibility and data security can be greatly improved.

[0098] In an exemplary embodiment, as shown in FIG. 3 , before receiving the encryption request sent by the first terminal, the above method may further include the following steps 302 to 304, wherein:

[0099] Step 302: receiving a combined algorithm request sent by the first terminal, where the combined algorithm request is used to indicate at least one encryption algorithm corresponding to a target combined encryption algorithm and an encryption order corresponding to each encryption algorithm in the target combined encryption algorithm;

[0100] Step 304: Determine the encryption expression corresponding to the target combined encryption algorithm according to the combined algorithm request, and create the target combined encryption algorithm according to the encryption expression.

[0101] In the disclosed embodiment, the user can construct a target combined encryption algorithm by selecting, dragging, and combining multiple encryption algorithms, such as AES, DES, RSA, etc. Exemplarily, the encryption algorithms in the algorithm library can be displayed in the human-computer interaction interface, and the user can select the required encryption algorithm from it, and set the encryption order of each encryption algorithm in the target encryption algorithm by setting or dragging, and after the setting is completed, send the corresponding combined algorithm request to the data encryption system, so that the data encryption system can generate the encryption expression corresponding to the target combined encryption algorithm according to each encryption algorithm and the encryption order corresponding to each encryption algorithm, and store the corresponding relationship between the encryption expression and the identifier of the target combined encryption algorithm, and create the target combined encryption algorithm, exemplarily, such as the encryption expression 1 corresponding to the aforementioned target combined encryption algorithm 1.

[0102] Alternatively, the user can further refine the encryption logic by writing encryption expressions to achieve more refined data protection. For example, the user can directly write the encryption expression corresponding to the target combination encryption algorithm based on the encryption algorithms maintained in the database, and send the corresponding combination algorithm request to the data encryption system based on the encryption expression, so that the data encryption system can store the corresponding relationship between the encryption expression and the identifier of the target combination encryption algorithm after verifying that the encryption expression is correct (for example, verifying whether the syntax is correct, verifying whether the encryption algorithm used exists in the algorithm library, etc.), and create the target combination encryption algorithm, for example, encryption expression 2 corresponding to the aforementioned target combination encryption algorithm 2.

[0103] In another example, after the user sets the target combination encryption algorithm in the first way, the encryption expression corresponding to the target combination encryption algorithm can be displayed in the human-computer interaction interface, and the user can adjust and edit the displayed encryption expression to obtain the final encryption expression. The customization method of the target combination encryption algorithm is not specifically limited in the disclosed embodiments.

[0104] It should be noted that the identifier of the target combination encryption algorithm can be a unique identifier generated by the data encryption system when creating the target combination encryption algorithm and fed back to the first terminal. It can also be set by the user through the human-computer interaction interface when creating the target combination encryption algorithm. It can also be obtained by the user modifying the identifier generated by the data encryption system. The method for obtaining the identifier of the target combination encryption algorithm is not specifically limited in the embodiment of the present disclosure.

[0105] The customized method of the target combination encryption algorithm provided by the embodiment of the present disclosure not only enhances the complexity and security of encryption, but also meets the user's pursuit of personalized security needs.

[0106] In an example method further includes:

[0107] The key combination information is encrypted using a preset encryption algorithm and a preset key to obtain encrypted key data, and a unique key identifier is generated for the encrypted key data, and the encrypted key data and the key identifier are stored.

[0108] In the disclosed embodiment, after the data encryption system performs data encryption processing based on the key combination information sent by the first terminal, the key combination information can be re-encrypted using the system's preset root key (also called the preset key) and root algorithm (also called the preset encryption algorithm) to ensure the confidentiality of the key. The encrypted key data obtained after encryption will be saved in the encryption machine, and a unique key identifier will be generated and returned to the user. In this way, when decrypting, the second terminal needs to provide the key identifier to the data encryption system, and the data encryption system obtains the corresponding encryption key data from the encryption machine, and uses the root key and root algorithm to decrypt to obtain the key combination information set by the initial user. This ensures that only users with the correct key identifier can successfully decrypt the data, further enhancing the security of the system.

