Data encryption method of Internet rebate sales system

Abstract

The invention discloses a data encryption method for an Internet rebate sales system, and relates to the technical field of data encryption analysis, and the method comprises a data encryption module which is used for obtaining user transaction data based on an Internet rebate sales system client, and carrying out the encryption processing of the user transaction data; the data transmission module is used for safely transmitting encrypted data between the Internet rebate sales system client and the Internet rebate sales system server; the data storage module is used for storing the encrypted user transaction data to an internet rebate sales system server database; and the management module is used for generating corresponding key data when the encrypted data is stored and managed, monitoring the key data and updating the key data based on a monitoring result. The method and the device have the effect of improving the data encryption security.

Description

Technical Field

[0001] The present application relates to the technical field of data encryption analysis, and in particular to a data encryption method for an Internet rebate sales system. Background Art

[0002] With the rapid development of e-commerce, Internet rebate sales systems have become an important way for users to shop. These systems attract a large number of users to conduct online transactions by providing users with shopping rebates. However, with the increase in transaction volume, the security and privacy protection of user data have become key issues. In order to prevent data leakage and unauthorized access, the use of effective data encryption technology is essential to ensure the security of user information.

[0003] In the related technology, the existing Internet rebate sales system usually relies on a single encryption method for data encryption, which leads to insufficient defense capabilities when facing complex security threats. In addition, the key data management is not perfect and the key update is not timely, which increases the risk of key leakage. As a result, the Internet rebate sales system is difficult to effectively protect the confidentiality and integrity of the data when processing high-frequency transactions and large-scale user data, and there is room for improvement. Summary of the invention

[0004] In view of the deficiencies in the prior art, the present application provides a data encryption method for an Internet rebate sales system.

[0005] In a first aspect, the present application provides a data encryption system for an Internet rebate sales system, comprising:

[0006] A data encryption module, used to obtain user transaction data based on the Internet rebate sales system client and encrypt the user transaction data;

[0007] A data transmission module, used for securely transmitting encrypted data between an Internet rebate sales system client and an Internet rebate sales system server;

[0008] A data storage module, used to store encrypted user transaction data in the Internet rebate sales system server database;

[0009] The management module is used to generate corresponding key data when storing and managing encrypted data, the target data includes symmetric keys and asymmetric keys, monitor the key data, and update the key data based on the monitoring results.

[0010] Preferably, the data encryption module includes an initial encryption unit, a key exchange unit and an integrity verification unit;

[0011] The initial encryption unit is used to use a symmetric encryption algorithm to preliminarily encrypt transaction data when a user operates the Internet rebate sales system client to submit a transaction request;

[0012] The key exchange unit is used to exchange symmetric keys between the Internet rebate sales system client and the Internet rebate sales system server, and the key exchange unit is implemented by an asymmetric encryption algorithm;

[0013] The integrity verification unit is used to confirm the hash value corresponding to the encrypted data after the transaction data is initially encrypted, and then determine whether the transaction data has been tampered with based on the hash value corresponding to the encrypted data.

[0014] Preferably, the process of determining whether the transaction data has been tampered with based on the hash value corresponding to the encrypted data specifically includes:

[0015] Obtain the transaction data corresponding to the transaction request submitted by the user operating the Internet rebate sales system client, mark the transaction data as original data D, confirm the preset hash function, confirm the hash value H(D) corresponding to the original data through the preset first hash function, and encrypt the original data using a symmetric encryption algorithm to generate encrypted data;

[0016] The Internet rebate sales system server receives the encrypted data, decrypts the encrypted data through a symmetric encryption algorithm, obtains the decrypted data D′, and then confirms the hash value H(D′) corresponding to the decrypted data through a preset first hash function;

[0017] Compare the hash value H(D) corresponding to the original data with the hash value H(D′) corresponding to the decrypted data;

[0018] If the hash value H(D) corresponding to the original data = H(D′), it is determined that the transaction data has not been tampered with;

[0019] If the hash value H(D)≠H(D′) corresponding to the original data, it is determined that the transaction data may have been tampered with, and a data tampering warning signal is output.

