Data encryption method and device, electronic equipment and computer readable medium

Abstract

The invention provides a data encryption method and device, electronic equipment and a computer readable medium, and belongs to the technical field of computers. The data encryption method comprises: in response to a data encryption request for to-be-encrypted data, generating an encryption key of the to-be-encrypted data, the data encryption request being used for encrypting the to-be-encrypted data; the encryption key is segmented to obtain a plurality of encryption key segments, the to-be-encrypted data is segmented to obtain a plurality of to-be-encrypted data segments, and the number of the encryption key segments is the same as that of the to-be-encrypted data segments; encrypting each encryption key segment based on a chaotic mapping algorithm, and generating a chaotic sequence corresponding to each encryption key segment; and encrypting the plurality of to-be-encrypted data segments based on a plurality of chaotic sequences to obtain encrypted data. The security of encrypting each to-be-encrypted data segment based on the chaotic sequence is improved, the possibility that the encrypted data is attacked and cracked is reduced, and the to-be-encrypted data is prevented from being leaked.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a data encryption method and device, electronic equipment, and computer-readable medium. Background Art

[0002] In the process of data transmission, in order to prevent data leakage, the transmitted data is usually encrypted before transmission. At present, the commonly used encryption algorithms include symmetric encryption algorithms, asymmetric encryption algorithms, digest encryption algorithms, etc. Although these encryption algorithms can ensure the security of transmitted data to a certain extent, there is still a risk of being cracked by attackers during the data transmission process, resulting in data leakage. Summary of the invention

[0003] To this end, the present invention provides a data encryption method and device, an electronic device, and a computer-readable medium to solve the problem of data leakage caused by low encryption security in the prior art.

[0004] In order to achieve the above object, the present invention provides a data encryption method in a first aspect, comprising:

[0005] In response to a data encryption request for data to be encrypted, generating an encryption key for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted;

[0006] Splitting the encryption key to obtain a plurality of encryption key segments, and splitting the data to be encrypted to obtain a plurality of data segments to be encrypted, wherein the number of the encryption key segments is the same as the number of the data segments to be encrypted;

[0007] Encrypting each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments;

[0008] The multiple data segments to be encrypted are encrypted respectively based on multiple chaotic sequences to obtain encrypted data.

[0009] Optionally, encrypting each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments includes:

[0010] According to each of the encryption key segments, an initial value corresponding to each of the encryption key segments is generated, wherein the initial value is used as an initial condition of the chaotic mapping algorithm;

[0011] Determining the number of the plurality of encryption key segments as the number of iterations of the chaotic mapping algorithm;

[0012] Each encryption key segment is encrypted according to the initial value corresponding to each encryption key segment and the number of iterations, so as to generate a chaotic sequence corresponding to each encryption key segment.

[0013] Optionally, encrypting each encryption key segment according to the initial value and the number of iterations corresponding to each encryption key segment to generate a chaotic sequence corresponding to each encryption key segment includes:

[0014] For any encryption key segment, performing chaotic mapping of the iteration number based on the initial value corresponding to the encryption key segment, and obtaining chaotic mapping values ​​corresponding to the iteration number respectively;

[0015] Based on multiple chaotic mapping values, a chaotic sequence corresponding to the encryption key segment is generated.

[0016] Optionally, encrypting the multiple data segments to be encrypted based on multiple chaotic sequences respectively to obtain encrypted data includes:

[0017] Determine a chaotic sequence corresponding to each data segment to be encrypted according to the correspondence between the multiple chaotic sequences and the multiple data segments to be encrypted;

[0018] Based on the chaotic sequence corresponding to each data segment to be encrypted, encrypt each data segment to be encrypted to obtain multiple encrypted data segments;

[0019] The plurality of encrypted data segments are combined to obtain encrypted data.

[0020] Optionally, encrypting each data segment to be encrypted based on the chaotic sequence corresponding to each data segment to be encrypted to obtain multiple encrypted data segments includes:

[0021] For any data segment to be encrypted and the chaotic sequence corresponding to the data segment to be encrypted, a bitwise XOR operation is performed to obtain an encryption XOR result corresponding to the data segment to be encrypted and each element in the chaotic sequence;

[0022] Based on the encrypted XOR results corresponding to the data segment to be encrypted and each element in the chaotic sequence, an encrypted data segment of the data segment to be encrypted is obtained.

[0023] Optionally, the method further comprises:

[0024] Receiving encrypted data and a plurality of chaotic sequences corresponding to the encrypted data;

[0025] Slicing the encrypted data to obtain a plurality of encrypted data segments, wherein the number of the plurality of encrypted data segments is the same as the number of the plurality of chaotic sequences;

[0026] Decrypting the multiple encrypted data segments respectively based on the multiple chaotic sequences to obtain multiple decrypted data segments corresponding to the multiple encrypted data segments;

[0027] The plurality of decrypted data segments are combined to obtain decrypted data.

[0028] Optionally, decrypting the multiple encrypted data segments respectively based on the multiple chaotic sequences to obtain multiple decrypted data segments corresponding to the multiple encrypted data segments includes:

[0029] For any encrypted data segment, determining a chaotic sequence corresponding to the encrypted data segment;

[0030] Performing a bitwise XOR operation on the encrypted data segment and the chaotic sequence to obtain a decryption XOR result corresponding to each element in the encrypted data segment and the chaotic sequence;

[0031] Based on the encrypted data segment and the decryption XOR result corresponding to each element in the chaotic sequence, a decrypted data segment of the encrypted data segment is obtained.