[0109] In an exemplary embodiment, as shown in FIG. 4 , the method may further include steps 402 to 406, wherein:

[0110] Step 402: receiving a decryption request sent by the second terminal, wherein the decryption request includes ciphertext data, a key identifier, and an identifier of a target combined encryption algorithm;

[0111] Step 404, obtaining corresponding encryption key data according to the key identifier, and performing decryption processing based on the preset encryption algorithm and the encryption key data to obtain key combination information;

[0112] Step 406, based on the target combined encryption algorithm and the key combination information, the ciphertext data is decrypted to obtain decrypted data;

[0113] Step 408: Send the decrypted data to the second terminal.

[0114] In the disclosed embodiment, after the second terminal receives the ciphertext data and key identifier sent by the first terminal, it can send a corresponding decryption request to the data encryption system to decrypt the ciphertext data using the target combined encryption algorithm and the key combination information corresponding to the key identifier to obtain decrypted data.

[0115] Exemplarily, the second terminal may determine the identifier corresponding to the target combined encryption algorithm based on an agreement with the first terminal; or, the first terminal may also send the identifier of the target combined encryption algorithm simultaneously when sending ciphertext data to the second terminal.

[0116] After the data encryption system receives the decryption request sent by the second terminal, it can reversely check the encryption key data according to the key identifier carried in the decryption request, and use the preset encryption algorithm and the encryption key data for decryption processing to obtain the key combination information (the specific process can be referred to the relevant description of the aforementioned embodiment). Further, the ciphertext data is automatically decrypted according to the selected target combination encryption algorithm and key combination information. For example, in the reverse order of the execution order of each encryption algorithm in the target combination encryption algorithm, each encryption algorithm is called from the algorithm library to perform a decryption operation on the ciphertext data. This design greatly simplifies the decryption process and improves the user experience.

[0117] In an exemplary embodiment, for the target combined encryption algorithm, a variety of security measures can also be used to protect the security of the decryption process, such as limiting the number of decryption times, setting a decryption time limit, etc. When the preset number of decryption times or the preset decryption time is exceeded, the decryption processing based on the target combined encryption algorithm will no longer be performed, and the user can be notified to update the key or combined encryption algorithm to prevent malicious attacks and illegal decryption behaviors.

[0118] In an exemplary embodiment, as shown in FIG. 5 , the method further includes the following steps 502 to 504, wherein:

[0119] Step 502, detecting abnormal data from encryption requests and / or decryption requests according to the abnormal behavior detection dimension;

[0120] Step 504: When the detected abnormal data meets the alarm condition, an alarm message is sent to a preset terminal.

[0121] In the disclosed embodiment, corresponding detection rules can be set for each abnormal behavior detection dimension, and abnormal data can be detected from encryption requests or decryption requests based on each abnormal behavior detection dimension. Exemplarily, taking the abnormal behavior detection dimension as the number of decryption errors of the target combined encryption algorithm as an example, once it is detected that the target combined encryption algorithm is used for data decryption, and the number of decryption failures reaches the preset number of errors, it is determined that the alarm condition is met, and an alarm message can be sent to the terminal operated by the administrator or the terminal that sets the target combined encryption algorithm.

[0122] In an exemplary embodiment, as shown in FIG. 6 , a data processing method is provided, which is described by taking the method applied to the first terminal 102 in FIG. 1 as an example, and includes the following steps 602 to 606, wherein:

[0123] Step 602: Send an encryption request to the data encryption system, where the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, where the target combined encryption algorithm is an encryption algorithm customized by the first terminal;

[0124] Step 604, receiving the ciphertext data and the key identifier corresponding to the key combination information sent by the data encryption system, where the ciphertext data is obtained by the data encryption system encrypting the data to be encrypted using the target combination encryption algorithm and the key combination information;

[0125] Step 606: Send the ciphertext data and the key identifier to the second terminal.