[0020] Preferably, the data transmission module includes a secure channel establishment unit, a data encryption transmission unit and a transmission status monitoring unit;

[0021] The secure channel establishing unit is used to establish a secure communication channel between the Internet rebate sales system client and the Internet rebate sales system server;

[0022] The data encryption transmission unit is used to transmit the encrypted transaction data in the secure communication channel;

[0023] The transmission status monitoring unit is used to monitor the transaction data transmission status in real time, determine the data transmission evaluation coefficient, and manage the transaction data transmission security based on the data transmission evaluation coefficient.

[0024] Preferably, the transaction data transmission status is monitored in real time, the data transmission evaluation coefficient is determined, and the transaction data transmission security is managed based on the data transmission evaluation coefficient, specifically including:

[0025] Construct a data transmission evaluation coefficient model corresponding to the transmission of transaction data in a secure communication channel:

[0026]

[0027] The data transmission evaluation coefficient model corresponding to the transmission of the above-mentioned transaction data in the secure communication channel is obtained by fitting the historical data, wherein Ploss, Lyc, Butil, and Erate respectively represent the corresponding packet loss rate, delay rate, broadband utilization rate, and error rate when the transaction data is transmitted in the secure communication channel, ω1, ω2, ω3, and ω4 represent the preset weight coefficients, and ω1+ω2+ω3+ω4=1;

[0028] Monitor the transaction data transmission status in real time, and then obtain the corresponding data packet loss rate, delay rate, broadband utilization rate and error rate when the transaction data is transmitted in the secure communication channel, and input the corresponding data packet loss rate, delay rate, broadband utilization rate and error rate when the transaction data is transmitted in the secure communication channel into the data transmission evaluation coefficient model corresponding to the transaction data transmission in the secure communication channel, and then confirm the data transmission evaluation coefficient Ceval corresponding to the transaction data transmission in the secure communication channel;

[0029] Compare the data transmission evaluation coefficient Ceval corresponding to the transmission of transaction data in the secure communication channel with the preset data transmission evaluation threshold Csafe;

[0030] If the data transmission evaluation coefficient Ceval ≥ Csafe corresponding to the transaction data transmitted in the secure communication channel, the data transmission status is determined to be normal;

[0031] If the data transmission evaluation coefficient Ceval corresponding to the transmission of transaction data in the secure communication channel is less than Csafe, it is determined that the data transmission status is abnormal and security response measures need to be triggered.

[0032] Preferably, after the data transmission evaluation coefficient is determined, the method further includes:

[0033] In a preset time interval, the data transmission evaluation coefficient corresponding to the transaction data transmitted in the secure communication channel is collected in real time, and a curve Ceval(t) showing the change of the data transmission evaluation coefficient over time when the transaction data is transmitted in the secure communication channel is established;

[0034] By formula Determine the coefficient of variation β corresponding to the data transmission evaluation coefficient when the transaction data is transmitted in the secure communication channel, where [t1, t2] represents the preset time interval, fa represents the preset adjustment function, and Ceval-max and Ceval-min represent the maximum and minimum values ​​corresponding to the data transmission evaluation coefficient, respectively;

[0035] Compare the change coefficient β corresponding to the data transmission evaluation coefficient when the transaction data is transmitted in the secure communication channel with the preset change threshold β′;

[0036] If the variation coefficient β corresponding to the data transmission evaluation coefficient is greater than β′ when the transaction data is transmitted in the secure communication channel, it is determined that an abnormality exists in the secure communication channel, and the backend management personnel are notified to issue an early warning.

[0037] Preferably, the data storage module includes an encrypted data storage unit, a data backup unit and a data recovery unit;

[0038] The encrypted data storage unit is used to store encrypted transaction data;

[0039] The data backup unit is used to regularly back up the encrypted data to prevent the loss of transaction data;

[0040] The data recovery unit is used to recover the encrypted data through the data backup unit when the encrypted data is damaged or lost.

[0041] Preferably, the management module includes a key generation unit, a key storage unit and a key update unit;

[0042] The key generation unit is used to generate key data, wherein the key data is generated based on a high entropy random number generator;

[0043] The key storage unit is used to store key data generated securely;

[0044] The key updating unit is used to regularly update the key data in response to the updating strategy.

[0045] Preferably, the acquisition process of the update strategy specifically includes:

[0046] By formula Confirm the update period Tupdate corresponding to the key data, and then update the key data based on the update period, where Tbase represents the basic update period corresponding to the key data, Fuse represents the usage frequency corresponding to the key data, and Rrisk represents the security risk assessment coefficient corresponding to the key data. The update period corresponding to the key data can be dynamically adjusted according to the usage frequency and security risk assessment coefficient corresponding to the key data.

