Encryption communication system and method based on multi-information dynamic key generation

Abstract

The invention discloses an encryption communication system and method based on multi-information dynamic key generation. The system comprises a sending client, a server and a receiving client, and aims to ensure high security and integrity in data transmission. And the sending client generates a random number seed through the timestamp, the user ID and the position information, and uses a random number generated by the seed as a secret key to symmetrically encrypt the content of the data packet. And the server only serves as a data transfer node, does not have a decryption function, and provides a time service to ensure that the sending and receiving clients generate matched random number sequences. And after the receiving client receives the data packet, a random number seed is generated based on the same timestamp, user ID and position information, and the same random number sequence and decryption key are generated. And verifying the data integrity. The dynamic random number seed and the secret key design ensure that the secret key is unique and unpredictable, the secret key is prevented from being intercepted or reused, and the method is suitable for large-scale data transmission with high safety requirements such as finance and government affairs.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an encryption communication system and method for dynamically generating keys based on timestamp, user ID and location information. Background Art

[0002] With the development of global informatization, the amount of data transmitted on the Internet has increased rapidly, covering a lot of sensitive information such as financial transactions, government decisions, medical data, business secrets and personal privacy. Ensuring that these data are not eavesdropped, tampered with or leaked during transmission has become a core task in the field of information technology. As a key technology for protecting data security, encrypted communication provides important confidentiality support for various industries. However, traditional encrypted communication methods rely on static keys for encryption, which has many defects that are difficult to meet the current complex security needs:

[0003] 1. Easiness of cracking static keys

[0004] Static keys refer to fixed keys that are reused in multiple communications. Such keys lack dynamics and randomness in long-term use. Attackers can collect a large number of encrypted communication samples and use exhaustive, brute force, or statistical analysis techniques to infer the keys. Once the key is cracked, the attacker will be able to decrypt all communications that rely on the key, resulting in the leakage of sensitive information and seriously affecting the confidentiality of the data. The use of static keys is particularly vulnerable in modern environments with increased computing power, because high-performance computing devices have greatly reduced the time cost required to crack the key.

[0005] 2. Risks of man-in-the-middle attacks and key interception

[0006] Static keys usually need to be shared or transferred between the sender and the receiver in some way, which makes man-in-the-middle attacks (MITM) a serious threat. In a man-in-the-middle attack, the attacker can intercept the key transfer process and obtain the key by forging an identity, eavesdropping on communications, etc. Once the attacker obtains the key, he can easily decrypt all communications. The traditional system's reliance on servers to transfer keys further amplifies this risk, because any node in the transfer process may become an entry point for attackers to steal the key, causing the transmission content to be tampered with or decrypted, thereby threatening the security of the entire system.

[0007] 3. Security risks of key reuse

[0008] The repeated use of static keys in communications will lead to the problem of key reuse. The repeated use of keys will produce certain usage patterns, which can be used by attackers to identify key characteristics and even infer the key content through cryptographic analysis. For example, if an attacker captures multiple packets encrypted with the same key, the key content can be inferred by comparing the similarities between the packets. As the number of key reuses increases, the risk of key cracking also increases significantly, which not only threatens the security of current communications, but also may expose future communications to the risk of information leakage.

[0009] 4. Lack of reliable tampering detection mechanism

[0010] Traditional static key encryption systems usually lack a complete data integrity verification mechanism, making it difficult to effectively identify and prevent data tampering during transmission. For example, data may be forged or partially tampered with by an attacker during transmission, and the receiver may find it difficult to detect the modified data after decryption. In this case, the receiver may receive and process maliciously tampered data without knowing it, affecting the authenticity of the communication and may even have an adverse impact on the decision-making process, resulting in serious consequences. Therefore, static key encryption systems require an additional integrity verification mechanism to ensure that the received data packets have not been tampered with.

[0011] 5. Difficult to cope with increasingly complex modern security needs

[0012] The traditional static key encryption communication mode is difficult to cope with the complex needs of modern information security. As enterprises, governments and individuals continue to increase their demand for communication data protection, the shortcomings of the existing static key system in terms of flexibility, anti-attack and security are becoming more and more obvious. The rapid changes in the information security environment and the frequent emergence of new attack methods make it difficult for traditional systems to adapt to the needs of highly sensitive data transmission. Faced with an increasingly complex threat environment, static key systems cannot provide sufficient security for high-value data. There is an urgent need for a dynamic and highly flexible encryption communication solution to meet current and future security needs.

