Encryption method and system for realizing SATA-PCIe mixed insertion data based on double-fish algorithm

Abstract

The invention relates to the technical field of data encryption, and discloses an encryption method for realizing SATA-PCIe mixed insertion data based on a double-fish algorithm, and the method comprises the steps: collecting mixed insertion data of an SATA interface and a PCIe interface, and carrying out data buffering and time sequence calibration to obtain calibration data; performing preliminary shunting on the calibration data to obtain preliminary shunting data, and performing priority division on the preliminary shunting data to obtain high-priority data and low-priority data; configuring a high-priority key seed of the high-priority data, constructing a high-dimensional lattice structure, and performing initial encryption on the high-priority data to obtain initial encrypted data; performing data core division, quantum random encryption and asymmetric encryption on the initial encrypted data to obtain high-priority encrypted data; and performing simplified double-track encryption on the low-priority data to obtain double-track encrypted data, and performing hierarchical storage on the high-priority encrypted data and the double-track encrypted data to obtain target encrypted data. According to the method and the device, the data security of the SATA-PCIe mixed insertion data can be improved.

Description

Technical Field

[0001] The present invention relates to a method and system for implementing SATA-PCIe mixed insertion data encryption based on a Pisces algorithm, and belongs to the technical field of data encryption. Background Art

[0002] In today's era of rapid development of digital information, the security of data storage and transmission has become the focus of attention in various fields. With the widespread application of computer technology, SATA (Serial ATA) and PCIe (Peripheral Component Interconnect Express) interfaces are widely used in various devices, such as servers, storage arrays, and high-performance computing systems to meet different data transmission requirements. In the process of data processing, SATA and PCIe are often mixed. These data cover a lot of sensitive information, including corporate trade secrets, personal privacy data, and key business data. The security protection of this data is crucial. Once data leakage occurs, it may lead to serious economic losses, privacy violations, and business interruptions.

[0003] At present, traditional data encryption methods have many limitations when processing SATA-PCIe mixed data. Some conventional encryption technologies are only designed for a single type of interface data or a specific data format, and lack the ability to effectively deal with the diversity and complexity of mixed data of the two interfaces. For example, some encryption algorithms cannot flexibly adjust the encryption strategy when processing data with different transmission rates and protocols, resulting in low encryption efficiency or poor encryption effect. Moreover, the existing encryption system often relies on a fixed key generation and management mechanism, which is difficult to adapt to complex and changing security environments and data characteristics. When faced with large-scale, high-frequency SATA-PCIe mixed data, traditional encryption methods are prone to problems such as chaotic key management and delayed encryption and decryption processes, resulting in insufficient data security. Summary of the invention

[0004] In order to solve the above problem, the present invention provides an encryption method for SATA-PCIe mixed insertion data based on the Pisces algorithm, which can improve the data security of SATA-PCIe mixed insertion data.

[0005] To achieve the above object, the present invention provides a method for encrypting SATA-PCIe mixed insertion data based on the Pisces algorithm, comprising: Collecting mixed insertion data of the SATA interface and the PCIe interface, analyzing key parameter characteristics of the interface interaction key parameters of the mixed insertion data, constructing a data buffering strategy for the mixed insertion data based on the key parameter characteristics, buffering the mixed insertion data based on the data buffering strategy to obtain buffered data, constructing an atomic energy level transition benchmark for the buffered data, and using the atomic energy level transition benchmark to perform timing calibration on the buffered data to obtain calibration data; Calculating the word frequency-inverse document frequency of the calibration data, preliminarily diverting the calibration data based on the word frequency-inverse document frequency to obtain preliminary diverted data, identifying link channel characteristics of the calibration data, and prioritizing the preliminary diverted data based on the link channel characteristics to obtain high priority data and low priority data; Using a preset security mapping rule, a high-priority key seed of the high-priority data is configured, and the encryption level requirement of the high-priority data is queried to construct an encryption elliptic curve for the high-priority data, and base point operations are performed in the encryption elliptic curve using the high-priority key seed to obtain an encryption key, and a high-dimensional lattice structure of the high-priority data is constructed, and the high-dimensional lattice structure and the encryption key are used to initially encrypt the high-priority data to obtain initial encrypted data; Divide the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data, construct a quantum random number for the primary encrypted data, perform quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data, identify the digital certificate and identity identifier of metadata corresponding to the secondary encrypted data, perform asymmetric encryption on the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetric encrypted data, and use the quantum random encrypted data and the asymmetric encrypted data as high-priority encrypted data; The low-priority data is simplified with dual-track encryption to obtain dual-track encrypted data, and the high-priority encrypted data and the dual-track encrypted data are hierarchically stored to obtain target encrypted data.

[0006] Optionally, the analyzing key parameter characteristics of the interface interaction key parameters of the hybrid data includes: Extracting an electrical signal of the mixed-insertion data; Querying the clock signal period, level start-end time, level rising edge start-end voltage and level falling edge start-end voltage of the electrical signal; Analyzing a clock signal frequency of the electrical signal based on the clock signal period; Analyzing a level transition frequency of the electrical signal based on the level start-end time; Analyzing the electrical rising edge slope of the electrical signal based on the level rising edge start-end voltage; Analyzing the electrical falling edge slope of the electrical signal based on the starting and ending voltages of the falling edge; Based on the clock signal frequency, the level conversion frequency, the electrical rising edge slope, and the electrical falling edge slope, key parameter characteristics of the interface interaction key parameters corresponding to the intermixed data are determined.

[0007] Optionally, constructing a data buffering strategy for the intermixed data based on the key parameter feature includes: Based on the key parameter characteristics, analyzing the traffic peak and data unit size of the mixed insertion data; Based on the traffic peak value and the data unit size, construct a buffer space for the mixed insertion data; Calculating the timing weight and priority weight of the mixed insertion data; Based on the timing weight and the priority weight, construct a data storage solution for the mixed insertion data; Formulate data reading and writing rules for the intermixed data based on storage rules corresponding to the data storage solution; A data buffering strategy for the intermixed data is constructed based on the buffer space, the data storage solution, and the data reading and writing rules.

[0008] Optionally, calculating the term frequency-inverse document frequency of the calibration data includes: Constructing a data text of the calibration data; Performing document classification on the data text to obtain classified documents; The term frequency-inverse document frequency of the classified document is calculated using the following formula: P=n_(w,d) / (∑_k n_(k,d) )×logN / n_w; Among them, P represents term frequency-inverse document frequency, n_(w,d) represents the number of times word w appears in document d, N represents the number of classified documents, n_w represents the number of times word w appears in all classified documents, k represents the index variable, and ∑_k n_(k,d) represents the sum of the number of occurrences of all words in document d.

[0009] Optionally, the using the high-dimensional lattice structure and the encryption key to initially encrypt the high-priority data to obtain initial encrypted data includes: Converting the encryption key into a binary sequence; Performing unit segmentation on the binary sequence to obtain encrypted segmentation units; Converting the basis vectors of the high-dimensional lattice structure into a basis vector matrix; Performing a linear transformation on the basis vector matrix using vector subtraction to obtain a target basis vector matrix; Mapping the encrypted segmentation unit to the target basis vector matrix to obtain an encrypted vector; Perform data conversion on the encryption vector to obtain initial encrypted data.

[0010] Optionally, dividing the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data includes: After performing data scanning on the initial encrypted number using a preconfigured sensitivity label, the initial encrypted number is sensitivity labeled to obtain sensitivity labeled data; Querying the data flow direction of the sensitivity label data, based on the data flow direction; Analyzing the data usage of the sensitivity labeled data; Based on the data usage, access permission is set for the initial encrypted data to obtain setting permission; Based on the setting authority, the initial encrypted data is divided into data cores to obtain primary encrypted data and secondary encrypted data.

