Security protection method for Internet data information

Abstract

The invention relates to the technical field of data encryption processing, in particular to a security protection method for internet data information, which comprises the following steps: acquiring a to-be-encrypted sequence, and constructing a chain encryption table and an initial key; obtaining an encryption key according to the initial key, dynamically obtaining a transformation object of the to-be-encrypted plaintext in the chain type encryption table according to the encryption key, and obtaining a ciphertext of the to-be-encrypted plaintext through multiple times of transformation; and obtaining an encryption key of the next to-be-encrypted plaintext according to the to-be-encrypted plaintext, the ciphertext of the to-be-encrypted plaintext and the initial key, and encrypting the next to-be-encrypted plaintext according to the chained encryption table. According to the method, the key is complex, the key space is large, different initial keys are set for different clients, and it is ensured that the privacy of the clients is not leaked; according to the method, the encryption result is complex, known plaintext attacks can be resisted, and the security of Internet sales data on the block chain is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data encryption processing, and in particular to a security protection method for Internet data information. Background Art

[0002] Blockchain is a decentralized technology that has brought disruptive innovations to many industries. The e-commerce industry uses blockchain to achieve point-to-point precision marketing from merchants to customers, avoiding the participation of third-party advertisers in traditional marketing, saving marketing costs, and reducing advertising fraud.

[0003] In the process of e-commerce industry using blockchain to achieve point-to-point precision marketing from merchants to customers, Internet sales data such as customer clicks, impressions, average user stickiness and other key digital marketing indicators need to be stored in the blockchain, and Internet sales data such as merchant marketing content, product information, and quotation information to customers also need to be stored in the blockchain. These Internet sales data involve customer privacy and merchant business secrets. In order to ensure that customer privacy and merchant business secrets are not leaked, sales data needs to be encrypted.

[0004] Existing encryption methods such as DES, AES and other symmetric encryption methods are block encryption. The key does not change during the encryption process, and the encryption results for blocks with the same content are also the same, so that some statistical characteristics of the plaintext are retained in the ciphertext, which can be easily used by attackers to conduct statistical analysis attacks. Existing encryption methods such as ECC, RSA and other asymmetric encryption methods have high security, but the encryption and decryption speed is slow, and they are only suitable for encrypting a small amount of data. However, the amount of Internet sales data is large, and ECC, RSA and other asymmetric encryption methods are not suitable for encrypting Internet sales data. Summary of the invention

[0005] The present invention provides a security protection method for Internet data information to solve the existing problems.

[0006] A security protection method for Internet data information of the present invention adopts the following technical solution: An embodiment of the present invention provides a method for protecting Internet data information security, the method comprising the following steps: S1: Obtain a sequence to be encrypted; set a chain encryption table, wherein the row index of the chain encryption table is each integer in a preset range, and the column indexes are 00, 01, 10 and 11 respectively, and each column element of the chain encryption table contains all integers in the preset range, all elements in each row are different, and each element in each row is different from the value of the row index; obtain an initial key according to a second preset length; S2: multiply the first preset number by two to obtain a second length; use the first element in the sequence to be encrypted as the plaintext to be encrypted, obtain the first second length binary numbers in the initial key as the first key, and use the first key as the encryption key for the plaintext to be encrypted; S3: obtaining multiple transformation keys according to the encryption key; using the plaintext to be encrypted as the encryption process value and the first transformation key as the first transformation key; S4: Obtain the value of the position where the row index is the encryption process value and the column index is the first transformation key in the chained encryption table as the new encryption process value; and use the next transformation key of the first transformation key as the new first transformation key; S5: repeat S4 until the first preset number of times is reached, and then stop, and use the latest encryption process value as the ciphertext of the plaintext to be encrypted; S6: Obtain a second key according to the plaintext to be encrypted and the ciphertext of the plaintext to be encrypted; obtain a new first key according to the first preset length, the second length, the first key and the initial key; obtain the next element of the plaintext to be encrypted in the sequence to be encrypted as the new plaintext to be encrypted; concatenate the second key after the new first key to obtain a new encryption key for the plaintext to be encrypted; S7: Repeat S3-S6 until the ciphertexts of all elements in the sequence to be encrypted are obtained; the ciphertexts of all elements in the sequence to be encrypted are used as ciphertext data.

[0007] Preferably, the obtaining of the initial key according to the second preset length comprises the following steps: A binary sequence having a length equal to a second preset length is randomly set as an initial key.

