Data security transmission method and device for account management system

By selecting the optimal chaotic mapping function based on the risk level and interaction value of the data in the account management system for encryption, the problem of insufficient or excessive encryption strength in traditional methods is solved, and efficient and secure data transmission is achieved.

CN119484062BActive Publication Date: 2025-04-08BEIJING MIAOFU TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202411575190.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-11-06
Publication Date
2025-04-08
Estimated Expiration
2044-11-06

AI Technical Summary

Technical Problem

The traditional data security transmission method for account management systems is difficult to select appropriate chaotic mapping functions based on the actual needs of the data, resulting in low or excessive encryption intensity and wasting computer resources.

Method used

By obtaining various types of data in the account management system and the number of attacks each type of data is subject to, determining the risk level and interaction value of each type of data, combining the encryption strength value and the degree of chaos in the ciphertext, selecting the optimal chaotic mapping function for encryption.

Benefits of technology

Targeted encryption is realized according to the actual needs of the data, improving data security, preventing data leakage, and saving computer resources on the basis of ensuring encryption strength.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119484062B_ABST
    Figure CN119484062B_ABST
Patent Text Reader

Abstract

The present application relates to the field of data security technology, and specifically to a data security transmission method and device for an account management system, the method comprising: obtaining various types of data in the account management system and the number of attacks on each type of data; determining the danger level of each type of data based on the amount of each type of data and the number of attacks; determining the interaction value and encryption strength value of each type of data; preselecting multiple chaotic mapping functions, and determining the degree of chaos of the ciphertext after each chaotic mapping function encrypts any type of data based on the difference between the data chaos before and after each chaotic mapping function encrypts the data, and the difference between the data before and after encryption; and then selecting the optimal chaotic mapping function for encrypting each type of data from the multiple chaotic mapping functions, and securely transmitting the data. The present application aims to save computer resources on the basis of ensuring the strength of data encryption.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a data security transmission method and device for an account management system. Background Art

[0002] Data transmission in the account management system is a key link to ensure information sharing and collaboration between systems. Therefore, when transmitting data, the data is generally encrypted to protect data security. Chaotic encryption algorithms use the randomness and complexity of chaotic systems to protect data security. Chaotic encryption algorithms can effectively protect various types of private data in account information by generating encryption keys, thereby ensuring the security of information transmission.

[0003] There are multiple different mapping functions in the chaotic encryption algorithm. Different mapping functions have different encryption degrees for data. Since the data in the account information is attacked to different degrees and has different privacy levels, the data has different security level requirements. It is difficult for traditional algorithms to select appropriate mapping functions according to the actual needs of the data, resulting in low encryption strength or excessive encryption strength, and wasting computer resources during decryption. Summary of the invention

[0004] In view of the above, it is necessary to provide a data security transmission method and device for an account management system. Compared with the traditional data security transmission method for an account management system, it can save computer resources on the basis of ensuring the strength of data encryption:

[0005] In a first aspect, an embodiment of the present application provides a data security transmission method for an account management system, the method comprising the following steps:

[0006] Obtain various types of data in the account management system and the number of attacks on each type of data;

[0007] Determine the danger level of each type of data based on the amount of data of each type and the number of attacks;

[0008] Determine the interaction value of any type of data based on the interaction of accounts involved in any type of data with respect to the any type of data;

[0009] Combining the danger level and interaction value of each type of data, the encryption strength value of each type of data is obtained;

[0010] Preselecting a plurality of chaotic mapping functions, and determining the degree of disorder of the ciphertext after each chaotic mapping function encrypts the any type of data based on the difference between the disorder of the data before and after each chaotic mapping function encrypts the any type of data, and the difference between the data before and after encryption;

[0011] Based on the encryption strength value and the disorder degree of the ciphertext after each chaotic mapping function encrypts each type of data, the optimal chaotic mapping function for encrypting each type of data is selected from the multiple chaotic mapping functions to transmit each type of data securely.

[0012] In one embodiment, the risk level is a fusion result of the amount of each type of data and the number of attacks.