[0011] Optionally, the performing quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data includes: Construct a random sequence number set of the quantum random number, wherein the sequence number set can be expressed in the following form: R={r_1,r_2,⋯,r_n} , r_i∈{0,1}; Where R represents a sequence number set, r_1 represents the first random sequence number in the random sequence number set, r_2 represents the second random sequence number in the random sequence number set, r_n represents the nth random sequence number in the random sequence number set, and r_i represents the i-th sequence number in the random sequence number set; Construct an encryption sequence number set of the primary encrypted data, wherein the encryption sequence number set can be expressed in the following form: D={d_1,d_2,⋯,d_n}, d_i∈{0,1}; Where D represents the encryption sequence number set, d_1 represents the first random sequence number in the encryption sequence number set, d_2 represents the second random sequence number in the encryption sequence number set, d_n represents the nth random sequence number in the encryption sequence number set, and d_i represents the i-th sequence number in the encryption sequence number set; The random sequence number set and the encrypted sequence number set are subjected to quantum heterogeneous operation using the following formula to obtain encrypted data bits: e_i=d_i⊕r_i; Among them, e_i represents the encrypted data bit, d_i represents the i-th sequence number in the encryption sequence number set, r_i represents the i-th sequence number in the random sequence number set, and ⊕ represents quantum heterogeneous operation; Based on the encrypted data bits, the primary encrypted data is encrypted to obtain quantum random encrypted data.

[0012] Optionally, the performing asymmetrical encryption on the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetrically encrypted data includes: Obtaining the encryption public key of the encrypted data according to the digital certificate and the identity identifier; constructing a modulus of the secondary encrypted data; Calculating coprime numbers of the modulus; Using the coprime numbers, constructing a public key exponent of the secondary encrypted data; Based on the public key index, determining a private key index of the secondary encrypted data; Based on the public key index, the secondary encrypted data is encrypted using the following formula to obtain initial asymmetric encrypted data: C = M^e mod n; Where C represents the initial asymmetric encrypted data, M represents the byte sequence corresponding to the secondary encrypted data, e represents the public key exponent, and n represents the modulus; Based on the private key index, the initial asymmetrically encrypted data is decrypted using the following formula to obtain decrypted data: E = C^d mod n; Where E represents the decrypted data, C represents the initial asymmetric encrypted data, d represents the private key exponent, and n represents the modulus; The secondary encrypted data and the decrypted data are subjected to data consistency verification. If the result of the data consistency verification is consistent, the initial asymmetric encrypted data is used as the asymmetric encrypted data of the secondary encrypted data.

[0013] Optionally, performing simplified dual-track encryption on the low-priority data to obtain dual-track encrypted data includes: Performing binary conversion on the low priority data to obtain binary data; Grouping the binary data to obtain grouped data; Constructing an encrypted pseudo-random number for the packet data; Using the encrypted pseudo-random number, performing an out-of-place operation on the grouped data to obtain first-track encrypted data; Configuring a pseudo-random encryption seed for the grouped data; Performing element replacement on the grouped data to obtain element replacement data; Using the pseudo-random encryption seed, performing element substitution on the element replacement data to obtain second-track encrypted data; The first track encrypted data and the second track encrypted data are alternately spliced ​​to obtain dual-track encrypted data.

[0014] In a second aspect, the present invention provides an encryption system for SATA-PCIe mixed insertion data based on the Pisces algorithm, the system comprising: A data calibration module, used for collecting mixed insertion data of the SATA interface and the PCIe interface, analyzing key parameter characteristics of the interface interaction key parameters of the mixed insertion data, constructing a data buffering strategy for the mixed insertion data based on the key parameter characteristics, buffering the mixed insertion data based on the data buffering strategy to obtain buffered data, constructing an atomic energy level transition benchmark for the buffered data, and performing timing calibration on the buffered data using the atomic energy level transition benchmark to obtain calibration data; A data classification module, used for calculating the word frequency-inverse document frequency of the calibration data, preliminarily dividing the calibration data based on the word frequency-inverse document frequency to obtain preliminary divided data, identifying the link channel characteristics of the calibration data, and prioritizing the preliminary divided data based on the link channel characteristics to obtain high priority data and low priority data; Data initial encryption, used to configure a high-priority key seed of the high-priority data using a preset security mapping rule, query the encryption level requirement of the high-priority data to construct an encryption elliptic curve for the high-priority data, perform base point operations in the encryption elliptic curve using the high-priority key seed to obtain an encryption key, construct a high-dimensional lattice structure of the high-priority data, and perform initial encryption on the high-priority data using the high-dimensional lattice structure and the encryption key to obtain initial encrypted data; A data priority encryption module is used to divide the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data, construct a quantum random number for the primary encrypted data, perform quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data, identify a digital certificate and an identity identifier corresponding to metadata of the secondary encrypted data, perform asymmetric encryption on the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetric encrypted data, and use the quantum random encrypted data and the asymmetric encrypted data as high priority encrypted data; The data storage module is used to perform simplified dual-track encryption on the low-priority data to obtain dual-track encrypted data, and hierarchically store the high-priority encrypted data and the dual-track encrypted data to obtain target encrypted data.

[0015] Compared with the prior art, the present invention firstly collects intermixed data to provide original materials for the entire process, lays the foundation for subsequent operations, and analyzes the key parameter characteristics of the interface interaction of the intermixed data to deeply understand the data interaction mode and provide a basis for building a data buffering strategy. The strategy can ensure a smooth transition of data, reduce delays or losses caused by transmission problems, and improve system performance and reliability. The data buffering operation based on this makes data reception and processing more flexible, and uses the atomic energy level transition benchmark for timing calibration to ensure the correct causal relationship of data and avoid failures caused by time confusion. Then, the present invention calculates the word frequency-inverse document frequency of the calibration data to help extract key information, and the preliminary data diversion can improve processing efficiency, identify link channel characteristics and divide data priorities, and reasonably allocate system resources to ensure timely and accurate processing of high-priority data, thereby enhancing the overall performance and responsiveness of the system. Then, for high-priority data, the key seed is configured to increase the encryption pertinence and security foundation, and the encryption elliptic curve is constructed to clarify the encryption standard. The encryption key is generated by base point operation to ensure confidentiality, and the initial encryption is combined with the high-dimensional lattice structure to build a multi-layer encryption system to further enhance data security. The initial encrypted data is divided into cores, and quantum random encryption and asymmetric encryption are used for data of different importance. This takes into account both the advanced protection of key data and the reasonable encryption of less important data, avoids waste of resources, and ensures encryption accuracy through verification. It provides multi-layer encryption protection as a whole, thereby improving the data security of SATA-PCIe mixed data. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A flowchart of a method for encrypting SATA-PCIe mixed insertion data based on the Pisces algorithm provided in one embodiment of the present invention; Figure 2 A schematic diagram of a module of an encryption system for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm provided by an embodiment of the present invention.

[0017] The purpose, features and advantages of the present invention will be further described with reference to the accompanying drawings in conjunction with the embodiments. DETAILED DESCRIPTION

[0018] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0019] The embodiment of the present application provides an encryption method for SATA-PCIe mixed insertion data based on the Pisces algorithm. The execution subject of the encryption method for SATA-PCIe mixed insertion data based on the Pisces algorithm includes but is not limited to at least one of the electronic devices such as a server and a terminal that can be configured to execute the method provided by the embodiment of the present application. In other words, the encryption method for SATA-PCIe mixed insertion data based on the Pisces algorithm can be executed by software or hardware installed in a terminal device or a server device. The server includes but is not limited to: a single server, a server cluster, a cloud server or a cloud server cluster, etc.