[0032] A second aspect of the present invention provides a data encryption device, comprising:

[0033] A generating module, configured to generate an encryption key for the data to be encrypted in response to a data encryption request for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted;

[0034] a segmentation module configured to segment the encryption key to obtain a plurality of encryption key segments, and to segment the data to be encrypted to obtain a plurality of data segments to be encrypted, wherein the number of the encryption key segments is the same as the number of the data segments to be encrypted;

[0035] A first encryption module is configured to encrypt each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments;

[0036] The second encryption module is configured to encrypt the multiple data segments to be encrypted based on multiple chaotic sequences respectively to obtain encrypted data.

[0037] A third aspect of the present invention provides an electronic device, comprising:

[0038] one or more processors;

[0039] A memory having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the above-mentioned data encryption method;

[0040] One or more I / O interfaces are connected between the processor and the memory and are configured to implement information interaction between the processor and the memory.

[0041] A fourth aspect of the present invention provides a computer-readable medium having a computer program stored thereon, wherein the program implements the above-mentioned data encryption method when executed by a processor.

[0042] The present invention has the following advantages: by dividing the data to be encrypted and the encryption key of the data to be encrypted, a plurality of data segments to be encrypted and a plurality of encryption key segments are obtained, so that each encryption key segment can independently encrypt the corresponding data segment to be encrypted, thereby improving the complexity of encrypting the data to be encrypted; by encrypting each encryption key segment separately through a chaotic mapping algorithm, the security of the encryption key segment can be improved, thereby further improving the security of encrypting each data segment to be encrypted based on a chaotic sequence, reducing the possibility of the encrypted data being attacked and cracked, and avoiding the leakage of the encrypted data. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention, but do not constitute a limitation of the present invention.

[0044] Figure 1 A flowchart of a data encryption method provided by an embodiment of the present invention;

[0045] Figure 2 A schematic diagram of a data encryption method provided by an embodiment of the present invention;

[0046] Figure 3 A processing flow chart of a data encryption method provided by an embodiment of the present invention;

[0047] Figure 4 A structural block diagram of a data encryption device provided by an embodiment of the present invention;

[0048] Figure 5 A structural block diagram of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0049] The specific implementation of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the present invention, and is not used to limit the present invention.

[0050] As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items.

[0051] The terms used in the present invention are only used to describe specific embodiments and are not intended to limit the present invention. As used in the present invention, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

[0052] When the terms “comprising” and / or “made of…” are used in the present invention, it specifies the existence of the stated features, integers, steps, operations, elements and / or components, but does not exclude the existence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof.

[0053] Unless otherwise defined, all terms (including technical and scientific terms) used in the present invention have the same meaning as those commonly understood by those of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and the present invention, and will not be interpreted as having an idealized or overly formal meaning unless the present invention clearly defines it as such.

[0054] In current practical applications, in the field of encryption algorithms, symmetric encryption algorithms, asymmetric encryption algorithms, etc. are usually used to encrypt data to be encrypted. For example, symmetric encryption algorithms are based on a single key or a private key for encryption, and asymmetric encryption algorithms are based on a pair of keys (public key and private key) for encryption. Specifically, the public key is used to encrypt data, and the private key is used to decrypt data. Although these algorithms can guarantee the security of the encrypted data to a certain extent, due to problems such as the single key of the encryption algorithm, the encryption algorithm has a weak anti-attack ability. The encrypted data still has the risk of being cracked by the attacker, resulting in data leakage.

[0055] Based on this, embodiments of the present invention provide a data encryption method, a data encryption device, an electronic device, and a computer-readable medium, which are described in detail one by one in the following embodiments.

[0056] In a first aspect, an embodiment of the present invention provides a data encryption method. Figure 1 , Figure 1 A flow chart of a data encryption method provided according to an embodiment of the present invention is shown, which specifically includes the following steps:

[0057] Step 102: In response to a data encryption request for data to be encrypted, generate an encryption key for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted.

[0058] In practical applications, the data encryption algorithm provided by the embodiment of the present invention can be applied to electronic devices such as terminal devices or servers. The terminal devices can specifically be user devices, mobile devices, user terminals, terminals, computing devices, wearable devices, etc. The method can be implemented by a processor calling computer-readable program instructions stored in a memory. Alternatively, the method can be executed by a server. The terminal device or server can be used to encrypt data or decrypt data.

[0059] The data to be encrypted refers to the data to be encrypted, and the data to be encrypted may be text, files, images and other data to be encrypted. The data encryption request refers to the request for encrypting the data to be encrypted, and the data encryption request is specifically generated by the encryption request end, and the encryption request end may specifically be a terminal or a server. After the encryption request end generates the data encryption request for the data to be encrypted, it sends the data encryption request to the terminal or server for executing the data encryption algorithm, so that the terminal or server encrypts the data to be encrypted in response to the data encryption request. The encryption key is the key used to encrypt the data to be encrypted.

[0060] Specifically, after receiving a data encryption request for the data to be encrypted, the terminal or server generates an encryption key for encrypting the data to be encrypted in response to the data encryption request. In practical applications, the encryption key can be generated by a key management system or a key machine.

[0061] Furthermore, in actual applications, the terminal or server that generates the encryption key may be different from the terminal or server that executes the data encryption algorithm. Therefore, asymmetric encryption technology can be used to exchange encryption keys so that the terminal or server that executes the data encryption algorithm can obtain the encryption key. Furthermore, a secure channel, such as SSL (Secure Sockets Layer) or TLS (Transport Layer Security), can be used to implement a key exchange protocol using asymmetric encryption technology.

[0062] The data encryption method provided by the embodiment of the present invention can generate an encryption key for encrypting the data to be encrypted when receiving a data encryption request for the data to be encrypted, so that the process of encrypting the data to be encrypted can be performed based on the encryption key in a subsequent process.

