Processing method and processing system for agriculture-related data

Abstract

The invention provides a processing method and processing system for agriculture-related data, and the method comprises the steps: carrying out the grading of collected agriculture-related user data, and obtaining sensitive data needing to be encrypted; carrying out convergence encryption on any sensitive data plaintext to obtain an encrypted ciphertext character string and a primary key; discretizing any ciphertext character string into at least two parts, and forming a data fragment set together with a primary key; encrypting the data fragment set, obtaining a corresponding secondary key, and forming an uploading transmission packet; after the secondary secret key is used for decrypting the uploading transmission packet, at least two decrypted data fragments are obtained, and a decrypted data fragment set is formed; obtaining the primary secret key in the decrypted data fragment set; combining at least two pieces of associated data in the decrypted data fragment set by using the primary key, and restoring the combined data into a sensitive data plaintext; according to the invention, the data security can be improved.

Description

Technical Field

[0001] The present disclosure relates to the field of agricultural data, and in particular to a processing method and system for agricultural data. Background Art

[0002] With the continuous advancement of science and technology, agricultural data analysis has become an important means of agricultural modernization. By analyzing a large amount of agricultural data, we can gain a deep understanding of the process and laws of agricultural production, predict future trends, and provide strong support for agricultural decision-making.

[0003] There is a special type of data in agricultural data, namely, financial data of agricultural users. These data are not only crucial to agricultural production, but also involve personal privacy and commercial secrets. Therefore, ensuring the security, integrity and availability of such data is a technical problem that needs to be solved urgently. The existing technical means to solve this technical problem include: in the data transmission link: using VPN (virtual private network) and other technologies to establish a secure transmission channel to protect the security of data during transmission; in the attack prevention link: using intrusion detection system (IDS) and intrusion prevention system (IPS) to monitor network traffic, detect and defend against potential attacks; in the data acquisition link: using digital certificates and public key infrastructure (PKI) for identity authentication and authorization to ensure the identity of both parties in data transmission is credible.

[0004] However, even if the above-mentioned technical means are adopted, the existing agricultural user data still faces a great risk of leakage during transmission and lacks security and reliability.

[0005] Based on this, the purpose of the present disclosure is to provide an encryption processing method for agricultural data. Summary of the invention

[0006] In order to solve the problems of the prior art, the present disclosure provides a processing method and system for agricultural data, which can solve at least one technical problem in the prior art.

[0007] The technical solution adopted by the present disclosure to solve the above technical problems is:

[0008] A method for processing agricultural data, comprising:

[0009] Collect agricultural user data;

[0010] Classify the collected agricultural user data to obtain sensitive data that needs to be encrypted;

[0011] Convergently encrypt any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key;

[0012] Discretize any of the ciphertext strings into at least two parts, and form a data fragment set together with the primary key;

[0013] Encrypting the data fragment set and obtaining a corresponding secondary key to form an upload transmission package;

[0014] After decrypting the upload transmission packet using the secondary key, at least two decrypted data fragments are obtained to form a decrypted data fragment set;

[0015] The primary key in the decrypted data fragment set is obtained; at least two associated data in the decrypted data fragment set are combined using the primary key to restore the data into plain text of sensitive data.

[0016] The discretizing any of the ciphertext strings into at least two parts, which together with the primary key form a data fragment set, includes:

[0017] Obtain the ciphertext string;

[0018] Segmenting the ciphertext string in random sizes, and obtaining at least two data segments during the segmentation process;

[0019] Add a unified statistical identifier to the tail of different data segments belonging to the same ciphertext string in order, and add a sequence number identifier to the head of different data segments to obtain data segments with identifiers;

[0020] Setting a key identifier at the end of the primary key file to obtain a key data segment;

[0021] The data segments with the identifiers and the key data segments are mixed and sorted to obtain the data fragment set.

[0022] The step of encrypting the data fragment set and obtaining a corresponding secondary key to form an upload transmission package includes:

[0023] When encrypting the data fragment set, a secondary ciphertext and a secondary key are generated, and the secondary key is split into N parts to form sub-keys, which are shared among at least N+1 key management servers;

[0024] For any of the key management servers, generating a path label for storing the divided key, and transmitting the path label to the key management server for storage;

[0025] The secondary ciphertext and the path label are used as an upload transmission packet, and the upload transmission packet is decrypted using the secondary key to obtain decrypted data fragments.