[0013] In one embodiment, the expression of the interaction value is:

[0014] In the formula, p v represents the interaction value of the vth type of data; N v Indicates the total number of accounts involved in the v-th category of data; Get the ith account involved in the v-th category of data, n1 i M represents the number of accounts that interact with the i-th account with the v-th type of data; v Indicates the number of accounts with type v data interaction.

[0015] In one embodiment, the encryption strength value is positively correlated with the danger level and interaction value of each type of data.

[0016] In one embodiment, the process of determining the degree of disorder is as follows:

[0017] Based on the difference between the data chaos conditions before and after each chaotic mapping function encrypts the data of any type, determining the initial chaos degree of the ciphertext after each chaotic mapping function encrypts the data of any type;

[0018] Arrange the data before and after each chaotic mapping function encrypts any type of data in the same order to form each pre-encryption sequence and each post-encryption sequence;

[0019] The difference of the data at the same position between each pre-encryption sequence and its corresponding post-encryption sequence is recorded as the data difference;

[0020] Calculate the distance between each pre-encryption sequence and its corresponding post-encryption sequence;

[0021] The chaos degree is positively correlated with the initial chaos degree and the distance, and is also positively correlated with all the data differences corresponding to each chaotic mapping function.

[0022] In one embodiment, the process of determining the initial disorder is:

[0023] The difference in the degree of discreteness between each sequence before encryption and its corresponding sequence after encryption is recorded as discrete difference;

[0024] The initial chaos degree is positively correlated with the discrete degree of each encrypted sequence and the discrete difference.

[0025] In one embodiment, the expression of the degree of disorder is:

[0026] Y′ u,v =mean(|S u,v -S v |)×D(S u,v ,S v )×Y u,v Where, Y′ u,v represents the degree of disorder of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data; mean() represents the mean operation; S u,v represents the encrypted sequence obtained by encrypting the vth type of data with the uth chaotic mapping function; S v Represents the sequence before encryption of the vth type of data; |S u,v -S v | indicates calculation S u,v With S v The difference between the data at the same position in the image; D() represents the distance function; Y u,v It represents the initial disorder degree of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data.

[0027] In one embodiment, the method for selecting the optimal chaotic mapping function when encrypting various types of data is:

[0028] When the encryption strength value of any type of data is greater than or equal to a preset threshold, the chaotic mapping function corresponding to the maximum value of the ciphertext disorder degree after encrypting any type of data is selected as the optimal chaotic mapping function when encrypting any type of data; otherwise, the chaotic mapping function corresponding to the minimum value of the ciphertext disorder degree is selected.

[0029] In one of the embodiments, when transmitting a group of data to be transmitted containing multiple types of data, the data to be transmitted is divided into data segments according to the data type and numbered, the number of each data segment and its corresponding optimal chaotic mapping function are respectively stored in each key-value pair, all key-value pairs are organized into an encryption key in order of numbers, and when the data to be transmitted is successfully transmitted, it is decrypted according to the key.

[0030] In a second aspect, an embodiment of the present application also provides a data security transmission device for an account management system, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the processor implements the steps of any one of the above-mentioned data security transmission methods for an account management system when executing the computer program.

[0031] This application has at least the following beneficial effects:

[0032] This application determines the danger level of each type of data based on the amount of data and the number of attacks received; determines the interaction value of each type of data based on the interaction between the accounts involved in each type of data, reflects the privacy of each type of data, and then comprehensively obtains the encryption strength required for each type of data based on the danger level and privacy of each type of data, so that encryption measures can be implemented more targetedly, thereby improving data security and preventing data leakage;

[0033] Furthermore, the chaos degree of the ciphertext after each chaotic mapping function is used to encrypt each type of data is analyzed, and combined with the encryption strength required for each type of data, the optimal chaotic mapping function for encrypting each type of data is selected. By evaluating the chaos degree and difference of the data before and after encryption by the chaotic mapping function, the encryption effect of the chaotic mapping function on the data can be more accurately determined, and then according to the encryption effect and the encryption strength required by the data, a suitable chaotic mapping function can be selected. According to the actual encryption requirements of the data, the data can be encrypted in a targeted manner to achieve secure data transmission, saving computer resources while ensuring the encryption strength. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions and advantages in the embodiments of the present application or the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0035] Figure 1 A flowchart of a method for secure data transmission for an account management system provided in accordance with an embodiment of the present application;

[0036] Figure 2 Schematic diagram of the process of obtaining the degree of confusion. DETAILED DESCRIPTION

[0037] In the description of the embodiments of the present application, words such as "exemplary", "or", "for example" and the like are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary", "or", "for example" and the like is intended to present related concepts in a concrete manner.

