Password design and analysis method and device, equipment, medium and computer product

Abstract

The invention discloses a password design and analysis method and device, equipment, a storage medium and a computer product, and relates to the technical field of data security, and the method comprises the steps: obtaining password demand information of a target user, determining a basic password design scheme from a preset cryptology library, the basic password design scheme is a password design scheme with the highest matching degree with the password demand information in a preset cryptology library. And inputting the basic password design scheme and the password demand information into the password design model to obtain an optimized password design scheme, and outputting the optimized password design scheme. The password design scheme is optimized through the password design model, safety and efficiency analysis can be carried out on the output password design scheme, continuous safety analysis can be carried out on the scheme put into use, and the technical effects of improving the password design and analysis efficiency and adapting to the impact of the artificial intelligence technology entering the password field are achieved.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to cryptographic design and analysis methods, devices, equipment, storage media and computer products. Background Art

[0002] Cryptography is the foundation for the healthy development of the digital age. With the development of new science and technology and the emergence of new application scenarios, it is necessary to design corresponding cryptographic algorithms, cryptographic protocols and cryptographic schemes.

[0003] In the related technologies, the design and analysis of cryptographic algorithms, cryptographic protocols, and cryptographic schemes rely on manual implementation, which mainly involves analyzing requirements, finding mathematical foundations, providing mathematical proofs of security, designing algorithm structures, designing key generation mechanisms, designing encryption and decryption processes, analyzing security, optimizing performance, designing side-channel attack protection capabilities, designing key management strategies, considering anti-quantum computing capabilities, and analyzing and evaluating various tasks. Due to the rapid development of artificial intelligence technology, network technology is advancing faster and faster. The design method of cryptographic algorithms, cryptographic protocols, and cryptographic schemes that relies on manual implementation has the problems of long time consumption and low design efficiency due to the complexity of the design process, and can no longer meet the iterative requirements of cryptographic algorithms, cryptographic protocols, and cryptographic schemes. Summary of the invention

[0004] The main purpose of this application is to provide cryptographic design and analysis methods, devices, equipment, media and computer products, aiming to solve the technical problems of long time consumption and low design efficiency in cryptographic design in related technologies.

[0005] To achieve the above objectives, this application proposes a password design and analysis method, including:

[0006] Obtain the target user's password requirement information;

[0007] Determine a basic cryptographic design scheme from a preset cryptographic library; the basic cryptographic design scheme is a cryptographic design scheme with the highest degree of matching with the cryptographic requirement information in the preset cryptographic library;

[0008] Inputting the basic password design scheme and password requirement information into the password design model to obtain an optimized password design scheme; the password design model is trained by operation rule data and security rule data, wherein the security rule data includes security factor data and unsafe factor data;

[0009] Output optimized password design scheme.

[0010] In one embodiment, the step of determining a basic cryptographic design scheme from a preset cryptographic library includes:

[0011] If the basic cryptographic design scheme completely matches the cryptographic requirement information, the basic cryptographic design scheme will be determined as the standard cryptographic design scheme; the standard cryptographic design scheme includes a standard cryptographic algorithm, a standard cryptographic protocol and a standard cryptographic scheme.

[0012] In one embodiment, if the basic password design scheme completely matches the password requirement information, the step of determining the basic password design scheme as the standard password design scheme includes:

[0013] Compare the password requirement information with the categories of each password design scheme in the preset cryptography library one by one; the password design scheme is classified based on password function, applicable scenario and security rules;

[0014] Determine standard password design solutions that are consistent with password requirements information.

[0015] In one embodiment, the steps of inputting the basic password design scheme and the password requirement information into the password design model to obtain the optimized password design scheme include:

[0016] Determine the difference between the basic cryptographic design and cryptographic requirements;

[0017] Based on the difference information, determine the optimized password design scheme.

[0018] In one embodiment, after the step of determining the optimized password design solution, the method further includes:

[0019] Conduct security analysis on optimized password design schemes based on insecure factor data;

[0020] If the security of the optimized password design scheme meets the requirements, the correctness of the optimized password design scheme is tested according to the preset test data;

[0021] If the correctness of the optimized password design scheme meets the requirements, the optimized password design scheme is output.