[0047] In a second aspect, the present application provides a data encryption method for an Internet rebate sales system, comprising the following steps:

[0048] Acquire user transaction data based on the Internet rebate sales system client, and encrypt the user transaction data;

[0049] Securely transmit encrypted data between the Internet rebate sales system client and the Internet rebate sales system server;

[0050] The encrypted user transaction data is stored in the Internet rebate sales system server database;

[0051] Generate key data corresponding to the storage and management of encrypted data, the target data including symmetric keys and asymmetric keys, monitor the key data, and update the key data based on the monitoring results.

[0052] In summary, the present application includes at least one of the following beneficial technical effects:

[0053] 1. The present invention provides a data encryption system for an Internet rebate sales system, which obtains user transaction data, encrypts the user transaction data, and stores the encrypted user transaction data in an Internet rebate sales system server database, generates key data corresponding to the storage and management of encrypted data through a management module, monitors the key data, and updates the key data based on the monitoring results, thereby effectively improving the management of the key data and effectively reducing the risk of key leakage, so that the Internet rebate sales system effectively protects the confidentiality and integrity of user transaction data;

[0054] 2. By analyzing and processing the corresponding data packet loss rate, delay rate, bandwidth utilization rate and error rate when the transaction data is transmitted in the secure communication channel, the corresponding data transmission evaluation coefficient of the transaction data transmitted in the secure communication channel is determined, and the state of data transmission is judged based on the data transmission evaluation coefficient, thereby effectively improving the quality and security of data transmission;

[0055] 3. By collecting the data transmission assessment coefficients corresponding to the transmission of transaction data in the secure communication channel in real time, and establishing a curve of the change of the data transmission assessment coefficient over time when the transaction data is transmitted in the secure communication channel, the change coefficient corresponding to the data transmission assessment coefficient when the transaction data is transmitted in the secure communication channel is confirmed, and the change coefficient corresponding to the data transmission assessment coefficient when the transaction data is transmitted in the secure communication channel is compared with the preset change threshold, and then the secure communication channel is warned based on the comparison result, so that the Internet rebate sales system can effectively protect the confidentiality and integrity of user transaction data. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for describing the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0057] Figure 1 It is a system diagram of data encryption of the Internet rebate sales system in the embodiment of the present application.

[0058] Figure 2 It is a flow chart of the method for data encryption of the Internet rebate sales system in the embodiment of the present application. DETAILED DESCRIPTION

[0059] The following is combined with Figure 1-2 This application is described in further detail.

[0060] Example 1

[0061] The embodiment of the present application discloses a data encryption system for an Internet rebate sales system.

[0062] Reference Figure 1 , a data encryption system for an Internet rebate sales system, comprising:

[0063] A data encryption module, used to obtain user transaction data based on the Internet rebate sales system client and encrypt the user transaction data;

[0064] A data transmission module, used for securely transmitting encrypted data between an Internet rebate sales system client and an Internet rebate sales system server;

[0065] A data storage module, used to store encrypted user transaction data in the Internet rebate sales system server database;

[0066] The management module is used to generate corresponding key data when storing and managing encrypted data, the target data includes symmetric keys and asymmetric keys, monitor the key data, and update the key data based on the monitoring results.

[0067] It should be noted that the data encryption module includes an initial encryption unit, a key exchange unit and an integrity verification unit;

[0068] The initial encryption unit is used to use a symmetric encryption algorithm to preliminarily encrypt transaction data when a user operates the Internet rebate sales system client to submit a transaction request;

[0069] The key exchange unit is used to exchange symmetric keys between the Internet rebate sales system client and the Internet rebate sales system server, and the key exchange unit is implemented by an asymmetric encryption algorithm;

[0070] The integrity verification unit is used to confirm the hash value corresponding to the encrypted data after the transaction data is initially encrypted, and then determine whether the transaction data has been tampered with based on the hash value corresponding to the encrypted data.

[0071] Specifically, in an embodiment of the present application, the initial encryption unit encrypts the transaction data through AES-256 to ensure that the data cannot be stolen during transmission; the key exchange unit encrypts the symmetric key through RSA-2048 to ensure the security of the key exchange; the integrity verification unit generates a data hash value through SHA-256 to verify the integrity of the data.