[0026] After decrypting the upload transmission packet using the secondary key, obtaining the decrypted data fragments includes:

[0027] Obtaining user permissions and granting permissions to authorized users to view the uploaded transmission package;

[0028] The user obtains the sub-keys from at least two key management servers respectively, and uses any J sub-keys as input to run a key recovery function to obtain a secondary key;

[0029] The user uses the secondary key to decrypt the secondary ciphertext to obtain decrypted data fragments.

[0030] The obtaining of the primary key in the decrypted data fragment set, and combining at least two associated data in the decrypted data fragment set using the primary key to restore the data into sensitive data plaintext, includes:

[0031] Respectively obtaining a primary key and a decrypted data fragment from the decrypted data fragment set, and storing the primary key and the decrypted data fragment separately;

[0032] Retrieving the tail end of the decrypted data fragments, and forming at least two to-be-retrieved data sets from the decrypted data fragments having the same statistical identifier;

[0033] At the same time, any of the data sets to be searched are searched and sorted according to the sequence of the head-end identifiers to obtain sorted data;

[0034] The sorted data is decrypted using the primary key to restore it to sensitive data plaintext.

[0035] The method for processing agricultural data further includes: a step of processing low-sensitivity agricultural user data that does not require encryption:

[0036] Transmitting the low-sensitivity agricultural user data to a cloud server;

[0037] The user interacts with the cloud server and runs a file ownership certification protocol to obtain the user's ownership of the low-sensitivity agricultural user data;

[0038] After passing the ownership authentication, the cloud server obtains the low-sensitivity agricultural user data.

[0039] The step of grading the collected agricultural user data and obtaining sensitive data that needs to be encrypted includes:

[0040] Obtain local sensitivity database;

[0041] By comparing the agriculture-related user data with the sensitivity database, determining whether there is sensitivity data in the agriculture-related user data;

[0042] The agricultural-related user data containing any sensitive data is regarded as sensitive data that needs to be encrypted.

[0043] The method for processing agricultural data further includes: a step of adjusting the sensitivity level of the agricultural user data:

[0044] Obtaining a local sensitivity database, and classifying the collected agricultural user data according to the local sensitivity database, and then performing convergent encryption to obtain an encrypted ciphertext string and a primary key;

[0045] Compare the local sensitivity database with the sensitivity database in the cloud:

[0046] If there is a difference, the level of the agricultural user data is adjusted according to the sensitivity database in the cloud, and the sensitivity level of the agricultural user data is re-evaluated to obtain sensitive data that needs to be encrypted and non-sensitive data that does not need to be encrypted;

[0047] Update the local sensitivity database.

[0048] For non-sensitive data that does not need to be encrypted, the encrypted ciphertext string and primary key are sent to the cloud for back-end decryption.

[0049] When there is no difference between the local sensitivity database and the cloud sensitivity database, the agricultural user data is transmitted based on the level of the local sensitivity database.

[0050] A processing system for agricultural data, based on the above processing method, includes:

[0051] Collection module, used to obtain agricultural user data;

[0052] A grading module, which interacts with the collection module to grade the collected agricultural user data and obtain sensitive data that needs to be encrypted;

[0053] A primary encryption module, which interacts with the grading module for data, is used to convergently encrypt any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key; and discretize any of the ciphertext strings into at least two parts, which together with the primary key form a data fragment set;

[0054] The secondary encryption module performs data interaction with the primary encryption module, and is used to encrypt the data fragment set and obtain the corresponding secondary key to form an upload transmission package;

[0055] A sending end, which performs data interaction with the secondary encryption module to upload the transmission package;

[0056] A receiving end, performing data interaction with the sending end, and configured to receive the transmission packet;

[0057] A secondary decryption module interacts with the receiving end data and is used to decrypt the uploaded transmission packet using the secondary key to obtain at least two decrypted data fragments to form a decrypted data fragment set;

[0058] The primary decryption module performs data interaction with the secondary decryption module to obtain the primary key in the decrypted data fragment set; and uses the primary key to combine at least two associated data in the decrypted data fragment set to restore them to sensitive data plaintext.