[0126] In the embodiment of the present disclosure, the first terminal can customize the target combination encryption algorithm in the data encryption system in advance. The specific process can refer to the relevant description of the aforementioned embodiment, which will not be repeated in the embodiment of the present disclosure. In the process of sending data to the second terminal, the first terminal can use the data to be sent as the data to be encrypted, and send an encryption request to the data encryption system based on the identifier and key combination information of the target combination encryption algorithm and the data to be encrypted. The data encryption system calls each encryption algorithm from the algorithm library according to the execution order of each encryption algorithm in the target combination encryption algorithm, and encrypts the data to be encrypted based on the key corresponding to each encryption algorithm in the key combination information. The specific process can refer to the relevant description of the aforementioned embodiment, which will not be repeated in the embodiment of the present application.

[0127] After obtaining the ciphertext data corresponding to the data to be encrypted and the key identifier corresponding to the key combination information fed back by the data encryption system, the key identifier is sent together with the ciphertext data to the second terminal, so that the second terminal can request the data encryption system to decrypt the ciphertext data based on the key identifier, thereby improving data security.

[0128] By adopting the data processing method provided by the embodiment of the present disclosure, the user can customize the target combination encryption algorithm based on at least one encryption algorithm in the data encryption system, and use the customized target combination encryption algorithm to encrypt data. The mode, complexity and randomness of data encryption are greatly increased, thereby greatly improving the flexibility of data encryption and data security.

[0129] In an exemplary embodiment, as shown in FIG. 7 , a data processing method is provided, which is described by taking the method applied to the second terminal 104 in FIG. 1 as an example, and includes the following steps 702 to 706, wherein:

[0130] Step 702, receiving the ciphertext data and key identifier sent by the first terminal;

[0131] Step 704, sending a decryption request to the data encryption system, the decryption request including the ciphertext data, the key identifier and the identifier of the target combined encryption algorithm;

[0132] Step 706, receiving the decrypted data sent by the data encryption system, the decrypted data is obtained by the data encryption system after obtaining the corresponding encryption key data according to the key identifier, and decrypting the ciphertext data based on the preset encryption algorithm and the encryption key data.

[0133] In the embodiments of the present disclosure, the interaction process between the first terminal and the data encryption system and the process of encrypting the data to be encrypted to obtain ciphertext data and a key identifier, as well as the interaction process between the second terminal and the data encryption system and the process of decrypting the ciphertext data to obtain decrypted data, may refer to the relevant descriptions of the aforementioned embodiments and will not be repeated herein in the embodiments of the present disclosure.

[0134] By adopting the data processing method provided by the embodiment of the present disclosure, the user can customize the target combination encryption algorithm based on at least one encryption algorithm in the data encryption system, and use the customized target combination encryption algorithm to encrypt data. The mode, complexity and randomness of data encryption are greatly increased, thereby greatly improving the flexibility of data encryption and data security.

[0135] In order to enable those skilled in the art to better understand the embodiments of the present disclosure, the embodiments of the present disclosure are described below through specific examples.

[0136] As shown in FIG8 , the embodiment of the present disclosure provides an encryption system, including a user interaction module, a composite encryption algorithm module, a key management module, an encryption algorithm library, and a decryption module. Among them:

[0137] As the front-end portal of the encryption system, the user interaction module provides users with an intuitive and intelligent encryption customization experience. Through the graphical interface, users can easily drag and combine a variety of basic encryption algorithms, such as AES, DES, RSA, etc., to build a unique combination encryption algorithm. In addition, users can further refine the encryption logic by writing expressions to achieve more refined data protection. This customized encryption method not only enhances the complexity and security of encryption, but also meets the user's pursuit of personalized security needs.

[0138] The composite encryption algorithm module is the core processing unit of the encryption system. It carries the user-defined combined encryption algorithm and undertakes the heavy task of encryption and decryption. When receiving the encrypted data and multiple algorithm keys from the front end, the module will intelligently call the selected combined encryption algorithm to perform multi-level encryption processing on the data. In this process, multiple keys will be combined and safely stored by calling the key management module. At the same time, the module also has efficient encryption performance and can complete the encryption and decryption operations of a large amount of data in a short time, meeting the user's demand for processing speed.