[0063] Step 104: Split the encryption key into multiple encryption key segments, and split the data to be encrypted into multiple data segments to be encrypted, wherein the number of the encryption key segments is the same as the number of the data segments to be encrypted.

[0064] In order to improve the security of using an encryption key to encrypt data to be encrypted, an embodiment of the present invention divides the encryption key to obtain multiple encryption key segments, divides the data to be encrypted to obtain multiple data segments to be encrypted, and encrypts different data segments to be encrypted using different encryption key segments, thereby increasing the complexity of encrypting the data to be encrypted, and further improving the security of encrypting the data to be encrypted.

[0065] The encryption key segment refers to the key segment obtained by dividing the encryption key; the data segment to be encrypted refers to the data segment obtained by dividing the data to be encrypted.

[0066] Specifically, the encryption key is divided into multiple encryption key segments, and the data to be encrypted is divided into multiple data segments to be encrypted. The encryption key and the data to be encrypted can be divided using a segmentation function of a hash algorithm, or other methods can be used for division. For example, the encryption key and the data to be encrypted can be divided using a rolling hash function (Rabin-Karp algorithm), or the encryption key and the data to be encrypted can be divided using a fixed length, etc. The present invention does not limit the specific implementation method of the division of the encryption key and the data to be encrypted.

[0067] In practical applications, the implementation of segmenting the encryption key and the data to be encrypted based on the piecewise function of the hash algorithm can be seen in the following formula 1:

[0068] Ki=f(K,i) Formula 1

[0069] Where Ki is the i-th encryption key segment after segmentation, K is the encryption key, and f is the piecewise function of the hash algorithm. Formula 1 takes the encryption key as an example to illustrate the segmentation of the encryption key and the data to be encrypted. The segmentation process of the data to be encrypted can replace the encryption key in the above formula 1 with the data to be encrypted.

[0070] It should be noted that in order to ensure that each data segment to be encrypted has a corresponding encryption key segment for encryption, in the process of splitting the encryption key and the data to be encrypted, the number of encryption key segments after splitting needs to be the same as the number of data segments to be encrypted.

[0071] Step 106: Encrypt each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments.

[0072] After dividing the encryption key into multiple encryption key segments and the data to be encrypted into multiple data segments to be encrypted, in order to further improve the complexity and security of using each encryption key segment to encrypt each data segment to be encrypted, the embodiment of the present invention further encrypts each encryption key segment through a chaotic mapping algorithm, obtains a chaotic sequence corresponding to each encryption key segment, and encrypts the data segment to be encrypted based on the generated chaotic sequence.

[0073] The chaotic mapping algorithm may specifically include a tent chaotic mapping algorithm, a logistic chaotic mapping algorithm, etc. In the embodiment of the present invention, the tent chaotic mapping algorithm is preferred. The chaotic sequence includes a plurality of chaotic mapping values ​​after the encryption key segment is subjected to chaotic mapping. The chaotic mapping value is the result after the encryption key segment is subjected to chaotic mapping.

[0074] In a specific implementation manner provided by the present invention, each encryption key segment is encrypted based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each encryption key segment, including:

[0075] According to each of the encryption key segments, an initial value corresponding to each of the encryption key segments is generated, wherein the initial value is used as an initial condition of the chaotic mapping algorithm;

[0076] Determining the number of the plurality of encryption key segments as the number of iterations of the chaotic mapping algorithm;

[0077] Each encryption key segment is encrypted according to the initial value corresponding to each encryption key segment and the number of iterations, so as to generate a chaotic sequence corresponding to each encryption key segment.

[0078] The initial value refers to the initial condition for executing the chaotic mapping algorithm on the encryption key segment, and the initial value may be a seed value derived from the encryption key segment.

[0079] Specifically, according to each encryption key segment, an initial value corresponding to each encryption key segment is generated, and the number of multiple encryption key segments obtained by dividing the encryption key is determined as the number of iterations of the chaotic mapping algorithm executed on each encryption key segment. According to the initial value and the number of iterations corresponding to each encryption key segment, the chaotic mapping algorithm is executed on each encryption key segment respectively to encrypt each encryption key segment, and a chaotic sequence corresponding to each encryption key segment is generated.

[0080] For example, the encryption key K is divided into encryption key segment K1, encryption key segment K2, encryption key segment K3 and encryption key segment K4. According to encryption key segment K1, encryption key segment K2, encryption key segment K3 and encryption key segment K4, the initial value Z1 of encryption key segment K1, the initial value Z2 of encryption key segment K2, the initial value Z3 of encryption key segment K3 and the initial value Z4 of encryption key segment K4 are generated respectively. Since the encryption key K is divided into four encryption key segments, it can be determined that the number of iterations of the chaotic mapping algorithm is 4. According to the initial value of each encryption key segment and the execution of 4 iterations of the chaotic mapping algorithm for each encryption key segment, each encryption key segment is encrypted by chaotic mapping to generate a chaotic sequence corresponding to each encryption key segment.

[0081] In practical applications, the initial value of the encryption key segment can be generated based on the hash function, for example, the encryption key segment is passed as input to the hash function, and the output of the hash function is determined as the initial value of the encryption key segment; or after obtaining multiple encryption key segments after segmentation, the corresponding initial value can be customized for each encryption key segment. The method for generating the initial value corresponding to the encryption key segment can be determined according to the actual application situation, and the present invention is not limited here.

[0082] The following explains the implementation process of performing chaotic mapping encryption on each encryption key segment according to the initial value and the number of iterations after determining the initial value and the number of iterations corresponding to each encryption key segment.

