Encryption method and system for security protection of operation data of platform in enterprise

Abstract

The embodiment of the invention provides an encryption method and system for security protection of operating data in an enterprise, and belongs to the technical field of information transmission of a power grid system. The encryption method comprises the following steps: acquiring a to-be-encrypted data message; determining an identity code of the data message, and adding a part of the identity code into the data message to obtain a to-be-encrypted message; performing a first encryption operation on the to-be-encrypted message; intercepting a part of messages in the data messages; combining a part of intercepted telegraph text with the identity code to obtain an identity telegraph text; second encryption operation is carried out on the identity message, and the complexity of the first encryption operation is lower than that of the second encryption operation; combining results of the first encryption operation and the second encryption operation to obtain an encrypted data packet; receiving the encrypted data packet; obtaining a result of a first encryption operation in the encrypted data packet; and performing a first decryption operation on a result of the first encryption operation.

Description

Technical Field

[0001] The present invention relates to the technical field of information transmission of power grid systems, and in particular to an encryption method and system for secure protection of enterprise middle-end operation data. Background Art

[0002] The power grid data within the power grid enterprise needs to ensure the confidentiality of the information and the relevance to the system where the information is located. If the information is leaked, as long as the power grid data and the corresponding system information are not leaked at the same time, there will be no major information leakage accident. Traditional encryption algorithms often encrypt the identity information and the message itself together, which will lead to a major leakage accident once the information is leaked. Summary of the invention

[0003] The purpose of the embodiments of the present invention is to provide an encryption method and system for the security protection of enterprise middle-end operation data, which can improve the security of power grid enterprise middle-end data.

[0004] In order to achieve the above purpose, an embodiment of the present invention provides an encryption method for security protection of enterprise middle-end operation data, including:

[0005] Obtaining the data message to be encrypted;

[0006] Determining the identity code of the data message, and adding a part of the identity code to the data message to obtain the message to be encrypted;

[0007] Performing a first encryption operation on the electronic message to be encrypted;

[0008] intercepting a portion of the data message;

[0009] combining the intercepted portion of the electronic message with the identity code to obtain an identity electronic message;

[0010] Performing a second encryption operation on the identity electronic message, wherein the complexity of the first encryption operation is lower than that of the second encryption operation;

[0011] combining the results of the first encryption operation and the second encryption operation to obtain an encrypted data packet;

[0012] Receiving the encrypted data packet;

[0013] Obtaining a result of a first encryption operation in the encrypted data packet;

[0014] performing a first decryption operation on the result of the first encryption operation;

[0015] Obtaining a result of a second encryption operation in the encrypted data packet;

[0016] performing a second decryption operation on the result of the second encryption operation;

[0017] Obtaining an identity code in a result of the first decryption operation and an identity code in a result of the second decryption operation;

[0018] Determining whether the two identity codes match;

[0019] When it is determined that the two identity codes match, searching the intercepted portion of the message in the data message to determine whether the data message is incorrect;

[0020] When it is determined that the data message is correct, the transmission is determined to be successful.

[0021] Optionally, the encryption method includes:

[0022] Randomly generate different prime numbers p and q;

[0023] Calculate the modulus of prime numbers p and q;

[0024] Calculate the corresponding Euler function value according to the prime number p and the prime number q;

[0025] Determine the encryption index;

[0026] Calculate a decryption index based on the encryption index;

[0027] Encapsulating the modulus, the function corresponding to the modulus, and the encryption exponent into a public key for the first encryption operation;

[0028] The modulus, the function corresponding to the modulus, the Euler function value, and the decryption exponent are encapsulated as a private key for the first encryption operation.

[0029] Optionally, computing the modulus of the prime number p and the prime number q comprises:

[0030] The modulus is calculated according to formula (1),

[0031] n=p×q, (1)

[0032] Wherein, n is the modulus.

[0033] Optionally, calculating a corresponding Euler function value according to the prime number p and the prime number q includes:

[0034] The Euler function value is calculated according to formula (2):

[0035]

[0036] in, is the value of the Euler function.

[0037] Optionally, calculating a decryption index according to the encryption index includes:

[0038] The decryption index is searched according to the following formula (3):

[0039]

[0040] in, is the value of the Euler function, e is the encryption exponent, and Z represents a set of integers.