[0059] The beneficial effects of the present disclosure are:

[0060] The method disclosed in the present invention first classifies the collected agricultural user data to obtain sensitive data that needs to be encrypted; then, convergently encrypts any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key; discretizes any of the ciphertext strings into at least two parts, which together with the primary key form a data fragment set; then encrypts the data fragment set and obtains the corresponding secondary key to form an upload transmission package; after receiving the upload transmission package, the upload transmission package is decrypted using the secondary key to obtain at least two decrypted data fragments to form a decrypted data fragment set; and the primary key in the decrypted data fragment set is obtained; finally, the primary key is used to combine at least two associated data in the decrypted data fragment set to restore it to the sensitive data plaintext. The present invention performs convergent encryption on the sensitive data plaintext, processes the encrypted ciphertext, and then mixes it with the convergent encryption key to obtain the data fragment set; then encrypts the data fragment set and transmits it, thereby improving the security and reliability of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present disclosure and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0062] Figure 1 A flowchart of the method disclosed herein;

[0063] Figure 2for Figure 1 Flow chart for grading the sensitivity of agricultural data;

[0064] Figure 3 for Figure 1 Flowchart for obtaining data fragment sets;

[0065] Figure 4 for Figure 1 Flow chart of decrypting the transmission packet;

[0066] Figure 5 for Figure 1 The flowchart of restoring the decrypted data fragment set to the sensitive data plaintext;

[0067] Figure 6 A system block diagram of the data processing system described in the present disclosure.

[0068] exist Figure 6 middle:

[0069] 100. Acquisition module; 200. Classification module; 300. Primary encryption module; 400. Secondary encryption module; 500. Transmitter; 600. Receiver; 700. Secondary decryption module; 800. Primary decryption module. DETAILED DESCRIPTION

[0070] In the following, various embodiments of the present disclosure will be described more fully. The present disclosure may have various embodiments, and adjustments and changes may be made therein. However, it should be understood that there is no intention to limit the various embodiments of the present disclosure to the specific embodiments disclosed herein, but rather the present disclosure should be understood to cover all adjustments, equivalents and / or alternatives that fall within the spirit and scope of the various embodiments of the present disclosure.

[0071] Hereinafter, the terms "include" or "may include" used in various embodiments of the present disclosure indicate the presence of disclosed functions, operations, or elements, and do not limit the addition of one or more functions, operations, or elements. In addition, as used in various embodiments of the present disclosure, the terms "include", "have", and their cognates are intended only to indicate specific features, numbers, steps, operations, elements, components, or a combination of the foregoing, and should not be understood as first excluding the presence of one or more other features, numbers, steps, operations, elements, components, or a combination of the foregoing or the possibility of adding one or more features, numbers, steps, operations, elements, components, or a combination of the foregoing.

[0072] In various embodiments of the present disclosure, the expression "or" or "at least one of A or / and B" includes any combination or all combinations of the words listed at the same time. For example, the expression "A or B" or "at least one of A or / and B" may include A, may include B, or may include both A and B.

[0073] The term “user” used in various embodiments of the present disclosure may indicate a person using an electronic device or a device (eg, an artificial intelligence electronic device) using the electronic device.

[0074] The terms used in the various embodiments of the present disclosure are only used for the purpose of describing specific embodiments and are not intended to limit the various embodiments of the present disclosure. As used herein, the singular form is intended to also include the plural form, unless the context clearly indicates otherwise. Unless otherwise defined, all terms (including technical terms and scientific terms) used herein have the same meaning as the meanings commonly understood by ordinary technicians in the field to which the various embodiments of the present disclosure belong. The terms (such as the terms defined in the generally used dictionary) will be interpreted as having the same meaning as the contextual meaning in the relevant technical field and will not be interpreted as having an idealized meaning or an overly formal meaning, unless clearly defined in the various embodiments of the present disclosure.

[0075] It should be noted that the agricultural data described in this disclosure may be various data related to agriculture generated by relevant personnel when engaging in agricultural operations, such as farmer information, cultivated land area, agricultural loan amount, etc. The agricultural user data described in this disclosure is data generated by people engaged in agricultural-related work in production. Specific embodiment 1:

[0077] The present disclosure provides an embodiment:

[0078] In this embodiment, the agricultural user data may be: information about the name and location of the plot of land, such as name: Li San; address: a certain village; cultivated land area: * acres.

[0079] like Figure 1 A processing method for agricultural data includes: collecting agricultural user data; grading the collected agricultural user data to obtain sensitive data that needs to be encrypted; convergently encrypting any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key; discretizing any of the ciphertext strings into at least two parts, which together with the primary key form a data fragment set; encrypting the data fragment set and obtaining a corresponding secondary key to form an upload transmission package; decrypting the upload transmission package using the secondary key to obtain at least two decrypted data fragments to form a data fragment set; obtaining the primary key in the decrypted data fragment set; and combining at least two associated data in the decrypted data fragment set using the primary key to restore them to sensitive data plaintext.