[0013] 6. Asymmetric encryption is inconvenient when processing large amounts of data or in poor network environments

[0014] Asymmetric encryption is often inefficient when it comes to encrypting and decrypting large amounts of data. At the same time, due to the public private key, a third party can use the same key to encrypt, making the data source unreliable. The leakage of the private key will have even more serious consequences. Therefore, efficient dynamic key encryption and decryption is a good way to solve the above problems. Summary of the invention

[0015] The present invention aims to solve the problems existing in traditional encryption communication systems, such as low security of static keys, easy interception of keys, and lack of reliable tampering detection mechanism. Traditional encryption systems usually rely on static keys, which are prone to being cracked and reused; they may encounter man-in-the-middle attacks during key transmission, resulting in malicious interception or forgery of keys; in addition, many traditional systems lack effective integrity verification means, and cannot ensure the tamper resistance of data during transmission, which easily leads to malicious tampering of data during transmission without being noticed. Therefore, the present invention realizes a communication system that can generate encryption keys based on multiple information dynamically to ensure that the keys used for each communication are unique and unpredictable, and at the same time generate a one-time temporary key through a combination of multiple factors. The key is generated by the sending and receiving client according to the information without passing through the server transmission, thereby avoiding being intercepted during the key transmission process. At the same time, Hash calculations will be performed before and after the data packet is sent and received, and the Hash value is verified to ensure that the data has not been tampered with, thereby ensuring the security and reliability of the transmission.

[0016] Technical Solution

[0017] The present invention provides an encryption communication method for dynamically generating a key based on a timestamp, a user ID and location information. The method comprises the following steps:

[0018] Dynamic key generation: At the beginning of each communication, the sending client generates a unique dynamic key seed S based on the current timestamp, user ID and location information. The seed S is used for subsequent encryption and decryption processes:

[0019] The timestamp (Timestamp) records the current communication time and is expressed in integer format to ensure the uniqueness of each communication moment.

[0020] The user unique identifier (User ID) is a unique identifier of the user, used to distinguish the identities of the communicating parties.

[0021] The location information (Location): includes the GPS coordinates or other location data of the sending client, which is used to increase the randomness and security of the key.

[0022] The timestamp, user ID and location information are concatenated in a preset order to form a multi-factor dynamic key seed S, ensuring the immediacy, uniqueness and unpredictability of the key.

[0023] Random number generation: Use the dynamic key seed S to generate a random number sequence for AES encryption and generate a constant key key for data encryption:

[0024] The dynamic key seed S is further used as the seed input of the random number generator to generate a random number sequence for encryption. The random number sequence is concatenated with the offset vector and the constant key as the dynamic key in the AES encryption process, ensuring the uniqueness of the encryption process.

[0025] The AES dynamic key generated further will be used for data packet encryption operations, ensuring the security of encrypted communications.

[0026] AES encryption and ciphertext generation: Use the dynamic AES key generated by a random number seed as the encryption key to encrypt the communication data or status data and generate the encrypted ciphertext C:

[0027] The AES encryption process: Use AES-ECB mode (electronic codebook mode) to encrypt the data packet content with the generated dynamic key. The block mode of the AES algorithm ensures high-intensity encryption of each byte to prevent interception attacks.

[0028] The generating ciphertext C: AES encryption process encrypts the communication data, status data or control instructions into ciphertext C. The generated ciphertext can prevent unauthorized users from reading the communication content.

[0029] The ciphertext C will be further encapsulated in a data frame in a subsequent step and contain encrypted communication data or status data.

[0030] Data frame encapsulation: Encapsulate the generated ciphertext C and related metadata into a data frame according to the preset data structure to ensure the structure and integrity of data transmission:

[0031] The data structure: The data frame consists of three parts: Header, Payload and Footer:

[0032] The Header includes a unique identifier BID, a timestamp Timestamp, and a data length Length.

[0033] The unique identifier BID is a unique identifier generated based on the user ID and a timestamp.

[0034] The Payload: stores the encrypted ciphertext C and metadata Metadata.

[0035] The metadata includes additional information, such as GPS location information, device information, etc., to support effective identification of data.

[0036] The Footer: contains a SHA256 hash value, which is used to verify the integrity of the data frame and the accuracy of the decrypted data.