[0020] Embodiment 1: Reference Figure 1 FIG. 1 is a flow chart of a method for encrypting SATA-PCIe mixed insertion data based on the Pisces algorithm according to an embodiment of the present invention. In this embodiment, the method for encrypting SATA-PCIe mixed insertion data based on the Pisces algorithm includes: S1. Collecting mixed insertion data of the SATA interface and the PCIe interface, analyzing key parameter characteristics of the interface interaction key parameters of the mixed insertion data, constructing a data buffering strategy for the mixed insertion data based on the key parameter characteristics, buffering the mixed insertion data based on the data buffering strategy to obtain buffered data, constructing an atomic energy level transition benchmark for the buffered data, and performing timing calibration on the buffered data using the atomic energy level transition benchmark to obtain calibration data.

[0021] The embodiment of the present invention can obtain original data by collecting the mixed data of the SATA interface and the PCIe interface, and provide materials for the entire data processing and encryption process.

[0022] Among them, the SATA interface refers to a computer bus interface, which is mainly used to connect storage devices (such as hard disks, optical drives, etc.) with the motherboard. The PCIe interface refers to a high-speed serial computer expansion bus standard, which is used to connect various peripheral devices, such as graphics cards, network cards, solid-state drives (SSDs through PCIe interfaces), etc., to achieve high-speed data transmission and communication interfaces between devices. The mixed data refers to data transmitted through both SATA interfaces and PCIe interfaces in a computer system or data processing environment.

[0023] The embodiment of the present invention can help users gain a deeper understanding of the mode and regularity of data interaction by analyzing the key parameter characteristics of the interface interaction key parameters of the hybrid data, and can also provide a basic basis for subsequent data buffering.

[0024] As an embodiment of the present invention, the key parameter characteristics of the key parameters of the interface interaction of the mixed data are analyzed, including: extracting the electrical signal of the mixed data, querying the clock signal period, level start-end time, level rising edge start-end voltage and level falling edge start-end voltage of the electrical signal, analyzing the clock signal frequency of the electrical signal based on the clock signal period, analyzing the level conversion frequency of the electrical signal based on the level start-end time, analyzing the electrical rising edge slope of the electrical signal based on the level rising edge start-end voltage, analyzing the electrical falling edge slope of the electrical signal based on the level falling edge start-end voltage, and determining the key parameter characteristics of the key parameters of the interface interaction corresponding to the mixed data based on the clock signal frequency, the level conversion frequency, the electrical rising edge slope and the electrical falling edge slope.

[0025] Among them, the electrical signal refers to the electrical signal corresponding to the data transmitted in the interface circuit, including voltage, current and other signals, which carries information such as data and clock. The clock signal period refers to the time taken for the clock signal to complete a complete cycle (such as from a rising edge to the next rising edge). The level start-end time refers to the time interval taken for the level to change from a state (such as a low level) to the end of the change (such as becoming a high level). The level rising edge start-end voltage refers to the voltage value corresponding to the start time and the voltage value corresponding to the end time during the transition of the signal level from a low level to a high level. The level falling edge start-end voltage refers to the voltage value corresponding to the start time and the voltage value corresponding to the end time during the transition of the signal level from a high level to a low level.

[0026] Optionally, the electrical signal can be obtained by placing a high-precision sensor (such as a voltage sensor, a current sensor) in the interface circuit. The level start-end time, the level rising edge start-end voltage, and the level falling edge start-end voltage can be directly read and recorded by connecting the probe to the corresponding position of the interface circuit through an oscilloscope or professional signal acquisition equipment. The clock signal frequency can be obtained by dividing 1 by the clock signal period. For example, if the clock signal period is 10 nanoseconds, then the frequency is 100MHz (1 / 10ns). The level conversion frequency can be obtained by calculating the number of occurrences of the level start-end time in unit time. For example, if there are 100 level conversions in 1 second, the level conversion frequency is 100Hz. The electrical rising edge slope can be calculated by dividing (level rising edge end voltage-level rising edge start voltage) by (rising edge end time-rising edge start time). The electrical falling edge slope can be calculated by dividing (level falling edge end voltage-level falling edge start voltage) by (falling edge end time-falling edge start time).

[0027] The embodiment of the present invention can ensure smooth transition of data between the interface and the processing system by constructing the data buffering strategy of the mixed insertion data based on the key parameter characteristics, reduce processing delays or data loss caused by problems such as data transmission rate mismatch, and thus improve the performance and reliability of the entire system.

[0028] As an embodiment of the present invention, the data buffering strategy for the mixed data is constructed based on the key parameter characteristics, including: based on the key parameter characteristics, analyzing the traffic peak and data unit size of the mixed data, constructing a buffer room for the mixed data based on the traffic peak and the data unit size, calculating the timing weight and priority weight of the mixed data, constructing a data storage scheme for the mixed data based on the timing weight and the priority weight, formulating data reading and writing rules for the mixed data based on storage rules corresponding to the data storage scheme, and constructing a data buffering strategy for the mixed data based on the buffer room, the data storage scheme and the data reading and writing rules.

[0029] The traffic peak value refers to the maximum value of the amount of data transmitted per unit time during the data transmission process, and the data unit size refers to the size of data transmitted as a basic unit during the data transmission process.

[0030] Optionally, the traffic peak value can be obtained by inferring the data transmission rate from key parameter characteristics such as clock signal frequency and level conversion frequency, combined with the data volume statistics within a period of time. The data unit size can be estimated by estimating the transmission duration of the data unit based on characteristics such as electrical rising edge slope, falling edge slope and level change time, and then the data unit size is obtained in combination with the transmission rate. The buffer space can be determined by determining the lower limit of the size of the buffer space according to the traffic peak value to ensure that it can accommodate the amount of data during the peak traffic period. For example, if the traffic peak is 50MB per second, the buffer space must be able to accommodate at least 50MB of data, and then consider the data unit size. If the data unit size varies greatly and small units appear frequently, additional space is appropriately added to reduce the overhead of small unit data frequently entering and exiting the buffer, thereby constructing a suitable buffer space. The timing weight can be evaluated based on the stability of the clock signal. For example, by analyzing the electrical signal of the hybrid data, the standard deviation of the clock signal period is u. If u is very small, such as u=0.01 ns (nanoseconds), it means that the clock signal is very stable. A reference value can be set. When u is less than this reference value (such as 0.1 ns), the timing weight is initially divided into 80 points (out of 100), and then the score is adjusted according to the ratio of the actual u value to the reference value. For example, the actual u=0.01 ns is very stable relative to the reference value of 0.1 ns. At this time, the timing weight can be increased to 90 points. The priority weight can be judged according to the importance of the electrical signal characteristics. For example, there is a specific level combination in the hybrid data that represents an important control instruction. Through analysis, it is found that the frequency of this level combination in all data is p. If p is very low, such as p=0.01 (i.e., a probability of 1%), but these instructions are critical to the system, then a higher basic score can be set, such as 60 points (out of 100). The data storage scheme for intermixed data constructed based on timing weight and priority weight can be determined by comparing timing weight and priority weight. If the timing weight is high, the first-in-first-out (FIFO) storage method is preferred to ensure that the data is processed in chronological order. When the priority weight is high, a special high-priority storage area is set to store high-priority data in this area in priority so that it can be quickly obtained and processed. The data read and write rules for intermixed data formulated based on the storage rules corresponding to the data storage scheme can be made by reading data from the head in sequence for the first-in-first-out storage area, and adding data at the tail for the write operation. For the high-priority storage area, the read operation first checks the area, and if there is data, it is read first. The write operation inserts the data setting according to the priority rule. The data buffering strategy for intermixed data constructed based on the buffer area, data storage scheme and data read and write rules can integrate the buffer size setting, the layout of the data storage scheme (such as the division of different priority areas, the arrangement of timing queues) and the data read and write rules to form a complete data buffering strategy.