[0083] In a specific implementation of the present invention, each encryption key segment is encrypted according to the initial value and the number of iterations corresponding to each encryption key segment, and a chaotic sequence corresponding to each encryption key segment is generated, including:

[0084] For any encryption key segment, performing chaotic mapping of the iteration number based on the initial value corresponding to the encryption key segment, and obtaining chaotic mapping values ​​corresponding to the iteration number respectively;

[0085] Based on multiple chaotic mapping values, a chaotic sequence corresponding to the encryption key segment is generated.

[0086] Specifically, after determining the initial value and number of iterations corresponding to each encryption key segment, a chaotic mapping algorithm can be executed on each encryption key segment. Based on the initial value corresponding to each encryption key segment, a chaotic mapping such as the number of iterations is performed to obtain the chaotic mapping value outputted by each iteration. After the iteration is completed, multiple chaotic mapping values ​​can be obtained, and a chaotic sequence corresponding to each encryption key segment is generated based on the multiple chaotic mapping values.

[0087] Further, the chaotic mapping algorithm is explained by taking the tent chaotic mapping algorithm as an example. The execution process of the tent chaotic mapping algorithm can be specifically referred to in the following formula 2:

[0088]

[0089] Where a is a constant, and 0<a<1; x j is the chaotic mapping value, and x0 is the initial value. Substituting the initial value corresponding to each encryption key segment into the above formula 2, the chaotic mapping value after iteration can be obtained. After the iteration is completed, the chaotic mapping value corresponding to each iteration can be obtained. Further, the method for calculating and generating the chaotic sequence corresponding to each encryption key segment is shown in the following formula 3:

[0090] Ci=Φ(Ki,x0,λ) Formula 3

[0091] Wherein, Ci is the chaotic sequence corresponding to the i-th encryption key segment, Ki is the i-th encryption key segment, λ is the control parameter, which can be specifically the number of iterations, and Φ is the chaotic mapping function, which can be specifically the tent chaotic mapping function or the logistic chaotic mapping function. After determining the initial value and the number of iterations corresponding to each encryption key segment, the chaotic sequence corresponding to each encryption key segment is calculated respectively according to the above formula 3.

[0092] Continuing to take the tent chaotic mapping algorithm as an example, the implementation process of generating the chaotic sequence corresponding to each encryption key segment is explained. For example, for the encryption key segment Ki, its initial value is x0, and x0 is substituted into the above formula 2 to obtain the chaotic mapping value x1 after the first iteration of the encryption key segment Ki; x1 is substituted into the above formula 2 to obtain the chaotic mapping value x2 after the second iteration of the encryption key segment Ki; x2 is substituted into the above formula 2 to obtain the chaotic mapping value x3 after the third iteration of the encryption key segment Ki; ... until the iteration of the encryption key segment Ki is completed, and λ chaotic mapping values ​​are obtained (taking the number of iterations as λ as an example). According to the λ chaotic mapping values, the chaotic sequence Ci corresponding to the encryption key segment Ki is generated as {x1, x2, x3...xλ}.

[0093] After obtaining multiple encryption key segments and multiple data segments to be encrypted, the embodiment of the present invention further encrypts the encryption key segments according to a chaotic mapping algorithm to generate a chaotic sequence corresponding to each encryption key segment. In the subsequent process, each data segment to be encrypted is encrypted according to the chaotic sequence corresponding to each encryption key segment, thereby improving the security of encrypting the data segments to be encrypted and preventing the leakage of the encrypted data.

[0094] Step 108: Encrypt the multiple data segments to be encrypted based on multiple chaotic sequences to obtain encrypted data.

[0095] After obtaining the chaotic sequence corresponding to each encryption key segment, each data segment to be encrypted can be encrypted according to each chaotic sequence to obtain encrypted data. The encrypted data is the data after the encrypted data is encrypted, including multiple encrypted data segments. The encrypted data segment is the data segment after the encrypted data segment is encrypted.

[0096] In a specific implementation of the present invention, the plurality of data segments to be encrypted are encrypted based on a plurality of chaotic sequences to obtain encrypted data, including:

[0097] Determine a chaotic sequence corresponding to each data segment to be encrypted according to the corresponding relationship between the multiple chaotic sequences and the multiple data segments to be encrypted;

[0098] Based on the chaotic sequence corresponding to each data segment to be encrypted, encrypt each data segment to be encrypted to obtain multiple encrypted data segments;

[0099] The plurality of encrypted data segments are combined to obtain encrypted data.

[0100] Specifically, after generating a chaotic sequence corresponding to each data segment to be encrypted, each data segment to be encrypted is encrypted according to the chaotic sequence corresponding to each data segment to be encrypted, and an encrypted data segment corresponding to each data segment to be encrypted can be obtained. Each encrypted data segment is combined to obtain encrypted data corresponding to the data to be encrypted.

[0101] Furthermore, combined with Figure 2 , the above data encryption process is explained. Figure 2 , Figure 2 FIG. 2 is a schematic diagram showing a data encryption method according to an embodiment of the present invention. Figure 2 As shown, after the encryption key is divided, n encryption key segments are obtained, namely K1, K2, K3...Kn, and the initial values ​​and iteration times corresponding to the encryption key segments K1, K2, K3...Kn are determined. According to the initial values ​​and iteration times corresponding to each encryption key segment, chaotic mapping is performed on each encryption key segment to obtain the chaotic mapping value after each iteration. After the iteration is completed, multiple chaotic mapping values ​​can be obtained, and the chaotic sequence corresponding to each encryption key segment is generated based on the multiple chaotic mapping values, that is, Figure 2 The chaotic sequence C1, C2, C3...Cn shown. After the data to be encrypted is segmented, n data segments to be encrypted are obtained, which are the same as the number of encryption key segments, namely M1, M2, M3...Mn. Based on the encryption key segment corresponding to each data segment to be encrypted, the corresponding data segments to be encrypted are encrypted to obtain the encrypted data segments corresponding to each data segment to be encrypted, namely E1, E2, E3...En. The n encrypted data segments E1, E2, E3...En are combined to obtain the encrypted data E of the data to be encrypted.