[0022] In one embodiment, after the step of outputting the optimized password design solution, the method further includes:

[0023] Storing the optimized cryptographic design scheme in a preset cryptographic library;

[0024] Based on the insecurity factor data, continuous security analysis is performed on the optimized cryptographic design scheme; among which, the security factor data and the insecurity factor data are iteratively updated based on the latest collected security issues.

[0025] If the security of the optimized password design scheme does not meet the requirements of the password requirement information, an alarm message is output.

[0026] In addition, to achieve the above-mentioned purpose, the present application also proposes a cryptographic design and analysis device, which includes:

[0027] Acquisition module, obtains password requirement information of target users;

[0028] A screening module determines a basic cryptographic design scheme from a preset cryptographic library; the basic cryptographic design scheme is a cryptographic design scheme with the highest matching degree with the cryptographic requirement information in the preset cryptographic library;

[0029] The optimization module inputs the basic password design scheme and password requirement information into the password design model to obtain the optimized password design scheme; the password design model is trained by the operation rule data and the security rule data; wherein the security rule data includes the security factor data and the unsafe factor data;

[0030] Output module, outputs optimized password design scheme.

[0031] In addition, to achieve the above-mentioned objectives, the present application also proposes a cryptographic design and analysis device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the cryptographic design and analysis method as described above.

[0032] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the cryptographic design and analysis method as described above are implemented.

[0033] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the cryptographic design and analysis method as described above are implemented.

[0034] One or more technical solutions proposed in this application have at least the following technical effects:

[0035] Since this application is based on the password requirement information of the target user, the basic password design scheme with the highest matching degree with the password requirement information is selected from the preset cryptography library, and the automatic selection method of the password design and analysis equipment is used to effectively improve the screening efficiency. At the same time, the password design model obtained by training the operation rule data and the security rule data can be optimized and reasoned on the basis of the basic password design scheme to obtain an optimized password design scheme that meets the password design requirements of the target user. This process does not require human participation, which solves the problem of time-consuming and low design efficiency of manual design, and achieves the effect of improving the efficiency of password design on the basis of meeting the needs of the target user. In addition, through the continuous iterative update of the security rule library and the continuous security analysis of the password design scheme in the preset cryptography library, it can adapt to the impact of artificial intelligence technology on the password field, realize the security analysis, efficiency analysis, and continuous security analysis of passwords, and continuously ensure password security. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0037] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0038] Figure 1 A flowchart diagram of an embodiment of the password design and analysis method of the present application;

[0039] Figure 2 A schematic diagram of the structure of the cryptographic design and analysis device for this application;

[0040] Figure 3 Schematic diagram of the structure of the password design and analysis equipment for this application.

[0041] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0042] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0043] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0044] The main solution of the embodiment of the present application is: obtain the password requirement information of the target user. Determine the basic password design scheme from the preset cryptography library; the basic password design scheme is the password design scheme with the highest matching degree with the password requirement information in the preset cryptography library. Input the basic password design scheme and the password requirement information into the password design model to obtain the optimized password design scheme. The password design model is trained by the operation rule data and the security rule data, wherein the security rule data includes the security factor data and the unsafe factor data. Output the optimized password design scheme.

[0045] Due to the complexity of the password design process, the manual design method used in related technologies is time-consuming and has low design efficiency.

[0046] The present application provides a solution, which utilizes the password requirement information of the target user to retrieve the password design scheme with the highest matching degree with the password requirement information from a preset cryptography library, thereby reducing the time required to find a suitable password scheme and improving design efficiency.

[0047] At the same time, the use of verified standard cryptographic algorithms, protocols and schemes as well as pre-trained cryptographic design models can ensure that the final selected cryptographic system has high security. For users who do not have deep cryptographic knowledge, this solution reduces the difficulty of selecting and implementing secure cryptographic systems, and can also ensure that cryptographic schemes comply with security standards.

[0048] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a password design and analysis device, etc. The following takes the password design and analysis device as an example to illustrate this embodiment and the following embodiments.

[0049] Based on this, the present application embodiment provides a password design and analysis method, referring to Figure 1 , Figure 1 This is a flowchart of the first embodiment of the password design and analysis method of the present application.

[0050] In this embodiment, the password design and analysis method includes steps S10 to S40:

[0051] Step S10, obtaining password requirement information of the target user.