[0080] Specifically, Figure 2, the collected agriculture-related user data is classified to obtain sensitive data that needs to be encrypted, including: obtaining a local sensitivity database; comparing the agriculture-related user data with the sensitivity database to determine whether there is sensitivity data in the agriculture-related user data; and treating the agriculture-related user data that contains any sensitivity data as sensitive data that needs to be encrypted.

[0081] In this embodiment, the local sensitivity database is constructed by historical data and stored locally after construction; the information in the agricultural user data is compared with the sensitivity database; assuming that the sensitivity database contains: the name data of the agricultural user; then this piece of agricultural user data is treated as sensitive data, the level is high, and encryption operation is required.

[0082] In this embodiment, any of the sensitive data plaintexts is convergently encrypted to obtain an encrypted ciphertext string and a primary key, which also includes: data tags, etc. Specifically:

[0083] Generate the encryption key of sensitive data through the GenKey(M)→K.GenKey algorithm, calculate the hash value K of the original data M, and use K as the primary key;

[0084] Encrypt(K,M)→C.Encrypt is used to encrypt the data. It takes the key K and the data M as input and the output is C, where C is the encrypted ciphertext string.

[0085] GenTag(M)→T. GenTag generates data fingerprints, takes data M as input, and outputs T, where T is the data tag corresponding to the displacement of data M;

[0086] Decry(K,C)→M.Decrypt is used to restore the original data. It takes the key K and the ciphertext C as input. The input result is M, where M is the original data.

[0087] like Figure 3 , the discretization of any of the ciphertext strings into at least two parts, which together with the primary key form a data fragment set, includes: obtaining the ciphertext string; segmenting the ciphertext string in a random size manner, and obtaining at least two data segments during the segmentation process; adding a unified statistical identifier to the tail end of different data segments belonging to the same ciphertext string in sequence, and adding a serial number identifier to the head end to obtain a data segment with an identifier; setting a key identifier at the end of the primary key file to obtain a key data segment; mixing and sorting the data segment with an identifier and the key data segment to obtain the data fragment set.

[0088] In this embodiment, any of the ciphertext strings is discretized into four parts, including: in Python, converting the input ciphertext string into a character list; using the random.shuffle() function to shuffle the character list so that the order of the characters is randomly sorted. In addition, the size of each group of characters after random sorting is calculated, assuming that the length of the string is n, it is divided by i to obtain the size of each group, i=4 or other constants. Use a loop to divide the characters into four groups, for the first three groups, the size of each group is group_size, and for the last group, it contains all the remaining characters; at this time, the operation on the character list can make the ciphertext string randomly discretized.

[0089] In this embodiment, during the process of discretizing the ciphertext string, a unified statistical identifier, such as com, is added to the tail of different data segments in the same ciphertext string in order, and a serial number identifier 1get is added to the head of the data segment to obtain a data segment with an identifier; for example, the name: is digitally converted to \xe5\xa7\x93\xe5\x90\x8d; after encryption, an encrypted string is formed; the segment is divided into 4 parts, namely: 1get****com; 2get****com; 3get****com; 4get****com; * is the encrypted string content. A key identifier, such as K&&&, is set at the end of the primary key file to obtain a key data segment, and & is the key content. Finally, the data segment with the identifier and the key data segment are mixed and sorted to obtain the data fragment set.

[0090] In this embodiment, the concept of secret decomposition is adopted to protect the key; specifically, Figure 4 , the data fragment set is encrypted and the corresponding secondary key is obtained to form an upload transmission package, including: when the data fragment set is encrypted, a secondary ciphertext and a secondary key are generated, and the secondary key is split into N parts to form a sub-key, which is shared to at least N+1 key management servers; for any of the key management servers, a path label for storing the sub-key is generated and transmitted to the key management server for storage; the secondary ciphertext and the path label are used as an upload transmission package, and the upload transmission package is decrypted using the secondary key to obtain the decrypted data fragment. N=1, 2, ...

[0091] In this embodiment, after decrypting the upload transmission package using the secondary key, the decrypted data fragments are obtained, including: obtaining user permissions and granting the authorized user the permission to view the upload transmission package; the user obtains the sub-keys from at least two key management servers respectively, and uses any N sub-keys as input to run the key recovery function to obtain the secondary key.

