Data encryption transmission method and device, electronic equipment and storage medium

Abstract

The embodiment of the application provides a kind of data encryption transmission method and device, electronic equipment and storage medium, belong to data encryption technical field, apply in the field of financial technology.The method comprises: obtaining original data, first encryption prime number, second encryption prime number and iteration parameter;According to the operation of first encryption prime number and second encryption prime number, obtain encryption modulus and eular modulus;Original data is encrypted based on encryption modulus, eular modulus, iteration parameter and preset encryption base, to obtain target time lock encryption data;According to preset symmetric encryption random number, preset asymmetric encryption public key, encryption modulus, encryption base and iteration parameter, target time lock encryption data is encrypted, to obtain target transmission data;Target transmission data is transmitted to data receiving end, to make data receiving end to target transmission data data decryption, to obtain original data.The embodiment of the application can ensure the security of data delay disclosure and data transmission.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data encryption, and is applicable to the field of financial technology, and particularly relates to a data encryption transmission method and device, an electronic device and a storage medium. BACKGROUND

[0002] Data transmission refers to the transmission of data from one data node to another data node. In order to ensure the security of data in transmission, the data is usually encrypted. The current data encryption method includes symmetric encryption algorithm or asymmetric encryption algorithm. These data encryption algorithms can be decrypted based on a secret key to obtain relevant transmission data in the actual application scenario of data transmission, but in some scenarios where transmission data needs to be disclosed with delay, the current data transmission method cannot be implemented. Therefore, how to ensure the security of data transmission and the delay disclosure of data has become a problem to be solved. SUMMARY

[0003] The main purpose of the embodiments of the present application is to provide a data encryption transmission method and device, an electronic device and a storage medium, which aims to ensure the security of data transmission and the delay disclosure of data.

[0004] To achieve the above-mentioned purpose, the first aspect of the embodiments of the present application provides a data encryption transmission method, which comprises:

[0005] obtaining original data, a first encryption prime number, a second encryption prime number and an iteration parameter;

[0006] performing modulus operation according to the first encryption prime number and the second encryption prime number to obtain an encryption modulus;

[0007] performing Euler operation according to the first encryption prime number and the second encryption prime number to obtain an Euler modulus;

[0008] performing time lock encryption on the original data based on the encryption modulus, the Euler modulus, the iteration parameter and a preset encryption base to obtain target time lock encryption data;

[0009] performing data encryption on the target time lock encryption data according to a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulus, the encryption base and the iteration parameter to obtain target transmission data;

[0010] transmitting the target transmission data to a data receiving end, so that the data receiving end performs data decryption on the target transmission data to obtain the original data.

[0011] In some embodiments, the time-lock encryption is performed on the original data based on the encryption modulus, the Euler modulus, the iteration parameter, and a preset encryption base, to obtain target time-lock encrypted data, including:

[0012] An iterative aggregation calculation is performed based on the iteration parameter, the Euler modulus, the encryption modulus, and the encryption base, to obtain an encrypted ciphertext;

[0013] A format conversion is performed based on the original data, to obtain original transmission data;

[0014] A summation calculation is performed on the encrypted ciphertext and the original transmission data, to obtain the target time-lock encrypted data.

[0015] In some embodiments, the data encryption is performed on the target time-lock encrypted data based on a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulus, the encryption base, and the iteration parameter, to obtain target transmission data, including:

[0016] Data encapsulation is performed based on the encryption modulus, the encryption base, the target time-lock encrypted data, and the iteration parameter, to obtain target encapsulated data;

[0017] A digital signature processing is performed on the target encapsulated data and the symmetric encryption random number based on the asymmetric encryption public key, to obtain the target transmission data.

[0018] In some embodiments, the digital signature processing is performed on the target encapsulated data and the symmetric encryption random number based on the asymmetric encryption public key, to obtain target transmission data, including:

[0019] A symmetric encryption key is generated based on the symmetric encryption random number;

[0020] A symmetric encryption is performed on the target encapsulated data based on the symmetric encryption key, to obtain target symmetric encrypted data;

[0021] A digital signature processing is performed on the symmetric encryption random number and the target symmetric encrypted data based on the asymmetric encryption public key, to obtain the target transmission data.

[0022] In some embodiments, the digital signature processing is performed on the symmetric encryption random number and the target symmetric encrypted data based on the asymmetric encryption public key, to obtain the target transmission data, including:

[0023] A hash processing is performed on the symmetric encryption random number, to obtain a symmetric random number hash value;

[0024] asymmetrically encrypting the symmetric encryption random number according to the asymmetric encryption public key to obtain symmetric random number ciphertext;

[0025] performing data encapsulation based on the symmetric random number ciphertext, the symmetric random number hash value and the target symmetric encryption data to obtain the target transmission data.

[0026] In some embodiments, the target transmission data includes the symmetric random number ciphertext, the symmetric random number hash value and the target symmetric encryption data, and the transmitting the target transmission data to the data receiving end to enable the data receiving end to perform data decryption on the target transmission data to obtain the original data includes:

[0027] transmitting the target transmission data to the data receiving end;

[0028] In the data receiving end, performing asymmetric decryption on the symmetric random number ciphertext based on a preset asymmetric encryption private key to obtain the symmetric encryption random number;

[0029] In the data receiving end, performing hash processing on the symmetric encryption random number to obtain a hash verification value;

[0030] In the data receiving end, if the hash verification value is the same as the symmetric random number hash value, performing key generation based on the symmetric encryption random number to obtain the symmetric encryption key;

[0031] In the data receiving end, performing symmetric decryption on the target symmetric encryption data based on the symmetric encryption key to obtain the target encapsulation data;

[0032] In the data receiving end, performing content decryption based on the target encapsulation data to obtain the original data.