[0041] Optionally, the encryption method includes:

[0042] Initialize to generate an integer value and dimension;

[0043] Generate a random matrix based on the discrete Gaussian distribution method according to the integer value and the dimension;

[0044] Randomly selecting a short vector in the random matrix;

[0045] Calculate a base public key according to the selected short vector and the random matrix;

[0046] Using the selected short vector as the private key for the second decryption operation;

[0047] Performing a second encryption operation on the identity electronic message includes:

[0048] Randomly select a random vector from the random matrix;

[0049] Identify quantifiable parameters;

[0050] Perform the second encryption operation according to the random vector, the basic public key and the quantifiable parameter;

[0051] Performing a second decryption operation on the result of the second encryption operation includes:

[0052] The result of the second decryption operation is determined based on the private key of the second decryption operation, the result of the second encryption operation, and the quantifiable parameter.

[0053] Optionally, calculating a basic public key according to the selected short vector and the random matrix includes:

[0054] Determine the basic public key according to formula (4):

[0055] u=A*v, (4)

[0056] Wherein, u is the basic public key, v is the selected short vector, and A is the random matrix.

[0057] Optionally, performing the second encryption operation according to the random vector, the basic public key, and the quantifiable parameter includes:

[0058] The second encryption operation is performed according to formula (5):

[0059] c=u+e+m*q, (5)

[0060] Among them, c is the result of the second encryption operation, e is the random vector, m is the data message, and q is the quantifiable parameter.

[0061] Optionally, determining the result of the second decryption operation according to the private key of the second decryption operation, the result of the second encryption operation, and the quantifiable parameter includes:

[0062] The second decryption operation is performed according to formula (6):

[0063] cA*v=e+m*q, (6).

[0064] On the other hand, the present invention also provides an encryption system for enterprise middle-office operation data security protection, the encryption system includes a processor, and the processor is configured to execute any encryption method as described above.

[0065] Through the above technical solution, the embodiment of the present invention provides an encryption method and system for enterprise operation data security protection. The encryption method and system encrypts the transmission message and identity information by using different encryption methods respectively. At the same time, in order to ensure the relevance of the transmission message and the identity information, the identity information and the transmission message are cross-encrypted when using different encryption methods. Compared with the prior art, the encryption method and system provided by the present invention improves the security of encrypted information due to the use of an improved double encryption method.

[0066] Other features and advantages of the embodiments of the present invention will be described in detail in the subsequent detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0067] The accompanying drawings are used to provide a further understanding of the embodiments of the present invention and constitute a part of the specification. Together with the following specific implementations, they are used to explain the embodiments of the present invention, but do not constitute a limitation on the embodiments of the present invention. In the accompanying drawings:

[0068] Figure 1 is a flow chart of an encryption method for enterprise operation data security protection according to an embodiment of the present invention;

[0069] Figure 2 is a flowchart of a method for obtaining a public key and a private key for a first encryption operation and a first decryption operation according to an embodiment of the present invention;

[0070] Figure 3 The figure is a flowchart of a method for obtaining a public key and a private key for a second encryption operation and a second decryption operation according to an embodiment of the present invention. DETAILED DESCRIPTION

[0071] The specific implementation of the embodiment of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the embodiment of the present invention, and is not used to limit the embodiment of the present invention.

[0072] It should be noted that the acquisition, transmission, storage, use, and processing of data in the technical solution of this application are in compliance with the relevant provisions of national laws and regulations. In the embodiments of this application, some existing solutions in the industry such as certain software, components, and models may be mentioned, which should be considered as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of this application, but it does not mean that the applicant has or will necessarily use the solution.