[0052] Step S20, determining a basic cryptographic design scheme from a preset cryptographic library; the basic cryptographic design scheme is a cryptographic design scheme in the preset cryptographic library that has the highest matching degree with the cryptographic requirement information.

[0053] Step S30, inputting the basic cryptographic design scheme and cryptographic requirement information into the cryptographic design model to obtain an optimized cryptographic design scheme.

[0054] Step S40, outputting an optimized password design scheme.

[0055] The cryptographic design model is trained by operation rule data and security rule data, wherein the security rule data includes security factor data and unsafe factor data.

[0056] It should be noted that cryptographic requirement information refers to the specific requirements and restrictions expressed by the target user when designing or selecting a cryptographic algorithm, cryptographic protocol or cryptographic scheme. The cryptographic design and analysis equipment outputs a cryptographic design scheme that meets the needs of the target user based on the cryptographic requirement information. The basic cryptographic design scheme refers to the cryptographic algorithm, cryptographic protocol and scheme that is found in the preset cryptographic library and is the closest, most secure and standardized to the input cryptographic requirement information.

[0057] The cryptographic design model is a generative artificial intelligence model trained based on operation rule data and security rule data.

[0058] Among them, operation rule data refers to mathematical operation rules in cryptographic algorithms, cryptographic protocols and cryptographic schemes (such as addition, modular operation, greatest common factor, etc.), the way computers implement mathematical operation rules (such as “⊕” represents 32-bit XOR, “<<<” represents circular left shift, etc.), etc.

[0059] Security rule data refers to the security factor data of cryptographic algorithms, cryptographic protocols and cryptographic schemes, as well as the insecurity factor data of cryptographic algorithms, cryptographic protocols and cryptographic schemes.

[0060] Among them, security factor data include algorithmic complexity of cryptographic algorithms, cryptographic protocols and cryptographic schemes (such as time complexity, space complexity), problem complexity (such as elliptic curve discrete logarithm problem, large integer decomposition problem), algorithm structure (such as Feistel structure, SPN structure, AES (Rijndael) structure, Merkle-Hellman structure, etc.), number of keys, key strategy and cryptographic transformation method, etc.

[0061] The data on insecurity factors include external insecurity factors (for example, the advancement of quantum computing technology will make asymmetric cryptographic algorithms insecure), internal insecurity factors (security factors caused by design defects, such as cryptographic designs with short key lengths, and cryptographic designs with poor statistical analysis capabilities such as differential analysis and / or linear analysis), and implementation insecurity factors (referring to factors that may lead to security issues in the process of developing designed cryptographic algorithms, protocols and schemes into products, such as excessive complexity of operation rules leading to high power consumption and susceptibility to side-channel attacks, and high communication overhead making it easy for cryptographic products to fail to operate normally due to network problems, etc.).

[0062] It is understandable that the cryptographic design model obtained by training the artificial intelligence model with operation rule data and security rule data has a high recognition rate for cryptographic algorithms, cryptographic protocols, and operation rules and security rules in cryptographic schemes. On this basis, the cryptographic design model can modify and optimize the basic cryptographic design scheme by analyzing requirements, locating problems, matching rules, and reasoning modifications, and determine the optimized cryptographic design scheme.

[0063] In a feasible implementation, step S20 includes step A21:

[0064] If the basic cryptographic design scheme completely matches the cryptographic requirement information, the basic cryptographic design scheme will be output as the standard cryptographic design scheme; the standard cryptographic design scheme includes a standard cryptographic algorithm, a standard cryptographic protocol and a standard cryptographic scheme.

[0065] It should be noted that the preset cryptographic library contains cryptographic algorithms, cryptographic protocols and cryptographic schemes that have been widely accepted and have been strictly reviewed, tested and certified by standardization organizations. For example, DES, 3DES, AES, RSA, SM2, SM4, SM3, IPSec, SSL and other standardized cryptographic algorithms, protocols and schemes, as well as corresponding argumentation materials.

[0066] The standard cryptographic design scheme is a cryptographic design scheme output to the target user by the cryptographic design and analysis device. It is a standard cryptographic algorithm, standard cryptographic protocol and standard cryptographic scheme selected from the certified cryptographic algorithms, cryptographic protocols and cryptographic schemes that are consistent with the cryptographic requirement information.