[0031] The embodiment of the present invention performs data buffering on the intermixed data based on the data buffering strategy, and obtains buffered data which can isolate the data receiving and processing processes to a certain extent, so that the data receiving end and the data processing end can work at different rhythms, making the data processing more flexible.

[0032] Optionally, based on the data buffering strategy, the intermixed data is buffered to obtain the buffered data by: first, a storage area is allocated in the memory according to the buffer size determined by the data buffering strategy, and then the intermixed data is stored in the corresponding buffer position when it arrives according to the data storage scheme (determined according to the timing weight and priority weight of the data, such as first-in-first-out, storage by priority, etc.), and then the data is written and read according to the data reading and writing rules, the data is stored in the buffer and taken out when needed and sent to the subsequent processing unit, so as to complete the data buffering of the intermixed data and finally obtain the buffered data.

[0033] The embodiment of the present invention can provide a precise time reference standard for the buffered data by constructing the atomic energy level transition benchmark of the buffered data.

[0034] The atomic energy level transition reference refers to a high-precision time reference that can be constructed based on a high-precision atomic clock.

[0035] The embodiment of the present invention uses the atomic energy level transition reference to perform timing calibration on the buffered data to obtain calibration data, which can ensure that the causal relationship of the data is correct and avoid wrong decisions or system failures caused by time confusion.

[0036] Optionally, the process of using the atomic energy level transition reference to perform timing calibration on the buffered data to obtain the calibrated data is as follows: adding an atomic clock pulse count to the buffered data unit to form a timestamp, comparing the difference between the timestamp of each data unit and the reference time series, adjusting the order of the data units based on the difference, and achieving timing calibration to obtain the calibrated data.

[0037] S2. Calculate the word frequency-inverse document frequency of the calibration data, perform preliminary diversion on the calibration data based on the word frequency-inverse document frequency to obtain preliminary diversion data, identify link channel characteristics of the calibration data, and prioritize the preliminary diversion data based on the link channel characteristics to obtain high priority data and low priority data.

[0038] The embodiment of the present invention can help extract key information from the calibration data by calculating the word frequency-inverse document frequency of the calibration data, understand the theme and key content of the data, and provide a basis for subsequent data diversion and processing.

[0039] The term frequency-inverse document frequency is a statistical method that combines the term frequency and the inverse document frequency, and is used to measure the importance of a term in a document.

[0040] As an embodiment of the present invention, the calculating of the term frequency-inverse document frequency of the calibration data includes: constructing a data text of the calibration data, classifying the data text to obtain a classified document, and calculating the term frequency-inverse document frequency of the classified document using the following formula: P=n_(w,d) / (∑_k n_(k,d) )×logN / n_w; Among them, P represents term frequency-inverse document frequency, n_(w,d) represents the number of times word w appears in document d, N represents the number of classified documents, n_w represents the number of times word w appears in all classified documents, k represents the index variable, and ∑_k n_(k,d) represents the sum of the number of occurrences of all words in document d.

[0041] Optionally, the data text for constructing the calibration data can be constructed using a script generated by Java, and the data text can be classified into documents to obtain classified documents by analyzing the content characteristics of the data text to determine appropriate classification standards. Common classification criteria can be based on data source (such as data transmitted from different devices through SATA or PCIe interfaces), data usage (control instruction data or actual transmitted file content data, etc.), time range (classification according to data collected in different time periods), etc. For example, if classified according to data source, data text from SATA interface hard disk read and write operations can be marked as one category, and data text from PCIe interface network card interaction can be marked as another category, and classification is performed according to the above rules.

[0042] The embodiment of the present invention performs preliminary diversion of the calibration data based on the word frequency-inverse document frequency to obtain preliminary diversion data, which can enable the data to be preliminarily sorted according to certain logic and characteristics, thereby improving the efficiency of data processing.

[0043] Optionally, the preliminary diversion data can be obtained by calculating the word frequency and inverse document frequency of each text unit in the calibration data and multiplying them to obtain the TF-IDF value, selecting high-value topic keywords based on the value, and then classifying the calibration data according to the topic keywords to obtain the preliminary diversion data.

[0044] Furthermore, the embodiment of the present invention can help users determine the priority and processing method of data by identifying the link channel characteristics of the calibration data.

[0045] Optionally, the link channel characteristics can be collected through network monitoring technology, such as SNMP (Simple Network Management Protocol), network traffic analysis software and other tools to calibrate the bandwidth information of the data transmission link, determine the delay by sending a probe packet and measuring the round-trip time, analyze the data packet transmission to obtain the packet loss rate, and simultaneously determine the source device type, importance level and purpose of the destination device of the link connection. The link channel characteristics are analyzed based on this information.

[0046] Furthermore, the embodiment of the present invention prioritizes the preliminary diverted data based on the link channel characteristics, and obtains high-priority data and low-priority data. Through the priority division, system resources can be reasonably allocated to ensure that high-priority data can be processed in a timely and accurate manner, thereby improving the overall performance and responsiveness of the system.

[0047] Optionally, the process of prioritizing the preliminary diverted data based on the link channel characteristics to obtain high-priority data and low-priority data is as follows: first, priority rules are formulated based on the characteristics of the link channel, such as bandwidth, delay, packet loss rate, and importance of the source device and destination device. For example, if the link bandwidth is high, the delay is low, and the source device is a core business server, the priority of the transmitted data is higher. Then, the preliminary diverted data is evaluated using data marking technology, and the data that meets the high-priority rules is marked as high-priority data and stored in a specific high-priority data cache area. The remaining data is marked as low-priority data and stored in a low-priority data cache area, thereby achieving the division of high-priority data and low-priority data.

[0048] S3. Utilize preset security mapping rules to configure a high-priority key seed of the high-priority data, query the encryption level requirement of the high-priority data to construct an encryption elliptic curve for the high-priority data, use the high-priority key seed to perform base point operations in the encryption elliptic curve to obtain an encryption key, construct a high-dimensional lattice structure for the high-priority data, use the high-dimensional lattice structure and the encryption key to initially encrypt the high-priority data to obtain initial encrypted data.

[0049] The embodiment of the present invention can provide a unique initial encryption parameter associated with the data priority by configuring the high-priority key seed of the high-priority data through the use of the preset security mapping rule, thereby increasing the pertinence and security basis of encryption, so that data of different priorities can have differentiated and secure and reliable encryption starting conditions, and prevent the security risks caused by the common key seed, for example, in a multi-user and multi-data scenario, reduce the risk of data leakage caused by repeated cracking of the key seed. The high-priority key seed refers to the initial value or basic parameter used to generate the encryption key of the high-priority data.

[0050] Optionally, the process of configuring the high-priority key seed of the high-priority data using the preset security mapping rules is as follows: first, according to the security mapping rules pre-designed and stored in a secure area (such as an encrypted database or a hardware security module), analyze the key attributes of the high-priority data, such as data source, type, size, etc. Then, determine the corresponding key seed generation strategy from the rules based on these attributes. If the rules stipulate that part of the seed is generated based on the data hash value, a hash operation (such as using the SHA-256 algorithm) is performed on the high-priority data to obtain a hash value fragment of a specific length as part of the seed. Then, another part of the seed content is generated in combination with the system's built-in random number generator (such as a hardware-based true random number generator or a cryptographically secure pseudo-random number generator). Finally, the two parts are combined and configured into a high-priority key seed according to the mapping method in the rules (such as a specific bit operation or splicing rule).