[0139] We assume that an encryption method is expressed as: ciphertext = AES(data, secret1). This expression means that the ciphertext is obtained by using the AES encryption algorithm and the key secret1 for the original data data.

[0140] Then a certain combination encryption method 1 can be: ciphertext = RSA(DES(AES(data, secret1), secret2), secret3). This expression means: (1) Use the AES algorithm and key secret1 to encrypt the original data once to obtain ciphertext 1. (2) Use the DES algorithm and key secrete2 to encrypt the ciphertext 1 in the first step to obtain ciphertext 2. (3) Use the RSA algorithm and key secret3 to encrypt the ciphertext 2 in the second step to obtain ciphertext 3, which is the final ciphertext ciphertext.

[0141] Then a certain combination encryption method 2 can be: ciphertext = RSA((AES(data, secret1) +”identifier” DES(data, secret2), secret3). This expression means: (1) Use the AES algorithm and key secret1 to encrypt data to obtain ciphertext 1. (2) Use the DES algorithm and key secret2 to encrypt data to obtain ciphertext 2. (3) Concatenate ciphertext 1 and ciphertext 2 with a special identifier to obtain the concatenated ciphertext 3. (4) Use the RSA algorithm and key secret3 to encrypt ciphertext 3 to obtain ciphertext 4, which is the final ciphertext ciphertext.

[0142] There can also be any other permutations and combinations. Each user can customize his own encryption algorithm, and each algorithm can independently formulate its own key.

[0143] The key is the most critical part of the encryption process, and its security is directly related to the confidentiality of the data. The key management module can receive the key from the composite encryption algorithm module, and use the system's preset root key and root algorithm for secondary encryption to ensure the confidentiality of the key. The encrypted key ciphertext will be saved in the encryption machine, and a unique key identifier will be generated and returned to the user. In this process, the preset composite encryption algorithm and cipher machine are used to ensure the security of the key during transmission and storage. When decrypting, the decryption module will call the key management module according to the key identifier provided by the user, obtain the corresponding combined key ciphertext from the encryption machine, and use the root key and root algorithm for decryption to obtain multiple algorithm keys set by the initial user. This design ensures that only users with the correct key identifier can successfully decrypt the data, further enhancing the security of the system.

[0144] The general encryption algorithm library is an important supporting part of the encryption system. It collects all common encryption algorithms in the existing technology, such as symmetric encryption (AES, DES), asymmetric encryption (RSA, DSA), hash functions (MD5, SHA-1, SHA-256), etc. These algorithms are mature technologies that have been widely verified and applied, with high security and stability. When users build custom composite encryption algorithms, they can select appropriate algorithms from this library to combine to meet different security requirements. It is also necessary to regularly update and maintain this algorithm library to ensure that the algorithms in it are always kept up to date and provide users with the most advanced data protection technology.

[0145] Although the ciphertext encrypted by the composite encryption algorithm has very high security, the decryption process may be relatively complicated. In order to solve this problem, a convenient and secure decryption module is specially designed in this example. The user only needs to enter the ciphertext and key identifier, and select the corresponding composite encryption algorithm. The decryption module can reversely check the encryption key according to the key identifier, and automatically decrypt the ciphertext according to the selected composite encryption algorithm. This design greatly simplifies the decryption process and improves the user experience. At the same time, a variety of security measures can be used to protect the security of the decryption process, such as limiting the number of decryption times, setting a decryption time limit, etc., to prevent malicious attacks and illegal decryption behaviors.

[0146] The security audit module is the last line of defense for this encryption system. It monitors and audits the behavior of the entire system. This module will record and analyze all operations of the user interaction module, composite encryption algorithm module, key management module, general encryption algorithm library, and decryption module. Once abnormal behavior or potential threats are detected, such as exceeding a certain number of errors, unauthorized access, etc., the security audit module will immediately trigger an alarm mechanism and notify the user of relevant information. At the same time, the module also has a powerful audit function that can trace back and analyze historical operations to help users discover and deal with potential security issues in a timely manner. In addition, it also provides users with a flexible audit rule setting function. Users can customize audit rules according to their own needs to meet security needs in different scenarios.