[0038] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art in the present application. The terms used in the present application are only for the purpose of describing specific embodiments and are not intended to limit the present application. It should be understood that, unless otherwise specified, " / " means or.

[0039] It should also be noted that the terms "first" and "second" in the present application are used to distinguish similar objects rather than to describe a specific order or sequence.

[0040] The specific scheme of the data security transmission method and device for the account management system provided by the present application is described in detail below with reference to the accompanying drawings.

[0041] See also Figure 1 , which shows a flowchart of a data security transmission method for an account management system provided by an embodiment of the present application, the method comprising the following steps:

[0042] Step 1: Obtain various types of data in the account management system and the number of attacks on each type of data.

[0043] There are generally multiple data modules in an account management system, such as user payment data module, account activity log module, account status management module, and user communication information module. The functions of each data module are as follows:

[0044] User payment data module: used to manage the user's payment account, record each payment operation of the user, etc.;

[0045] Account activity log module: used to record the activity history of user accounts, such as login time, login IP, operation records, etc.;

[0046] Account status management module: used to track the status of an account, such as activated, locked, disabled, or logged out;

[0047] User communication information module: used for user feedback function, private message function, etc.

[0048] The information of each data module is stored in the database of the account management system. The data involved in each data module is the same type of data, and the data involved in different data modules are different types of data. Since the types of user information are relatively complex, the data of different data modules are stored in different databases, or in different lists in the same database.

[0049] The data of each data module is obtained from the database of the account management system, and the number of attacks on the data of each data module is obtained according to the log information.

[0050] Step 2: Analyze the security and privacy of various types of data, and then determine the encryption strength required for each type of data when encrypting it. Further, combine the degree of confusion of the ciphertext after encrypting each type of data with each chaotic mapping function, and select the optimal chaotic mapping function for encrypting each type of data.

[0051] Since different chaotic mapping functions have different complexities after encrypting data, and different types of data in account information have different privacy levels and are attacked to different degrees, different types of data require different encryption strengths. This application analyzes the encryption strength required for each type of data based on the interaction of data in each data module and the number of times the data is attacked, and further determines the optimal chaotic mapping function for encrypting each type of data based on the encryption strength to achieve secure data transmission.

[0052] Step 2.1, determining the danger level of each type of data based on the data volume of each type of data and the number of attacks.

[0053] Account information contains various types of user information. Different types of data have different privacy and different possibilities of being attacked. Generally speaking, the greater the possibility of data being attacked, the easier it is to leak, and security needs to be improved accordingly. At the same time, since different types of data have different user bodies, the larger the amount of a certain type of data, the larger the user group involved in the data, the higher the possibility that the data is important data, and the more information is likely to be exposed when the data is leaked, so its security also needs to be improved.

[0054] Based on the above analysis, the danger level of each type of data is determined according to the amount of data and the number of attacks on each type of data. The expression is:

[0055] o v =n v ×Data v ; In the formula, o v Indicates the danger level of category v data; n v Indicates the number of attacks on the vth type of data; Data v Indicates the amount of data of the vth category.

[0056] It should be noted that: the larger the data volume of the v-th category data is and the more times it is attacked, the greater the danger level of the v-th category data is, and the more it is necessary to improve the security of the v-th category data.

[0057] Step 2.2, based on the interaction of accounts involved in any type of data with respect to the any type of data, determine the interaction value of the any type of data.

[0058] In account management, since the flow of funds is often of greater concern to users, the more accounts involved in various types of data and the larger the group of interacting accounts, the more information the data in each module involves, and the more important the privacy of the data in each module is.