[0102] In practical applications, the steps of encrypting the data segment to be encrypted based on the chaotic sequence can be implemented through XOR operation. The specific implementation method is as follows:

[0103] In a specific implementation of the present invention, each data segment to be encrypted is encrypted based on the chaotic sequence corresponding to each data segment to be encrypted to obtain multiple encrypted data segments, including:

[0104] For any data segment to be encrypted and the chaotic sequence corresponding to the data segment to be encrypted, a bitwise XOR operation is performed to obtain an encryption XOR result corresponding to the data segment to be encrypted and each element in the chaotic sequence;

[0105] Based on the encrypted XOR results corresponding to the data segment to be encrypted and each element in the chaotic sequence, an encrypted data segment of the data segment to be encrypted is obtained.

[0106] The encryption XOR result refers to the XOR result between the data segment to be encrypted and each element in the chaotic sequence. The encryption XOR result is specifically a value of 0 or 1.

[0107] Specifically, for any one of the multiple data segments to be encrypted, a bitwise exclusive OR operation is performed on the elements in the data segment to be encrypted and the elements in the chaotic sequence corresponding thereto, as shown in the following formula 4:

[0108]

[0109] Among them, Ei is the i-th encrypted data segment, Mi is the i-th data segment to be encrypted, Ci is the i-th chaotic sequence, Represents a bitwise exclusive-or operation.

[0110] Specifically, it is to determine whether the values ​​of the elements in the data segment to be encrypted are the same as the corresponding elements in the chaotic sequence. If they are different, the encryption XOR result is 1. If they are the same, the encryption XOR result is 0. Through this execution method, a sequence with values ​​of 0-1 can be obtained, and the sequence is determined as the encrypted encrypted data segment.

[0111] Based on the above method, multiple encrypted data segments are combined to obtain complete encrypted data. Specifically, the concatenation operation can be performed on multiple encrypted data segments:

[0112] E=E1|E2|...|En Formula 5

[0113] Among them, | represents the connection operation between each encrypted data segment.

[0114] It should be noted that combining multiple encrypted data segments into completed encrypted data is to reduce the computing resources consumed in the process of transmitting encrypted data. If in actual applications, the number of data segments to be encrypted obtained by segmentation is small, it is also possible to directly transmit each encrypted data segment without combining the encrypted data segments after encrypting the encrypted data segments corresponding to each data segment to be encrypted.

[0115] The data encryption method provided by the present invention encrypts each data segment to be encrypted based on each chaotic sequence by bitwise XOR operation, thereby obtaining the encrypted data segment corresponding to each data segment to be encrypted, and combining each encrypted data segment to obtain the encrypted data corresponding to the data to be encrypted, thereby improving the security and reliability of encrypting the data to be encrypted.

[0116] In actual applications, the terminal or server used to encrypt the data to be encrypted can also receive the encrypted data and decrypt the encrypted data. The specific implementation method is as follows:

[0117] Accordingly, in a specific embodiment provided by the present invention, the method further comprises:

[0118] Receiving encrypted data and a plurality of chaotic sequences corresponding to the encrypted data;

[0119] Slicing the encrypted data to obtain a plurality of encrypted data segments, wherein the number of the plurality of encrypted data segments is the same as the number of the plurality of chaotic sequences;

[0120] Decrypting the multiple encrypted data segments respectively based on the multiple chaotic sequences to obtain multiple decrypted data segments corresponding to the multiple encrypted data segments;

[0121] The plurality of decrypted data segments are combined to obtain decrypted data.

[0122] Among them, encrypted data refers to data that needs to be decrypted after encryption; encrypted data segments refer to data segments obtained after segmenting the encrypted data; and decrypted data segments refer to data segments obtained after decrypting the encrypted data segments.

[0123] Specifically, encrypted data and multiple chaotic sequences for decrypting the encrypted data are received, and the encrypted data is segmented to obtain encrypted data segments having the same number as the chaotic sequences. The implementation method for segmenting the encrypted data can be the same as the implementation method for segmenting the encryption key and the data to be encrypted. The chaotic sequence corresponding to each encrypted data segment is determined, and each encrypted data segment is decrypted according to the chaotic sequence corresponding to each encrypted data segment to obtain the decrypted data segment corresponding to each encrypted data segment, and the decrypted data segment corresponding to the encrypted data can be obtained by combining the decrypted data segments.

[0124] Furthermore, the implementation method of decrypting each encrypted data segment based on each chaotic sequence is similar to the implementation method of encrypting each to-be-encrypted data segment based on each chaotic sequence, which is as follows:

[0125] In a specific implementation manner provided by the present invention, the plurality of encrypted data segments are decrypted based on the plurality of chaotic sequences to obtain a plurality of decrypted data segments corresponding to the plurality of encrypted data segments, including:

[0126] For any encrypted data segment, determining a chaotic sequence corresponding to the encrypted data segment;

[0127] Performing a bitwise XOR operation on the encrypted data segment and the chaotic sequence to obtain a decryption XOR result corresponding to each element in the encrypted data segment and the chaotic sequence;

[0128] Based on the encrypted data segment and the decryption XOR result corresponding to each element in the chaotic sequence, a decrypted data segment of the encrypted data segment is obtained.