[0092] Specifically, in this embodiment, the secondary key is split into N parts, and only when any J=N-2 or more sub-secrets are obtained can the original secret H be restored, while any N-3 or less sub-secrets cannot obtain any information about H. J=1, 2, . . .

[0093] The following function can be used: N is the number of secret shares, s is the threshold value for secret recovery, and N>s>0;

[0094] (1) {H1, H2, H3, ... H N}←Share(H): key sharing function; input secondary key H, output N sub-keys of equal length;

[0095] (2)H←Recover({H i1 , H i2 , ..., H is}): Key recovery function; takes any N sub-keys as input, outputs a secondary key H, and the user uses the secondary key to decrypt the secondary ciphertext to obtain the decrypted data fragments.

[0096] like Figure 5 , the obtaining of the primary key in the decrypted data fragment set, and combining at least two associated data in the decrypted data fragment set using the primary key to restore to sensitive data plaintext, includes: obtaining the primary key and the decrypted data fragments in the decrypted data fragment set respectively, and storing the primary key and the decrypted data fragments respectively; after storage, retrieving the tail end of the decrypted data fragment, and forming at least two data sets to be retrieved with the decrypted data fragments having the same statistical identifier; retrieving any of the data sets to be retrieved at the same time, and sorting them in the order of the head-end identifier to obtain the sorted data; removing the identifier from the sorted data, combining them, and decrypting them using the primary key to restore to sensitive data plaintext. When the sensitive data plaintext is displayed, it can be desensitized according to the specific situation, which will not be elaborated in this article.

[0097] In this embodiment, since not all agricultural data are sensitive data, the following steps are used to process low-sensitivity agricultural user data that does not require encryption, including: transmitting the low-sensitivity agricultural user data to a cloud server; the user interacts with the cloud server and runs a file ownership proof protocol to obtain the user's ownership of the low-sensitivity agricultural user data; after passing the ownership authentication, the cloud server obtains the low-sensitivity agricultural user data; that is, for low-sensitivity agricultural data, only its identity authority needs to be referred to, and there is no need for excessive encryption processing.

[0098] However, in the specific operation process, since the method described in this embodiment uses the local sensitivity database for comparison to divide the levels, the agricultural data is processed. For the local sensitivity database, its update frequency cannot be guaranteed. Generally, the authoritative department or management department will share a cloud sensitivity database in the cloud, and the cloud sensitivity database is authoritative; however, due to the existence of time difference, that is, it is possible that after the level division is carried out according to the cloud sensitivity database, the cloud sensitivity database is updated during the transmission of agricultural data. Due to the existence of this time difference, there is a risk of privacy leakage.

[0099] Therefore, in this embodiment, the step of adjusting the sensitivity level of the agricultural user data includes: obtaining a local sensitivity database, and grading the collected agricultural user data according to the local sensitivity database, and then performing convergent encryption to obtain an encrypted ciphertext string and a primary key; then comparing the local sensitivity database with the sensitivity database on the cloud: if there is a difference, adjusting the level of the agricultural user data according to the sensitivity database on the cloud, re-evaluating the sensitivity level of the agricultural user data, and obtaining sensitive data that needs to be encrypted and non-sensitive data that does not need to be encrypted; updating the local sensitivity database; and under the condition of a secondary evaluation of the agricultural user data, the privacy leakage problem caused by the time difference can be eliminated. For non-sensitive data that does not need to be encrypted, the encrypted ciphertext string and the primary key are sent to the cloud for back-end decryption. When there is no difference between the local sensitivity database and the sensitivity database on the cloud, the agricultural user data is transmitted based on the level after grading in the local sensitivity database. Specific embodiment 2:

[0101] The present disclosure also provides an embodiment:

[0102] like Figure 6, a processing system for agricultural data, based on the processing method described in specific embodiment 1, includes: a collection module 100, a classification module 200, a primary encryption module 300, a secondary encryption module 400, a sending end 500, a receiving end 600, a secondary decryption module 700 and a primary decryption module 800; wherein the collection module 100 is used to obtain agricultural user data; the classification module 200 interacts with the collection module 100 for classifying the collected agricultural user data and obtaining sensitive data that needs to be encrypted; the primary encryption module 300 interacts with the classification module 200 for convergent encryption of any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key; and any of the ciphertext strings is discretized into at least two parts, which together with the primary key form a data fragment set; the secondary encryption module 400 interacts with the classification module 200 for convergent encryption of any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key; The primary encryption module 300 performs data interaction to encrypt the data fragment set and obtain the corresponding secondary key to form an upload transmission package; the sending end 500 performs data interaction with the secondary encryption module 400 to upload the transmission package; the receiving end 600 performs data interaction with the sending end 500 to receive the transmission package; the secondary decryption module 700 performs data interaction with the receiving end 600 to decrypt the upload transmission package using the secondary key to obtain at least 2 decrypted data fragments to form a decrypted data fragment set; the primary decryption module 800 performs data interaction with the secondary decryption module 700 to obtain the primary key in the decrypted data fragment set; the primary key is used to combine at least 2 related data in the decrypted data fragment set to restore them to sensitive data plaintext. Specific embodiment 3:

[0104] The present disclosure also provides an embodiment:

[0105] An electronic device comprises: a storage medium for storing a computer program and a processing unit; wherein the processing unit exchanges data with the storage medium, and is used to execute the computer program through the processing unit when processing agricultural user data, and perform the steps of the method for processing agricultural data as described in specific example 1.

[0106] The CPU can perform various appropriate actions and processes according to the program stored in the storage medium. The electronic device also includes the following peripherals, including input parts such as a keyboard and a mouse, and may also include output parts such as a cathode ray tube (CRT), a liquid crystal display (LCD), and a speaker; in particular, according to the embodiments of the present disclosure, Figure 1-Figure 5 Any of the processes described in can be implemented as a computer software program.

[0107] The present disclosure also provides an embodiment:

[0108] A computer-readable storage medium: the computer-readable storage medium stores a computer program; when the computer program is run, the steps of the method for processing agricultural data as described in specific example 1 are executed.

[0109] In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, device or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in combination with an instruction execution system, device or device. The program code contained on the computer-readable medium may be transmitted using any suitable medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0110] Those skilled in the art may understand that the accompanying drawings are only schematic diagrams of a preferred implementation scenario, and the modules or processes in the accompanying drawings are not necessarily required for implementing the present disclosure.

[0111] Those skilled in the art will appreciate that the modules in the device in the implementation scenario can be distributed in the device in the implementation scenario according to the implementation scenario description, or can be changed accordingly and located in one or more devices different from the implementation scenario. The modules in the above implementation scenario can be combined into one module, or can be further split into multiple sub-modules.

[0112] The above serial numbers of the present disclosure are for description only and do not represent the advantages or disadvantages of the implementation scenarios.

[0113] The above disclosure only discloses several specific implementation scenarios of the present disclosure, but the present disclosure is not limited thereto, and any changes that can be conceived by technicians in this field should fall within the protection scope of the present disclosure.

Claims

1. A method for processing agricultural data, characterized in that: include: Collect agricultural user data; Classify the collected agricultural user data to obtain sensitive data that needs to be encrypted; Convergently encrypt any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key; Discretize any of the ciphertext strings into at least two parts, and form a data fragment set together with the primary key; Encrypting the data fragment set and obtaining a corresponding secondary key to form an upload transmission package; After decrypting the upload transmission packet using the secondary key, at least two decrypted data fragments are obtained to form a decrypted data fragment set; The primary key in the decrypted data fragment set is obtained; at least two associated data in the decrypted data fragment set are combined using the primary key to restore the data into plain text of sensitive data.

2. The method for processing agricultural data according to claim 1, characterized in that: The discretizing any of the ciphertext strings into at least two parts, which together with the primary key form a data fragment set, includes: Obtain the ciphertext string; Segmenting the ciphertext string, and obtaining at least two data segments during the segmentation process; Add a unified statistical identifier to the tail of different data segments belonging to the same ciphertext string in order, and add a sequence number identifier to the head of different data segments to obtain data segments with identifiers; Setting a key identifier at the end of the primary key file to obtain a key data segment; The data segments with the identifiers and the key data segments are mixed and sorted to obtain the data fragment set.

3. The method for processing agricultural data according to claim 1, characterized in that: The step of encrypting the data fragment set and obtaining a corresponding secondary key to form an upload transmission package includes: When encrypting the data fragment set, a secondary ciphertext and a secondary key are generated, and the secondary key is split into N parts to form sub-keys, which are shared to at least N+1 key management servers, where N is a constant; For any of the key management servers, generating a path label for storing the divided key, and transmitting the path label to the key management server for storage; The secondary ciphertext and the path label are used as an upload transmission packet, and the upload transmission packet is decrypted using the secondary key to obtain decrypted data fragments.