[0067] It is understandable that due to the high security requirements of cryptographic technology, the selected cryptographic design scheme must be able to cope with security challenges, such as the threat posed by quantum computing to traditional asymmetric encryption algorithms.

[0068] Therefore, the password design and analysis equipment obtains the password requirement information of the target user, compares the various options in the preset cryptography library, and selects a standard password design scheme that meets both user needs and international standards, ensuring that the final output standard password design scheme can maintain high standards of security and can be directly applied in practice.

[0069] In a feasible implementation manner, the password requirement information includes function requirement information, application scenario information and security requirement information. Step A21 may include steps B21 to B22:

[0070] Step B21, compare the password requirement information with the categories of each standard password design scheme in the preset cryptography library one by one.

[0071] Among them, standard password design schemes are classified based on password functions, applicable scenarios and security rules.

[0072] Step B22, determine a standard password design scheme that is consistent with the password requirement information.

[0073] In this implementation, cryptographic algorithms, cryptographic protocols, and cryptographic schemes in the preset cryptographic library are classified according to cryptographic functions, application scenarios, and security rules.

[0074] According to the functional requirement information, application scenario information and security requirement information contained in the password requirement information, a secure and standardized standard password design scheme that is consistent with the password requirement information can be selected from various cryptographic algorithms, cryptographic protocols and cryptographic schemes in the cryptographic library and output to the target user. It is understandable that the standard password design scheme can be one or more, which is not limited here.

[0075] This implementation method systematically processes password requirement information and uses the classification system in a preset cryptography library to accurately match the needs of target users. By comparing the password requirement information (functional requirement information, application scenario information, security requirement information) with the standard password design schemes classified according to password functions, application scenarios and security rules in the preset cryptography library one by one, the reliability of the selection process is improved, ensuring that the output scheme can accurately meet the specific needs of users.

[0076] In a feasible implementation manner, step S30 includes steps C21-C22:

[0077] Step C21, determining the difference information between the basic password design scheme and the password requirement information.

[0078] Step C22, determining an optimized password design scheme based on the difference information.

[0079] In this embodiment, the difference information refers to the inconsistency between the basic password design scheme and the password requirement information, that is, the part of the basic password design scheme that does not fully meet the target user's needs. Specifically, this difference information is the core basis for analysis and optimization, and is used to generate an optimized password design scheme.

[0080] The difference information comes from comparing the cryptographic requirement information with all aspects of the basic solution one by one, involving functional differences (whether the functions of the basic cryptographic design solution meet the requirements), security differences (security levels) and performance differences (whether the performance of the basic solution, such as computing efficiency and power consumption, meets the requirements).

[0081] The cryptographic design model locates the optimization direction based on the difference information and determines the specific parts that need to be modified. In one example, if the difference information shows that the key length is insufficient, the optimization direction will be to extend the key length. If the difference information shows that the power consumption of the basic cryptographic design is too high, the optimization direction may include simplifying the algorithm or changing the calculation rules.

[0082] In a specific example, the model calls the operation rules in the preset cryptographic library or the existing security rules for reasoning and optimization based on the difference information.

[0083] Specifically, the preset cryptographic library can be composed of a standard cryptographic library, a non-standard cryptographic library, an operation rule library and a security rule library, wherein the standard cryptographic library is established based on domestic and / or internationally standardized cryptographic algorithms, cryptographic protocols and cryptographic schemes, as well as materials that demonstrate their security, performance, key management, etc., and the non-standard cryptographic library is established based on public, non-standardized cryptographic algorithms, cryptographic protocols and cryptographic schemes, as well as materials that demonstrate their security, performance, key management, etc.

[0084] Standard cryptographic libraries and non-standard cryptographic libraries are distinguished based on whether the cryptographic algorithms, cryptographic protocols and cryptographic schemes belong to international and / or domestic certification standards. They contain information such as cryptographic categories (classified according to cryptographic functions, application scenarios and security rules), mathematical principles, mathematical algorithms, cryptographic operation rules, operation symbols and definitions, parameter definitions and parameter units, fixed parameters, algorithm structures, key strategies, etc.

[0085] The cryptographic operation rule library is established based on the cryptographic operation rules, operation symbols and symbol definitions in the standard cryptographic library and / or the non-standard cryptographic library.

[0086] In a feasible implementation, the password design and analysis method includes steps D31-D33:

[0087] Step D31, obtaining operation rule data from a preset cryptography library.