[0033] In some embodiments, the target encapsulation data includes the encryption modulus, the encryption base, the iteration parameter and the target time lock encryption data; and the performing content decryption based on the target encapsulation data to obtain the original data in the data receiving end includes:

[0034] In the data receiving end, performing aggregation calculation based on the encryption modulus, the encryption base and the iteration parameter to obtain the encryption ciphertext;

[0035] In the data receiving end, calculating the difference between the target time lock encryption data and the encryption ciphertext to obtain the original transmission number;

[0036] In the data receiving end, performing format conversion based on the original transmission number to obtain the original data.

[0037] To achieve the above object, a second aspect of the embodiment of the present application provides a data encryption transmission device, the device comprises:

[0038] An acquisition data module is configured to acquire original data, a first encryption prime number, a second encryption prime number and an iteration parameter;

[0039] A modulo operation module is configured to perform a modulo operation according to the first encryption prime number and the second encryption prime number to obtain an encryption modulo number;

[0040] An Euler operation module is configured to perform an Euler operation according to the first encryption prime number and the second encryption prime number to obtain an Euler modulo number;

[0041] A time-lock encryption module is configured to perform time-lock encryption on the original data based on the encryption modulo number, the Euler modulo number, the iteration parameter and a preset encryption base to obtain target time-lock encryption data;

[0042] A data encryption module is configured to perform data encryption on the target time-lock encryption data according to a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulo number, the encryption base and the iteration parameter to obtain target transmission data;

[0043] A data transmission module is configured to transmit the target transmission data to a data receiving end, so that the data receiving end performs data decryption on the target transmission data to obtain the original data.

[0044] To achieve the above object, a third aspect of the embodiment of the present application provides an electronic device, the electronic device comprises a memory and a processor, the memory stores a computer program, and the processor implements the method of the first aspect when executing the computer program.

[0045] To achieve the above object, a fourth aspect of the embodiment of the present application provides a computer readable storage medium, the computer readable storage medium stores a computer program, and the computer program is executed by a processor to implement the method of the first aspect.

[0046] The present application proposes a data encryption transmission method and device, electronic device and storage medium, which respectively perform modulus operation and Euler operation on a first encryption prime number and a second encryption prime number to obtain an encryption modulus and an Euler modulus, and perform time-lock encryption on the original data based on the encryption modulus, the Euler modulus, the iteration parameter and the preset encryption technology, so that the target time-lock encrypted data cannot be immediately decrypted in the event of data leakage, thereby ensuring the delayed disclosure of the data; further, the target time-lock encrypted data is encrypted according to the symmetric encryption random number, the asymmetric encryption public key, the encryption modulus, the encryption base and the iteration parameter to obtain the target transmission data, further ensuring the security of the data, and finally transmitting the target transmission data to the data receiving end, so that the data receiving end decrypts the target transmission data to obtain the original data, thereby ensuring the delayed disclosure of the data and ensuring the security of the data during transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 This is a flow chart of the data encryption transmission method provided by an embodiment of the present application;

[0048] Figure 2 yes Figure 1 Flowchart of step S104 in FIG.

[0049] Figure 3 yes Figure 1 Flowchart of step S105 in FIG.

[0050] Figure 4 yes Figure 3 Flowchart of step S302 in FIG.

[0051] Figure 5 yes Figure 4 Flowchart of step S403 in FIG.

[0052] Figure 6 yes Figure 1 Flowchart of step S106 in FIG.

[0053] Figure 7 yes Figure 6 Flowchart of step S605 in FIG.

[0054] Figure 8 This is a schematic diagram of the structure of the data encryption transmission device provided in an embodiment of the present application;

[0055] Figure 9 This is a schematic diagram of the hardware structure of the electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0056] In order to make the purposes, technical solutions and advantages of the present application clearer, further detailed description will be given to the present application in combination with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, and are not used to limit the present application.

[0057] It should be noted that although the functional modules are divided in the device schematic diagram, and the logical sequence is shown in the flowchart, in some cases, the steps shown or described can be performed in a manner different from the module division in the device or the sequence in the flowchart. The terms "first", "second", etc. in the specification and claims and the above-described drawings are used to distinguish similar objects, and do not necessarily describe a specific order or sequence.

[0058] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the present application belongs. The terms used herein are only for the purpose of describing the embodiments of the present application, and are not intended to limit the present application.

[0059] First, the meanings of several terms involved in the present application are analyzed:

[0060] Symmetric encryption: symmetric encryption is an encryption method in the field of information security, which uses the same key for data encryption and decryption operations. Symmetric encryption is a branch of cryptography, belonging to the field of computer security and information security. Symmetric encryption algorithms are usually fast and suitable for encrypting large amounts of data. The key to this technology is that encryption and decryption use the same key, so the protection and secure transmission of the key are particularly important. The applications of symmetric encryption technology include data transmission encryption, file storage encryption, identity authentication, etc. Common symmetric encryption algorithms include DES, AES and Blowfish, etc. By using symmetric encryption, the security of information during storage and transmission can be effectively protected, preventing unauthorized access and data leakage.

[0061] Asymmetric encryption: Asymmetric encryption is a method of encrypting and decrypting data using a pair of keys, one for encryption and the other for decryption. This encryption technique belongs to the branch of cryptography and is an important part of information security technology. The main feature of asymmetric encryption is that the keys used for encryption and decryption are different, usually referred to as public key and private key. The public key is public and can be safely distributed to any requester, while the private key is secret and only known to the key holder. Asymmetric encryption technology is widely used in digital signature, data encryption, secure communication and other fields. It can ensure the confidentiality and integrity of the transmitted data, prevent data from being intercepted and tampered during transmission. In addition, asymmetric encryption is also a basic technology for identity authentication and data integrity verification, common implementation algorithms include RSA, ECC (Elliptic Curve Cryptography) and others.