[0051] The embodiment of the present invention can clarify the encryption strength or specific encryption standard required by the high-priority data by querying the encryption level requirement of the high-priority data to construct an encryption elliptic curve for the high-priority data.

[0052] The encrypted elliptic curve refers to a special mathematical structure, and data encryption is achieved through the operation rules defined on it.

[0053] Optionally, the encryption elliptic curve may select appropriate elliptic curve parameters, such as secp256k1, according to encryption level requirements.

[0054] The embodiment of the present invention uses the high-priority key seed to perform base point operations in the encryption elliptic curve to obtain an encryption key, which can ensure that the generation of the encryption key is random and unpredictable, and is closely related to the previously determined key seed and encryption elliptic curve. Due to the characteristics of elliptic curve encryption, even if an attacker obtains part of the encrypted information, it is extremely difficult to reversely derive the key seed or original data, thereby effectively protecting the confidentiality of high-priority data. Moreover, the key generated based on the base point operation can be conveniently used in the elliptic curve encryption system for subsequent data encryption and decryption operations, ensuring the consistency and effectiveness of the encryption process.

[0055] Optionally, the process of using the high-priority key seed to perform base point operations in the encryption elliptic curve to obtain the encryption key is as follows: first, using the high-priority key seed as the initial parameter, according to the mathematical rules related to elliptic curve cryptography, a point multiplication operation is performed on the constructed encryption elliptic curve (including a determined curve equation, finite field, base point, etc.), that is, multiple addition operations are performed on the value corresponding to the seed and the base point selected on the elliptic curve (according to the addition rules defined by the elliptic curve). Then, after a series of operations that conform to the logic of elliptic curve operations, the resulting point (coordinate value and other information) is converted and processed in a specific format, and finally an encryption key that can be used to encrypt high-priority data is generated.

[0056] The embodiment of the present invention can achieve encryption based on vector operations in the high-dimensional lattice structure by constructing the high-priority data.

[0057] The high-dimensional lattice structure refers to a discrete mathematical structure in a high-dimensional space, which can be constructed based on the Gram-Schmidt method.

[0058] The embodiment of the present invention uses the high-dimensional lattice structure and the encryption key to initially encrypt the high-priority data, and the obtained initial encrypted data can build a multi-layer encryption system to further enhance the security of the data.

[0059] As an embodiment of the present invention, the high-dimensional lattice structure and the encryption key are used to initially encrypt the high-priority data to obtain initial encrypted data, including: converting the encryption key into a binary sequence, performing unit segmentation on the binary sequence to obtain encryption segmentation units, converting the basis vectors of the high-dimensional lattice structure into a basis vector matrix, performing linear transformation on the basis vector matrix using vector subtraction to obtain a target basis vector matrix, mapping the encryption segmentation unit to the target basis vector matrix to obtain an encryption vector, and performing data conversion on the encryption vector to obtain initial encrypted data.

[0060] The binary sequence refers to a sequence composed of 0s and 1s obtained by converting the encryption key according to binary coding rules, and the encryption segmentation unit refers to a unit obtained by segmenting the binary sequence according to certain rules. For example, if a longer binary sequence (such as 1010110011) is segmented into groups of 3 bits, encryption segmentation units such as 101, 011, 001, and 1 will be obtained (if the last number is less than 3 bits, it is also considered a group).

[0061] Optionally, the conversion of the encryption key into a binary sequence can be achieved through ASCII code, and the encryption segmentation unit can divide the binary sequence into small segments of fixed length according to a preset length standard (such as 8 bits or 16 bits per group) by programming means such as string segmentation function or loop interception. These small segments are encryption segmentation units. The conversion of the basis vectors of the high-dimensional lattice structure into a basis vector matrix can be achieved through the conversion technology of vectors and matrices in linear algebra. The target basis vector matrix can be determined by determining the vector to be subtracted according to a specific algorithm or rule (which can be generated based on a key or other preset parameters, and the specific needs are combined with actual applications), and the vectors in the basis vector matrix are operated one by one through vector subtraction operations of subtracting corresponding elements in the matrix, so as to obtain the changed target basis vector matrix, and the encryption vector can be mapped through a custom mapping function.

[0062] S4. Divide the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data, construct a quantum random number for the primary encrypted data, perform quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data, identify the digital certificate and identity identifier of metadata corresponding to the secondary encrypted data, perform asymmetric encryption on the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetric encrypted data, and use the quantum random encrypted data and the asymmetric encrypted data as high priority encrypted data.

[0063] The embodiment of the present invention can distinguish the most core and sensitive data (first-level encrypted data) from relatively less important data (second-level encrypted data) by dividing the initial encrypted data into data cores to obtain first-level encrypted data and second-level encrypted data, so that subsequent encryption resources can be more reasonably allocated. For extremely critical data, more advanced and complex encryption technologies can be used, while for less important data, relatively appropriate encryption methods can be used to avoid waste of resources caused by excessive encryption, while ensuring the effectiveness and hierarchy of overall data security protection.

[0064] As an embodiment of the present invention, the data core division of the initial encrypted data to obtain primary encrypted data and secondary encrypted data includes: after performing data scanning on the initial encrypted number using a preconfigured sensitivity label, sensitivity marking the initial encrypted number to obtain sensitivity marked data, querying the data flow of the sensitivity marked data, based on the data flow, analyzing the data usage of the sensitivity marked data, based on the data usage, setting access rights for the initial encrypted data to obtain setting rights, and based on the setting rights, performing data core division of the initial encrypted data to obtain primary encrypted data and secondary encrypted data.

[0065] The pre-configured sensitivity label refers to a pre-set identification system for measuring the sensitivity of data, which is determined based on factors such as the nature, content, purpose and possible impact of the data on the organization.

[0066] Optionally, after the initial encrypted data is scanned using the pre-configured sensitivity label, the initial encrypted data is sensitivity-labeled, and the sensitivity-labeled data can be obtained by scanning the initial encrypted data through text matching or feature recognition technology according to the label content corresponding to the pre-set different sensitivity levels (such as labels containing words such as confidential, important, and general), and marking it with a corresponding sensitivity label according to the matching situation to form sensitivity-labeled data. The data flow direction of the query of the sensitivity-labeled data can be determined by using a log recording system (if any) or setting a monitoring point in the data transmission link to track the various nodes, devices, etc. that the sensitivity-labeled data passes through from the time it is generated. The data usage of the sensitivity-tagged data analyzed based on the data flow can be based on the business links, application scenarios, etc. involved in the data flow. For example, data flowing to the financial system may be used for account settlement, and data flowing to the R&D department may be used for product testing, and the specific data usage can be realized by comprehensively judging. The access permission setting for the initial encrypted data based on the data usage can be obtained by referring to the internal permission management rules of the enterprise according to the requirements of different departments and positions involved in the data usage, and using permission configuration tools to set corresponding readable, writable, modifiable and other access permissions for different user roles for the initial encrypted data to form setting permissions. The data core division of the initial encrypted data based on the setting permissions to obtain the first-level encrypted data and the second-level encrypted data can be divided into the first-level encrypted data and the relatively less important data into the second-level encrypted data according to the difference in importance reflected in the permission setting.