[0088] Step D32, standardize the operation rule data to obtain standard operation rules.

[0089] Step D33, creating an operation rule library based on standard operation rules.

[0090] In this embodiment, the operation rule data refers to the cryptographic operation rules, operation symbols and symbol definitions in the cryptographic algorithm. For example, in a certain cryptographic algorithm, "addition" corresponds to "+", "subtraction" corresponds to "-", the operation rule for finding the greatest common factor of two numbers corresponds to "gcd(x, y)", and the modulo n operation corresponds to "mod n".

[0091] It is understandable that the defined operation rules and operation symbols may not be uniform among different cryptographic algorithms, cryptographic protocols and cryptographic schemes. Standardization is to unify the operation rule data from different sources into a standardized format and representation so that the model can accurately identify and use it.

[0092] The operation rules and operation symbols are standardized according to the definitions of operation rules and operation symbols and other data in each cryptographic algorithm, cryptographic protocol and cryptographic scheme.

[0093] Specifically, identify whether different operation symbols have the same operation rules. If so, establish correlation connections, that is, establish an operation rule library based on standard operation rules in a unified code format to standardize the operation methods of various cryptographic algorithms, cryptographic protocols, and cryptographic schemes.

[0094] Likewise, in this embodiment, the construction of the security rule library needs to be standardized according to the security rule data of the cryptographic algorithms, cryptographic protocols and cryptographic schemes in the standard cryptographic library and / or the non-standard cryptographic library.

[0095] In a specific example, security factor data that is proven to be secure and insecurity factor data that is proven to be insecure are collected from standard cryptography libraries and / or non-standard cryptography libraries, and these data are cleaned and labeled to construct a security rule library consisting of standard security rule data in a unified format.

[0096] The standard security rule data in the security rule library can be classified according to the cryptographic type (such as symmetric encryption, asymmetric encryption, hash algorithm, etc.), vulnerable type (such as differential attack, linear attack, side channel attack, etc.) and cryptographic structure (minimum key length, anti-quantum attack capability). At the same time, the security rule data used in cryptographic algorithms, cryptographic protocols and cryptographic schemes can be standardized and scored, and the security level of each algorithm can be marked, so that the cryptographic construction model can determine the security level corresponding to the cryptographic algorithm, cryptographic protocol and cryptographic scheme.

[0097] It is understandable that the cryptographic design model can compare and identify the difference between the basic cryptographic design scheme and the cryptographic requirements by combining the standardized operation rules and security rules in the preset cryptographic library, and perform optimization reasoning to generate an optimized cryptographic design scheme that meets the functional requirements, security requirements and performance goals of the target users. The standardization, scalability and security of the cryptographic scheme are ensured. At the same time, through standardized processing and the construction of the cryptographic library, the automation and adaptability of the model are improved, providing a systematic and reliable solution for cryptographic design in diverse application scenarios.

[0098] In a feasible implementation manner, after step B22, steps B23 to B25 are further included:

[0099] Step B23, based on the insecurity factor data, perform security analysis on the optimized password design scheme.

[0100] Step B24: If the security of the optimized password design scheme meets the requirements, the correctness of the optimized password design scheme is detected according to preset test data.

[0101] Step B25: if the accuracy of the optimized password design scheme meets the requirements, output the optimized password design scheme.

[0102] It should be noted that security analysis refers to the security assessment of the optimized cryptographic design scheme to verify whether its security meets the requirements. Preset test data is test data prepared in advance based on the cryptographic requirements information, which is used to verify the correctness and effectiveness of the optimized cryptographic design scheme. Correctness refers to whether the operation results of the optimized cryptographic design scheme are consistent with the expected results when executing the cryptographic function.

[0103] In a specific example, security analysis is performed on the optimized cryptographic design scheme according to the insecure factor data in the security rule library one by one to determine whether the optimized cryptographic design scheme meets basic security requirements. The basic security requirements can be whether it can resist existing cryptographic analysis methods (such as statistical analysis methods), whether the design complexity meets the basic security key strategy, and whether the power consumption and anti-test channel capabilities meet the security requirements of the target users. If the security of the optimized cryptographic design scheme meets the requirements, the calculation results are tested to see whether they meet expectations based on the pre-prepared test data.