[0129] The decryption XOR result refers to the XOR result between the encrypted data segment and each element in the chaotic sequence, and the decryption XOR result specifically takes a value of 0 or 1.

[0130] Specifically, for any one of the multiple encrypted data segments, after determining the chaotic sequence corresponding thereto, a bitwise XOR operation is performed on the elements in the encrypted data segment and the elements in the chaotic sequence corresponding thereto, as specifically referred to in the following formula 6:

[0131]

[0132] Among them, Mi' is the i-th decrypted data segment, Ei' is the i-th encrypted data segment, Ci' is the i-th chaotic sequence, Represents a bitwise XOR operation. The same as the above method for obtaining the encryption XOR result, by performing a bitwise XOR operation on each encrypted data segment and each chaotic sequence, the decryption XOR result of the encrypted data segment is obtained, and a sequence with a value of 0-1 is obtained according to the decryption XOR result, and the sequence is determined as the decrypted data segment after decryption.

[0133] Based on the same method as above, multiple decrypted data segments are obtained, and the multiple decrypted data segments are combined to obtain complete decrypted data. Specifically, a connection operation can be performed on the multiple decrypted data segments:

[0134] M'=M1' |M2' |...|Mn' Formula 7

[0135] Among them, | represents the connection operation between each decrypted data segment.

[0136] Based on multiple chaotic sequences corresponding to the encrypted data, the encrypted data is decrypted so that each encrypted data segment after segmentation corresponds to a specific chaotic sequence, so that the encrypted data segment can be flexibly adapted to the chaotic sequence, thereby increasing the difficulty of cracking the encryption key and encrypted data and reducing the possibility of encrypted data leakage.

[0137] The data encryption method provided by the present invention includes: generating an encryption key for the data to be encrypted in response to a data encryption request for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted; dividing the encryption key to obtain multiple encryption key segments, dividing the data to be encrypted to obtain multiple data segments to be encrypted, wherein the number of encryption key segments is the same as the number of data segments to be encrypted; encrypting each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments; encrypting the multiple data segments to be encrypted based on multiple chaotic sequences to obtain encrypted data.

[0138] The embodiment provided by the present invention realizes that, by dividing the data to be encrypted and the encryption key of the data to be encrypted, a plurality of data segments to be encrypted and a plurality of encryption key segments are obtained, so that each encryption key segment can independently encrypt the corresponding data segment to be encrypted, thereby improving the complexity of encrypting the data to be encrypted; by encrypting each encryption key segment separately through a chaotic mapping algorithm, the security of the encryption key segment can be improved, thereby further improving the security of encrypting each data segment to be encrypted based on a chaotic sequence, reducing the possibility of the encrypted data being attacked and cracked, and avoiding the leakage of the encrypted data.

[0139] The following combination Figure 3 , the data encryption method provided by the embodiment of the present invention is further explained. Figure 3 A processing flow chart of a data encryption method provided according to an embodiment of the present invention is shown. Figure 3 As shown, an encryption key is generated by a key management system, and an asymmetric encryption key exchange protocol is used to exchange encryption keys, so that each terminal involved in data encryption can obtain the encryption key. The encryption key is divided to obtain multiple encryption key segments of the encryption key. An initial value corresponding to each encryption key segment is generated, and based on the initial value corresponding to each encryption key segment, a chaotic mapping algorithm is executed on each encryption key segment to generate a chaotic sequence corresponding to each encryption key segment. The data to be encrypted is divided to obtain the same number of data segments to be encrypted as the encryption key segments. For each data segment to be encrypted, the corresponding chaotic sequence is used for encryption, which can be implemented by bitwise XOR operation to obtain the encrypted data segment corresponding to each data segment to be encrypted, and each data segment to be encrypted is combined to obtain the complete encrypted data corresponding to the data to be encrypted.

[0140] Accordingly, when receiving encrypted data that needs to be decrypted, the encrypted data is segmented to obtain the same number of encrypted data segments as the chaotic sequence used to encrypt the encrypted data. For each encrypted data segment, the corresponding chaotic sequence is used to decrypt, which can also be achieved by bitwise XOR operation to obtain the decrypted data segment corresponding to each encrypted data segment, and each decrypted data segment is combined to obtain the complete decrypted data corresponding to the encrypted data.

[0141] The embodiment of the present invention realizes that the encryption key is divided into multiple encryption key segments, each encryption key segment independently participates in the encryption process, and further combines the chaotic mapping algorithm with each encryption key segment. Based on the complexity and unpredictability of the chaotic mapping algorithm, the randomness and anti-attack performance of the encryption of the encrypted data are increased, the security of encrypting each data segment to be encrypted based on the chaotic sequence is improved, the possibility of the encrypted data being attacked and cracked is reduced, and the encrypted data is prevented from being leaked.

[0142] The step division of the above methods is only for the purpose of clear description. When implemented, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent; adding insignificant modifications to the algorithm or process or introducing insignificant designs without changing the core design of the algorithm and process are all within the scope of protection of this patent.

[0143] In a second aspect, an embodiment of the present invention provides a data encryption device. Figure 4 FIG. 4 shows a structural block diagram of a data encryption device provided according to an embodiment of the present invention. Figure 4 As shown, the data encryption device comprises:

[0144] A generating module 402 is configured to generate an encryption key for the data to be encrypted in response to a data encryption request for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted;

[0145] The segmentation module 404 is configured to segment the encryption key to obtain a plurality of encryption key segments, and segment the data to be encrypted to obtain a plurality of data segments to be encrypted, wherein the number of the encryption key segments is the same as the number of the data segments to be encrypted;

[0146] The first encryption module 406 is configured to encrypt each encryption key segment based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each encryption key segment;

[0147] The second encryption module 408 is configured to encrypt the multiple data segments to be encrypted based on multiple chaotic sequences respectively to obtain encrypted data.