[0059] Based on the interaction of accounts involved in any type of data with respect to the data, the interaction value of the data is determined, and the expression is:

[0060] In the formula, p v represents the interaction value of the vth type of data; N v Indicates the total number of accounts involved in the v-th category of data; Get the ith account involved in the v-th category of data, n1 i M represents the number of accounts that interact with the i-th account with the v-th type of data; v Indicates the number of accounts with type v data interaction.

[0061] It should be noted that the more accounts involved in the v-type data, and the higher the proportion of accounts with interactive behaviors among these accounts, the higher the proportion of accounts with interactive behaviors. The larger the value is, the larger the group of accounts with interactive behaviors is, and the larger the calculated interaction value is, which means that the privacy of the vth category of data is more important.

[0062] Step 2.3, combining the danger level and interaction value of each type of data to obtain the encryption strength value of each type of data.

[0063] Combining the danger level and interaction value of each type of data, the encryption strength value of each type of data is obtained, and the expression is:

[0064] o′ v =p v ×(1+norm(o v )); where o′ v Indicates the encryption strength value of the vth type of data; p v represents the interaction value of the vth class of data; norm() represents the normalization function; o v Indicates the danger level of Category V data.

[0065] In this embodiment, the normalization function is a softmax activation function. As other implementation methods, on the basis of being able to realize normalization of the danger level, the implementer may adopt other existing technologies to normalize the danger level, such as the Min-Max normalization method, the decimal calibration normalization method, etc., and this application does not impose any special restrictions.

[0066] It should be noted that: when the security level required for the vth category data is higher and the privacy is more important, the encryption strength required for the vth category data is greater, that is, the encryption strength value is greater.

[0067] Step 2.4, preselect multiple chaotic mapping functions, and determine the degree of chaos of the ciphertext after each chaotic mapping function encrypts any type of data based on the difference between the data chaos conditions before and after each chaotic mapping function encrypts any type of data, and the difference between the data before and after encryption.

[0068] When encrypting data, this embodiment only uses the three commonly used mapping functions of Logistic chaotic mapping function, Henon chaotic mapping function and Lorenz chaotic mapping function in the chaotic algorithm to encrypt data. Among them, the process of encrypting data using Logistic chaotic mapping function, Henon chaotic mapping function and Lorenz chaotic mapping function is a well-known technology, and this application will not repeat it in detail.

[0069] Since the Logistic chaotic mapping function, Henon chaotic mapping function and chaotic Lorenz mapping function in the chaotic encryption algorithm have different mathematical characteristics and dynamic behaviors, they have a significant impact on the stability and security of data encryption. Therefore, when encrypting different types of data, it is necessary to select a suitable chaotic mapping function according to the encryption strength requirements of the data. For data with greater encryption strength requirements, it is hoped that after the data is encrypted, the more obfuscation the data has, the less likely it is to be decrypted; while for data with lower encryption strength requirements, it is hoped that after the data is encrypted, the less obfuscation the data has, the less complexity of decryption.

[0070] Taking the vth type of data as an example, the Logistic chaotic mapping function, the Henon chaotic mapping function and the Lorenz chaotic mapping function are used to encrypt the vth type of data respectively to obtain the ciphertext of the vth type of data. The ciphertext obtained by encrypting the vth type of data with any chaotic mapping function and the plaintext of the vth type of data are arranged in the same order to form the encrypted sequence and the encrypted sequence respectively.

[0071] Based on the difference in discreteness between each pre-encryption sequence and the corresponding encrypted sequence of the v-th type of data, the initial chaos degree of the ciphertext after each chaotic mapping function encrypts the v-th type of data is determined, and the expression is:

[0072] Y u,v =(H u,v -H v )×H u,v Where, Y u,v H represents the initial chaos degree of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data; v,v H represents the discrete degree of the encrypted sequence obtained by encrypting the vth type of data with the uth chaotic mapping function; v Indicates the degree of discreteness of the sequence of the vth type of data before encryption.

[0073] In this embodiment, the degree of discreteness is information entropy. As other implementation methods, on the basis of being able to measure the degree of uneven distribution of data in the sequence after encryption and the sequence before encryption, the implementer can use other existing technologies for measurement, such as variance, standard deviation, etc., and this application does not impose any special restrictions.