[0062] Time-lock puzzle: Time-lock puzzle is a cryptographic mechanism designed to ensure that information cannot be decrypted before a certain time. This technology relies on solving a computationally difficult problem to decrypt data, and the solution to this problem requires a predetermined amount of time to complete, thereby achieving the purpose of delaying information disclosure. Time-lock puzzle belongs to the field of cryptography and information security research, and is an effective means of protecting data privacy and controlling information access timing. Time-lock puzzle is commonly used in various security applications that require time control, such as vote privacy in electronic voting systems, conditional locking in cryptocurrency transactions, etc. The key to this technology is to design a computational task that cannot be completed in advance and cannot be significantly accelerated by additional resources. In addition, time-lock puzzle also involves the selection of specific implementation algorithms, such as the puzzle-solving process based on iterative hash functions, and how to ensure that information is absolutely secure before the set time without the decryption key.

[0063] Data transmission refers to the transmission of data from one data node to another data node. In order to ensure the security of data during transmission, data is usually encrypted. Current data encryption methods include symmetric encryption algorithms or asymmetric encryption algorithms. These data encryption algorithms can be decrypted based on the secret key to obtain the relevant transmission data in the actual application scenario of data transmission, but in some scenarios that require delayed disclosure of transmission data, the current data transmission method cannot be implemented. Therefore, how to ensure the delayed disclosure of data and the security of data transmission has become a problem to be solved.

[0064] Therefore, the embodiments of the present application provide a data encryption transmission method and device, electronic equipment and storage medium, aiming to ensure the delayed disclosure of data and the security of data transmission.

[0065] The data encryption transmission method and device, the electronic device, and the storage medium provided by the embodiments of the present application are described in detail as follows. First, the data encryption transmission method in the embodiments of the present application is described.

[0066] The data encryption transmission method provided by the embodiments of the present application relates to the technical field of data encryption and is suitable for the field of financial technology. The data encryption transmission method provided by the embodiments of the present application can be applied to a terminal, can be applied to a server end, and can also be software running in the terminal or the server end. In some embodiments, the terminal can be a smartphone, a tablet computer, a notebook computer, a desktop computer, or the like; the server end can be configured as a standalone physical server, can be configured as a server cluster or a distributed system formed by multiple physical servers, or can be configured as a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDNs, and big data and artificial intelligence platforms; and the software can be an application that implements the data encryption transmission method, but is not limited to the above forms.

[0067] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld devices or portable devices, tablet devices, multi-processor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, and the like. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, and the like that perform specific tasks or implement specific abstract data types. The present application can also be practiced in a distributed computing environment, in which tasks are performed by remote processing devices connected by a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media, including storage devices.

[0068] It should be noted that in each of the specific embodiments of the present application, when relevant processing needs to be performed according to user information, user behavior data, user historical data, and user location information and other data related to the identity or characteristics of the user, the user's permission or consent will be obtained first, and the collection, use, and processing of the data will comply with relevant laws, regulations, and standards. In addition, when the embodiments of the present application need to obtain sensitive personal information of the user, the separate permission or separate consent of the user will be obtained through a pop-up window or a jump to a confirmation page, and after obtaining the separate permission or separate consent of the user, the necessary user-related data for enabling the embodiments of the present application to normally operate will be obtained.

[0069] Figure 1 is an optional flowchart of the data encryption transmission method provided by the embodiment of the present application, Figure 1 The method in the embodiment can include, but is not limited to, steps S101 to S106.

[0070] In step S101, the original data, the first encryption prime number, the second encryption prime number and the iteration parameter are obtained.

[0071] In step S102, modulus operation is performed according to the first encryption prime number and the second encryption prime number to obtain an encryption modulus.

[0072] In step S103, Euler operation is performed according to the first encryption prime number and the second encryption prime number to obtain an Euler modulus.

[0073] In step S104, time-lock encryption is performed on the original data based on the encryption modulus, the Euler modulus, the iteration parameter and a preset encryption base to obtain target time-lock encrypted data.

[0074] In step S105, data encryption is performed on the target time-lock encrypted data according to a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulus, the encryption base and the iteration parameter to obtain target transmission data.

[0075] In step S106, the target transmission data is transmitted to a data receiving end to enable the data receiving end to perform data decryption on the target transmission data to obtain original transmission data.

[0076] The steps S101 to S106 shown in the embodiment of the present application perform modulus operation and Euler operation on the first encryption prime number and the second encryption prime number respectively to obtain an encryption modulus and an Euler modulus, and perform time-lock encryption on the original data based on the encryption modulus, the Euler modulus, the iteration parameter and a preset encryption technology, so that the target time-lock encrypted data cannot be immediately decrypted in the case of data leakage, thereby ensuring the delayed disclosure of the data. Further, data encryption is performed on the target time-lock encrypted data according to a symmetric encryption random number, an asymmetric encryption public key, an encryption modulus, an encryption base and an iteration parameter to obtain target transmission data, thereby further ensuring the security of the data. Finally, the target transmission data is transmitted to a data receiving end to enable the data receiving end to perform data decryption on the target transmission data to obtain original data, thereby ensuring the delayed disclosure of the data and the security of the data in the transmission process.

[0077] In step S101 of some embodiments, the original data is data that needs to be transmitted, for example, it can be json data in an http request, and a data packet in an rpc request, which is not limited in the present application. The first encryption prime number and the second encryption prime number refer to a natural number greater than 1, which cannot be divided by any other natural number except 1 and itself. The first encryption prime number is composed of a first encryption sub-prime number, and the specific composition relationship is as shown in formula (1):

[0078] p=p′+1 (1),

[0079] Wherein, p is the first encryption prime number, and p' is the first encryption sub-prime number.