[0073] like Figure 1 The figure is a flow chart of an encryption method for enterprise operation data security protection according to one embodiment of the present invention. Figure 1 In the encryption method, the encryption method may include the following steps:

[0074] In step S10, the data message to be encrypted is obtained;

[0075] In step S11, the identity code of the data message is determined, and a part of the identity code is added to the data message to obtain the message to be encrypted;

[0076] In step S12, a first encryption operation is performed on the electronic message to be encrypted;

[0077] In step S13, a portion of the data message is intercepted;

[0078] In step S14, the intercepted part of the message and the identity code are combined to obtain the identity message;

[0079] In step S15, a second encryption operation is performed on the identity electronic message, wherein the complexity of the first encryption operation is lower than that of the second encryption operation;

[0080] In step S16, the results of the first encryption operation and the second encryption operation are combined to obtain an encrypted data packet;

[0081] In step S17, receiving an encrypted data packet;

[0082] In step S18, the result of the first encryption operation in the encrypted data packet is obtained;

[0083] In step S19, a first decryption operation is performed on the result of the first encryption operation;

[0084] In step S20, the result of the second encryption operation in the encrypted data packet is obtained;

[0085] In step S21, a second decryption operation is performed on the result of the second encryption operation;

[0086] In step S22, the identity code in the result of the first decryption operation and the identity code in the result of the second decryption operation are obtained;

[0087] In step S23, it is determined whether the two identity codes match;

[0088] In step S24, when it is determined that the two identity codes match, a portion of the intercepted message is searched in the data message to determine whether the data message is incorrect. Otherwise, the transmission is wrong and needs to be retransmitted;

[0089] In step S25, if it is determined that the data message is correct, the transmission is determined to be successful. Otherwise, the transmission is wrong and needs to be retransmitted.

[0090] In this Figure 1 In the method shown, step S10 can be used to obtain the data message to be encrypted. Among them, the data message can be statistical data or status data used by various information systems to report information to the middle station. Since both statistical data and status data are strongly related to the information system, whether it is statistical data, status data or the information system itself, if there is only a single leak, the party obtaining the information cannot obtain any valid message. Therefore, in order to improve the security of the data message, in this embodiment, the first encryption operation and the second encryption operation can be used for encryption respectively, thereby improving the security of data transmission.

[0091] Step S11 can be used to determine the identity code of the data message and add a part of the identity code to the data message to obtain the message to be encrypted. The identity code can be the number or code of the information system from which the data message comes. The part of the identity code can be, for example, a section of the identity code.

[0092] Step S12 can be used to perform the first encryption operation on the encrypted message, thereby completing the encryption of the data message part. Similarly, steps S13 to S15 can be used to encrypt the identity code part. Among them, considering that the length of the encrypted message is generally long, it is not appropriate to use an encryption algorithm with high complexity, otherwise it will affect the performance of the system. The identity code is generally short, so an encryption algorithm with high complexity and high security can be used to improve security. Therefore, the complexity of the second encryption operation can be higher than the complexity of the first encryption algorithm.

[0093] After completing the encryption algorithm, the encryption method can further decrypt the data message part through steps S16 to S19, and decrypt the identity code part through steps S20 to S22. Finally, considering that before encryption, the encryption method mixes and superimposes the data message and the identity code part information, in order to verify the association between the two, the association can also be verified through steps S23 to S25.

[0094] In this implementation, the specific process of the first encryption operation and the first decryption operation may be in various forms known to those skilled in the art. Figure 2 The method shown in the figure obtains the public key and private key of the first encryption operation and the first decryption operation. Specifically, in the Figure 2 The method for obtaining the public key and the private key of the first encryption operation and the first decryption operation may include the following steps:

[0095] In step S30, different prime numbers p and q are randomly generated;

[0096] In step S31, the modulus of prime number p and prime number q is calculated. Specifically, the modulus can be calculated using the following formula (1):

[0097] n=p×q, (1)

[0098] Where n is the modulus.

[0099] In step S32, the corresponding Euler function value is calculated according to the prime number p and the prime number q. Specifically, the Euler function value can be calculated using the following formula (2):

[0100]

[0101] in, is the value of Euler function.

[0102] In step S33, an encryption index is determined;

[0103] In step S34, the decryption index is calculated according to the encryption index. The decryption index can be obtained by searching using the following formula (3):

[0104]

[0105] in, is the value of Euler function, e is the encryption exponent, and Z represents the set of integers.

[0106] In step S35, the modulus, the function corresponding to the modulus, and the encryption exponent are encapsulated as a public key of a first encryption operation;

[0107] In step S36, the modulus, the function corresponding to the modulus, the Euler function value, and the decryption exponent are encapsulated as a private key for the first encryption operation.

