Encryption system and method for data cross-network transmission

Abstract

The application discloses an encryption system and method for data cross-network transmission, comprising a basic information acquisition module and an encrypted information output module, and relates to the technical field of data cross-network transmission encryption, solves the technical problem that the original encryption mode is too single, resulting in the risk of data theft in the data transmission process, and the encryption security degree is not high, the application analyzes whether there is a security risk in the data transmission by judging the security value through security value analysis of the transmission network, extracts and processes the repeated data of the transmission data according to the risk situation, and encrypts the data in different ways according to the parity of the repeated data capacity, analyzes the parity of the transmission data capacity according to the risk-free situation, and processes the transmission data in different ways according to the capacity value property, and encrypts the data, so as to improve the security in the data transmission process.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data cross-network transmission encryption, in particular to an encryption system and method for data cross-network transmission. BACKGROUND

[0002] With the informatization construction, when transmitting data in batches between companies, departments and systems, if the data is transmitted in plaintext, the communication channel may be eavesdropped by illegal persons to steal data. Encryption technology is a common security and privacy protection method.

[0003] According to the patent with the application number CN202210430731.4, the patent includes: the first MD5 encryption of the main key of each institution data of the institution space and the data space, the AES encryption of other fields; after encryption, fusion and transmission to the development space, after fusion, the second MD5 encryption of the main key is performed again; the matched result set is obtained by matching the fused each institution data and the fused each institution exclusive model data according to the second MD5 encryption of the main key; the matched result set is transmitted back to each institution in the institution space according to the transmission channel of each institution in the institution space; each institution restores the main key according to MD5, and decrypts the fields except the main key according to AES, to obtain the exclusive model result of the institution. The present application realizes that when multiple institutions use the government data space data, the data is invisible and avoids the risk of government data transmission leakage.

[0004] Some existing data cross-network transmission needs to be verified, but when there is a risk of verification, data transmission will still be selected, and for such transmission, data needs to be encrypted, but the original encryption method is too single, resulting in the risk of data theft in the process of data transmission, and the encryption security is not high. SUMMARY

[0005] In view of the deficiencies of the prior art, the present application provides an encryption system and method for data cross-network transmission, which solves the problem of the original encryption method being too single, resulting in the risk of data theft in the process of data transmission, and the encryption security is not high.

[0006] To achieve the above purpose, the present application is realized by the following technical scheme: an encryption system for data cross-network transmission, comprising:

[0007] A basic information acquisition unit is configured to acquire the basic information of a target object and transmit it to a network security judgment module, wherein the target object includes: a current network, a target network and transmission data, and the basic information includes: network loading speed, attack frequency, leakage frequency and data capacity value;

[0008] A network security judgment module is configured to obtain the target object basic information transmitted and judge the security of the current network and the target network according to the basic information and generate a judgment result, wherein the judgment result includes a network normal signal and a network abnormal signal, the network normal signal is transmitted to a network security normal encryption module, the network abnormal signal is transmitted to a network security abnormal encryption module, and the specific manner in which the network security judgment module generates the judgment result is as follows:

[0009] A1: The specific manner in which the current network security is judged is as follows:

[0010] S1: Obtain the attack times and the leakage times of the current network and record them as G and X respectively, and then substitute them into the formula to calculate the protection value F of the current network.

[0011] S2: Then obtain the maximum loading speed and the minimum loading speed of the current network and record them as Smax and Smin respectively, and substitute the protection value F of the current network and the maximum and minimum loading speeds into the formula to calculate the security value Q1 of the current network, wherein a1 and a2 are both preset proportion coefficients and a1+a2=1.

[0012] S3: Compare the calculated security value Q1 of the current network with the preset security value YS, when Q1>YS, it indicates that the security value of the current network exceeds the preset security value, and the current network is secure, otherwise when Q1<YS, it indicates that the security value of the current network does not exceed the security value, and the current network is not secure.