[0072] Furthermore, the process of determining whether the transaction data has been tampered with based on the hash value corresponding to the encrypted data specifically includes:

[0073] Obtain the transaction data corresponding to the transaction request submitted by the user operating the Internet rebate sales system client, mark the transaction data as original data D, confirm the preset hash function, confirm the hash value H(D) corresponding to the original data through the preset first hash function, and encrypt the original data using a symmetric encryption algorithm to generate encrypted data;

[0074] The Internet rebate sales system server receives the encrypted data, decrypts the encrypted data through a symmetric encryption algorithm, obtains the decrypted data D′, and then confirms the hash value H(D′) corresponding to the decrypted data through a preset first hash function;

[0075] Compare the hash value H(D) corresponding to the original data with the hash value H(D′) corresponding to the decrypted data;

[0076] If the hash value H(D) corresponding to the original data = H(D′), it is determined that the transaction data has not been tampered with;

[0077] If the hash value H(D)≠H(D′) corresponding to the original data, it is determined that the transaction data may have been tampered with, and a data tampering warning signal is output.

[0078] Specifically, the symmetric encryption algorithm adopts the AES-256 standard to ensure the efficiency and security of data transmission; the asymmetric encryption algorithm adopts the RSA-2048 standard to encrypt the symmetric key to achieve secure key exchange; the hash algorithm adopts the SHA-256 standard to generate the hash value of the data to verify the integrity of the data. Through the multi-layer encryption strategy, it can effectively resist various attack methods and ensure the security of transaction data.

[0079] It should be noted that the data transmission module includes a secure channel establishment unit, a data encryption transmission unit and a transmission status monitoring unit;

[0080] The secure channel establishing unit is used to establish a secure communication channel between the Internet rebate sales system client and the Internet rebate sales system server;

[0081] The data encryption transmission unit is used to transmit the encrypted transaction data in the secure communication channel;

[0082] The transmission status monitoring unit is used to monitor the transaction data transmission status in real time, determine the data transmission evaluation coefficient, and manage the transaction data transmission security based on the data transmission evaluation coefficient.

[0083] Specifically, the secure channel establishment unit provides end-to-end encrypted communication through the TLS / SSL protocol to ensure the confidentiality and integrity of data during transmission; the data encryption transmission unit transmits encrypted data through a secure communication channel to prevent the data from being intercepted or tampered with; the transmission status monitoring unit detects abnormal activities through real-time monitoring technology and triggers a security response mechanism to ensure the continuous security of data transmission.

[0084] Furthermore, the transaction data transmission status is monitored in real time, the data transmission evaluation coefficient is determined, and the transaction data transmission security is managed based on the data transmission evaluation coefficient, specifically including:

[0085] Construct a data transmission evaluation coefficient model corresponding to the transmission of transaction data in a secure communication channel:

[0086]

[0087] The data transmission evaluation coefficient model corresponding to the transmission of the above-mentioned transaction data in the secure communication channel is obtained by fitting the historical data, wherein Ploss, Lyc, Butil, and Erate respectively represent the corresponding packet loss rate, delay rate, broadband utilization rate, and error rate when the transaction data is transmitted in the secure communication channel, ω1, ω2, ω3, and ω4 represent the preset weight coefficients, and ω1+ω2+ω3+ω4=1;

[0088] Monitor the transaction data transmission status in real time, and then obtain the corresponding data packet loss rate, delay rate, broadband utilization rate and error rate when the transaction data is transmitted in the secure communication channel, and input the corresponding data packet loss rate, delay rate, broadband utilization rate and error rate when the transaction data is transmitted in the secure communication channel into the data transmission evaluation coefficient model corresponding to the transaction data transmission in the secure communication channel, and then confirm the data transmission evaluation coefficient Ceval corresponding to the transaction data transmission in the secure communication channel;

[0089] Compare the data transmission evaluation coefficient Ceval corresponding to the transmission of transaction data in the secure communication channel with the preset data transmission evaluation threshold Csafe;

[0090] If the data transmission evaluation coefficient Ceval ≥ Csafe corresponding to the transaction data transmitted in the secure communication channel, the data transmission status is determined to be normal;

[0091] If the corresponding data transmission assessment coefficient Ceval<Csafe when the transaction data is transmitted in the secure communication channel, it is determined that there is an abnormality in the data transmission status and security response measures need to be triggered. Among them, security response measures include but are not limited to increasing encryption strength, reducing data traffic or outputting alarm signals to back-end management personnel.