[0037] The encapsulation structure of the data frame ensures that the receiving end can correctly parse and verify the data, facilitating subsequent transmission and decryption operations.

[0038] Integrity check: Perform integrity check on the encapsulated data frame to ensure that the data has not been tampered with or damaged during transmission, including:

[0039] Hash check at the receiving end: After receiving the data frame, the receiving end extracts the Header and Payload fields, and uses the sha256 algorithm consistent with the sending end to calculate the received data to generate the check value Hash_Value.

[0040] Data frame comparison: Compare the calculated Hash_Value with the Hash in Footer. If the values ​​are equal, it indicates that there is no bit error or loss in the data frame during transmission and the verification passes; otherwise, the verification fails and the decryption operation is terminated.

[0041] Decryption process: When the receiving end receives the data packet, it calculates the decryption key based on the timestamp, location information and device ID, decrypts the ciphertext data frame, and restores the original plaintext data:

[0042] The data frame analysis: after receiving the data frame, the receiving end analyzes the Header, Payload and Footer according to the data frame structure to determine the ciphertext data type.

[0043] The temporary key decryption: according to the ciphertext data type, the ciphertext data in the Payload is decrypted by using the calculated temporary key.

[0044] Integrity verification after decryption: Verify the integrity of the decrypted plaintext data to ensure that the data has not been tampered with or damaged after decryption:

[0045] The SHA256 hash value hash in the Footer field is further extracted as the first hash value Hash1.

[0046] The decrypted plaintext data is further grouped in a preset manner to generate a second hash value Hash2.

[0047] Hash1 is further compared with Hash2. If they are consistent, it indicates that the decrypted plaintext data has not been tampered with or lost, and the integrity check passes; otherwise, the check fails.

[0048] In the above technical solution, the present invention provides an encryption communication system and method for dynamically generating keys based on timestamp, user ID and location information, which has the following beneficial effects:

[0049] 1. Traditional encryption systems usually rely on static keys, which are easily inferred by attackers through brute force or pattern analysis when used repeatedly. The present invention uses a multi-factor dynamic key generation method based on timestamp, user ID and location information to ensure that the key in each communication is a unique and unpredictable combination, thereby effectively avoiding the risk of static keys being easily cracked. Even if an attacker obtains the encryption key of a certain communication, he cannot reuse it in other communications because the key generated each time varies due to different timestamps and location information. This mechanism greatly improves the anti-attack capability and data protection level of the encryption system, and ensures the independence and security of each communication.

[0050] 2. The present invention uses a dynamic key as the seed of a random number generator, and supports the AES algorithm for end-to-end encryption by generating a consistent random number sequence, ensuring that the data remains encrypted throughout the entire process between the sending client and the receiving client. The server only serves as a transit node for data, responsible for receiving and forwarding encrypted data packets, does not transmit keys, and does not have the ability to decrypt, so it is impossible to access the encrypted content. This design effectively avoids the security risks brought about by key transfer or intermediate node decryption in traditional systems. The receiving client generates keys and random number sequences based on the same multi-factor combination to ensure strict consistency between the decryption and encryption processes, truly realizing end-to-end encryption. This end-to-end protection mechanism ensures the complete encryption of data during transmission, prevents data from being attacked or leaked during transmission, and provides users with a high degree of communication confidentiality protection.

[0051] 3. The design of the present invention enables the sending and receiving clients to independently generate matching dynamic keys, avoiding the risk of interception or tampering caused by relying on the server to transfer keys in traditional encryption systems. Even if an attacker intercepts an encrypted data packet, the content of the data packet cannot be decrypted due to the lack of a dynamic key seed for generating a random number sequence, thereby effectively improving the security of the system. In addition, the receiving end does not need to obtain the key from the server, ensuring that the key will not be exposed to the attacker during the key transfer process, fundamentally solving the risk of key interception or man-in-the-middle attacks in traditional encryption systems, and further improving the security and reliability of data transmission.

[0052] 4. The present invention adds integrity verification information to the data packet through the Hash verification mechanism. The receiving client first verifies the Hash verification value before decryption to ensure that the data packet has not been tampered with during transmission. If the verification value is found to be mismatched during the verification process, the receiving end will automatically terminate the decryption process and generate a security alarm to indicate that the data transmission is abnormal. This integrity verification mechanism effectively prevents data from being tampered with or forged during transmission, provides a guarantee for the authenticity and reliability of the data transmission process, ensures that the received decrypted data is consistent with the encrypted data at the sending end, and further improves the system's anti-tampering ability and data integrity.