[0108] In this implementation, the specific process of the second encryption operation and the second decryption operation may be in various forms known to those skilled in the art. Figure 3 The method shown in is used to obtain the public key and private key of the second encryption operation and the second decryption operation. Specifically, the Figure 3 In the method of obtaining the public key and the private key of the second encryption operation and the second decryption operation may include the following steps:

[0109] In step S40, an integer value and dimension are generated by initialization;

[0110] In step S41, a random matrix is ​​generated based on a discrete Gaussian distribution method according to the integer value and the dimension;

[0111] In step S42, a short vector is randomly selected in the random matrix;

[0112] In step S43, the basic public key is calculated based on the selected short vector and the random matrix. Specifically, the basic public key can also be calculated using the following formula (4):

[0113] u=A*u, (4)

[0114] Among them, u is the basic public key, v is the selected short vector, and A is the random matrix.

[0115] In step S44, the selected short vector is used as a private key for the second decryption operation.

[0116] Based on this Figure 3The public key and private key obtained by the method shown, the second encryption operation performed in step S15 can be to first randomly select a random vector from the random matrix, then determine the quantifiable parameter, and finally perform the second encryption operation according to the random vector, the basic public key and the quantifiable parameter. Furthermore, the second encryption operation can be performed using the following formula (5),

[0117] c=u+e+m*q, (5)

[0118] Wherein, c is the result of the second encryption operation, e is the random vector, m is the data message, and q is the quantifiable parameter.

[0119] Similarly, the decryption operation of step S21 may determine the result of the second decryption operation according to the private key of the second decryption operation, the result of the second encryption operation and the quantifiable parameter. Furthermore, the second decryption operation may also be performed using the following formula (6):

[0120] cA*v=e+m*q, (6).

[0121] On the other hand, the present invention also provides an encryption system for enterprise mid-stage operation data security protection, the encryption system includes a processor, the processor is configured to execute any of the encryption methods described above. Specifically, the encryption method may include the following steps:

[0122] In step S10, the data message to be encrypted is obtained;

[0123] In step S11, the identity code of the data message is determined, and a part of the identity code is added to the data message to obtain the message to be encrypted;

[0124] In step S12, a first encryption operation is performed on the electronic message to be encrypted;

[0125] In step S13, a portion of the data message is intercepted;

[0126] In step S14, the intercepted part of the message and the identity code are combined to obtain the identity message;

[0127] In step S15, a second encryption operation is performed on the identity electronic message, wherein the complexity of the first encryption operation is lower than that of the second encryption operation;

[0128] In step S16, the results of the first encryption operation and the second encryption operation are combined to obtain an encrypted data packet;

[0129] In step S17, receiving an encrypted data packet;

[0130] In step S18, the result of the first encryption operation in the encrypted data packet is obtained;

[0131] In step S19, a first decryption operation is performed on the result of the first encryption operation;

[0132] In step S20, the result of the second encryption operation in the encrypted data packet is obtained;

[0133] In step S21, a second decryption operation is performed on the result of the second encryption operation;

[0134] In step S22, the identity code in the result of the first decryption operation and the identity code in the result of the second decryption operation are obtained;

[0135] In step S23, it is determined whether the two identity codes match;

[0136] In step S24, when it is determined that the two identity codes match, a portion of the intercepted message is searched in the data message to determine whether the data message is incorrect. Otherwise, the transmission is wrong and needs to be retransmitted;

[0137] In step S25, if it is determined that the data message is correct, the transmission is determined to be successful. Otherwise, the transmission is wrong and needs to be retransmitted.

[0138] In this Figure 1 In the method shown, step S10 can be used to obtain the data message to be encrypted. Among them, the data message can be statistical data or status data used by various information systems to report information to the middle station. Since both statistical data and status data are strongly related to the information system, whether it is statistical data, status data or the information system itself, if there is only a single leak, the party obtaining the information cannot obtain any valid message. Therefore, in order to improve the security of the data message, in this embodiment, the first encryption operation and the second encryption operation can be used for encryption respectively, thereby improving the security of data transmission.

[0139] Step S11 can be used to determine the identity code of the data message and add a part of the identity code to the data message to obtain the message to be encrypted. The identity code can be the number or code of the information system from which the data message comes. The part of the identity code can be, for example, a section of the identity code.