[0092] Specifically, by calculating the data transmission assessment coefficient through packet loss rate, delay rate, bandwidth utilization and error rate, the transmission quality of transaction data in the secure communication channel can be comprehensively evaluated, thereby effectively helping to identify potential network problems and security threats, ensuring the reliability and effectiveness of data transmission, and thus improving the overall security of the system and user experience.

[0093] Furthermore, after the data transmission evaluation coefficient is determined, the following steps are also included:

[0094] In a preset time interval, the data transmission evaluation coefficient corresponding to the transaction data transmitted in the secure communication channel is collected in real time, and a curve Ceval(t) showing the change of the data transmission evaluation coefficient over time when the transaction data is transmitted in the secure communication channel is established;

[0095] By formula Determine the coefficient of variation β corresponding to the data transmission evaluation coefficient when the transaction data is transmitted in the secure communication channel, where [t1, t2] represents the preset time interval, fa represents the preset adjustment function, and Ceval-max and Ceval-min represent the maximum and minimum values ​​corresponding to the data transmission evaluation coefficient, respectively;

[0096] Compare the change coefficient β corresponding to the data transmission evaluation coefficient when the transaction data is transmitted in the secure communication channel with the preset change threshold β′;

[0097] If the variation coefficient β corresponding to the data transmission evaluation coefficient is greater than β′ when the transaction data is transmitted in the secure communication channel, it is determined that an abnormality exists in the secure communication channel, and the backend management personnel are notified to issue an early warning.

[0098] It should be noted that the data storage module includes an encrypted data storage unit, a data backup unit and a data recovery unit;

[0099] The encrypted data storage unit is used to store encrypted transaction data;

[0100] The data backup unit is used to regularly back up the encrypted data to prevent the loss of transaction data;

[0101] The data recovery unit is used to recover the encrypted data through the data backup unit when the encrypted data is damaged or lost.

[0102] Specifically, the encrypted data storage unit ensures the security of encrypted data during the storage process and provides efficient retrieval and decryption functions; the data backup unit prevents data loss through regular backup strategies and ensures data recoverability; the data recovery unit ensures the business continuity of the system in the event of data corruption through the rapid recovery function of backup data.

[0103] It should be noted that the management module includes a key generation unit, a key storage unit and a key update unit;

[0104] The key generation unit is used to generate key data, wherein the key data is generated based on a high entropy random number generator;

[0105] The key storage unit is used to store key data generated securely;

[0106] The key updating unit is used to regularly update the key data in response to the updating strategy.

[0107] Specifically, in the embodiment of the present application, the key generation unit provides unpredictable keys through a high entropy random number generator, thereby ensuring the security of encryption; the key storage unit protects the keys from illegal access through the physical security measures of the hardware security module; the key update unit reduces the risk of key exposure through dynamic update strategies and enhances the overall security of the system, wherein the hardware security module is a dedicated physical device for managing and protecting encryption keys. The hardware security module provides a high level of security for key generation, storage, and use to prevent the keys from being leaked or accessed without authorization.

[0108] Furthermore, the acquisition process of the update strategy specifically includes:

[0109] By formula Confirm the update period Tupdate corresponding to the key data, and then update the key data based on the update period, where Tbase represents the basic update period corresponding to the key data, Fuse represents the usage frequency corresponding to the key data, and Rrisk represents the security risk assessment coefficient corresponding to the key data. The update period corresponding to the key data can be dynamically adjusted according to the usage frequency and security risk assessment coefficient corresponding to the key data.

[0110] Specifically, the usage frequency corresponding to the key data can be obtained by monitoring the number of times the key is called and the transaction volume in the system, while the security risk assessment corresponding to the key data can be determined by analyzing the vulnerability reports of the Internet rebate sales system, recent security incidents, and external threat intelligence. The combined use of the above data can help assess the exposure risk of the key and the urgency of updating.

[0111] Example 2

[0112] The embodiment of the present application also discloses a data encryption method for an Internet rebate sales system.