[0053] 5. The encryption communication system of the present invention can be applied to multiple data transmission scenarios that require high security protection, such as financial transactions, government communications, and confidential data transmission, as well as scenarios where a large amount of data requires high-security encrypted transmission. Through multi-factor dynamic key generation and end-to-end AES encryption design, the system is ensured to maintain high efficiency and stability in a complex security environment. The present invention has strong adaptability and can meet the strict requirements of different scenarios for communication data confidentiality, integrity, and anti-tampering, providing a highly secure and flexible encryption communication solution for various industries. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 An overall flow chart of the system provided by the embodiment of the present invention;

[0055] Figure 2 A data transmission flow chart provided by an embodiment of the present invention;

[0056] Figure 3 A flowchart of encryption key generation provided by an embodiment of the present invention;

[0057] Figure 4 A flow chart of generating a decryption key provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0058] In order to enable those skilled in the art to better understand the technical solution of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings.

[0059] Reference Figure 1 The overall system flow chart of the present invention describes the implementation steps of the data encryption transmission system based on multi-factor dynamic key generation. The system includes a sending client, a server and a receiving client, and relies on dynamic key generation, multi-factor encryption and integrity verification mechanisms to ensure data transmission security. The process is divided into key steps such as key generation, encryption, transmission and decryption.

[0060] The sending client initializes and generates a dynamic key: When each communication is started, the sending client requests the server to generate a dynamic encryption key based on the current communication timestamp, the location information of the receiving client, and the user ID of the receiving client. By combining the timestamp with the geographic location and identity information of the receiver, the present invention ensures the uniqueness and unpredictability of the key, thereby avoiding the security risk of static keys being reused.

[0061] Request necessary information from the server: To ensure the time consistency of key generation, the sending client first requests the current timestamp and the receiving client's location information and ID from the server. The server processes the request, requests the receiving client's location and feeds back the timestamp and location information to the sending client, ensuring the time synchronization of both parties and the validity of the receiving party's information. The server only acts as an information transfer node throughout the process, does not transmit keys, and cannot perform data encryption or decryption operations, thus avoiding the possibility of key leakage.

[0062] Sending client data encryption: After receiving the server's timestamp, the receiving client's location information and user ID, the sending client combines this information to generate a unique dynamic key. The generated key is used as the seed of the random number generator to generate the key sequence for AES encryption. After the data packet is encrypted by AES, it is encapsulated into a data frame with an integrity check code to ensure that the data cannot be read during transmission.

[0063] Data packet transmission to the receiving client: The sending client transmits the generated encrypted data packet together with the integrity check information to the server. The server only acts as a data transfer node and forwards the encrypted data packet intact to the receiving client. This transmission mode ensures that the server never has the decryption capability and does not transmit the key, avoiding the risk of data leakage caused by server attacks.

[0064] Decryption and integrity check of the receiving client: After receiving the encrypted data packet, the receiving client generates a matching dynamic decryption key based on the timestamp sent back by the server, combined with its own location information and its own ID, and uses it to decrypt the data packet. After decryption, the receiving client verifies the integrity of the decrypted data based on the integrity check value in the data packet to ensure that the data has not been tampered with during transmission.

[0065] Reference Figure 2 The data transmission flow chart of the present invention shows the entire encrypted transmission process from the sending client to the receiving client, and describes in detail the steps of data packet encryption, encapsulation, transmission and reception to ensure end-to-end data security.

[0066] Data packet encapsulation and encryption: The sending client encapsulates the data content, data type (such as status data or control instructions) and metadata (including location information and timestamp) to be transmitted into a structured data packet. The data packet contains three parts: Header, Payload and Footer:

[0067] Header: Contains the unique identifier BID (generated based on the user ID and timestamp), data type Type, and data length Length.

[0068] Payload: Contains AES-encrypted data content and other metadata information (such as GPS location information).

[0069] Footer: Contains integrity verification information, namely the SHA256 hash value, which is used for integrity verification of subsequent decrypted data.

[0070] Encrypt and generate ciphertext: The sending client performs AES encryption operation through a random number generator combined with the generated key to encrypt the data content into ciphertext. This ciphertext ensures that the data packet cannot be deciphered even if it is intercepted during transmission. AES encryption operation further enhances the security of the data transmission process.