[0067] Furthermore, the embodiment of the present invention performs quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data, which can utilize the unique properties of quantum mechanics and the strong randomness of random numbers to perform higher-level encryption protection on the primary encrypted data. The quantum random number refers to a random number generated based on the principle of quantum mechanics.

[0068] As an embodiment of the present invention, the step of performing quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data includes: constructing a random sequence number set of the quantum random number, wherein the sequence number set can be expressed in the following form: R={r_1,r_2,⋯,r_n} , r_i∈{0,1}; Where R represents a sequence number set, r_1 represents the first random sequence number in the random sequence number set, r_2 represents the second random sequence number in the random sequence number set, r_n represents the nth random sequence number in the random sequence number set, and r_i represents the i-th sequence number in the random sequence number set; Construct an encryption sequence number set of the primary encrypted data, wherein the encryption sequence number set can be expressed in the following form: D={d_1,d_2,⋯,d_n}, d_i∈{0,1}; Where D represents the encryption sequence number set, d_1 represents the first random sequence number in the encryption sequence number set, d_2 represents the second random sequence number in the encryption sequence number set, d_n represents the nth random sequence number in the encryption sequence number set, and d_i represents the i-th sequence number in the encryption sequence number set; The random sequence number set and the encrypted sequence number set are subjected to quantum heterogeneous operation using the following formula to obtain encrypted data bits: e_i=d_i⊕r_i; Among them, e_i represents the encrypted data bit, d_i represents the i-th sequence number in the encryption sequence number set, r_i represents the i-th sequence number in the random sequence number set, and ⊕ represents quantum heterogeneous operation; Based on the encrypted data bits, the primary encrypted data is encrypted to obtain quantum random encrypted data.

[0069] Furthermore, the embodiment of the present invention can determine the legitimacy and authenticity of the source of the data and relevant information of the subject to which the data belongs by identifying the digital certificate and identity identifier corresponding to the metadata of the secondary encrypted data, thereby providing a trust basis and identity authentication basis for subsequent encryption operations.

[0070] Optionally, the digital certificate can be identified by extracting digital certificate information from the metadata corresponding to the secondary encrypted data, verifying the legitimacy of its signature with a trusted CA public key and parsing the content to obtain relevant identity information. The identity identifier can be identified by searching the identity identifier storage location, associating it with the digital certificate according to association rules, and then verifying its authenticity according to the system verification mechanism.

[0071] The embodiment of the present invention performs asymmetric encryption on the secondary encrypted data based on the digital certificate and the identity identifier, and the obtained asymmetric encrypted data can protect the confidentiality of the data during transmission and storage, and also facilitate the secure interaction of data between multiple different trust domains or entities, promote data sharing and collaboration, and ensure data security.

[0072] As an embodiment of the present invention, the asymmetric encryption of the secondary encrypted data based on the digital certificate and the identity identifier to obtain the asymmetric encrypted data includes: obtaining the encryption public key of the secondary encrypted data according to the digital certificate and the identity identifier, constructing the modulus of the secondary encrypted data, calculating the coprime number of the modulus, using the coprime number to construct the public key index of the secondary encrypted data, based on the public key index, determining the private key index of the secondary encrypted data, based on the public key index, encrypting the secondary encrypted data using the following formula to obtain initial asymmetric encrypted data, C = M^e mod n; Where C represents the initial asymmetric encrypted data, M represents the byte sequence corresponding to the secondary encrypted data, e represents the public key exponent, and n represents the modulus; Based on the private key index, the initial asymmetrically encrypted data is decrypted using the following formula to obtain decrypted data: E = C^d mod n; Where E represents the decrypted data, C represents the initial asymmetric encrypted data, d represents the private key exponent, and n represents the modulus; The secondary encrypted data and the decrypted data are subjected to data consistency verification. If the result of the data consistency verification is consistent, the initial asymmetric encrypted data is used as the asymmetric encrypted data of the secondary encrypted data.

[0073] Among them, the modulus refers to the number obtained by multiplying two large prime numbers in asymmetric encryption, the coprime number refers to an exponent used to determine the public key, the public key exponent refers to a part of the public key that together with the modulus constitutes the public key for encrypting data, and the private key exponent refers to a part of the private key that together with the modulus constitutes the private key for decrypting data.

[0074] Optionally, the obtaining of the encryption public key of the secondary encrypted data according to the digital certificate and the identity identifier may be performed by extracting public key information from the digital certificate (the certificate contains the corresponding public key), determining the subject in combination with the identity identifier, and obtaining the accurate encryption public key corresponding to the secondary encrypted data by association. The modulus for constructing the secondary encrypted data may be determined by a selected encryption algorithm rule (such as RSA algorithm-related requirements) and by a suitable mathematical operation (such as multiplying two large prime numbers, etc.). The calculation of the coprime number of the modulus may be performed by using an algorithm in number theory (such as the Euclidean algorithm, etc.) to find and determine a coprime number with the constructed modulus within an integer range that satisfies the coprime condition with the modulus. The construction of the public key exponent of the secondary encrypted data using the coprime number may be performed by appropriately processing the coprime number found according to the established encryption algorithm logic (such as directly selecting a coprime number that meets the requirements or further calculating and adjusting it) to make it a public key exponent that meets the encryption requirements. The determination of the private key exponent of the secondary encrypted data based on the public key exponent may be performed based on the public key exponent, the modulus, and a specific mathematical relationship (such as in RSA The corresponding relationship between public and private keys based on modular exponentiation in the algorithm) is calculated.

[0075] Furthermore, the embodiment of the present invention can provide multi-layer encryption protection by using the quantum random encryption data and the asymmetric encryption data as high-priority encryption data, thereby enhancing data security to meet the user's high-security level application requirements.

[0076] S5. Simplify the dual-track encryption for the low-priority data to obtain dual-track encrypted data, and hierarchically store the high-priority encrypted data and the dual-track encrypted data to obtain target encrypted data.

[0077] The embodiment of the present invention performs simplified dual-track encryption on the low-priority data to obtain dual-track encrypted data, which can effectively protect the data without excessively increasing the computing cost and storage cost.

[0078] As an embodiment of the present invention, the simplified dual-track encryption of the low-priority data to obtain dual-track encrypted data includes: performing binary conversion on the low-priority data to obtain binary data, grouping the binary data to obtain grouped data, constructing an encrypted pseudo-random number for the grouped data, using the encrypted pseudo-random number to perform an out-of-place operation on the grouped data to obtain first-track encrypted data, configuring a pseudo-random encryption seed for the grouped data, performing element substitution on the grouped data to obtain element substitution data, using the pseudo-random encryption seed to perform element substitution on the element substitution data to obtain second-track encrypted data, and alternately splicing the first-track encrypted data and the second-track encrypted data to obtain dual-track encrypted data.

[0079] The encrypted pseudo-random number refers to a digital sequence that appears to be random but is actually generated by a certain algorithm.