[0013] A2: Similarly, the target network security is judged in the same manner as the current network security, and the security of data transmission is judged by combining the current network security and the target network security, and the specific judgment manner is as follows: if both the current network and the target network are secure, the system generates a network normal signal, if either of the current network and the target network is not secure, the system generates a network abnormal signal. Specifically, only when both network environments are secure, the environment for data transmission is secure, and when any one of the network environments is not secure, the system automatically determines that the environment for data transmission is not secure.

[0014] A network security abnormal encryption module is configured to obtain the network abnormal signal transmitted and analyze it, extract and analyze the repeated data in the transmitted data, further encrypt according to the repeated data and generate corresponding encryption information, and transmit the encryption information to an encryption information output module, and the specific manner in which the network security abnormal encryption module generates the encryption information is as follows:

[0015] P1: Obtain the transmission data and mark the repeated data in it as CF, extract the repeated data CF, then convert the repeated data to binary to generate binary repeated data CF1, and then obtain the capacity value of the binary repeated data CF1 as Rc. It should be noted that the repeated data refers to the same data in the transmission data, for example, the transmission data is numerical data: 12423423 and 12353953, where 1, 2 and 3 are repeated data, then the repeated data is marked and extracted for subsequent processing and analysis.

[0016] P2: Then, according to the parity of the Rc value, different analysis and processing are carried out, and the specific analysis and processing method is as follows:

[0017] P21: When the Rc value is odd, obtain the binary repeated data CF1 and perform reverse processing on it, then convert the reverse processed binary repeated data CF1 to generate processing data. It should be noted that if the capacity value of the transmission data is odd, it is equivalent to judging the tail of the capacity value, and the tail of 1, 3, 5, 7 and 9 represents an odd number. Then, after converting the repeated data to binary, the whole is reversed, and then the reversed binary is processed to restore the original data.

[0018] P22: When the Rc value is even, obtain the binary repeated data CF1, and perform adjacent reduction processing on the binary to generate reduced data, then obtain the capacity value of the reduced data as R1, obtain the difference between the capacity value R1 of the reduced data and the capacity value Rc of the binary repeated data, and generate padding data with the same capacity value according to the order of binary 0101, and recombine the padding data with the reduced data to generate the restored data. It should be noted that if the capacity value of the transmission data is even, it is equivalent to judging the tail of the capacity value, and the tail of 2, 4, 6, 8 represents an even number. Then, the same binary in the repeated data converted to binary is reduced.

[0019] P3: Obtain the non-repeated data in the transmission data and recombine it with the repeated data to generate encrypted data, and the specific way to generate the encrypted data is:

[0020] P31: Obtain the repeated data in the transmission data and label it according to the order and mark it as j, and j = 1, 2, …, m, then obtain all the non-repeated data in the transmission data;

[0021] P32: When the repeated data capacity value Rc is odd, reverse process all the non-repeated data and recombine it with the repeated data to generate encrypted data, and generate corresponding encryption information;

[0022] P33: When the repeated data capacity value Rc is even, all non-repeated data is obtained and descends in sequence, then the repeated data is reorganized according to the descending order of the label to generate encrypted data corresponding to the non-repeated data, and the corresponding encrypted information is generated. It should be noted that the meaning of reorganization according to the descending order of the label is that the label of the repeated data is initially labeled from small to large according to the position, and the repeated data is first processed in descending order during reorganization, and then filled into the original small-to-large position to generate encrypted data according to the descending order of the label.

[0023] The network security normal encryption module is used for obtaining and analyzing the transmitted network normal signal, generating corresponding segmented data by segmenting in different ways according to the parity of the transmission data capacity value, then performing encryption processing on the segmented data to generate corresponding encrypted information, and transmitting the encrypted information to the encrypted information output module;

[0024] The encrypted information output module is used for obtaining and storing the transmitted encrypted information.