[0080] The second encryption prime number is composed of a second encryption sub-prime number, and the specific composition relationship is as shown in formula (2):

[0081] q=q′+1 (2),

[0082] Wherein, q is the second encryption prime number, and q' is the second encryption sub-prime number.

[0083] The iteration parameter is a natural number, which is used to constitute the number of time lock puzzles. The time lock puzzle is a cryptographic technique designed to ensure that certain information can only be decrypted and accessed after a predetermined time. The core idea of the time lock puzzle is to use computationally difficult and non-parallelizable operations to make the decryption process require a predetermined time, and the iteration number is used to determine the time required for the decryption process. For example, for the calculation formula Since this calculation requires T square operations, each step depends on the result of the previous step and cannot be parallelized, T is the iteration parameter.

[0084] In step S102 of some embodiments, modulus operation is performed according to the first encryption prime number and the second encryption prime number to obtain an encryption modulus, and the modulus operation is as shown in formula (3):

[0085] N=p·q (3),

[0086] Wherein, N is the encryption modulus.

[0087] In step S103 of some embodiments, Euler operation is performed according to the first encryption prime number and the second encryption prime number to obtain an Euler modulus, and the Euler modulus is as shown in formula (4):

[0088] φ(N)=(p-1)(q-1) (4),

[0089] Wherein, φ(N) is the Euler modulus.

[0090] Please refer to Figure 2In some embodiments, step S104 can include but is not limited to steps S201-S203:

[0091] Step S201: Based on the iteration parameter, the Euler modulus, the encryption modulus and the encryption base, an iterative aggregation calculation is performed to obtain an encryption ciphertext.

[0092] Step S202: Based on the original data, a format conversion is performed to obtain an original transmission number.

[0093] Step S203: The encryption ciphertext and the original transmission number are summed to obtain target time-lock encryption data.

[0094] The steps S201-S203 shown in the embodiments of the present application perform an iterative aggregation calculation based on the iteration parameter, the Euler modulus, the encryption modulus and the encryption base to obtain an encryption ciphertext, and then add the encryption ciphertext and the original data after format conversion to obtain target time-lock encryption data, so that the target time-lock encryption data has the property of delayed disclosure, and the security of the data is improved.

[0095] In step S201 of some embodiments, based on the iteration parameter, the Euler modulus, the encryption modulus and the encryption base, an iterative aggregation calculation is performed to obtain an encryption ciphertext, and the iterative aggregation operation is shown in formula (5):

[0096]

[0097] Wherein, c1 is the encryption ciphertext, a is the encryption base, and T is the iteration parameter. It should be noted that the encryption base and the Euler modulus are relatively prime, and according to the Euler theorem, formula (6) can be obtained:

[0098]

[0099] Wherein, since The iteration number of According to the Euler theorem, it can be simplified to So as to quickly construct a time-lock puzzle at the sending end.

[0100] In step S202 of some embodiments, based on the original data, a format conversion is performed to obtain an original transmission number, for example, Chinese characters are converted into UTF-8 encoding, so as to realize the conversion of the original data into the original transmission number, for example, the original data is converted into Unicode encoding, so as to realize the conversion of the original data into the original transmission number.

[0101] In step S203 of some embodiments, the encryption ciphertext and the original transmission number are summed to obtain target time-lock encryption data, and the summation calculation is shown in formula (7):

[0102] c = c1 + m (7),

[0103] wherein c is the target time-lock encryption data, and m is the original transmission number.

[0104] Referring to Figure 3 In some embodiments, step S105 can include but is not limited to steps S301-S302:

[0105] Step S301, data encapsulation based on the encryption modulus, the encryption base, the target time-lock encryption data and the iteration parameter, to obtain the target encapsulation data;

[0106] Step S302, digital signature processing of the target encapsulation data and the symmetric encryption random number based on the asymmetric encryption public key, to obtain the target transmission data.

[0107] The steps S301-S302 shown in the embodiments of the present application, based on the encryption modulus, the encryption base, the target time-lock encryption data and the iteration parameter, the data encapsulation is carried out to obtain the target encapsulation data, and then the digital signature processing of the target encapsulation data and the symmetric encryption random number based on the asymmetric encryption public key is carried out to obtain the target transmission data, which realizes the encryption of data from the perspective of symmetric encryption and asymmetric encryption, and realizes further data security guarantee.

[0108] In step S301 of some embodiments, data encapsulation based on the encryption modulus, the encryption base, the target time-lock encryption data and the iteration parameter, to obtain the target encapsulation data, the data encapsulation mode is json string encapsulation, for example {“encryption modulus”: “21”, “encryption base”: “11”, “target time-lock data”: “[23, 21, 5, 2, 3]”, “iteration parameter”: “2”}.

[0109] Referring to Figure 4 In some embodiments, step S302 can include but is not limited to steps S401-S403:

[0110] Step S401, key generation based on the symmetric encryption random number, to obtain the symmetric encryption key;

[0111] Step S402, symmetric encryption of the target encapsulation data based on the symmetric encryption key, to obtain the target symmetric encryption data;

[0112] Step S403, digital signature processing of the symmetric encryption random number and the target symmetric encryption data based on the asymmetric encryption public key, to obtain the target transmission data.

[0113] The steps S401 to S403 shown in the embodiments of the present application generate a symmetric encryption key based on the symmetric encryption random number, perform symmetric encryption on the target encapsulation data based on the symmetric encryption key, obtain target symmetric encryption data, and finally perform digital signature processing on the symmetric encryption random number and the target symmetric encryption data based on the asymmetric encryption public key, to obtain target transmission data, thereby realizing encryption of data from the perspective of symmetric encryption and improving the security of the data.