[0147] The encryption system provided by the disclosed example integrates multiple encryption algorithms and strategies to provide users with an efficient and secure data protection solution. From the customized experience of the user interaction module to the encryption processing of the composite encryption algorithm module, to the security guarantee of the key management module and the rich selection of the general encryption algorithm library, to the convenient service of the decryption module and the comprehensive monitoring and protection of the security audit module, the disclosed embodiment can greatly improve information security.

[0148] Referring to FIG. 9 , the customization process of the target combination encryption algorithm in the embodiment of the present disclosure is shown. The user can log in to the client of the encryption system through the human-computer interaction interface of the first terminal. The user interaction module pulls the encryption algorithm from the general encryption algorithm library in response to the user's customization operation for the target combination encryption algorithm, and can save the target combination encryption algorithm in the composite algorithm encryption module in response to the user's operation of assembling the target combination encryption algorithm in the graphical interface.

[0149] For example, the user first selects at least one encryption algorithm through the human-computer interaction interface by dragging and dropping, such as AES, DES and RSA, and sets their encryption order, such as AES->DES->RSA, to obtain the target combined encryption algorithm, and stores the target combined encryption algorithm in the composite algorithm encryption module. This customized method gives users great flexibility, and they can choose the appropriate encryption algorithm and order according to actual security needs.

[0150] Referring to FIG. 10 , the data encryption process using the target combination encryption algorithm in the embodiment of the present disclosure is shown. The user can select the target combination encryption algorithm from the encryption algorithms displayed in the human-computer interaction interface, input the data to be encrypted, and set the key for each encryption algorithm in the target combination encryption algorithm. Still taking the above example, the user specifies different keys secret1, secret2 and secret3 for these three algorithms respectively. These keys are crucial elements in the encryption process, and they directly determine the security and reliability of the encryption result. In this example, the user ensures that each algorithm has a unique key, further enhancing the complexity and security of encryption. Once the user completes the selection and setting of the target combination encryption algorithm and key, the composite encryption algorithm module will receive this information and immediately start to perform encryption operations. First, it uses the AES algorithm and secret1 to perform the initial encryption on the original data to generate an intermediate encryption result. Then, this intermediate result is further encrypted by the DES algorithm and secret2 to form another intermediate encryption result. Finally, the RSA algorithm and secret3 encrypt the final intermediate encryption result to generate the final ciphertext. This multi-level encryption method ensures a high degree of data security during transmission and storage.

[0151] At the same time, the key management module is also working synchronously. It splices secret1, secret2 and secret3 specified by the user, and uses the system's preset root key and root algorithm to encrypt the spliced ​​key again. The encrypted key ciphertext is securely stored in the encryption machine, and a unique key identifier is generated and returned to the user. This key identifier is an important credential for the user to decrypt data later.

[0152] Referring to FIG. 11 , the data decryption process using the target combined encryption algorithm in the embodiment of the present disclosure is shown. After receiving the relevant information of data decryption, the decryption module will first call the key management module. According to the key identifier provided by the user, the decryption module obtains the encrypted encryption key information from the key management module. Then, the system's preset root key and root algorithm are used to decrypt the encryption key information to obtain the original secret1, secret2 and secret3. This step ensures the security and reliability of the key during the decryption process. After obtaining the correct key, the decryption module starts to perform the decryption operation in the reverse order of the target combined encryption algorithm (RSA->DES->AES). First, it uses the RSA algorithm and secret3 to decrypt the ciphertext to obtain an intermediate decryption result. Then, this intermediate result is further decrypted by the DES algorithm and secret2 to form another intermediate decryption result. Finally, the AES algorithm and secret1 decrypt the final intermediate decryption result to obtain the original plaintext. The entire decryption process strictly follows the order and algorithm during encryption, ensuring the correctness and security of the decryption result.