[0074] It should be noted that: the greater the discreteness of the ciphertext is than that of the plaintext, and the greater the discreteness of the ciphertext itself is, the more chaotic the ciphertext obtained after the u-th chaotic mapping function encrypts the v-th type of data is, that is, the greater the initial chaos of the ciphertext of the v-th type of data is.

[0075] Furthermore, since the initial chaos degree is only determined by the discrete degree, the discrete degree can measure the overall chaos of the encrypted data, but cannot reflect the instability of the local data. Therefore, in order to evaluate the randomness of the encrypted data, the difference between the plaintext and ciphertext of the v-th type of data before and after encryption of the v-th type of data by each chaotic mapping function is combined to determine the chaos degree of the ciphertext after encryption of the v-th type of data by each chaotic mapping function. The expression is:

[0076] Y′ u,v =mean(|S u,v -S v |)×D(S u,v ,S v )×Y u,v Where, Y′ u,v represents the degree of disorder of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data; mean() represents the mean operation; S u,v represents the encrypted sequence obtained by encrypting the vth type of data with the uth chaotic mapping function; S v Represents the sequence before encryption of the vth type of data; |S u,v -S v | indicates calculation S u,v With S v The difference between the data at the same position in the image; D() represents the distance function; Y u,v It represents the initial disorder degree of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data.

[0077] In this embodiment, the difference between the data at the same position is the absolute value of the difference. As other implementation methods, on the basis of being able to measure the difference between the data at the same position, the implementer may adopt other calculation methods, such as ratio, square of difference, etc., and this application does not impose any special restrictions.

[0078] In this embodiment, the distance between the encrypted sequence and the pre-encrypted sequence is the DTW (Dynamic TimeWarping) distance. As other implementation methods, on the basis of being able to measure the distance between the encrypted sequence and the pre-encrypted sequence, the implementer may use other existing technologies to measure the distance between the encrypted sequence and the pre-encrypted sequence, such as Euclidean distance, Manhattan distance, etc., and this application does not impose any special restrictions.

[0079] It should be noted that the greater the difference between the plaintext and the ciphertext before and after encryption, and the greater the initial chaos of the ciphertext, the greater the chaos of the ciphertext obtained by encrypting the vth type of data with the uth chaotic mapping function. Figure 2 shown.

[0080] Step 2.5, based on the encryption strength value and the degree of disorder of the ciphertext after each chaotic mapping function encrypts each type of data, the optimal chaotic mapping function for encrypting each type of data is selected from the multiple chaotic mapping functions to securely transmit each type of data.

[0081] For each type of data, the larger the encryption strength value of the data, the greater the degree of confusion of the ciphertext obtained after encrypting such data; the smaller the encryption strength value of the data, the smaller the degree of confusion of the ciphertext obtained after encrypting such data.

[0082] Based on the above analysis, the optimal chaotic mapping function for encrypting various types of data is determined, and the expression is:

[0083] In the formula, max() represents the maximum value operation; min() represents the minimum value operation; Y u ′ ,v It indicates the degree of disorder of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data; u indicates the serial number of the chaotic mapping function. At this time, the order of multiple chaotic mapping functions can be arranged arbitrarily, because this stage is only testing the encryption effect of the chaotic mapping function on the data; norm() indicates the normalization function; o v ′ represents the encryption strength value of the vth category of data; T represents the preset threshold.

[0084] In this embodiment, the normalization function is a softmax activation function. As other implementation methods, on the basis of being able to realize normalization of the encryption strength value, the implementer may adopt other existing technologies to normalize the encryption strength value, such as the Min-Max normalization method, the decimal calibration normalization method, etc., and this application does not impose any special restrictions.

[0085] In this embodiment, the value of the preset threshold is 0.7. The value of the preset threshold is preset manually and the implementer can set it according to the actual situation. This application does not impose any special restrictions.

[0086] It should be noted that: when the encryption strength value of the vth category data is greater than the preset threshold, the chaotic mapping function corresponding to the maximum chaos degree is needed to encrypt the vth category data; otherwise, the chaotic mapping function corresponding to the minimum chaos degree is used to encrypt the vth category data.