[0114] In step S401 of some embodiments, the symmetric encryption key is a same secret key used for encrypting and decrypting information, and in the symmetric encryption algorithm, the encryption and decryption processes both depend on the same key. In an embodiment, the symmetric encryption key is generated based on PBKDF2 (Password-Based Key Derivation Function 2). It should be noted that the symmetric encryption key generated each time based on the symmetric encryption random number, i.e., one symmetric encryption random number corresponds to one specific symmetric encryption key, does not change.

[0115] In step S402 of some embodiments, the target symmetric encryption data is obtained by performing symmetric encryption on the target encapsulation data based on the symmetric encryption key. In an embodiment, the target symmetric encryption data is obtained by performing symmetric encryption on the target encapsulation data based on the symmetric encryption key using the AES algorithm.

[0116] Please refer to Figure 5 In some embodiments, step S403 includes but is not limited to steps S501 to S503:

[0117] Step S501: performing hash processing on the symmetric encryption random number to obtain a symmetric random number hash value;

[0118] Step S502: performing asymmetric encryption on the symmetric encryption random number according to the asymmetric encryption public key to obtain symmetric random number ciphertext;

[0119] Step S503: performing data encapsulation based on the symmetric random number ciphertext, the symmetric random number hash value, and the target symmetric encryption data to obtain target transmission data.

[0120] The steps S501 to S503 shown in the embodiments of the present application perform hash processing on the symmetric encryption random number to obtain a symmetric random number hash value, form a digital signature, thereby ensuring that the data is not tampered with during transmission, then perform asymmetric encryption on the symmetric encryption random number according to the asymmetric encryption public key to obtain symmetric random number ciphertext, and finally perform data encapsulation based on the symmetric random number ciphertext, the symmetric random number hash value, and the target symmetric encryption data to obtain target transmission data, thereby realizing further encryption of data from the perspective of asymmetric encryption and further improving the security of the data.

[0121] In step S501 of some embodiments, the symmetric random number hash value refers to a fixed-length hash value obtained by processing a random number used for symmetric encryption by a hash function. The hash processing method can be SHA-256 (Secure Hash Algorithm 256-bit) or SHA-3, which is not specifically limited in the present application.

[0122] In step S502 of some embodiments, the symmetric random number ciphertext refers to a ciphertext generated by encrypting the symmetric encryption random number using the asymmetric encryption public key by an asymmetric encryption algorithm. The symmetric random number ciphertext ensures that only the private key corresponding to the asymmetric encryption public key can decrypt and obtain the symmetric encryption random number. The asymmetric encryption method can be RSA (Rivest-Shamir-Adleman) or ECC or other asymmetric encryption algorithms, which are not specifically limited in the present application.

[0123] It should be noted that the symmetric encryption algorithm is generally less than the asymmetric encryption algorithm in time complexity, so the symmetric encryption algorithm is used to encrypt the target encapsulation data, and the symmetric encryption random number is encrypted based on the asymmetric encryption algorithm, thereby improving the encryption and decryption speed under the premise of ensuring data security.

[0124] In step S503 of some embodiments, the target transmission data is obtained by data encapsulation based on the symmetric random number ciphertext, the symmetric random number hash value, and the target symmetric encryption data, and the encapsulation format is not specifically limited in the present application, which can be json encapsulation or data packet encapsulation.

[0125] Please refer to Figure 6 In some embodiments, the target transmission data includes the symmetric random number ciphertext, the symmetric random number hash value, and the target symmetric encryption data, and step S106 can include but is not limited to steps S601 to S606:

[0126] Step S601, transmitting the target transmission data to a data receiving end;

[0127] Step S602, based on a preset asymmetric encryption private key, performing asymmetric decryption on the symmetric random number ciphertext to obtain a symmetric encryption random number at the data receiving end;

[0128] Step S603, performing hash processing on the symmetric encryption random number to obtain a hash verification value at the data receiving end;

[0129] Step S604, if the hash verification value is the same as the symmetric random number hash value, generating a symmetric encryption key based on the symmetric encryption random number at the data receiving end;

[0130] Step S605, at the data receiving end, the target symmetric encryption data is symmetrically decrypted based on the symmetric encryption key to obtain target encapsulation data;

[0131] Step S606, at the data receiving end, the original data is obtained by content decryption based on the target encapsulation data.

[0132] The steps S601 to S606 shown in the embodiments of the present application are performed by transmitting the target transmission data to the data receiving end. The data receiving end analyzes the target transmission data to obtain the symmetric random number ciphertext, the symmetric random number hash value and the target symmetric encryption data, then performs asymmetric decryption on the symmetric random number ciphertext based on the preset asymmetric encryption private key to obtain the symmetric encryption random number, then performs hash processing on the symmetric encryption random number to obtain the hash verification value, when the hash verification value is the same as the symmetric random number hash value, the symmetric encryption key is generated based on the symmetric encryption random number, then the target symmetric encryption data is symmetrically decrypted based on the symmetric encryption key to obtain the target encapsulation data, and finally the original data is obtained by content decryption based on the target encapsulation data, thereby ensuring that the secure data received from the data receiving end is not tampered with and not leaked through the asymmetric decryption and symmetric decoding mode.

[0133] In step S601 of some embodiments, when the data receiving end receives the target transmission data, the target transmission data is analyzed to obtain the symmetric random number ciphertext, the symmetric random number hash value and the target symmetric encryption data in the target transmission data.

[0134] In step S602 of some embodiments, the asymmetric encryption private key of the data receiving end corresponds to the asymmetric encryption public key of the data sending end, and the data encrypted by the data sending end through the asymmetric encryption public key can only be decrypted by the corresponding asymmetric encryption private key of the data receiving end, thereby ensuring the security of the data. It should be noted that the data sending end only asymmetrically encrypts the symmetric encryption random number, thereby improving the speed of data encryption. The data receiving end performs asymmetric decryption on the symmetric random number ciphertext based on the preset asymmetric encryption private key to obtain the symmetric encryption random number. It should be noted that the algorithms of the asymmetric encryption and asymmetric decryption methods used by the data receiving end and the data sending end are corresponding, for example, the data receiving end uses RSA algorithm for asymmetric decryption, and the data sending end uses RSA algorithm for asymmetric encryption.