[0153] During the decryption process, if the key identifier or decryption order provided by the user is incorrect, the decryption module will not be able to correctly decrypt the plaintext. This design effectively prevents illegal users from obtaining plaintext information through guessing or brute force, further ensuring data security.

[0154] The data processing method provided by the embodiment of the present disclosure can flexibly customize the combined encryption algorithm according to the existing technology. The combination between the original encryption algorithms in the combined encryption algorithm is not fixed, but is customized by the user, including the algorithm, sequence, key, combination method, etc. And multiple keys can be assembled into key combination information and encrypted, and the encryption key identifier is returned, providing a user with an easy-to-use and safe key management method. The data processing method provided by the embodiment of the present disclosure, through multiple composite encryptions, is very difficult to crack, more secure, and difficult to blast; and the user can customize his own encryption algorithm, which is different from any existing encryption algorithm; the key, the original encryption algorithm, and the algorithm combination method all need to be known to crack, which is difficult; in the same system, encryption and decryption are convenient, and there is no need to manually record the key, the original encryption algorithm, and the algorithm combination method, which are all recorded in the system and stored in the cipher machine to prevent leakage; therefore, data security can be greatly improved.

[0155] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0156] Based on the same inventive concept, the embodiment of the present application also provides a data processing device for implementing the data processing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the one or more data processing device embodiments provided below can refer to the limitations on the data processing method above, and will not be repeated here.

[0157] In an exemplary embodiment, as shown in FIG12 , a data processing device is provided, including: a first receiving module 1202, a first encryption module 1204 and a first sending module 1206, wherein:

[0158] The first receiving module 1202 is used to receive an encryption request sent by the first terminal, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, and the target combined encryption algorithm is an encryption algorithm customized by the first terminal;

[0159] The first encryption module 1204 is used to determine the key corresponding to each encryption algorithm in the target combined encryption algorithm from the key combination information in response to the encryption request, and based on the encryption expression of the target combined encryption algorithm and the key corresponding to each encryption algorithm, sequentially call each encryption algorithm from the algorithm library to perform encryption processing on the data to be encrypted, so as to obtain ciphertext data corresponding to the data to be encrypted;

[0160] The first sending module 1206 is configured to send the ciphertext data and the key identifier corresponding to the key combination information to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal.

[0161] By adopting the data processing device provided by the embodiment of the present disclosure, the user can customize the target combination encryption algorithm based on at least one encryption algorithm in the data encryption system, and use the customized target combination encryption algorithm to encrypt data. The method, complexity and randomness of data encryption are greatly increased, thereby greatly improving the flexibility of data encryption and data security.

[0162] In one of the embodiments, the device also includes: a second receiving module, used to receive a combination algorithm request sent by the first terminal, the combination algorithm request is used to indicate at least one encryption algorithm corresponding to the target combination encryption algorithm, and the encryption order corresponding to each of the encryption algorithms in the target combination encryption algorithm; a creation module, used to determine the encryption expression corresponding to the target combination encryption algorithm according to the combination algorithm request, and create the target combination encryption algorithm according to the encryption expression.

[0163] In one of the embodiments, the device also includes: a second encryption module, used to encrypt the key combination information using a preset encryption algorithm and a preset key to obtain encryption key data, and generate a unique key identifier for the encryption key data, and store the encryption key data and the key identifier.

[0164] In one of the embodiments, the device also includes: a third receiving module, used to receive a decryption request sent by the second terminal, the decryption request including the ciphertext data, the key identifier and the identifier of the target combined encryption algorithm; a first decryption module, used to obtain the corresponding encryption key data according to the key identifier, and perform decryption processing based on a preset encryption algorithm and the encryption key data to obtain the key combination information; a second decryption module, used to perform decryption processing on the ciphertext data based on the target combined encryption algorithm and the key combination information to obtain decrypted data; and a second sending module, used to send the decrypted data to the second terminal.