[0087] Furthermore, for a group of data to be transmitted, if it contains multiple types of data, it is necessary to determine the key for encrypting the group of data to be transmitted. The specific steps are as follows:

[0088] (1) for a group of data to be transmitted, identifying different types of the data to be transmitted, and segmenting the data to be transmitted according to the data types to obtain data segments, and numbering the data segments;

[0089] (2) Determine the optimal chaotic mapping function for encrypting each data segment according to the data type;

[0090] (3) The serial number of each data segment and its corresponding optimal chaotic mapping function are stored in each key-value pair respectively, and all key-value pairs are combined into an encryption key in the order of serial numbers.

[0091] For example, if the chaotic mapping function used to encrypt the first data segment data1 is the Logistic chaotic mapping function; the chaotic mapping function used to encrypt the second data segment data2 is the Henon chaotic mapping function; the chaotic mapping function used to encrypt the nth data segment datan is the Lorenz chaotic mapping function;

[0092] The expression of the key-value pair is (key-value), where key represents the number of the data segment and value represents the name of the optimal chaotic mapping function corresponding to the data segment; then the encryption key is {(data1-Logistic), (data2-Henon),…, (datan-Lorenz)}.

[0093] Each data segment is encrypted according to the optimal chaotic mapping function corresponding to each data segment, and all the encrypted data segments are spliced ​​together in the order of numbers to achieve the secure transmission of this group of data to be transmitted. After the data transmission is successful, the key is used for decryption.

[0094] Based on the same inventive concept as the above method, an embodiment of the present application also provides a data security transmission device for an account management system, including a memory, a processor, and a computer program stored in the memory and running on the processor. When the processor executes the computer program, the steps of any one of the above-mentioned data security transmission methods for account management systems are implemented.

[0095] In summary, this application determines the danger level of each type of data based on the amount of data and the number of attacks received; determines the interaction value of each type of data based on the interaction between the accounts involved in each type of data, reflects the privacy of each type of data, and then comprehensively obtains the encryption strength required for each type of data according to the danger level and privacy of each type of data, so that encryption measures can be implemented more targetedly, thereby improving data security and preventing data leakage;

[0096] Furthermore, the chaos degree of the ciphertext after each chaotic mapping function is used to encrypt each type of data is analyzed, and combined with the encryption strength required for each type of data, the optimal chaotic mapping function for encrypting each type of data is selected. By evaluating the chaos degree and difference of the data before and after encryption by the chaotic mapping function, the encryption effect of the chaotic mapping function on the data can be more accurately determined, and then according to the encryption effect and the encryption strength required by the data, a suitable chaotic mapping function can be selected. According to the actual encryption requirements of the data, the data can be encrypted in a targeted manner to achieve secure data transmission, saving computer resources while ensuring the encryption strength.

[0097] The flowchart and block diagram in the accompanying drawings show the possible architecture, function and operation of the system, method and computer program product according to the embodiment of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of the code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. In some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, which can depend on the functions involved. In the description corresponding to the flowchart and the block diagram in the accompanying drawings, the operations or steps corresponding to different boxes can also occur in a different order from the order disclosed in the description, and sometimes there is no specific order between different operations or steps. For example, two consecutive operations or steps can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, which can depend on the functions involved. Each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, may be implemented by a dedicated hardware-based system that performs the specified functions or actions, or may be implemented by a combination of dedicated hardware and computer instructions.

[0098] It is obvious to those skilled in the art that the present application is not limited to the details of the above exemplary embodiments, and that the present application can be implemented in other specific forms without departing from the basic features of the present application. Therefore, no matter from which point of view, the above embodiments of the present application should be regarded as exemplary and non-restrictive.