[0135] In step S603 of some embodiments, verifying the hash value refers to obtaining a number by performing hash processing on the symmetric encryption random number by the data receiving end using the same hash algorithm as the data sending end. The hash processing method is not specifically limited in the present application.

[0136] In step S604 of some embodiments, when the hash verification value is the same as the symmetric random number hash value, that is, the data has not been tampered with in the process of transmission, thereby ensuring the data consistency of the data receiving end and the data sending end, then the symmetric encryption random number is used to generate a key to obtain a symmetric encryption key. It should be noted that the symmetric encryption key generation algorithm used by the data sending end and the data receiving end is the same.

[0137] In step S605 of some embodiments, the target symmetric encryption data is symmetrically decrypted based on the symmetric encryption key, thereby obtaining the target encapsulated data. It should be noted that the symmetric encryption algorithm used by the data sending end and the data receiving end is the same.

[0138] Please refer to Figure 7 In some embodiments, the target encapsulated data includes an encryption modulus, an encryption base, an iteration parameter, and target time-lock encryption data. Step S606 can include, but is not limited to, steps S701 to S703:

[0139] Step S701, at the data receiving end, performing aggregation calculation based on the encryption modulus, the encryption base, and the iteration parameter to obtain an encryption ciphertext.

[0140] Step S702, at the data receiving end, calculating the difference between the target time-lock encryption data and the encryption ciphertext to obtain an original transmission number.

[0141] Step S703, at the data receiving end, performing format conversion based on the original transmission number to obtain the original data.

[0142] The steps S701 to S703 shown in the embodiments of the present application perform aggregation calculation based on the encryption modulus, the encryption base, and the iteration parameter to obtain an encryption ciphertext, thereby ensuring that the data receiving end needs to pay a certain amount of time for calculation when obtaining the encryption ciphertext, thereby ensuring the data delay disclosure feature. Then, the difference between the target time-lock encryption data and the encryption ciphertext is calculated to obtain an original transmission number. Finally, format conversion is performed based on the original transmission number to obtain the original data, thereby realizing the secure and delayed acquisition of data from the data sending end to the data receiving end.

[0143] In step S701 of some embodiments, aggregation calculation is performed based on the encryption modulus, the encryption base, and the iteration parameter to obtain an encryption ciphertext. The encryption calculation method is shown in formula (8):

[0144]

[0145] The encryption ciphertext, the encryption modulus, the encryption base and the iteration parameter of the data receiving end and the data sending end are same. Since the data receiving end does not obtain the first encryption prime number and the second encryption prime number of the data sending end, the data receiving end cannot simplify by the Euler formula, and thus needs to perform multiple calculations, thereby ensuring the delay of data disclosure.

[0146] In step S702 of some embodiments, a difference between the target time-lock encrypted data and the encryption ciphertext is calculated to obtain the original transmission number, as shown in formula (9):

[0147] m=C-C1 (9),

[0148] In step S703 of some embodiments, a conversion of the format is performed based on the original transmission number to obtain the original data. For example, the data sending end converts Chinese characters into UTF-8 encoding, and the data receiving end converts the original transmission number in the form of UTF-8 encoding into Chinese characters to obtain the original data from the data sending end.

[0149] In one embodiment of the present application, the data sending end first obtains the original data, the first encryption prime number, the second encryption prime number and the iteration prime number, and then generates the encryption modulus and the Euler modulus based on the first encryption prime number and the second encryption prime number. Then, the original data is time-lock encrypted based on the encryption base, the iteration parameter, the Euler modulus and the encryption modulus to obtain the target time-lock encrypted data. Then, the symmetric encryption key is generated based on the symmetric encryption random number, and the target time-lock encrypted data is symmetrically encrypted based on the symmetric encryption key to obtain the target symmetrically encrypted data. Then, the symmetric random number ciphertext is generated by asymmetrically encrypting the symmetric encryption random number based on the asymmetric encryption public key. At the same time, the symmetric random number is hashed to obtain the symmetric random number hash value. Finally, the symmetric random number hash value, the symmetric random number ciphertext, the encryption base, the iteration parameter, the encryption modulus and the target encrypted data are sent to the data receiving end.

[0150] The data receiving end verifies that the data is not tampered during transmission based on the symmetric random number hash value, the symmetric random number ciphertext and the asymmetric encryption private key, and then calculates the encryption ciphertext based on the encryption base, the iteration parameter and the encryption modulus. Since the calculation amount is large, it takes a certain amount of time to complete the calculation, thereby realizing the delay of data disclosure. Then, the original data is obtained by analyzing the target encrypted data based on the encryption ciphertext.

[0151] Please refer to Figure 8 The present application also provides a data encryption transmission device, which can realize the above-mentioned data encryption transmission method. The device comprises:

[0152] The data acquisition module 801 is configured to acquire original data, a first encryption prime number, a second encryption prime number, and an iteration parameter.

[0153] The modulo operation module 802 is configured to perform a modulo operation according to the first encryption prime number and the second encryption prime number to obtain an encryption modulo.

[0154] The Euler operation module 803 is configured to perform an Euler operation according to the first encryption prime number and the second encryption prime number to obtain an Euler modulo.

[0155] The time-lock encryption module 804 is configured to perform time-lock encryption on the original data based on the encryption modulo, the Euler modulo, the iteration parameter, and a preset encryption base to obtain target time-lock encryption data.

[0156] The data encryption module 805 is configured to perform data encryption on the target time-lock encryption data according to a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulo, the encryption base, and the iteration parameter to obtain target transmission data.

