Purchase approval data transmission method based on fusion SHA and AES encryption algorithms

Abstract

The invention relates to a purchase approval data transmission method based on fusion of SHA and AES encryption algorithms, which belongs to the technical field of data transmission, and specifically comprises the following steps: performing unitization and slicing nested encryption on purchase approval application data needing to be encrypted from the whole process of creation and circulation of the purchase approval application data; and encryption and circulation are carried out in a secondary encryption mode through combined calculation of circulation data and circulation nodes, so that the effect of preventing total data leakage when the purchase approval application sensitive data is cracked in the encryption mode is achieved.

Description

Technical Field

[0001] The invention relates to a procurement approval data transmission method based on the integration of SHA and AES encryption algorithms, belonging to the technical field of data transmission. Background Art

[0002] In today's digital age, the approval process has become an indispensable part of the work of enterprises, especially in key business areas such as procurement business. With the rapid increase in data volume and the increasingly severe cybersecurity threats, how to ensure the security and integrity of the entire amount of data in the approval process has become an important challenge facing enterprises. Currently, since the data in the approval process is usually transmitted and stored in plain text, it is easy for the data to be intercepted during transmission or illegally accessed during storage. In the approval process, the data may be processed by multiple links and multiple approvers. If the data is tampered with or forged during transmission, it will directly affect the accuracy and fairness of the approval results. In addition, the existing approval process encrypts the entire approval data during transmission encryption. When the encryption method is cracked, the entire content of the procurement approval data will be obtained, resulting in the leakage of the entire data. Summary of the invention

[0003] In order to solve the technical problems existing in the prior art, the present invention provides a procurement approval data transmission method based on the integration of SHA and AES encryption algorithms. By integrating the secure hash SHA algorithm and the symmetric AES encryption algorithm, the encryption effect is good, data cracking is prevented, and the security and reliability of data transmission are guaranteed.

[0004] To achieve the above purpose, the technical solution adopted by the present invention is a procurement approval data transmission method based on the integration of SHA and AES encryption algorithms, which is operated according to the following steps: a. The starting node first obtains the full amount of approval application data of the initiator, and divides the data into three units according to different types of processing. The units are mutually encrypted through the AES encryption algorithm. The three units include the structured data text encryption processing unit S1, the unstructured data attachment encryption processing unit S2, and the unstructured data image encryption processing unit S3; combined with the SHA-256 hash algorithm, the three unit data are compressed into a summary as a whole, the data volume becomes smaller, and the data format is fixed. A hash value is created, and a mixed encrypted string composed of random letters and numbers is generated. The starting node hash value t1 is combined with the full amount of approval data and encrypted and transferred to the next approval node; b. The second node obtains the current time of the current flow node, uses the current flow time as a random factor, imports the random number generation algorithm, and calculates the random number x1; c. Combine all the encrypted module data received by the second node from the starting node with the generated random number x1, use the SHA-256 hash algorithm to generate the current node hash value t2, combine the current node hash value with the full amount of approval data, encrypt and transfer to the third node; d. According to the needs of data flow, loop steps b and c in sequence until the data flow stops.

[0005] Preferably, in step a, within the structured data text encryption processing unit S1, different fields such as the purchase name, purchase budget price, and purchase method involved in the application are extracted according to preset keywords to divide different data types of the same type, and the same data are sliced ​​and divided to obtain different groups of slice data. The slice data are encrypted using the AES algorithm, and the slice data include purchase name slice data, budget price slice data, and purchase method slice data.

[0006] Preferably, the encryption method of the slice data is to first obtain the slice original data to be encrypted in the structured data text encryption processing unit S1, divide the original data into multiple sub-data, and encrypt the sub-data respectively using an irreversible encryption algorithm to obtain encrypted sub-data; encrypt the original data according to a reversible encryption algorithm to obtain target data, compress the encrypted sub-data and target data, and complete the encryption process of the slice data.

[0007] Preferably, in step a, when performing encryption, the unstructured data attachment encryption processing unit S2 first obtains the document attachment to be encrypted, calculates the memory size occupied by the document attachment to be encrypted, extracts this value, and combines it with the name of the document attachment for encoding, and completes the encryption process using the AES encryption algorithm.

[0008] Preferably, in step a, when performing encryption, the unstructured data image encryption processing unit S3 uses the AES encryption algorithm to randomly scramble the pixels of the image in the unstructured data image encryption processing unit S3, and then divides the image into several blocks of a size equal to the AES packet length, and encrypts each block independently.

[0009] Compared with the prior art, the present invention has the following technical effects: the present invention integrates the secure hash SHA algorithm and the symmetric AES encryption algorithm to modularize and slice the procurement approval data unit and nest encryption, and at the same time adds a data integrity verification algorithm to the flow node, so as to achieve high security protection of data during transmission and storage, and provide a strong guarantee for the security and compliance of the enterprise approval process; at the same time, it solves the problem that the relevant procurement approval process encryption method is to encrypt the entire circulation data. When the encryption method is cracked, the entire content of the approval data will be disclosed, resulting in the full leakage of procurement approval data, insufficient security and a large impact. This method takes into account the situation where the approval data encryption method is cracked, and encrypts the full amount of data in a quantitative manner, so that even if the encryption is cracked, only part of the data will be leaked. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 It is a flowchart of the present invention.