[0104] Specifically, it can analyze whether the cryptographic functions, usage scenarios, and security requirements are consistent with the cryptographic requirements information, and analyze the possibility of side-channel attacks such as power consumption or communication overhead. If the correctness of the optimized cryptographic design scheme meets expectations, the optimized cryptographic design scheme is output. If it does not meet expectations, the non-expected parts are further optimized according to the operation rule data and security rule data until an optimized cryptographic design scheme that meets expectations is obtained.

[0105] It is understandable that when optimizing a cryptographic design scheme, optimization may be performed based on the operation rules and security rules involved in the public non-standard cryptographic algorithms, cryptographic protocols, and cryptographic schemes contained in a non-standard cryptographic library, and its security may not be guaranteed. Therefore, the optimized cryptographic design scheme needs to be evaluated for security and correctness before being output to the target user.

[0106] In a feasible implementation manner, after step B25, the method further includes:

[0107] Step B26, storing the optimized password design scheme and password requirement information in a preset cryptography library.

[0108] Step B27, based on the insecurity factor data, conduct continuous security analysis on the optimized password design scheme.

[0109] Step B28: If the security of the optimized password design solution does not meet the requirements of the password requirement information, an alarm message is output.

[0110] Among them, the safety factor data and unsafe factor data are iteratively updated based on the latest collected safety issues.

[0111] In this embodiment, the optimized password design scheme and the related password requirement information are stored in the preset cryptographic library to ensure that the optimized password design scheme can be continuously managed and maintained. By regularly or continuously collecting unsafe factor data and safety factor data, the optimized password design scheme is subjected to security analysis. This is a dynamic process. As security issues change, the design scheme will be continuously evaluated and adjusted to ensure that the password design scheme is always in the latest security situation and can effectively respond to new security challenges and threats. Through continuous analysis, possible security vulnerabilities can be discovered in a timely manner. If the optimized password design scheme cannot meet its corresponding password requirement information, the system will generate an alarm message to remind relevant personnel to take timely measures to correct the design scheme.

[0112] It is understandable that by strengthening the management of cryptographic design, continuous security analysis, real-time early warning mechanism and dynamic optimization, the security, adaptability and responsiveness of the optimized cryptographic design scheme have been effectively improved, ensuring that the cryptographic system can maintain a high level of security in a constantly changing security environment.

[0113] Furthermore, other cryptographic design schemes in the preset cryptographic library may also change as the security factor data and the insecurity factor data are continuously updated. For example, an originally secure standard cryptographic design scheme may become an insecure cryptographic design scheme. At this time, the scheme will be marked as a non-standard cryptographic design scheme.

[0114] This embodiment provides a password design and analysis method, which obtains the password requirement information of the target user, combines the verified standard password algorithms, password protocols and password schemes in the preset cryptographic library, matches the standard password design scheme that best meets the requirements, and optimizes through the password design model when necessary (when the standard password design scheme is inconsistent with the password requirement information), thereby significantly improving the efficiency of password design. Compared with the traditional manual design method, this solution not only saves time, but also reduces the dependence on the user's cryptographic expertise, ensuring that the output password design scheme has high security and applicability to international standards. At the same time, based on the construction of a systematic operation rule library and a security rule library, the reliability and scalability of the password design process are further enhanced, providing an efficient, standardized and secure solution for password requirements in diverse application scenarios.

[0115] Exemplarily, in order to help understand the implementation process of the password design and analysis method obtained by combining this embodiment with the above embodiments, specifically:

[0116] Establish a standard cryptography library, a non-standard cryptography library, a cryptographic operation rule library, and a cryptographic security rule library. Build a standard cryptography library by collecting domestic and foreign standardized cryptographic algorithms, cryptographic protocols, and cryptographic schemes, as well as related security, performance, and key management demonstration materials. Build a non-standard cryptography library by collecting domestic and foreign public, non-standard cryptographic algorithms, cryptographic protocols, and cryptographic schemes, as well as related security, performance, and key management demonstration materials. Both standard cryptography libraries and non-standard cryptography libraries are classified according to cryptographic functions, application scenarios, and security rules.

[0117] The operation rules, symbol definitions, and other contents of cryptographic algorithms, cryptographic protocols, and cryptographic schemes in standard cryptographic libraries and non-standard cryptographic libraries are organized, annotated, and standardized to create an operation rule library.