[0113] Reference Figure 2 , a data encryption method for an Internet rebate sales system, comprising the following steps:

[0114] Acquire user transaction data based on the Internet rebate sales system client, and encrypt the user transaction data;

[0115] Securely transmit encrypted data between the Internet rebate sales system client and the Internet rebate sales system server;

[0116] The encrypted user transaction data is stored in the Internet rebate sales system server database;

[0117] Generate key data corresponding to the storage and management of encrypted data, the target data including symmetric keys and asymmetric keys, monitor the key data, and update the key data based on the monitoring results.

[0118] The above contents are merely examples and explanations of the concept of the present invention. Those skilled in the art may make various modifications or additions to the specific embodiments described or replace them in a similar manner. As long as they do not deviate from the concept of the invention, they should all fall within the protection scope of the present invention.

[0119] In the description of this specification, the description with reference to the terms "one embodiment", "example", "specific example", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0120] The preferred embodiments of the present invention disclosed above are only used to help explain the present invention. The preferred embodiments do not describe all the details in detail, nor do they limit the invention to specific implementation methods. Obviously, many modifications and changes can be made according to the content of this specification. This specification selects and specifically describes these embodiments in order to better explain the principles and practical applications of the present invention, so that those skilled in the art can understand and use the present invention well.

Claims

1. A data encryption system for an Internet rebate sales system, characterized in that: include: A data encryption module, used to obtain user transaction data based on the Internet rebate sales system client and encrypt the user transaction data; A data transmission module, used for securely transmitting encrypted data between an Internet rebate sales system client and an Internet rebate sales system server; A data storage module, used to store encrypted user transaction data in the Internet rebate sales system server database; The management module is used to generate corresponding key data when storing and managing encrypted data, the target data includes symmetric keys and asymmetric keys, monitor the key data, and update the key data based on the monitoring results.

2. The data encryption system of the Internet rebate sales system according to claim 1 is characterized in that: The data encryption module includes an initial encryption unit, a key exchange unit and an integrity verification unit; The initial encryption unit is used to use a symmetric encryption algorithm to preliminarily encrypt transaction data when a user operates the Internet rebate sales system client to submit a transaction request; The key exchange unit is used to exchange symmetric keys between the Internet rebate sales system client and the Internet rebate sales system server, and the key exchange unit is implemented by an asymmetric encryption algorithm; The integrity verification unit is used to confirm the hash value corresponding to the encrypted data after the transaction data is initially encrypted, and then determine whether the transaction data has been tampered with based on the hash value corresponding to the encrypted data.

3. The data encryption system of the Internet rebate sales system according to claim 2 is characterized in that: The process of judging whether the transaction data has been tampered with based on the hash value corresponding to the encrypted data specifically includes: Obtain the transaction data corresponding to the transaction request submitted by the user operating the Internet rebate sales system client, mark the transaction data as original data D, confirm the preset hash function, confirm the hash value H(D) corresponding to the original data through the preset first hash function, and encrypt the original data using a symmetric encryption algorithm to generate encrypted data; The Internet rebate sales system server receives the encrypted data, decrypts the encrypted data through a symmetric encryption algorithm, obtains the decrypted data D′, and then confirms the hash value H(D′) corresponding to the decrypted data through a preset first hash function; Compare the hash value H(D) corresponding to the original data with the hash value H(D′) corresponding to the decrypted data; If the hash value H(D) corresponding to the original data = H(D′), it is determined that the transaction data has not been tampered with; If the hash value H(D)≠H(D′) corresponding to the original data, it is determined that the transaction data may have been tampered with, and a data tampering warning signal is output.

4. The data encryption system of the Internet rebate sales system according to claim 1, characterized in that: The data transmission module includes a secure channel establishment unit, a data encryption transmission unit and a transmission status monitoring unit; The secure channel establishing unit is used to establish a secure communication channel between the Internet rebate sales system client and the Internet rebate sales system server; The data encryption transmission unit is used to transmit the encrypted transaction data in the secure communication channel; The transmission status monitoring unit is used to monitor the transaction data transmission status in real time, determine the data transmission evaluation coefficient, and manage the transaction data transmission security based on the data transmission evaluation coefficient.