[0025] Advantages

[0026] The present application provides an encryption system and method for data transmission across the network. Compared with the prior art, the following advantages are achieved:

[0027] The present application analyzes the security value of the transmission network, analyzes whether there is a security risk during data transmission by judging the security value, extracts and processes the repeated data of the transmission data for the case of risk, and encrypts in different ways according to the parity of the repeated data capacity, analyzes the parity of the transmission data capacity for the case of no risk, and encrypts the transmission data in different ways according to the different capacity value properties, which can improve the security of the data transmission process. BRIEF DESCRIPTION OF DRAWINGS

[0028] Figure 1 The system block diagram of the present application;

[0029] Figure 2 The method diagram of the present application. DETAILED DESCRIPTION

[0030] The technical solutions in the embodiments of the present application will be described clearly and completely in combination with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application.

[0031] Please refer to Figure 1 The application provides an encryption system for data transmission across networks, comprising:

[0032] An underlying information acquisition unit is configured to acquire underlying information of target objects and transmit the underlying information to a network security judgment module, wherein the target objects include a current network, a target network and transmission data, and the underlying information includes network loading speed, attack frequency, leakage frequency and data capacity value.

[0033] A network security judgment module is configured to acquire the underlying information of the target objects to be transmitted and judge the security of the current network and the target network according to the underlying information and generate a judgment result, wherein the judgment result includes a network normal signal and a network abnormal signal, the network normal signal is transmitted to a network security normal encryption module, the network abnormal signal is transmitted to a network security abnormal module, and the specific way of generating the judgment result is as follows:

[0034] A1: The specific way of judging the security of the current network is as follows:

[0035] S1: Acquire the attack frequency and the leakage frequency of the current network and record them as G and X respectively, then substitute them into the formula to calculate the protection value F of the current network;

[0036] S2: Then acquire the maximum value and the minimum value of the current network loading speed and record them as Smax and Smin respectively, and substitute the protection value F of the current network and the maximum value and the minimum value of the loading speed into the formula to calculate the security value Q1 of the current network, wherein a1 and a2 are both preset proportion coefficients, and a1+a2=1;

[0037] S3: Compare the calculated security value Q1 of the current network with the preset security value YS, when Q1>YS, it indicates that the security value of the current network exceeds the preset security value, and the current network is secure, otherwise when Q1<YS, it indicates that the security value of the current network does not exceed the security value, and the current network is not secure; specifically, the value of the preset security value YS is set by the operator, and the network environment is judged to be secure or not by comparing the security value with it.

[0038] A2: The same as the current network security judgment mode, the target network security judgment is obtained, and the current network security and the target network security are comprehensively judged for data transmission security. The specific judgment mode is: if the current network and the target network are both safe, the system generates a network normal signal, if any of the current network and the target network is unsafe, the system generates a network abnormal signal. Specifically, only when both network environments are safe, the data transmission environment is safe, when any network environment is unsafe, the system automatically determines that the data transmission environment is unsafe.

[0039] The network security abnormal encryption module is used for obtaining and analyzing the transmission network abnormal signal. The repeated data in the transmission data is extracted and analyzed, and the repeated data is further encrypted to generate corresponding encryption information, which is transmitted to the encryption information output module. The specific way of generating encryption information is as follows:

[0040] P1: Obtain the transmission data and mark the repeated data as CF, and extract the repeated data CF. Then, the repeated data is converted into binary repeated data CF1, and the capacity value of the binary repeated data CF1 is obtained as Rc. It should be noted that the repeated data refers to the same data in the transmission data, for example, the transmission data is numerical data: 12423423 and 12353953, wherein 1, 2 and 3 are repeated data. Then, the repeated data is marked and extracted for subsequent processing and analysis.