4. The method for processing agricultural data according to claim 3, characterized in that: After decrypting the upload transmission packet using the secondary key, obtaining the decrypted data fragments includes: Obtaining user permissions and granting permissions to authorized users to view the uploaded transmission package; The user obtains the sub-keys from at least two key management servers respectively, and uses the set k sub-keys as input to run a key recovery function to obtain a secondary key, k<N; The user uses the secondary key to decrypt the secondary ciphertext to obtain decrypted data fragments.

5. The method for processing agricultural data according to claim 1, characterized in that: The obtaining of the primary key in the decrypted data fragment set, and combining at least two associated data in the decrypted data fragment set using the primary key to restore the data into sensitive data plaintext, includes: Respectively obtaining a primary key and a decrypted data fragment from the decrypted data fragment set, and storing the primary key and the decrypted data fragment separately; Retrieving the tail end of the decrypted data fragments, and forming at least two to-be-retrieved data sets from the decrypted data fragments having the same statistical identifier; At the same time, any of the data sets to be searched are searched and sorted according to the sequence of the head-end identifiers to obtain sorted data; The identifiers are deleted from the sorted data, the data are combined, and the data are decrypted using the primary key to restore the data to plain text of sensitive data.

6. The method for processing agricultural data according to claim 1, characterized in that: Also includes: The processing steps for low-sensitivity agricultural user data that does not require encryption are as follows: Transmitting the low-sensitivity agricultural user data to a cloud server; The user interacts with the cloud server and runs a file ownership certification protocol to obtain the user's ownership of the low-sensitivity agricultural user data; After passing the ownership authentication, the user obtains the low-sensitivity agriculture-related user data.

7. The method for processing agricultural data according to claim 1, characterized in that: The step of grading the collected agricultural user data and obtaining sensitive data that needs to be encrypted includes: Obtain local sensitivity database; By comparing the agriculture-related user data with the sensitivity database, determining whether there is sensitivity data in the agriculture-related user data; The agricultural-related user data containing any sensitive data is regarded as sensitive data that needs to be encrypted.

8. The method for processing agricultural data according to claim 1, characterized in that: Also includes: Steps for adjusting the sensitivity level of the agricultural user data: Obtaining a local sensitivity database, and classifying the collected agricultural user data according to the local sensitivity database, and then performing convergent encryption to obtain an encrypted ciphertext string and a primary key; Compare the local sensitivity database with the sensitivity database in the cloud: If there is a difference, the level of the agricultural user data is adjusted according to the sensitivity database in the cloud, and the sensitivity level of the agricultural user data is re-evaluated to obtain sensitive data that needs to be encrypted and non-sensitive data that does not need to be encrypted; Update the local sensitivity database.

9. The method for processing agricultural data according to claim 8, characterized in that: For non-sensitive data that does not need to be encrypted, the encrypted ciphertext string and primary key are sent to the cloud for back-end decryption; When there is no difference between the local sensitivity database and the cloud-based sensitivity database, the agricultural user data shall be based on the level of the local sensitivity database after classification.

10. A processing system for agricultural data, based on the processing method according to any one of claims 1 to 9, characterized in that: include: Collection module, used to obtain agricultural user data; A grading module, which interacts with the collection module to grade the collected agricultural user data and obtain sensitive data that needs to be encrypted; A primary encryption module, which interacts with the grading module for convergent encryption of any of the sensitive data plaintexts to obtain an encrypted ciphertext string and a primary key; and discretizing any of the ciphertext strings into at least two parts, which together with the primary key form a data fragment set; The secondary encryption module performs data interaction with the primary encryption module, and is used to encrypt the data fragment set and obtain the corresponding secondary key to form an upload transmission package; A sending end, which performs data interaction with the secondary encryption module to upload the transmission package; A receiving end, performing data interaction with the sending end, and configured to receive the transmission packet; A secondary decryption module interacts with the receiving end data and is used to decrypt the uploaded transmission packet using the secondary key to obtain at least two decrypted data fragments to form a decrypted data fragment set; The primary decryption module performs data interaction with the secondary decryption module to obtain the primary key in the decrypted data fragment set; and uses the primary key to combine at least two associated data in the decrypted data fragment set to restore them to sensitive data plaintext.

Images