[0140] Step S12 can be used to perform the first encryption operation on the encrypted message, thereby completing the encryption of the data message part. Similarly, steps S13 to S15 can be used to encrypt the identity code part. Among them, considering that the length of the encrypted message is generally long, it is not appropriate to use an encryption algorithm with high complexity, otherwise it will affect the performance of the system. The identity code is generally short, so an encryption algorithm with high complexity and high security can be used to improve security. Therefore, the complexity of the second encryption operation can be higher than the complexity of the first encryption algorithm.

[0141] After completing the encryption algorithm, the encryption method can further decrypt the data message part through steps S16 to S19, and decrypt the identity code part through steps S20 to S22. Finally, considering that before encryption, the encryption method mixes and superimposes the data message and the identity code part information, in order to verify the association between the two, the association can also be verified through steps S23 to S25.

[0142] In this implementation, the specific process of the first encryption operation and the first decryption operation may be in various forms known to those skilled in the art. Figure 2 The method shown in the figure obtains the public key and private key of the first encryption operation and the first decryption operation. Specifically, in the Figure 2 The method for obtaining the public key and the private key of the first encryption operation and the first decryption operation may include the following steps:

[0143] In step S30, different prime numbers p and q are randomly generated;

[0144] In step S31, the modulus of prime number p and prime number q is calculated. Specifically, the modulus can be calculated using the following formula (1):

[0145] n=p×q, (1)

[0146] Where n is the modulus.

[0147] In step S32, the corresponding Euler function value is calculated according to the prime number p and the prime number q. Specifically, the Euler function value can be calculated using the following formula (2):

[0148]

[0149] in, is the value of Euler function.

[0150] In step S33, an encryption index is determined;

[0151] In step S34, the decryption index is calculated according to the encryption index. The decryption index can be obtained by searching using the following formula (3):

[0152]

[0153] in, is the value of Euler function, e is the encryption exponent, and Z represents the set of integers.

[0154] In step S35, the modulus, the function corresponding to the modulus, and the encryption exponent are encapsulated as a public key of a first encryption operation;

[0155] In step S36, the modulus, the function corresponding to the modulus, the Euler function value, and the decryption exponent are encapsulated as a private key for the first encryption operation.

[0156] In this implementation, the specific process of the second encryption operation and the second decryption operation may be in various forms known to those skilled in the art. Figure 3 The method shown in is used to obtain the public key and private key of the second encryption operation and the second decryption operation. Specifically, the Figure 3 In the method of obtaining the public key and the private key of the second encryption operation and the second decryption operation may include the following steps:

[0157] In step S40, an integer value and dimension are generated by initialization;

[0158] In step S41, a random matrix is ​​generated based on a discrete Gaussian distribution method according to the integer value and the dimension;

[0159] In step S42, a short vector is randomly selected in the random matrix;

[0160] In step S43, the basic public key is calculated based on the selected short vector and the random matrix. Specifically, the basic public key can also be calculated using the following formula (4):

[0161] u=A*v, (4)

[0162] Among them, u is the basic public key, v is the selected short vector, and A is the random matrix.

[0163] In step S44, the selected short vector is used as a private key for the second decryption operation.

[0164] Based on this Figure 3The public key and private key obtained by the method shown, the second encryption operation performed in step S15 can be to first randomly select a random vector from the random matrix, then determine the quantifiable parameter, and finally perform the second encryption operation according to the random vector, the basic public key and the quantifiable parameter. Furthermore, the second encryption operation can be performed using the following formula (5),

[0165] c=u+e+m*q, (5)

[0166] Wherein, c is the result of the second encryption operation, e is the random vector, m is the data message, and q is the quantifiable parameter.

[0167] Similarly, the decryption operation of step S21 may determine the result of the second decryption operation according to the private key of the second decryption operation, the result of the second encryption operation and the quantifiable parameter. Furthermore, the second decryption operation may also be performed using the following formula (6):

[0168] cA*v=e+m*q, (6).

[0169] Through the above technical solution, the embodiment of the present invention provides an encryption method and system for enterprise operation data security protection. The encryption method and system encrypts the transmission message and identity information by using different encryption methods respectively. At the same time, in order to ensure the relevance of the transmission message and the identity information, the identity information and the transmission message are cross-encrypted when using different encryption methods. Compared with the prior art, the encryption method and system provided by the present invention improves the security of encrypted information due to the use of an improved double encryption method.