[0165] In one of the embodiments, the device also includes: a detection module, used to detect abnormal data from the encryption request and / or decryption request according to the abnormal behavior detection dimension; an alarm module, used to send an alarm message to a preset terminal when the detected abnormal data meets the alarm condition.

[0166] In an exemplary embodiment, as shown in FIG13 , a data processing device is provided, including: a first sending module 1302 , a receiving module 1304 , and a second sending module 1306 , wherein:

[0167] A first sending module 1302 is used to send an encryption request to the data encryption system, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, and the target combined encryption algorithm is an encryption algorithm customized by the first terminal;

[0168] The receiving module 1304 is used to receive the ciphertext data sent by the data encryption system and the key identifier corresponding to the key combination information, wherein the ciphertext data is obtained by the data encryption system encrypting the data to be encrypted by using the target combined encryption algorithm and the key combination information;

[0169] The second sending module 1306 is configured to send the ciphertext data and the key identifier to a second terminal.

[0170] By adopting the data processing device provided by the embodiment of the present disclosure, the user can customize the target combination encryption algorithm based on at least one encryption algorithm in the data encryption system, and use the customized target combination encryption algorithm to encrypt data. The method, complexity and randomness of data encryption are greatly increased, thereby greatly improving the flexibility of data encryption and data security.

[0171] In an exemplary embodiment, as shown in FIG. 14 , a data processing device is provided, including: a first receiving module 1402 , a sending module 1404 , and a second receiving module 1406 , wherein:

[0172] The first receiving module 1402 is used to receive the ciphertext data and the key identifier sent by the first terminal;

[0173] The sending module 1404 is used to send a decryption request to the data encryption system, wherein the decryption request includes the ciphertext data, the key identifier and the identifier of the target combined encryption algorithm;

[0174] The second receiving module 1406 is used to receive decrypted data sent by the data encryption system. The decrypted data is obtained by the data encryption system after obtaining the corresponding encryption key data according to the key identifier and decrypting the ciphertext data based on a preset encryption algorithm and the encryption key data.

[0175] By adopting the data processing device provided by the embodiment of the present disclosure, the user can customize the target combination encryption algorithm based on at least one encryption algorithm in the data encryption system, and use the customized target combination encryption algorithm to encrypt data. The method, complexity and randomness of data encryption are greatly increased, thereby greatly improving the flexibility of data encryption and data security.

[0176] Each module in the above data processing device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0177] In an exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG15. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data related to the data processing process. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a data processing method is implemented.

[0178] In an exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG16. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected via a system bus, and the communication interface, the display unit, and the input device are connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner may be implemented through WIFI, a mobile cellular network, near field communication (NFC) or other technologies. When the computer program is executed by the processor, a data processing method is implemented. The display unit of the computer device is used to form a visually visible picture, which may be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.

[0179] Those skilled in the art will understand that the structure shown in FIG. 16 is merely a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0180] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0181] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0182] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0183] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0184] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0185] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0186] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A data processing method, characterized in that: Applied to a data encryption system, the method comprises: Receiving an encryption request sent by the first terminal, the encryption request including an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, the target combined encryption algorithm being an encryption algorithm customized by the first terminal; In response to the encryption request, determine the key corresponding to each encryption algorithm in the target combined encryption algorithm from the key combination information, and based on the encryption expression of the target combined encryption algorithm and the key corresponding to each encryption algorithm, call each encryption algorithm from the algorithm library in sequence to perform encryption processing on the data to be encrypted, so as to obtain ciphertext data corresponding to the data to be encrypted; The ciphertext data and the key identifier corresponding to the key combination information are sent to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal.

2. The method according to claim 1, characterized in that: Before receiving the encryption request sent by the first terminal, the method further includes: receiving a combined algorithm request sent by the first terminal, where the combined algorithm request is used to indicate at least one encryption algorithm corresponding to a target combined encryption algorithm and an encryption order corresponding to each of the encryption algorithms in the target combined encryption algorithm; According to the combined algorithm request, an encryption expression corresponding to the target combined encryption algorithm is determined, and the target combined encryption algorithm is created according to the encryption expression.