[0148] Optionally, the first encryption module 406 is further configured to:

[0149] According to each of the encryption key segments, an initial value corresponding to each of the encryption key segments is generated, wherein the initial value is used as an initial condition of the chaotic mapping algorithm;

[0150] Determining the number of the plurality of encryption key segments as the number of iterations of the chaotic mapping algorithm;

[0151] Each encryption key segment is encrypted according to the initial value corresponding to each encryption key segment and the number of iterations, so as to generate a chaotic sequence corresponding to each encryption key segment.

[0152] Optionally, the first encryption module 406 is further configured to:

[0153] For any encryption key segment, performing chaotic mapping of the iteration number based on the initial value corresponding to the encryption key segment, and obtaining chaotic mapping values ​​corresponding to the iteration number respectively;

[0154] Based on multiple chaotic mapping values, a chaotic sequence corresponding to the encryption key segment is generated.

[0155] Optionally, the second encryption module 408 is further configured to:

[0156] Determine a chaotic sequence corresponding to each data segment to be encrypted according to the correspondence between the multiple chaotic sequences and the multiple data segments to be encrypted;

[0157] Based on the chaotic sequence corresponding to each data segment to be encrypted, encrypt each data segment to be encrypted to obtain multiple encrypted data segments;

[0158] The plurality of encrypted data segments are combined to obtain encrypted data.

[0159] Optionally, the second encryption module 408 is further configured to:

[0160] For any data segment to be encrypted and the chaotic sequence corresponding to the data segment to be encrypted, a bitwise XOR operation is performed to obtain an encryption XOR result corresponding to the data segment to be encrypted and each element in the chaotic sequence;

[0161] Based on the encrypted XOR results corresponding to the data segment to be encrypted and each element in the chaotic sequence, an encrypted data segment of the data segment to be encrypted is obtained.

[0162] Optionally, the device further includes a decryption module configured to:

[0163] Receiving encrypted data and a plurality of chaotic sequences corresponding to the encrypted data;

[0164] Slicing the encrypted data to obtain a plurality of encrypted data segments, wherein the number of the plurality of encrypted data segments is the same as the number of the plurality of chaotic sequences;

[0165] Decrypting the multiple encrypted data segments respectively based on the multiple chaotic sequences to obtain multiple decrypted data segments corresponding to the multiple encrypted data segments;

[0166] The plurality of decrypted data segments are combined to obtain decrypted data.

[0167] Optionally, the decryption module is further configured to:

[0168] For any encrypted data segment, determining a chaotic sequence corresponding to the encrypted data segment;

[0169] Performing a bitwise XOR operation on the encrypted data segment and the chaotic sequence to obtain a decryption XOR result corresponding to each element in the encrypted data segment and the chaotic sequence;

[0170] Based on the encrypted data segment and the decryption XOR result corresponding to each element in the chaotic sequence, a decrypted data segment of the encrypted data segment is obtained.

[0171] The data encryption device provided by the present invention includes: a generation module, configured to generate an encryption key for the data to be encrypted in response to a data encryption request for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted; a segmentation module, configured to segment the encryption key to obtain multiple encryption key segments, and segment the data to be encrypted to obtain multiple data segments to be encrypted, wherein the number of encryption key segments is the same as the number of data segments to be encrypted; a first encryption module, configured to encrypt each of the encryption key segments based on a chaotic mapping algorithm, and generate a chaotic sequence corresponding to each of the encryption key segments; a second encryption module, configured to encrypt the multiple data segments to be encrypted based on multiple chaotic sequences, and obtain encrypted data.

[0172] The embodiment provided by the present invention realizes that, by dividing the data to be encrypted and the encryption key of the data to be encrypted, a plurality of data segments to be encrypted and a plurality of encryption key segments are obtained, so that each encryption key segment can independently encrypt the corresponding data segment to be encrypted, thereby improving the complexity of encrypting the data to be encrypted; by encrypting each encryption key segment separately through a chaotic mapping algorithm, the security of the encryption key segment can be improved, thereby further improving the security of encrypting each data segment to be encrypted based on a chaotic sequence, reducing the possibility of the encrypted data being attacked and cracked, and avoiding the leakage of the encrypted data.

[0173] The functions or modules included in the device provided in the embodiment of the present invention can be used to execute the method described in the first aspect method embodiment above. Its specific implementation and technical effects can refer to the description of the above method embodiment. For the sake of brevity, they will not be repeated here.

[0174] It should be noted that all modules involved in this embodiment are logic modules. In practical applications, a logic unit may be a physical unit, or a part of a physical unit, or may be implemented as a combination of multiple physical units. In addition, in order to highlight the innovative part of the present invention, this embodiment does not introduce units that are not closely related to solving the technical problem proposed by the present invention, but this does not mean that there are no other units in this embodiment.

[0175] Reference Figure 5 , an embodiment of the present invention provides an electronic device, the electronic device 500 includes:

[0176] One or more processors 501;

[0177] A memory 502, on which one or more programs are stored. When the one or more programs are executed by one or more processors, the one or more processors implement the above-mentioned data encryption method;

[0178] One or more I / O interfaces 503 are connected between the processor and the memory and are configured to implement information exchange between the processor and the memory.