[0041] P2: Then, different analysis and processing are performed according to the parity of Rc value. The specific analysis and processing method is as follows:

[0042] P21: When Rc value is odd, obtain the binary repeated data CF1 and perform reverse processing on it, and then convert the reverse processed binary repeated data CF1 into original data to generate processing data. It should be noted that if the capacity value of the transmission data is odd, it is equivalent to judging the tail of the capacity value. The tail is 1, 3, 5, 7 and 9, which indicates that it is odd. Then, the repeated data is converted into binary number, and the whole is reversed in sequence. Then, the reversed binary number is processed to restore the original data.

[0043] P22: When the value of Rc is even, the binary repeated data CF1 is obtained, and the binary is reduced to generate reduced data, then the capacity value of the reduced data is obtained and recorded as R1, the difference between the capacity value R1 of the reduced data and the capacity value Rc of the binary repeated data is obtained, and the padding data with the same capacity value is generated according to the order of binary 0101, and the padding data and the reduced data are recombined to generate the recovered data. It should be noted that if the capacity value of the transmission data is even, it is equivalent to judging the capacity value of the tail, and the tail is 2, 4, 6, 8, which represents even number, and then the same binary in the repeated data converted to binary is reduced, 011101000 can be reduced to 0110100 form of reduced data, and then the padding data is generated according to the capacity difference, and the generation mode of the padding data is generated according to the form of 0101.

[0044] P3: The non-repeated data in the transmission data is obtained and recombined with the repeated data to generate encrypted data, and the specific way of generating the encrypted data is:

[0045] P31: The repeated data in the transmission data is obtained and labeled in order and recorded as j, and j=1, 2, …, m, then all the non-repeated data in the transmission data is obtained.

[0046] P32: When the capacity value Rc of the repeated data is odd, all the non-repeated data is processed in reverse order, and is recombined with the repeated data to generate encrypted data, and the corresponding encryption information is generated;

[0047] P33: When the capacity value Rc of the repeated data is even, all the non-repeated data is obtained and processed in reverse order, then the repeated data is reversed in order from large to small, and is recombined with the non-repeated data to generate encrypted data, and the corresponding encryption information is generated. It should be noted that the meaning of recombination from large to small according to the label is that the label of the repeated data is labeled from small to large according to the position at first, and then the repeated data is reversed, and then filled into the original position from small to large to generate encrypted data according to the label from large to small.

[0048] The encryption information output module is used to obtain the transmission encryption information and store it.

[0049] Embodiment two, as the embodiment two of the application, the difference between embodiment one is that the network security normal encryption module obtains the network normal signal and analyzes it.

[0050] The network security normal encryption module is used for acquiring and analyzing the transmitted network normal signal, generating corresponding segmented data according to the parity of the transmission data capacity value and different segmentation manners, encrypting the segmented data to generate corresponding encryption information, and transmitting the encryption information to the encryption information output module.

[0051] T1: Acquire the capacity value of the transmission data and record it as RL. When the transmission data capacity value RL is odd, the specific method for generating encryption information is as follows:

[0052] B1: Acquire the capacity value RL of the transmission data and segment the segmented data into nine equal parts according to the capacity RL. Label the nine segmented data and record them as k, and k = 1, 2, …, 9. Then, encrypt the segmented data according to their integrity:

[0053] B11: When the segmented data has integrity, acquire the number of repeated data in a single segmented data, and recombine the segmented data with the same number to generate recombined data.

[0054] B12: When the segmented data does not have integrity, acquire the single segmented data and generate corresponding virtual data. Then, recombine the virtual data with the single segmented data to generate recombined data. It should be noted that the virtual data is generated according to the data before segmentation. If part of the data in the first segmented data exists in the second segmented data, generate the virtual data corresponding to the incomplete data of the first segmented data in the second data, and recombine the virtual data with the first segmented data.

[0055] T2: When the transmission data capacity value RL is even, the specific method for generating encryption information is as follows:

[0056] B2: Acquire the capacity value RL of the transmission data and segment the segmented data into eight equal parts according to the capacity RL. Label the eight segmented data and record them as o, and o = 1, 2, …, 8. Then, encrypt the single segmented data according to their capacity parity:

[0057] B21: When the segmented data is odd, acquire two groups of single segmented data whose label sum is 9, and recombine them to generate corresponding recombined data.