[0118] Standardize the security factor data and insecurity factor data of cryptographic algorithms, cryptographic protocols and cryptographic schemes in standard cryptographic libraries and non-standard cryptographic libraries to build a security rule library.

[0119] On this basis, the artificial intelligence model is trained using the operation rule library and the security rule library to obtain a cryptographic design model that meets the standard recognition accuracy of both the operation rules and the security rules.

[0120] Obtain the target user's password requirement information, determine the target user's password scheme design requirements, including password function requirements, applicable scenario requirements, and security rule requirements, compare the target user's password scheme design requirements with the cryptographic algorithms, cryptographic protocols, and cryptographic schemes in the standard cryptography library one by one, select a standard cryptographic design scheme that is consistent with the password scheme design requirements from the standard cryptography library and output it to the target user. The standard cryptographic design scheme includes a standard cryptographic algorithm, a standard cryptographic protocol, and a standard cryptographic scheme.

[0121] If there is no standard cryptographic design scheme that is consistent with the cryptographic scheme design requirements, select the closest cryptographic algorithm, cryptographic protocol, and cryptographic scheme as the basic cryptographic design scheme, and determine the difference information between the cryptographic requirement information, use an artificial intelligence model to identify the difference information, locate the existing problems, and match them with the security factor data and operation rule data in the security rule library and operation rule library, and then perform inference optimization design on the basic cryptographic design scheme to obtain an optimized cryptographic design scheme.

[0122] Continuously update the cryptographic operation rule library and cryptographic security rule library, and train and optimize the cryptographic design model based on the updated operation rule information and security rule information.

[0123] An optimization scheme rule base is created in the preset cryptography library, and the optimized cryptographic design scheme and the corresponding cryptographic requirement information are stored in the optimization scheme rule base. The optimized cryptographic design scheme is subjected to security analysis using the updated cryptographic security rule base. When the optimized cryptographic design scheme no longer meets the corresponding cryptographic requirement information, an alarm message is output.

[0124] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the cryptographic design and analysis methods of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0125] This application also provides a password design and analysis device, please refer to Figure 2 , the cryptographic design and analysis device includes:

[0126] The acquisition module 10 acquires the password requirement information of the target user.

[0127] The screening module 20 determines a basic cryptographic design scheme from a preset cryptographic library; the basic cryptographic design scheme is a cryptographic design scheme in the preset cryptographic library that has the highest matching degree with the cryptographic requirement information.

[0128] The optimization module 30 inputs the basic cryptographic design scheme and the cryptographic requirement information into the cryptographic design model to obtain an optimized cryptographic design scheme; wherein the security rule data includes security factor data and unsafe factor data.

[0129] The output module 40 outputs the optimized password design scheme.

[0130] The cipher design and analysis device provided by the present application adopts the cipher design and analysis method in the above embodiment, which can solve the technical problems of long time consumption and low design efficiency in the manual design method. Compared with the related art, the beneficial effects of the cipher design and analysis device provided by the present application are the same as the beneficial effects of the cipher design and analysis method provided by the above embodiment, and the other technical features in the cipher design and analysis device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0131] The present application provides a cryptographic design and analysis device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the cryptographic design and analysis method in the above-mentioned embodiment.

[0132] Reference below Figure 3 , which shows a schematic diagram of the structure of a cryptographic design and analysis device suitable for implementing the embodiments of the present application. The cryptographic design and analysis device in the embodiments of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. The cryptographic design and analysis device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0133] like Figure 3As shown, the password design and analysis device may include a processing device 1001 (such as a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the xxx device are also stored. The processing device 1001, ROM1002 and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the cryptographic design and analysis device to communicate with other devices wirelessly or by wire to exchange data. Although the cryptographic design and analysis device with various systems is shown in the figure, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0134] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0135] The cryptographic design and analysis device provided by the present application adopts the cryptographic design and analysis method in the above embodiment, which can solve the technical problems of long time consumption and low design efficiency in the manual design method. Compared with the related art, the beneficial effects of the cryptographic design and analysis device provided by the present application are the same as the beneficial effects of the cryptographic design and analysis method provided by the above embodiment, and the other technical features in the cryptographic design and analysis device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0136] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0137] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0138] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the cryptographic design and analysis methods in the above-mentioned embodiments.