Claims

1. A data security transmission method for an account management system, characterized in that: The method comprises the following steps: Obtain various types of data in the account management system and the number of attacks on each type of data; Determine the danger level of each type of data based on the amount of data of each type and the number of attacks; Determine the interaction value of any type of data based on the interaction of accounts involved in any type of data with respect to the any type of data; Combining the danger level and interaction value of each type of data, the encryption strength value of each type of data is obtained; Preselecting a plurality of chaotic mapping functions, and determining the degree of disorder of the ciphertext after each chaotic mapping function encrypts the any type of data based on the difference between the disorder of the data before and after each chaotic mapping function encrypts the any type of data, and the difference between the data before and after encryption; Based on the encryption strength value and the disorder degree of the ciphertext after each chaotic mapping function encrypts each type of data, the optimal chaotic mapping function for encrypting each type of data is selected from the multiple chaotic mapping functions to transmit each type of data securely.

2. The data security transmission method for an account management system according to claim 1, characterized in that: The danger level is a fusion result of the data volume of each type of data and the number of attacks.

3. The data security transmission method for an account management system according to claim 1, characterized in that: The expression of the interaction value is: In the formula, p v represents the interaction value of the vth type of data; N v Indicates the total number of accounts involved in the v-th category of data; Get the ith account involved in the v-th category of data, n1 i M represents the number of accounts that interact with the i-th account with the v-th type of data; v Indicates the number of accounts with type v data interaction.

4. The data security transmission method for an account management system according to claim 1, characterized in that: The encryption strength value is positively correlated with the danger level and interaction value of each type of data.

5. The data security transmission method for an account management system according to claim 1, characterized in that: The process of determining the degree of chaos is as follows: Based on the difference between the data chaos conditions before and after each chaotic mapping function encrypts the data of any type, determine the initial chaos degree of the ciphertext after each chaotic mapping function encrypts the data of any type; Arrange the data before and after each chaotic mapping function encrypts any type of data in the same order to form each pre-encryption sequence and each post-encryption sequence; The difference of the data at the same position between each pre-encryption sequence and its corresponding post-encryption sequence is recorded as the data difference; Calculate the distance between each pre-encryption sequence and its corresponding post-encryption sequence; The chaos degree is positively correlated with the initial chaos degree and the distance, and is also positively correlated with all the data differences corresponding to each chaotic mapping function.

6. The data security transmission method for an account management system according to claim 5, characterized in that: The process of determining the initial disorder is: The difference in the degree of discreteness between each sequence before encryption and its corresponding sequence after encryption is recorded as discrete difference; The initial chaos degree is positively correlated with the discrete degree of each encrypted sequence and the discrete difference.

7. The data security transmission method for an account management system according to claim 5, characterized in that: The expression of the degree of chaos is: Y′ u,v =mean(|S u,v -S v |)×D(S u,v ,S v )×Y u,v Where, Y′ u,v represents the degree of disorder of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data; mean() represents the mean operation; S u,v represents the encrypted sequence obtained by encrypting the vth type of data with the uth chaotic mapping function; S v Represents the sequence before encryption of the vth type of data; |S u,v -S v | indicates calculation S u,v With S v The difference between the data at the same position in the image; D() represents the distance function; Y u,v It represents the initial disorder degree of the ciphertext after the u-th chaotic mapping function encrypts the v-th type of data.

8. The data security transmission method for an account management system according to claim 1, characterized in that: The method for selecting the optimal chaotic mapping function when encrypting various types of data is as follows: When the encryption strength value of any type of data is greater than or equal to a preset threshold, the chaotic mapping function corresponding to the maximum value of the ciphertext disorder degree after encrypting any type of data is selected as the optimal chaotic mapping function when encrypting any type of data; otherwise, the chaotic mapping function corresponding to the minimum value of the ciphertext disorder degree is selected.

9. The data security transmission method for an account management system according to claim 1, characterized in that: When transmitting a group of data to be transmitted containing multiple types of data, the data to be transmitted is divided into data segments according to the data type and numbered. The number of each data segment and its corresponding optimal chaotic mapping function are respectively stored in each key-value pair, and all key-value pairs are composed of encryption keys in the order of numbers. When the data to be transmitted is successfully transmitted, it is decrypted according to the key.

10. A data security transmission device for an account management system, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the computer program, the steps of the method for secure data transmission for an account management system as described in any one of claims 1 to 9 are implemented.

Citation Information

Patent Citations

  • Transaction data encryption and decryption method and device and equipment

    CN111798236A

  • Police and tax joint analysis method based on privacy calculation

    CN115587897A