[0157] The data transmission module 806 is configured to transmit the target transmission data to a data receiving end, so that the data receiving end performs data decryption on the target transmission data to obtain the original data.

[0158] The specific implementation of the data encryption and transmission apparatus is basically the same as that of the above-described data encryption and transmission method, and will not be described herein again.

[0159] The embodiments of the present application further provide an electronic device, which includes a memory and a processor. The memory stores a computer program, and the processor implements the above-described data encryption and transmission method when executing the computer program. The electronic device can be any intelligent terminal including a tablet computer, a vehicle-mounted computer, etc.

[0160] Please refer to Figure 9 , Figure 9 The hardware structure of the electronic device of another embodiment is illustrated, which includes:

[0161] The processor 901 can be implemented in a general-purpose CPU (Central Processing Unit), a microprocessor, an ASIC (Application Specific Integrated Circuit), or one or more integrated circuits, etc., and is configured to execute a related program to implement the technical solutions provided by the embodiments of the present application.

[0162] The memory 902 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM), etc. The memory 902 can store an operating system and other application programs. When the technical solutions provided by the embodiments of the present specification are implemented by software or firmware, the related program codes are stored in the memory 902 and are called and executed by the processor 901 to implement the data encryption transmission method of the embodiments of the present application.

[0163] The input / output interface 903 is configured to realize information input and output.

[0164] The communication interface 904 is configured to realize the communication interaction between the device and other devices. The communication can be realized by a wired manner (for example, a USB, a network cable, etc.) or a wireless manner (for example, a mobile network, WIFI, Bluetooth, etc.).

[0165] The bus 905 is configured to transmit information between various components (for example, the processor 901, the memory 902, the input / output interface 903, and the communication interface 904) of the device.

[0166] The processor 901, the memory 902, the input / output interface 903, and the communication interface 904 are connected to each other through the bus 905 to realize the communication connection between the device.

[0167] The embodiments of the present application also provide a computer readable storage medium, which stores a computer program. The computer program is executed by a processor to implement the above-mentioned data encryption transmission method.

[0168] The memory is a non-transitory computer readable storage medium, which can be used to store non-transitory software programs and non-transitory computer executable programs. In addition, the memory can include a high-speed random access memory and can also include a non-transitory memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transitory solid-state memory device. In some embodiments, the memory can optionally include a memory remotely arranged relative to the processor. These remote memories can be connected to the processor through a network. Examples of the above-mentioned network include but are not limited to the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0169] The data encryption transmission method, the data encryption transmission device, the electronic equipment and the storage medium provided by the embodiments of the present application obtain an encryption modulus and an Euler modulus by performing modulus operation and Euler operation on a first encryption prime number and a second encryption prime number respectively, and perform time lock encryption on original data based on the encryption modulus, the Euler modulus, an iteration parameter and a preset encryption technology, so that the target time lock encrypted data cannot be immediately decrypted in the case of data leakage, thereby ensuring the delayed disclosure of the data. Further, the target time lock encrypted data is encrypted based on a symmetric encryption random number, an asymmetric encryption public key, the encryption modulus, an encryption base and the iteration parameter to obtain target transmission data, thereby further ensuring the security of the data. Finally, the target transmission data is transmitted to a data receiving end, so that the data receiving end decrypts the target transmission data to obtain the original data, thereby ensuring the delayed disclosure of the data and the security of the data in the transmission process.

[0170] The embodiments described in the embodiments of the present application are used to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. Those skilled in the art can know that, with the evolution of technology and the appearance of new application scenarios, the technical solutions provided by the embodiments of the present application are also applicable to similar technical problems.

[0171] Those skilled in the art can understand that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and can include more or fewer steps than the figures shown, or combine certain steps or different steps.

[0172] The device embodiments described above are only schematic, and the units described as separate components can or can not be physically separate, that is, can be located in one place or distributed on multiple network units. Part or all of the modules can be selected according to actual needs to achieve the purpose of the embodiments of the present application.

[0173] Those skilled in the art can understand that all or some of the steps in the above disclosed method, the functions of the modules / units in the system and the device can be implemented as software, firmware, hardware and their appropriate combinations.

[0174] The terms "first", "second", "third", "fourth", and the like in the description and in the claims of this application, if any, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the use of the terms so termed is interchangeable under appropriate circumstances such that the embodiments of the application described herein are, for example, capable of orderly or chronological mundane operation, reverse order operation, based on circuitry availability, based on stated preference or the like, and that "default" or other orderings are thus permissible. Further, the terms "comprise", "comprising", "include", "including", and the like, are specifically intended to be open-ended. That is, references to individual steps and the like do not suhstantially exclude the presence of two or more of a recited step or its integral sub-steps or additional steps whether or not readily ascertainable from the description or the like. Further, the words "a" or "an", as used herein in the disclosure and elsewhere, are used indiscriminately and are to be interpreted in the same way, i.e. as meaning "one or more".

[0175] It should be understood that, in the application, "at least one" means one or more, and "multiple" means two or more. "And / or" is used to describe the relationship between associated objects, which means that there can be three relationships, for example, "A and / or B" can mean that there are only A, only B, and A and B at the same time, where A and B can be singular or plural. The character " / " generally represents an "or" relationship between the associated objects. "At least one of the following" or the like means any combination of these items, including any combination of single or multiple items. For example, at least one of a, b or c can mean a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0176] In several embodiments provided in the application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the above units is only a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another system, or some features can be omitted or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed objects can be indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0177] The units described above as separate components can or can not be physically separate, and the components shown as units can or can not be physical units, i.e. they can be located in one place or distributed on a plurality of network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the embodiment.

[0178] In addition, each function unit in each embodiment of the present application can be integrated in one processing unit, or each unit can be physically present separately, or two or more units can be integrated in one unit. The integrated unit can be realized in the form of hardware or in the form of a software function unit.