[0058] B22: When the segmented data is even, recombine the adjacent two single segmented data to generate corresponding recombined data.

[0059] The encryption information output module is used for acquiring and storing the transmitted encryption information.

[0060] Embodiment three, as an embodiment of the present application, focuses on the combination of the implementation process of embodiment one and embodiment two.

[0061] The encryption method for data transmission across networks, which specifically comprises the following steps:

[0062] Step one: judging whether the transmission environment is dangerous according to the security values of the current network and the target network, and classifying the transmission environment into network normal and network abnormal;

[0063] Step two: encrypting the transmission data when the network is abnormal, extracting and processing the repeated data of the transmission data, and obtaining encrypted information through different encryption methods according to the parity of the repeated data capacity;

[0064] Step three: encrypting the transmission data when the network is normal, analyzing the parity of the transmission data capacity, and obtaining encrypted information through different encryption methods according to the different capacity value properties;

[0065] Step four: storing the obtained encrypted information.

[0066] Meanwhile, the contents not described in detail in the specification all belong to the prior art known by those skilled in the art.

[0067] The above embodiments are only used to illustrate the technical method of the present application and are not limited. Although the present application has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present application can be modified or replaced equivalently without departing from the spirit and scope of the technical method of the present application.

Claims

1. An encryption system for data transmission across networks, characterized in that, The method comprises the following steps: The base information acquisition unit is used for acquiring the base information of the target object and transmitting the base information to the network security judgment module, wherein the target object comprises the current network, the target network and the transmission data, and the base information comprises the network loading speed, the attack times, the leakage times and the data capacity value; The network security judgment module is used for acquiring the transmitted base information of the target object and judging the security of the current network and the target network according to the base information and generating a judgment result, wherein the judgment result comprises the network normal signal and the network abnormal signal, the network normal signal is transmitted to the network security normal encryption module, and the network abnormal signal is transmitted to the network security abnormal encryption module; The network security abnormal encryption module is used for acquiring the transmitted network abnormal signal and analyzing the network abnormal signal, extracting and analyzing the repeated data in the transmission data, further encrypting according to the repeated data and generating corresponding encryption information, and transmitting the encryption information to the encryption information output module; The network security normal encryption module is used for acquiring the transmitted network normal signal and analyzing the network normal signal, generating corresponding segmentation data according to the parity of the transmission data capacity value, then encrypting the segmentation data to generate corresponding encryption information, and transmitting the encryption information to the encryption information output module; The encryption information output module is used for acquiring the transmitted encryption information and storing the encryption information.

2. The encryption system for data cross-network transmission according to claim 1, wherein, The specific way in which the network security judgment module generates the judgment result is as follows: A1: the specific way in which the current network security is judged is as follows: S1: Obtain the attack times and the leakage times of the current network and record them as G and X , then substitute them into the formula to calculate the protection value of the current network F ; S2: Next, obtain the current maximum and minimum network loading speeds and record them as follows: S max and S min, and simultaneously set the current network protection value F Substitute the maximum and minimum loading speeds into the formula The security value of the current network is calculated. Q 1, of which a 1 and a Both 2 are preset proportional coefficients, and a 1+ a 2 = 1; S3: compare the calculated current network security value with the preset security value YS Q 1 with preset security value YS, when Q 1 > YS, it means that the current network security value exceeds the security preset value, and the current network is secure, on the contrary, when Q 1 < YS, it means that the current network security value does not exceed the security value, and the current network is not secure; A2: the target network security is judged in the same way as the current network security, and the data transmission security is judged by comprehensively judging the current network security and the target network security, and the specific judgment way is that if the current network and the target network are both safe, the system generates a network normal signal, and if any of the current network and the target network is unsafe, the system generates a network abnormal signal.