3. The method according to claim 1, characterized in that The method further comprises: The key combination information is encrypted using a preset encryption algorithm and a preset key to obtain encrypted key data, and a unique key identifier is generated for the encrypted key data, and the encrypted key data and the key identifier are stored.

4. The method according to claim 3, characterized in that The method further comprises: receiving a decryption request sent by the second terminal, wherein the decryption request includes the ciphertext data, the key identifier, and an identifier of the target combined encryption algorithm; Acquire corresponding encryption key data according to the key identifier, and perform decryption processing based on a preset encryption algorithm and the encryption key data to obtain the key combination information; Based on the target combined encryption algorithm and the key combination information, the ciphertext data is decrypted to obtain decrypted data; The decrypted data is sent to the second terminal.

5. The method according to claim 4, characterized in that The method further comprises: Detecting abnormal data from the encryption request and / or decryption request according to an abnormal behavior detection dimension; When the detected abnormal data meets the alarm condition, an alarm message is sent to the preset terminal.

6. A data processing method, characterized in that: Applied to a first terminal, the method includes: Sending an encryption request to the data encryption system, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, wherein the target combined encryption algorithm is an encryption algorithm customized by the first terminal; Receiving the ciphertext data sent by the data encryption system and the key identifier corresponding to the key combination information, wherein the ciphertext data is obtained by the data encryption system encrypting the data to be encrypted by using the target combined encryption algorithm and the key combination information; The ciphertext data and the key identifier are sent to the second terminal.

7. A data processing method, characterized in that: Applied to the second terminal, the method includes: Receiving the ciphertext data and the key identifier sent by the first terminal; Sending a decryption request to the data encryption system, wherein the decryption request includes the ciphertext data, the key identifier and the identifier of the target combined encryption algorithm; The decrypted data sent by the data encryption system is received, wherein the decrypted data is obtained by the data encryption system after obtaining the corresponding encryption key data according to the key identifier and decrypting the ciphertext data based on a preset encryption algorithm and the encryption key data.

8. A data processing device, characterized in that: Applied to a data encryption system, the device comprises: A first receiving module is used to receive an encryption request sent by a first terminal, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, and the target combined encryption algorithm is an encryption algorithm customized by the first terminal; A first encryption module, configured to, in response to the encryption request, determine the key corresponding to each encryption algorithm in the target combined encryption algorithm from the key combination information, and based on the encryption expression of the target combined encryption algorithm and the key corresponding to each encryption algorithm, sequentially call each encryption algorithm from an algorithm library to perform encryption processing on the data to be encrypted, so as to obtain ciphertext data corresponding to the data to be encrypted; The first sending module is used to send the ciphertext data and the key identifier corresponding to the key combination information to the first terminal, so that the first terminal sends the ciphertext data and the key identifier to the second terminal.

9. A data processing device, characterized in that: Applied to a first terminal, the device includes: A first sending module, configured to send an encryption request to a data encryption system, wherein the encryption request includes an identifier of a target combined encryption algorithm, data to be encrypted, and key combination information, wherein the target combined encryption algorithm is an encryption algorithm customized by the first terminal; A receiving module, used to receive the ciphertext data sent by the data encryption system and the key identifier corresponding to the key combination information, wherein the ciphertext data is obtained by the data encryption system encrypting the data to be encrypted using the target combined encryption algorithm and the key combination information; The second sending module is used to send the ciphertext data and the key identifier to the second terminal.

10. A data processing device, characterized in that: Applied to a second terminal, the device includes: A first receiving module, used to receive the ciphertext data and the key identifier sent by the first terminal; A sending module, used to send a decryption request to the data encryption system, wherein the decryption request includes the ciphertext data, the key identifier and the identifier of the target combined encryption algorithm; The second receiving module is used to receive the decrypted data sent by the data encryption system, and the decrypted data is obtained by the data encryption system after obtaining the corresponding encryption key data according to the key identifier and decrypting the ciphertext data based on a preset encryption algorithm and the encryption key data.

Images