[0179] Among them, the processor 501 is a device with data processing capabilities, including but not limited to a central processing unit (CPU); the memory 502 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH); the I / O interface (read-write interface) 503 is connected between the processor 501 and the memory 502, and can realize information interaction between the processor 501 and the memory 502, including but not limited to a data bus (Bus), etc.

[0180] In some embodiments, the processor 501 , the memory 502 , and the I / O interface 503 are connected to each other through a bus, and further connected to other components of the computing device.

[0181] This embodiment also provides a computer-readable medium on which a computer program is stored. When the program is executed by a processor, the data encryption method provided in this embodiment is implemented. To avoid repeated description, the specific steps of the data encryption method are not repeated here.

[0182] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the invented method described above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some physical components or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0183] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0184] Those skilled in the art will understand that although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features from different embodiments is meant to be within the scope of the present embodiment and to form different embodiments.

[0185] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present invention, but the present invention is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims

1. A data encryption method, characterized in that: include: In response to a data encryption request for data to be encrypted, generating an encryption key for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted; Splitting the encryption key to obtain a plurality of encryption key segments, and splitting the data to be encrypted to obtain a plurality of data segments to be encrypted, wherein the number of the encryption key segments is the same as the number of the data segments to be encrypted; Encrypting each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments; The multiple data segments to be encrypted are encrypted respectively based on multiple chaotic sequences to obtain encrypted data.

2. The method according to claim 1, characterized in that Encrypting each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments includes: According to each of the encryption key segments, an initial value corresponding to each of the encryption key segments is generated, wherein the initial value is used as an initial condition of the chaotic mapping algorithm; Determining the number of the plurality of encryption key segments as the number of iterations of the chaotic mapping algorithm; Each encryption key segment is encrypted according to the initial value corresponding to each encryption key segment and the number of iterations, so as to generate a chaotic sequence corresponding to each encryption key segment.

3. The method according to claim 2, characterized in that According to the initial value corresponding to each encryption key segment and the number of iterations, each encryption key segment is encrypted respectively to generate a chaotic sequence corresponding to each encryption key segment, including: For any encryption key segment, performing chaotic mapping of the iteration number based on the initial value corresponding to the encryption key segment, and obtaining chaotic mapping values ​​corresponding to the iteration number respectively; Based on multiple chaotic mapping values, a chaotic sequence corresponding to the encryption key segment is generated.

4. The method according to claim 1, characterized in that Encrypting the plurality of data segments to be encrypted based on the plurality of chaotic sequences respectively to obtain encrypted data comprises: Determine a chaotic sequence corresponding to each data segment to be encrypted according to the correspondence between the multiple chaotic sequences and the multiple data segments to be encrypted; Based on the chaotic sequence corresponding to each data segment to be encrypted, encrypt each data segment to be encrypted to obtain multiple encrypted data segments; The plurality of encrypted data segments are combined to obtain encrypted data.

5. The method according to claim 4, characterized in that Based on the chaotic sequence corresponding to each data segment to be encrypted, each data segment to be encrypted is encrypted to obtain multiple encrypted data segments, including: For any data segment to be encrypted and the chaotic sequence corresponding to the data segment to be encrypted, a bitwise XOR operation is performed to obtain an encryption XOR result corresponding to the data segment to be encrypted and each element in the chaotic sequence; Based on the encrypted XOR results corresponding to the data segment to be encrypted and each element in the chaotic sequence, an encrypted data segment of the data segment to be encrypted is obtained.

6. The method according to claim 1, characterized in that The method further comprises: Receiving encrypted data and a plurality of chaotic sequences corresponding to the encrypted data; Slicing the encrypted data to obtain a plurality of encrypted data segments, wherein the number of the plurality of encrypted data segments is the same as the number of the plurality of chaotic sequences; Decrypting the multiple encrypted data segments respectively based on the multiple chaotic sequences to obtain multiple decrypted data segments corresponding to the multiple encrypted data segments; The plurality of decrypted data segments are combined to obtain decrypted data.

7. The method according to claim 6, characterized in that Decrypting the plurality of encrypted data segments respectively based on the plurality of chaotic sequences to obtain a plurality of decrypted data segments corresponding to the plurality of encrypted data segments comprises: For any encrypted data segment, determining a chaotic sequence corresponding to the encrypted data segment; Performing a bitwise XOR operation on the encrypted data segment and the chaotic sequence to obtain a decryption XOR result corresponding to each element in the encrypted data segment and the chaotic sequence; Based on the encrypted data segment and the decryption XOR result corresponding to each element in the chaotic sequence, a decrypted data segment of the encrypted data segment is obtained.

8. A data encryption device, characterized in that: include: A generating module, configured to generate an encryption key for the data to be encrypted in response to a data encryption request for the data to be encrypted, wherein the data encryption request is used to encrypt the data to be encrypted; a segmentation module configured to segment the encryption key to obtain a plurality of encryption key segments, and to segment the data to be encrypted to obtain a plurality of data segments to be encrypted, wherein the number of the encryption key segments is the same as the number of the data segments to be encrypted; A first encryption module is configured to encrypt each of the encryption key segments based on a chaotic mapping algorithm to generate a chaotic sequence corresponding to each of the encryption key segments; The second encryption module is configured to encrypt the multiple data segments to be encrypted based on multiple chaotic sequences respectively to obtain encrypted data.

9. An electronic device, characterized in that: include: one or more processors; A memory having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 7; One or more I / O interfaces are connected between the processor and the memory and are configured to implement information interaction between the processor and the memory.

10. A computer-readable medium, characterized in that A computer program is stored thereon, and when the program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images