[0170] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0171] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0172] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0173] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0174] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0175] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0176] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0177] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0178] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. An encryption method for enterprise mid-term operation data security protection, characterized in that: The encryption method comprises: Obtaining the data message to be encrypted; Determining the identity code of the data message, and adding a part of the identity code to the data message to obtain the message to be encrypted; Performing a first encryption operation on the electronic message to be encrypted; intercepting a portion of the data message; combining the intercepted portion of the electronic message with the identity code to obtain an identity electronic message; Performing a second encryption operation on the identity electronic message, wherein the complexity of the first encryption operation is lower than that of the second encryption operation; combining the results of the first encryption operation and the second encryption operation to obtain an encrypted data packet; Receiving the encrypted data packet; Obtaining a result of a first encryption operation in the encrypted data packet; performing a first decryption operation on the result of the first encryption operation; Obtaining a result of a second encryption operation in the encrypted data packet; performing a second decryption operation on the result of the second encryption operation; Obtaining an identity code in a result of the first decryption operation and an identity code in a result of the second decryption operation; Determining whether the two identity codes match; When it is determined that the two identity codes match, searching the intercepted portion of the message in the data message to determine whether the data message is incorrect; When it is determined that the data message is correct, the transmission is determined to be successful.

2. The encryption method according to claim 1, characterized in that: The encryption method comprises: Randomly generate different prime numbers p and q; Calculate the modulus of prime numbers p and q; Calculate the corresponding Euler function value according to the prime number p and the prime number q; Determine the encryption index; Calculating a decryption index based on the encryption index; Encapsulating the modulus, the function corresponding to the modulus, and the encryption exponent into a public key of the first encryption operation; The modulus, the function corresponding to the modulus, the Euler function value, and the decryption exponent are encapsulated as a private key for the first encryption operation.

3. The encryption method according to claim 2, characterized in that: Calculate the modulus of prime numbers p and q, including: The modulus is calculated according to formula (1), n=p×q, (1) Wherein, n is the modulus.

4. The encryption method according to claim 2, characterized in that: Calculating the corresponding Euler function value according to the prime number p and the prime number q, including: The Euler function value is calculated according to formula (2): in, is the value of the Euler function.

5. The encryption method according to claim 2, characterized in that: Calculating a decryption index according to the encryption index includes: The decryption index is searched according to the following formula (3): in, is the value of the Euler function, e is the encryption exponent, and Z represents a set of integers.

6. The encryption method according to claim 2, characterized in that: The encryption method comprises: Initialize to generate an integer value and dimension; Generate a random matrix based on the discrete Gaussian distribution method according to the integer value and the dimension; Randomly selecting a short vector in the random matrix; Calculate a base public key according to the selected short vector and the random matrix; Using the selected short vector as the private key for the second decryption operation; Performing a second encryption operation on the identity electronic message includes: Randomly selecting a random vector from the random matrix; Identify quantifiable parameters; Perform the second encryption operation according to the random vector, the basic public key and the quantifiable parameter; Performing a second decryption operation on the result of the second encryption operation includes: The result of the second decryption operation is determined based on the private key of the second decryption operation, the result of the second encryption operation, and the quantifiable parameter.

7. The encryption method according to claim 6, characterized in that: Calculating a base public key according to the selected short vector and the random matrix includes: Determine the basic public key according to formula (4): u=A*v, (4) Wherein, u is the basic public key, v is the selected short vector, and A is the random matrix.

8. The encryption method according to claim 7, characterized in that: Performing the second encryption operation according to the random vector, the basic public key, and the quantifiable parameter includes: The second encryption operation is performed according to formula (5): c=u+e+m*q, (5) Among them, c is the result of the second encryption operation, e is the random vector, m is the data message, and q is the quantifiable parameter.

9. The encryption method according to claim 8, characterized in that: Determining a result of the second decryption operation according to the private key of the second decryption operation, the result of the second encryption operation, and the quantifiable parameter includes: The second decryption operation is performed according to formula (6): cA*v=e+m*q, (6).

10. An encryption system for enterprise mid-term operation data security protection, characterized in that: The encryption system comprises a processor, and the processor is configured to execute the encryption method according to any one of claims 1 to 9.

Images