[0080] Optionally, the binary conversion of the low-priority data to obtain binary data may be performed through ASCII code conversion, the data grouping of the binary data to obtain grouped data may be performed by determining the length of the group, such as dividing the binary data into groups of 8 bits, 16 bits or 32 bits, the encrypted pseudo-random number may be set by a linear congruential generator, and the process of performing an XOR operation on the grouped data using the encrypted pseudo-random number to obtain the first track of encrypted data is: performing an XOR operation on the generated encrypted pseudo-random number and the grouped data bit by bit, starting from the highest bit of the binary data, performing an XOR operation bit by bit, for example, the grouped data is 10101010, the encrypted pseudo-random number is 01010101, and after the XOR operation, 11111111 is obtained. The pseudo-random encryption seed may be extracted from a part of the system timestamp, the password hash value input by the user and other information as a seed, and the element replacement of the grouped data to obtain the element replacement data may determine the element replacement rule according to the pseudo-random encryption seed, for example, the seed may be used as a generation parameter of an index sequence, and this index sequence is used to determine the new position of the element in the grouped data. If the grouped data has 8 elements, the index sequence generated by the seed may be [3, 7, 1, 5, 0, 2, 6, 4], then the first element of the grouped data is placed in the third position, the second element is placed in the seventh position, and so on. The pseudo-random encryption seed is used to perform element substitution on the element substitution data to obtain the second track encrypted data. An element substitution table can be constructed based on the pseudo-random encryption seed, and the element substitution data can be replaced by the element substitution table to obtain the encrypted data. The first track encrypted data and the second track encrypted data are alternately spliced ​​to obtain the dual-track encrypted data. The same length of fragments can be taken from the first track encrypted data and the second track encrypted data in sequence, for example, the first 8 bits of the first track encrypted data are taken first, and then the first 8 bits of the second track encrypted data are taken, and then they are spliced ​​together, and this sequence is repeated until all data fragments are spliced.

[0081] Furthermore, the embodiment of the present invention obtains target encrypted data by storing the high-priority encrypted data and the dual-track encrypted data in a hierarchical manner, and is able to distinguish the high-priority encrypted data from the dual-track encrypted data according to the importance and encryption degree of the data, thereby making data management more orderly and further improving data security.

[0082] Optionally, the target encrypted data may be obtained by storing the high-priority encrypted data and the dual-track encrypted data in a preconfigured data storage library.

[0083] Embodiment 2: like Figure 2 , is a system functional module diagram of a method for implementing a SATA-PCIe mixed insertion data encryption method based on the Pisces algorithm provided by an embodiment of the present invention.

[0084] The encryption system 200 for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm of the present invention can be installed in an electronic device. According to the functions implemented, the encryption system for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm can include a data calibration module 201, a data classification module 202, a data initial encryption 203, a data priority encryption module 204 and a data storage module 205. The module of the present invention can also be referred to as a unit, which refers to a series of computer program segments that can be executed by an electronic device processor and can complete fixed functions, which are stored in the memory of the electronic device.

[0085] In the embodiment of the present invention, the functions of each module / unit are as follows: The data calibration module 201 is used to collect mixed insertion data of the SATA interface and the PCIe interface, analyze key parameter characteristics of the interface interaction key parameters of the mixed insertion data, construct a data buffering strategy for the mixed insertion data based on the key parameter characteristics, perform data buffering on the mixed insertion data based on the data buffering strategy to obtain buffered data, construct an atomic energy level transition benchmark for the buffered data, and perform timing calibration on the buffered data using the atomic energy level transition benchmark to obtain calibration data; The data classification module 202 is used to calculate the word frequency-inverse document frequency of the calibration data, perform preliminary diversion on the calibration data based on the word frequency-inverse document frequency to obtain preliminary diversion data, identify the link channel characteristics of the calibration data, and prioritize the preliminary diversion data based on the link channel characteristics to obtain high priority data and low priority data; The data initial encryption 203 is used to configure the high-priority key seed of the high-priority data by using a preset security mapping rule, query the encryption level requirement of the high-priority data, so as to construct an encryption elliptic curve for the high-priority data, perform base point operation in the encryption elliptic curve by using the high-priority key seed to obtain an encryption key, construct a high-dimensional lattice structure of the high-priority data, and perform initial encryption on the high-priority data by using the high-dimensional lattice structure and the encryption key to obtain initial encrypted data; The data priority encryption module 204 is used to divide the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data, construct a quantum random number for the primary encrypted data, perform quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data, identify the digital certificate and identity identifier of metadata corresponding to the secondary encrypted data, perform asymmetric encryption on the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetric encrypted data, and use the quantum random encrypted data and the asymmetric encrypted data as high priority encrypted data; The data storage module 205 is used to perform simplified dual-track encryption on the low-priority data to obtain dual-track encrypted data, and hierarchically store the high-priority encrypted data and the dual-track encrypted data to obtain target encrypted data.

[0086] In detail, each module in the encryption system 200 for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm in the embodiment of the present invention adopts the same method as above when used. Figure 1 The encryption method for SATA-PCIe mixed insertion data based on the Pisces algorithm described in the specification is the same as the technical means and can produce the same technical effect, which will not be repeated here.

[0087] In the several embodiments provided by the present invention, it should be understood that the disclosed systems and methods can be implemented in other ways. For example, the system embodiments described above are only illustrative, for example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation.

[0088] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0089] In addition, each functional module in each embodiment of the present invention may be integrated into one processing unit, each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional modules.

[0090] It is obvious to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and that the present invention can be implemented in other specific forms without departing from the spirit or essential characteristics of the present invention.

[0091] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0092] The above description is only a specific embodiment of the present invention, so that those skilled in the art can understand or implement the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but should conform to the widest scope consistent with the principles and novel features invented herein.

Claims

1. A method for encrypting SATA-PCIe mixed insertion data based on the Pisces algorithm, characterized in that: The method comprises: Collecting mixed insertion data of the SATA interface and the PCIe interface, analyzing key parameter characteristics of the interface interaction key parameters of the mixed insertion data, constructing a data buffering strategy for the mixed insertion data based on the key parameter characteristics, buffering the mixed insertion data based on the data buffering strategy to obtain buffered data, constructing an atomic energy level transition benchmark for the buffered data, and using the atomic energy level transition benchmark to perform timing calibration on the buffered data to obtain calibration data; Calculating the word frequency-inverse document frequency of the calibration data, preliminarily diverting the calibration data based on the word frequency-inverse document frequency to obtain preliminary diverted data, identifying link channel characteristics of the calibration data, and prioritizing the preliminary diverted data based on the link channel characteristics to obtain high priority data and low priority data; Using a preset security mapping rule, a high-priority key seed of the high-priority data is configured, and the encryption level requirement of the high-priority data is queried to construct an encryption elliptic curve for the high-priority data, and base point operations are performed in the encryption elliptic curve using the high-priority key seed to obtain an encryption key, and a high-dimensional lattice structure of the high-priority data is constructed, and the high-dimensional lattice structure and the encryption key are used to initially encrypt the high-priority data to obtain initial encrypted data; Divide the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data, construct a quantum random number for the primary encrypted data, perform quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data, identify the digital certificate and identity identifier of metadata corresponding to the secondary encrypted data, perform asymmetric encryption on the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetric encrypted data, and use the quantum random encrypted data and the asymmetric encrypted data as high-priority encrypted data; The low-priority data is simplified with dual-track encryption to obtain dual-track encrypted data, and the high-priority encrypted data and the dual-track encrypted data are hierarchically stored to obtain target encrypted data.

2. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The key parameter characteristics of the key interface interaction parameters of the mixed insertion data are analyzed, including: Extracting an electrical signal of the mixed-insertion data; Querying the clock signal period, level start-end time, level rising edge start-end voltage and level falling edge start-end voltage of the electrical signal; Analyzing a clock signal frequency of the electrical signal based on the clock signal period; Analyzing a level transition frequency of the electrical signal based on the level start-end time; Analyzing the electrical rising edge slope of the electrical signal based on the level rising edge start-end voltage; Analyzing the electrical falling edge slope of the electrical signal based on the starting and ending voltages of the falling edge; Based on the clock signal frequency, the level conversion frequency, the electrical rising edge slope, and the electrical falling edge slope, key parameter characteristics of the interface interaction key parameters corresponding to the intermixed data are determined.

3. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The step of constructing a data buffering strategy for the intermixed data based on the key parameter characteristics includes: Based on the key parameter characteristics, analyzing the traffic peak and data unit size of the mixed insertion data; Based on the traffic peak value and the data unit size, construct a buffer space for the mixed insertion data; Calculating the timing weight and priority weight of the mixed insertion data; Based on the timing weight and the priority weight, construct a data storage solution for the mixed insertion data; Formulate data reading and writing rules for the intermixed data based on storage rules corresponding to the data storage solution; Based on the buffer space, the data storage scheme and the data reading and writing rules, a data buffering strategy for the interleaved data is constructed.

4. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The calculating the term frequency-inverse document frequency of the calibration data includes: Constructing a data text of the calibration data; Performing document classification on the data text to obtain classified documents; The term frequency-inverse document frequency of the classified document is calculated using the following formula: ； Among them, the represents term frequency-inverse document frequency, represents the number of times word w appears in document d, Represents the number of classified documents, represents the number of times word w appears in all classified documents, k represents the index variable, It means summing the occurrence times of all words in document d.

5. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The method of using the high-dimensional grid structure and the encryption key to initially encrypt the high-priority data to obtain initial encrypted data includes: Converting the encryption key into a binary sequence; Performing unit segmentation on the binary sequence to obtain encrypted segmentation units; Converting the basis vectors of the high-dimensional lattice structure into a basis vector matrix; Performing a linear transformation on the basis vector matrix using vector subtraction to obtain a target basis vector matrix; Mapping the encrypted segmentation unit to the target basis vector matrix to obtain an encrypted vector; Perform data conversion on the encryption vector to obtain initial encrypted data.

6. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The step of dividing the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data includes: After performing data scanning on the initial encrypted number using a preconfigured sensitivity label, the initial encrypted number is sensitivity labeled to obtain sensitivity labeled data; Querying the data flow direction of the sensitivity label data, based on the data flow direction; Analyzing the data usage of the sensitivity labeled data; Based on the data usage, access permission is set for the initial encrypted data to obtain setting permission; Based on the setting authority, the initial encrypted data is divided into data cores to obtain primary encrypted data and secondary encrypted data.

7. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The step of performing quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data includes: Construct a random sequence number set of the quantum random number, wherein the sequence number set can be expressed in the following form: R={r_1,r_2,⋯,r_n} , r_i∈{0,1}; Where R represents a sequence number set, r_1 represents the first random sequence number in the random sequence number set, r_2 represents the second random sequence number in the random sequence number set, r_n represents the nth random sequence number in the random sequence number set, and r_i represents the i-th sequence number in the random sequence number set; Construct an encryption sequence number set of the primary encrypted data, wherein the encryption sequence number set can be expressed in the following form: D={d_1,d_2,⋯,d_n}, d_i∈{0,1}; Where D represents the encryption sequence number set, d_1 represents the first random sequence number in the encryption sequence number set, d_2 represents the second random sequence number in the encryption sequence number set, d_n represents the nth random sequence number in the encryption sequence number set, and d_i represents the i-th sequence number in the encryption sequence number set; The random sequence number set and the encrypted sequence number set are subjected to quantum heterogeneous operation using the following formula to obtain encrypted data bits: e_i=d_i⊕r_i; Among them, e_i represents the encrypted data bit, d_i represents the i-th sequence number in the encryption sequence number set, r_i represents the i-th sequence number in the random sequence number set, and ⊕ represents quantum heterogeneous operation; Based on the encrypted data bits, the primary encrypted data is encrypted to obtain quantum random encrypted data.

8. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The step of asymmetrically encrypting the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetrically encrypted data includes: Obtaining the encryption public key of the encrypted data according to the digital certificate and the identity identifier; constructing a modulus of the secondary encrypted data; Calculating coprime numbers of the modulus; Using the coprime numbers, constructing a public key exponent of the secondary encrypted data; Based on the public key index, determining a private key index of the secondary encrypted data; Based on the public key index, the secondary encrypted data is encrypted using the following formula to obtain initial asymmetric encrypted data: ； in, represents the initial asymmetric encrypted data, M represents the byte sequence corresponding to the secondary encrypted data, e represents the public key exponent, and n represents the modulus; Based on the private key index, the initial asymmetrically encrypted data is decrypted using the following formula to obtain decrypted data: ； in, Indicates decrypted data. Represents the initial asymmetrically encrypted data, represents the private key exponent, and n represents the modulus; The secondary encrypted data and the decrypted data are subjected to data consistency verification. If the result of the data consistency verification is consistent, the initial asymmetric encrypted data is used as the asymmetric encrypted data of the secondary encrypted data.

9. The encryption method for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm as claimed in claim 1, characterized in that: The step of performing simplified dual-track encryption on the low-priority data to obtain dual-track encrypted data includes: Performing binary conversion on the low priority data to obtain binary data; Grouping the binary data to obtain grouped data; Constructing an encrypted pseudo-random number for the packet data; Using the encrypted pseudo-random number, performing an out-of-place operation on the grouped data to obtain first-track encrypted data; Configuring a pseudo-random encryption seed for the grouped data; Performing element replacement on the grouped data to obtain element replacement data; Using the pseudo-random encryption seed, performing element substitution on the element replacement data to obtain second-track encrypted data; The first track encrypted data and the second track encrypted data are alternately spliced ​​to obtain dual-track encrypted data.

10. An encryption system for implementing SATA-PCIe mixed insertion data based on the Pisces algorithm, characterized in that: The system comprises: A data calibration module, used for collecting mixed insertion data of the SATA interface and the PCIe interface, analyzing key parameter characteristics of the interface interaction key parameters of the mixed insertion data, constructing a data buffering strategy for the mixed insertion data based on the key parameter characteristics, buffering the mixed insertion data based on the data buffering strategy to obtain buffered data, constructing an atomic energy level transition benchmark for the buffered data, and performing timing calibration on the buffered data using the atomic energy level transition benchmark to obtain calibration data; A data classification module, used for calculating the word frequency-inverse document frequency of the calibration data, preliminarily dividing the calibration data based on the word frequency-inverse document frequency to obtain preliminary divided data, identifying the link channel characteristics of the calibration data, and prioritizing the preliminary divided data based on the link channel characteristics to obtain high priority data and low priority data; Data initial encryption, used to configure a high-priority key seed of the high-priority data using a preset security mapping rule, query the encryption level requirement of the high-priority data to construct an encryption elliptic curve for the high-priority data, perform base point operations in the encryption elliptic curve using the high-priority key seed to obtain an encryption key, construct a high-dimensional lattice structure of the high-priority data, and perform initial encryption on the high-priority data using the high-dimensional lattice structure and the encryption key to obtain initial encrypted data; A data priority encryption module is used to divide the initial encrypted data into data cores to obtain primary encrypted data and secondary encrypted data, construct a quantum random number for the primary encrypted data, perform quantum random encryption on the primary encrypted data based on the quantum random number to obtain quantum random encrypted data, identify a digital certificate and an identity identifier corresponding to metadata of the secondary encrypted data, perform asymmetric encryption on the secondary encrypted data based on the digital certificate and the identity identifier to obtain asymmetric encrypted data, and use the quantum random encrypted data and the asymmetric encrypted data as high priority encrypted data; The data storage module is used to perform simplified dual-track encryption on the low-priority data to obtain dual-track encrypted data, and hierarchically store the high-priority encrypted data and the dual-track encrypted data to obtain target encrypted data.

Images