[0071] Data packet transmission: The encrypted data packet and integrity check value are transmitted to the server through a secure channel. The server is responsible for delivering the data packet to the receiving client and does not participate in the decryption of the data. The server's responsibility is limited to the transfer of data packets. It does not transmit keys and does not have the ability to decrypt data, thus avoiding the risk of data leakage caused by server attacks.

[0072] Data decryption on the receiving client: After receiving the data packet, the receiving client first parses the Header and Payload fields and extracts the ciphertext and checksum. The receiving client uses the timestamp, its own location information, and user ID obtained from the server to generate a matching decryption key. After decryption, the receiving client uses the checksum to verify the integrity of the decrypted data to ensure that the data has not been tampered with or forged during transmission.

[0073] Reference Figure 3 ,The encryption key generation flow diagram shows how the sending client obtains the required key generation parameters and generates dynamic keys before encrypting data.,This process specifically implements the generation of encryption keys and the encryption of data packets.

[0074] Request key generation parameters from the server: The sending client first requests the parameters for key generation from the server. The server returns the current timestamp, the location information of the receiving client, and the receiving end user ID according to the request. This information ensures time consistency during the generation process to prevent the key from not matching at the receiving end.

[0075] Dynamic key generation: The sending client combines the received timestamp, the receiving client's location information, and the user ID to form a dynamic key seed S. S is used as the seed input of the random number generator to generate part of the key for AES encryption. Then, an offset vector is generated based on the timestamp, and the offset vector is combined with the random number sequence to obtain a temporary key. The generated key is unique and unpredictable, ensuring that a different key is used for each communication, thereby avoiding security risks caused by static keys.

[0076] Data encryption and transmission preparation: The sending client generates an AES key through the output of the random number generator, and uses the key to encrypt the data packet to obtain the ciphertext. Subsequently, the ciphertext is encapsulated into a structured data frame and transmitted to the server, preparing to send the data packet to the receiving client.

[0077] Reference Figure 4 ,The decryption key generation flow diagram shows that after receiving the encrypted data packet, the receiving client implements the decryption key matching the sender through the key generation process, thereby decrypting the data content and verifying the integrity.

[0078] Request key generation parameters from the server: After receiving the encrypted data packet, the receiving client requests the current timestamp and other parameters from the server. The server returns the timestamp to ensure the consistency of the key generation parameters.

[0079] Key generation and data decryption: The receiving client uses the timestamp returned by the server, its own location information, and its own user ID to generate a matching random number seed. The random number is generated from the seed and used as the receiving client's AES decryption key. The key is used to decrypt the data packet to restore the data content.

[0080] Decrypted data verification: After successful decryption, the receiving client calculates the hash value of the decrypted data and then compares the decrypted data with the integrity check value before decryption to ensure the integrity and authenticity of the data during transmission.

[0081] The present invention ensures the confidentiality and integrity of data through multi-factor dynamic key generation and end-to-end AES encryption, and is suitable for a variety of large-scale data transmission scenarios requiring high security, including financial communications and confidential information transmission.

[0082] It should be understood that only certain exemplary embodiments of the present invention have been described above by way of illustration. Although one or more embodiments of the present invention have been described in conjunction with the accompanying drawings, it should be understood by those skilled in the art that various changes in form and detail may be made without departing from the spirit and scope of the present invention as defined by the appended claims.