5. The data encryption system of the Internet rebate sales system according to claim 4 is characterized in that: Monitor the transaction data transmission status in real time, determine the data transmission assessment coefficient, and manage the transaction data transmission security based on the data transmission assessment coefficient, including: Construct a data transmission evaluation coefficient model corresponding to the transmission of transaction data in a secure communication channel: The data transmission evaluation coefficient model corresponding to the transmission of the above-mentioned transaction data in the secure communication channel is obtained by fitting the historical data, wherein Ploss, Lyc, Butil, and Erate respectively represent the corresponding packet loss rate, delay rate, broadband utilization rate, and error rate when the transaction data is transmitted in the secure communication channel, ω1, ω2, ω3, and ω4 represent the preset weight coefficients, and ω1+ω2+ω3+ω4=1; Monitor the transaction data transmission status in real time, and then obtain the corresponding data packet loss rate, delay rate, broadband utilization rate and error rate when the transaction data is transmitted in the secure communication channel, and input the corresponding data packet loss rate, delay rate, broadband utilization rate and error rate when the transaction data is transmitted in the secure communication channel into the data transmission evaluation coefficient model corresponding to the transaction data transmission in the secure communication channel, and then confirm the data transmission evaluation coefficient Ceval corresponding to the transaction data transmission in the secure communication channel; Compare the data transmission evaluation coefficient Ceval corresponding to the transmission of transaction data in the secure communication channel with the preset data transmission evaluation threshold Csafe; If the data transmission evaluation coefficient Ceval ≥ Csafe corresponding to the transaction data transmitted in the secure communication channel, the data transmission status is determined to be normal; If the data transmission evaluation coefficient Ceval corresponding to the transmission of transaction data in the secure communication channel is less than Csafe, it is determined that the data transmission status is abnormal and security response measures need to be triggered.

6. The data encryption system of the Internet rebate sales system according to claim 5, characterized in that: After confirming the data transmission evaluation coefficient, it also includes: In a preset time interval, the data transmission evaluation coefficient corresponding to the transaction data transmitted in the secure communication channel is collected in real time, and a curve Ceval(t) showing the change of the data transmission evaluation coefficient over time when the transaction data is transmitted in the secure communication channel is established; By formula Determine the coefficient of variation β corresponding to the data transmission evaluation coefficient when the transaction data is transmitted in the secure communication channel, where [t1, t2] represents the preset time interval, fa represents the preset adjustment function, and Ceval-max and Ceval-min represent the maximum and minimum values ​​corresponding to the data transmission evaluation coefficient, respectively; Compare the change coefficient β corresponding to the data transmission evaluation coefficient when the transaction data is transmitted in the secure communication channel with the preset change threshold β′; If the variation coefficient β corresponding to the data transmission evaluation coefficient is greater than β′ when the transaction data is transmitted in the secure communication channel, it is determined that an abnormality exists in the secure communication channel, and the backend management personnel are notified to issue an early warning.

7. The data encryption system of the Internet rebate sales system according to claim 1 is characterized in that: The data storage module includes an encrypted data storage unit, a data backup unit and a data recovery unit; The encrypted data storage unit is used to store encrypted transaction data; The data backup unit is used to regularly back up the encrypted data to prevent the loss of transaction data; The data recovery unit is used to recover the encrypted data through the data backup unit when the encrypted data is damaged or lost.

8. The data encryption system of the Internet rebate sales system according to claim 1 is characterized in that: The management module includes a key generation unit, a key storage unit and a key update unit; The key generation unit is used to generate key data, wherein the key data is generated based on a high entropy random number generator; The key storage unit is used to store key data generated securely; The key updating unit is used to regularly update the key data in response to the updating strategy.

9. The data encryption system of the Internet rebate sales system according to claim 8, characterized in that: The process of obtaining the update strategy includes: By formula Confirm the update period Tupdate corresponding to the key data, and then update the key data based on the update period, where Tbase represents the basic update period corresponding to the key data, Fuse represents the usage frequency corresponding to the key data, and Rrisk represents the security risk assessment coefficient corresponding to the key data. The update period corresponding to the key data can be dynamically adjusted according to the usage frequency and security risk assessment coefficient corresponding to the key data.

10. A data encryption method for an Internet rebate sales system, applied to a data encryption system for an Internet rebate sales system as claimed in any one of claims 1 to 9, characterized in that: The following steps are involved: Acquire user transaction data based on the Internet rebate sales system client, and encrypt the user transaction data; Securely transmit encrypted data between the Internet rebate sales system client and the Internet rebate sales system server; The encrypted user transaction data is stored in the Internet rebate sales system server database; Generate key data corresponding to the storage and management of encrypted data, the target data including symmetric keys and asymmetric keys, monitor the key data, and update the key data based on the monitoring results.

Images