[0179] When the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application, essentially or in part, or all or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium, and includes multiple instructions used to cause a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods in the embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various other media that can store programs.

[0180] The preferred embodiments of the embodiments of the present application are described above with reference to the accompanying drawings, and are not limited to the scope of the embodiments of the present application. Any modifications, equivalent replacements and improvements made by those skilled in the art without departing from the scope and essence of the embodiments of the present application shall be within the scope of the embodiments of the present application.

Claims

1. A method for data encryption transmission, characterized in that, The method comprises: obtaining original data, a first encryption prime number, a second encryption prime number and an iteration parameter; performing modulus operation according to the first encryption prime number and the second encryption prime number to obtain an encryption modulus; performing Euler operation according to the first encryption prime number and the second encryption prime number to obtain an Euler modulus; performing time lock encryption on the original data based on the encryption modulus, the Euler modulus, the iteration parameter and a preset encryption base to obtain target time lock encryption data; performing data encryption on the target time lock encryption data based on a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulus, the encryption base and the iteration parameter to obtain target transmission data; transmitting the target transmission data to a data receiving end to enable the data receiving end to perform data decryption on the target transmission data to obtain the original data.

2. The method of claim 1, wherein, The time lock encryption on the original data based on the encryption modulus, the Euler modulus, the iteration parameter and a preset encryption base to obtain target time lock encryption data comprises: performing iteration aggregation calculation based on the iteration parameter, the Euler modulus, the encryption modulus and the encryption base to obtain encryption ciphertext; performing format conversion based on the original data to obtain original transmission data; performing summation calculation on the encryption ciphertext and the original transmission data to obtain the target time lock encryption data.

3. The method of claim 1, wherein, The data encryption on the target time lock encryption data based on a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulus, the encryption base and the iteration parameter to obtain target transmission data comprises: performing data encapsulation based on the encryption modulus, the encryption base, the target time lock encryption data and the iteration parameter to obtain target encapsulation data; performing digital signature processing on the target encapsulation data and the symmetric encryption random number based on the asymmetric encryption public key to obtain the target transmission data.

4. The method of claim 3, wherein, The digital signature processing on the target encapsulation data and the symmetric encryption random number based on the asymmetric encryption public key to obtain target transmission data comprises: performing key generation based on the symmetric encryption random number to obtain a symmetric encryption key; performing symmetric encryption on the target encapsulation data based on the symmetric encryption key to obtain target symmetric encryption data; performing digital signature processing on the symmetric encryption random number and the target symmetric encryption data based on the asymmetric encryption public key to obtain the target transmission data.

5. The method of claim 4, wherein, The digital signature processing on the symmetric encryption random number and the target symmetric encryption data based on the asymmetric encryption public key to obtain the target transmission data comprises: performing hash processing on the symmetric encryption random number to obtain a symmetric random number hash value; performing asymmetric encryption on the symmetric encryption random number based on the asymmetric encryption public key to obtain symmetric random number ciphertext; performing data encapsulation based on the symmetric random number ciphertext, the symmetric random number hash value and the target symmetric encryption data to obtain the target transmission data.

6. The method according to any one of claims 1 to 5, characterized in that, The target transmission data includes the symmetric random number ciphertext, the symmetric random number hash value and the target symmetric encryption data, and the target transmission data is transmitted to a data receiving end, so that the data receiving end decrypts the target transmission data to obtain the original data, including: transmitting the target transmission data to the data receiving end; at the data receiving end, performing asymmetric decryption on the symmetric random number ciphertext based on a preset asymmetric encryption private key to obtain the symmetric encryption random number; at the data receiving end, performing hash processing on the symmetric encryption random number to obtain a hash verification value; at the data receiving end, if the hash verification value is the same as the symmetric random number hash value, performing key generation based on the symmetric encryption random number to obtain the symmetric encryption key; at the data receiving end, performing symmetric decryption on the target symmetric encryption data based on the symmetric encryption key to obtain the target encapsulation data; at the data receiving end, performing content decryption based on the target encapsulation data to obtain the original data.

7. The method of claim 6, wherein, The target encapsulation data includes the encryption modulus, the encryption base, the iteration parameter and the target time lock encryption data; and the content decryption based on the target encapsulation data at the data receiving end to obtain the original data includes: at the data receiving end, performing aggregation calculation based on the encryption modulus, the encryption base and the iteration parameter to obtain the encryption ciphertext; at the data receiving end, calculating the difference between the target time lock encryption data and the encryption ciphertext to obtain the original transmission number; at the data receiving end, performing format conversion based on the original transmission number to obtain the original data.

8. A data encryption transmission apparatus characterized by comprising: The device includes: an acquisition data module configured to acquire original data, a first encryption prime number, a second encryption prime number and an iteration parameter; a modulus operation module configured to perform modulus operation based on the first encryption prime number and the second encryption prime number to obtain an encryption modulus; an Euler operation module configured to perform Euler operation based on the first encryption prime number and the second encryption prime number to obtain an Euler modulus; a time lock encryption module configured to perform time lock encryption on the original data based on the encryption modulus, the Euler modulus, the iteration parameter and a preset encryption base to obtain target time lock encryption data; a data encryption module configured to perform data encryption on the target time lock encryption data based on a preset symmetric encryption random number, a preset asymmetric encryption public key, the encryption modulus, the encryption base and the iteration parameter to obtain target transmission data; a data transmission module configured to transmit the target transmission data to a data receiving end, so that the data receiving end decrypts the target transmission data to obtain the original data.

9. An electronic device, comprising: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the data encryption transmission method in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, the computer program comprising instructions that, when executed by a computer, cause the computer to perform the method of any one of claims 1 to 9. The computer program, when executed by a processor, implements the data encryption transmission method of any one of claims 1 to 7.

Images