Claims

1. An encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: The system comprises: a sending client, which is used to generate an encryption key and an encrypted data packet. The sending client comprises: a random number seed generation module, which is used to generate a dynamic random number seed based on the current timestamp, user ID and location information to ensure that the key generated in each communication is unique and unpredictable; an encryption key generation module, which is used to receive the random number seed generated by the random number seed generation module and generate a random number sequence for encryption through a random number generation algorithm; then an encryption offset vector is generated from the timestamp, and the offset vector and the random number sequence are spliced ​​as a key to symmetrically encrypt the data packet content; an encryption module, which is used to receive the key generated by the key generation module to symmetrically encrypt the data packet, and the variability of time and place ensures the variability of the key, thereby ensuring the high confidentiality of the data; a check generation module, which is used to generate a sha256 check value for the encrypted data packet to ensure the integrity of the data packet during transmission; the check value will be sent together with the encrypted data packet to facilitate the receiving end to verify whether the data has been tampered with; and a data packet sending module, which is used to send data containing the encrypted data packet and the sha256 check value to a server so that the server can forward it to the receiving client. The server is used to transfer encrypted data packets between the sending client and the receiving client. The server includes: a time synchronization module, which is used to provide time synchronization services so that the sending client and the receiving client can generate encryption and decryption keys based on the same time reference to ensure that the random number sequences generated by both parties are consistent; a transfer module, which is used to receive the data packets from the sending client and forward them to the receiving client; the server does not have the decryption capability and directly transfers the data packets to avoid the risk of data leakage. The receiving client is used to receive the encrypted data packets forwarded by the server and generate a decryption key based on the same information to decrypt the data packet content. The receiving client includes: The receiving module is used to receive the data packet forwarded by the server, which contains the encrypted data and the sha256 checksum; the checksum verification module is used to verify the sha256 checksum of the data packet to ensure that the data packet has not been tampered with during transmission; if the checksum verification fails, the decryption operation is terminated and the server is informed, and then the sending client is informed that the data has been tampered with; the random number seed generation module is used to generate the same random number sequence as the sending client based on the same timestamp, user ID and location information to ensure that the decryption key is consistent with the encryption key; the decryption key generation module is used to receive the random number sequence generated by the random number seed generation module, and then generate an offset vector based on the timestamp, and splice it with the random number sequence to form a decryption key; the decryption module is used to use the key generated by the decryption key generation module to decrypt the data packet content and restore the original data.

2. According to claim 1, an encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: The sending client further includes: a dynamic random number seed generation module, which is used to generate an encryption key based on the current timestamp, user ID and location information, to ensure that the key is different for each communication, increase the dynamic and unpredictable nature of the key, and thus improve the overall security of the communication; an encryption key generation module, which generates an offset vector and concatenates it with a random number sequence to obtain an encryption key for symmetric encryption of data packets to ensure that the data encryption key for each transmission is different.

3. According to claim 1, an encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: The time synchronization service provided by the server is based on the Network Time Protocol (NTP) or similar high-precision time synchronization technology to ensure that the time base of the sending client and the receiving client is consistent, thereby ensuring the consistency of encryption and decryption key generation.

4. According to claim 1, an encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: The receiving client further includes: an integrity check module, which is used to verify the integrity of the data through sha256 after receiving the data packet, to ensure that the data packet has not been tampered with during transmission, and automatically terminate the decryption operation if the verification fails; a key generation and synchronization module, which is used to generate a random number seed based on the same timestamp, user ID and location information, and generate a random number sequence consistent with the encryption end for data packet decryption key generation; a data decryption module, which is used to receive the decryption key, decrypt the data packet content, and restore the original data after the data packet passes the integrity verification, to ensure the accuracy and reliability of the data.

5. According to claim 1, an encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: When an exception occurs in the process of verifying the sender identification code or sha256 checksum of the receiving client, the receiving client generates an error feedback and sends a security warning to the server, and the server notifies the sending client of the warning information to prompt the possible security problems of data transmission.

6. According to claim 1, an encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: The sha256 checksum is used to detect data integrity in real time during data packet transmission. The checksum verification mechanism ensures that the data packet has not been tampered with during transmission. If the check fails, the data decryption process is automatically terminated to prevent forged or tampered data from being decrypted, thereby further ensuring the authenticity of the data.

7. According to claim 1, an encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: The encryption key generated by the sending client and the receiving client is valid only during a single communication, to ensure that the key will not be reused and to prevent the risk of key reuse or interception in future communications.

8. According to claim 1, an encryption communication system and method for dynamically generating keys based on multiple information, characterized in that: The key is dynamically generated based on the client data of both parties, and the key is not transmitted over the network, ensuring the security and non-theft of the key.

9. The encryption communication system and method for dynamically generating keys based on multiple information according to claim 1, characterized in that: The encryption communication system is suitable for large-scale data transmission scenarios, and uses a symmetric encryption (AES) algorithm to ensure the efficiency of encryption and decryption of large amounts of data. It is suitable for high-security data transmission scenarios, including but not limited to financial transactions, government communications and confidential data transmission, ensuring the high security and integrity of data transmission, and effectively protecting the security of data transmission through multi-factor dynamic key generation and random number seed encryption.

Images