3. The encryption system for data cross-network transmission according to claim 1, wherein, The specific way in which the network security abnormal encryption module generates the encryption information is as follows: P1: the transmission data is acquired, the repeated data in the transmission data is marked and recorded as CF, the repeated data CF is extracted, then the repeated data is converted into binary repeated data CF1, and the capacity value of the binary repeated data CF1 is acquired and recorded as Rc; P2: then, different analysis and processing are performed according to the parity of the Rc value, and the specific analysis and processing way is as follows: P21: when the Rc value is odd, the binary repeated data CF1 is acquired and processed in reverse order, and then the original data of the binary repeated data CF1 processed in reverse order is converted to generate processing data; P22: when the Rc value is even, the binary repeated data CF1 is acquired, the binary repeated data CF1 is processed to generate reduction data by adjacent reduction, then the capacity value of the reduction data is acquired and recorded as R1, the difference between the capacity value R1 of the reduction data and the capacity value Rc of the binary repeated data is acquired, the filling data with the same capacity value is generated according to the order of binary 0101, and the filling data and the reduction data are recombined to generate the restored data; P3: The non-repeated data in the transmission data is obtained and recombined with the repeated data to generate encrypted data, and the specific way of generating the encrypted data is: P31: The repeated data in the transmission data is obtained and labeled in order and recorded as j, and j = 1, 2, …, m, and then all the non-repeated data in the transmission data is obtained; P32: When the repeated data capacity value Rc is odd, all the non-repeated data is processed in reverse order, and is recombined with the repeated data to generate encrypted data, and the corresponding encryption information is generated; P33: When the repeated data capacity value Rc is even, all the non-repeated data is obtained and processed in reverse order, and then the repeated data is recombined with the non-repeated data in reverse order according to the label to generate encrypted data, and the corresponding encryption information is generated.

4. The encryption system for data transmission across networks according to claim 1, wherein, The specific way of generating the encryption information by the network security normal encryption module is as follows: T1: The capacity value of the transmission data is obtained and recorded as RL, and when the transmission data capacity value RL is odd, the specific way of generating the encryption information is as follows: B1: The capacity value RL of the transmission data is obtained and divided into nine equal parts of segmented data, and the nine parts of segmented data are labeled and recorded as k, and k = 1, 2, …, 9, and then different encryption is performed according to the integrity of the segmented data: B11: When the segmented data has integrity, the number of repeated data in a single segmented data is obtained, and the segmented data with the same number is recombined to generate recombined data; B12: When the segmented data does not have integrity, a single segmented data is obtained and corresponding virtual data is generated, and then the virtual data is recombined with the single segmented data to generate recombined data; T2: When the transmission data capacity value RL is even, the specific way of generating the encryption information is as follows: B2: The capacity value RL of the transmission data is obtained and divided into eight equal parts of segmented data, and the eight parts of segmented data are labeled and recorded as o, and o = 1, 2, …, 8, and then different encryption is performed according to the odd or even of the capacity of a single segmented data: B21: When the segmented data is odd, two groups of single segmented data with a label sum of 9 are obtained, and the two groups are recombined to generate corresponding recombined data; B22: When the segmented data is even, two adjacent single segmented data are recombined to generate corresponding recombined data.

5. The encryption method for data transmission across networks as claimed in any one of claims 1 to 4, characterized in that, The method specifically comprises the following steps: Step one: Determine whether the transmission environment of the transmission data is dangerous according to the security values of the current network and the target network, and classify the transmission environment into network normal and network abnormal; Step two: Encrypt the transmission data when the network is abnormal, extract and process the repeated data of the transmission data, and encrypt the repeated data in different ways according to the odd or even of the capacity of the repeated data to obtain encryption information; Step three: Encrypt the transmission data when the network is normal, analyze the odd or even of the capacity of the transmission data, and encrypt the transmission data in different ways according to the different capacity value properties to obtain encryption information; Step four: store the resulting encrypted information.

Images