[0139] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0140] The above-mentioned computer-readable storage medium may be included in the cryptographic design and analysis device; or it may exist independently without being assembled into the cryptographic design and analysis device.

[0141] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the password design and analysis device, the password design and analysis device: obtains password requirement information of the target user. Selects a standard password design scheme consistent with the password requirement information from a preset cryptographic library. The standard password design scheme includes a standard password algorithm, a standard password protocol, and a standard password scheme. Outputs the standard password design scheme.

[0142] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0143] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0144] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0145] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned password design and analysis method, and can solve the technical problems of long time consumption and low design efficiency in password design. Compared with the related art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the password design and analysis method provided by the above-mentioned embodiment, and will not be repeated here.

[0146] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned cryptographic design and analysis method when executed by a processor.

[0147] The computer program product provided by this application can solve the technical problems of long time consumption and low design efficiency in password design. Compared with the related art, the beneficial effects of the computer program product provided by this application are the same as the beneficial effects of the password design and analysis method provided by the above embodiment, which will not be repeated here.

[0148] The above are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect application in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A password design and analysis method, characterized in that: The method includes: Obtain the target user's password requirement information; Determine a basic cryptographic design scheme from a preset cryptographic library; the basic cryptographic design scheme is a cryptographic design scheme in the preset cryptographic library that has the highest matching degree with the cryptographic requirement information; Inputting the basic password design scheme and the password requirement information into a password design model to obtain an optimized password design scheme; the password design model is trained by operation rule data and security rule data, wherein the security rule data includes security factor data and unsafe factor data; Output the optimized password design scheme.

2. The method according to claim 1, characterized in that The step of determining a basic cryptographic design scheme from a preset cryptographic library comprises: If the basic cryptographic design scheme completely matches the cryptographic requirement information, the basic cryptographic design scheme is determined as a standard cryptographic design scheme; the standard cryptographic design scheme includes a standard cryptographic algorithm, a standard cryptographic protocol and a standard cryptographic scheme.

3. The method according to claim 2, characterized in that If the basic password design scheme completely matches the password requirement information, the step of determining the basic password design scheme as the standard password design scheme includes: Comparing the password requirement information with the categories of each password design scheme in the preset cryptography library one by one; the password design scheme is classified based on password function, applicable scenario and security rules; A standard cryptographic design scheme consistent with the cryptographic requirement information is determined.

4. The method according to claim 1, characterized in that The step of inputting the basic password design scheme and the password requirement information into the password design model to obtain the optimized password design scheme includes: Determine the difference information between the basic password design scheme and the password requirement information; Based on the difference information, the optimized password design scheme is determined.

5. The method according to claim 4, characterized in that After the step of determining the optimized password design scheme, the method further includes: Based on the insecure factor data, a security analysis is performed on the optimized password design scheme; If the security of the optimized password design scheme meets the requirements, then the correctness of the optimized password design scheme is detected according to the preset test data; If the accuracy of the optimized password design scheme meets the requirements, the optimized password design scheme is output.

6. The method according to claim 5, characterized in that After the step of outputting the optimized password design scheme, the method further includes: Storing the optimized password design scheme and the password requirement information in the preset cryptography library; Based on the insecurity factor data, continuously perform security analysis on the optimized password design scheme; wherein the security factor data and the insecurity factor data are iteratively updated based on the latest collected security issues; If the security of the optimized password design scheme does not meet the requirements of the password requirement information, an alarm message is output.

7. A cryptographic design and analysis device, characterized in that: The device comprises: Acquisition module, obtains password requirement information of target users; A screening module is used to determine a basic cryptographic design scheme from a preset cryptographic library; the basic cryptographic design scheme is a cryptographic design scheme in the preset cryptographic library that has the highest matching degree with the cryptographic requirement information; An optimization module, inputting the basic password design scheme and the password requirement information into a password design model to obtain an optimized password design scheme; the password design model is trained by operation rule data and security rule data; wherein the security rule data includes security factor data and unsafe factor data; An output module outputs the optimized password design scheme.

8. A cryptographic design and analysis device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the password design and analysis method according to any one of claims 1 to 6.

9. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the password design and analysis method according to any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the cryptographic design and analysis method according to any one of claims 1 to 6 are implemented.

Images