[0011] Figure 2 This is a flow chart of encryption of slice data in the present invention. DETAILED DESCRIPTION

[0012] In order to make the technical problems, technical solutions and beneficial effects to be solved by the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0013] like Figure 1 As shown, a procurement approval data transmission method based on the integration of SHA and AES encryption algorithms is operated according to the following steps: a. The starting node first obtains the full amount of approval application data of the initiator, and divides the data into three units according to different types of processing. The units are mutually encrypted through the AES encryption algorithm. The three units include the structured data text encryption processing unit S1, the unstructured data attachment encryption processing unit S2, and the unstructured data image encryption processing unit S3; combined with the SHA-256 hash algorithm, the three unit data are compressed into a summary as a whole, the data volume becomes smaller, and the data format is fixed. A hash value is created, and a mixed encrypted string composed of random letters and numbers is generated. The starting node hash value t1 is combined with the full amount of approval data and encrypted and transferred to the next approval node; b. The second node obtains the current time of the current flow node, uses the current flow time as a random factor, imports the random number generation algorithm, and calculates the random number x1; c. Combine all the encrypted module data received by the second node from the starting node with the generated random number x1, use the SHA-256 hash algorithm to generate the current node hash value t2, combine the current node hash value with the full amount of approval data, encrypt and transfer to the third node; d. According to the needs of data flow, loop steps b and c in sequence until the data flow stops.

[0014] The present invention implements unitized and sliced ​​nested encryption for the procurement approval application data that needs to be encrypted from its creation to the entire circulation process, and encrypts and circulates it in a secondary encryption manner by combining the circulation data with the circulation nodes, thereby preventing the sensitive data of the procurement approval application from being fully leaked when the encryption method is cracked.

[0015] Among them, in the structured data text encryption processing unit S1, different types of data of the same type are divided according to different fields such as procurement name, procurement budget price, procurement method, etc. involved in the extraction application, and the data of the same type are sliced ​​and processed to obtain different groups of slice data. The slice data is encrypted using the AES algorithm. The slice data includes procurement name slice data, budget price slice data, and procurement method slice data.

[0016] like Figure 2 As shown, the encryption method of slice data is to first obtain the slice original data to be encrypted in the structured data text encryption processing unit S1, divide the original data into multiple sub-data, encrypt the sub-data respectively using an irreversible encryption algorithm to obtain the encrypted sub-data; encrypt the original data according to the reversible encryption algorithm to obtain the target data, compress the encrypted sub-data and the target data to complete the encryption process of the slice data. In this way, the data is encoded through a complex algorithm to ensure that even if the data is intercepted, its content cannot be easily interpreted, which improves the security of the data and enhances the robustness and reliability of the system.

[0017] When performing encryption, the unstructured data attachment encryption processing unit S2 first obtains the document attachment to be encrypted, calculates the memory size occupied by the document attachment to be encrypted, extracts this value, and combines it with the name of the document attachment for encoding, and completes the encryption process using the AES encryption algorithm.

[0018] When performing encryption, the unstructured data image encryption processing unit S3 uses the AES encryption algorithm to randomly scramble the pixels of the image in the unstructured data image encryption processing unit S3, and then divides the image into several blocks of the same size as the AES packet length, and independently encrypts each block.

[0019] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims

1. A procurement approval data transmission method based on the integration of SHA and AES encryption algorithms, characterized by: Follow the steps below, a. The starting node first obtains the full amount of approval application data of the initiator, and divides the data into three units according to different types of processing. The units are mutually encrypted through the AES encryption algorithm. The three units include the structured data text encryption processing unit S1, the unstructured data attachment encryption processing unit S2, and the unstructured data image encryption processing unit S3; combined with the SHA-256 hash algorithm, the three unit data are compressed into a summary as a whole, the data volume becomes smaller, and the data format is fixed. A hash value is created, and a mixed encrypted string composed of random letters and numbers is generated. The starting node hash value t1 is combined with the full amount of approval data and encrypted and transferred to the next approval node; b. The second node obtains the current time of the current flow node, uses the current flow time as a random factor, imports the random number generation algorithm, and calculates the random number x1; c. Combine all the encrypted module data received by the second node from the starting node with the generated random number x1, use the SHA-256 hash algorithm to generate the current node hash value t2, combine the current node hash value with the full amount of approval data, encrypt and transfer to the third node; d. According to the needs of data flow, loop steps b and c in sequence until the data flow stops.

2. The procurement approval data transmission method based on the integration of SHA and AES encryption algorithms according to claim 1 is characterized by: In the step a, within the structured data text encryption processing unit S1, different fields such as the purchase name, purchase budget price, and purchase method involved in the application are extracted according to preset keywords to divide different data types of the same type, and the same data is sliced ​​and divided to obtain different groups of slice data. The slice data is encrypted using the AES algorithm, and the slice data includes purchase name slice data, budget price slice data, and purchase method slice data.

3. The procurement approval data transmission method based on the integration of SHA and AES encryption algorithms according to claim 2 is characterized by: The encryption method of the slice data is to first obtain the slice original data to be encrypted in the structured data text encryption processing unit S1, divide the original data into multiple sub-data, and encrypt the sub-data respectively using an irreversible encryption algorithm to obtain encrypted sub-data; The original data is encrypted according to a reversible encryption algorithm to obtain target data, and the encrypted sub-data and target data are compressed to complete the encryption process of the sliced ​​data.

4. The procurement approval data transmission method based on the integration of SHA and AES encryption algorithms according to claim 1 is characterized in that: In the step a, the unstructured data attachment encryption processing unit S2 first obtains the document attachment to be encrypted, calculates the memory size occupied by the document attachment to be encrypted, extracts this value, and combines it with the name of the document attachment for encoding, and completes the encryption process using the AES encryption algorithm.

5. The method for transmitting procurement approval data based on the integration of SHA and AES encryption algorithms according to claim 1 is characterized in that: In the step a, when performing encryption, the unstructured data image encryption processing unit S3 uses the AES encryption algorithm to randomly scramble the pixels of the image in the unstructured data image encryption processing unit S3, and then divides the image into several blocks of a size equal to the AES packet length, and encrypts each block independently.

Images