[0008] Preferably, the step of obtaining a plurality of transformation keys according to the encryption key comprises the following steps: The encryption key is split into a first preset number of two-digit binary numbers, and each of the two-digit binary numbers is used as a transformation key for the plaintext to be encrypted.

[0009] Preferably, the step of obtaining the second key according to the plaintext to be encrypted and the ciphertext of the plaintext to be encrypted comprises the following steps: The plaintext to be encrypted is converted into a binary number of a first preset length as a first code; the ciphertext of the plaintext to be encrypted is converted into a binary number of a first preset length as a second code, and an XOR operation is performed on the first code and the second code to obtain a second key.

[0010] Preferably, the step of obtaining a new first key according to the first preset length, the second length, the first key and the initial key comprises the following steps: The third length is obtained by subtracting the first preset length from the second length, and the third length of binary numbers after the first key in the initial key is obtained as a new first key.

[0011] The beneficial effects of the technical solution of the present invention are as follows: the present invention ensures that the key in the encryption process is complex and the key space is large by constructing a chain encryption table and an initial key, and it is difficult for an attacker to obtain the contents of the chain encryption table and the initial key by brute force, and the security of encrypting Internet sales data based on the chain encryption table and the initial key is high; at the same time, the present invention sets different initial keys for different customers, ensuring that customer privacy is not leaked, and increasing the security of Internet sales data; the present invention uses the plaintext to be encrypted as the index of the chain encryption table, dynamically searches for the transformation object in the chain encryption table according to the encryption key, and obtains the encrypted data after multiple transformations. The ciphertext of the plaintext to be encrypted makes the encryption result complex and difficult to crack; the present invention obtains the encryption key of the next element according to the previous element in the sequence to be encrypted and the ciphertext of the element, making the encryption result more chaotic but at the same time having a very strong avalanche effect. The value of each element in the sequence to be encrypted affects the encryption results of all subsequent elements, destroying the data regularity in the sequence to be encrypted, so that the present invention can resist known plaintext attacks, that is, even if the attacker intercepts a part of the plaintext and the corresponding ciphertext, it is impossible to infer the encryption method and key based on the correspondence between the plaintext and the ciphertext, thereby ensuring the security of Internet sales data on the blockchain. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0013] Figure 1 A flowchart of the steps of a method for protecting Internet data information security according to the present invention; Figure 2 A chain encryption schematic diagram of a security protection method for Internet data information of the present invention; Figure 3 This is an encryption example of a security protection method for Internet data information of the present invention. DETAILED DESCRIPTION

[0014] In order to further explain the technical means and effects adopted by the present invention to achieve the predetermined invention purpose, the following is a detailed description of the security protection method for Internet data information proposed by the present invention, its specific implementation method, structure, features and effects, in combination with the accompanying drawings and preferred embodiments. In the following description, different "one embodiment" or "another embodiment" does not necessarily refer to the same embodiment. In addition, specific features, structures or characteristics in one or more embodiments may be combined in any suitable form.

[0015] Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

[0016] The following is a detailed description of a specific solution of a method for protecting Internet data information security provided by the present invention in conjunction with the accompanying drawings.

[0017] See also Figure 1 , which shows a flowchart of a method for protecting Internet data information security provided by an embodiment of the present invention, the method comprising the following steps: S001. Preprocess the Internet sales data to obtain the sequence to be encrypted.

[0018] It should be noted that in the process of the e-commerce industry using blockchain to achieve point-to-point precision marketing from merchants to customers, data such as customer clicks, impressions, average user stickiness and other key digital marketing indicators need to be stored in the blockchain, and data such as the merchant's marketing content, product information, and quotation information to customers also need to be stored in the blockchain. Customer clicks, impressions, average user stickiness and other key digital marketing indicators are called customer data, and merchant marketing content, product information, quotation information to customers, etc. are called merchant data.

[0019] Customer data is collected and encrypted by the e-commerce client in the customer's mobile phone and stored in the blockchain. Merchant data is generated by the merchant based on the customer data in the blockchain, encrypted by the merchant server, and stored in the blockchain. Customer data and merchant data are collectively referred to as Internet sales data.

[0020] Before encrypting the Internet sales data, the Internet sales data needs to be preprocessed. Since Internet data contains different types of data with different dimensions, in order to perform unified encryption, the Internet sales data needs to be converted into a unified form first.

[0021] In the embodiment of the present invention, the Internet sales data is encoded into binary data, and then the binary data is encoded into binary data. Bits are grouped together to get multiple Bit binary number, each Convert the binary number into decimal number to form the sequence to be encrypted, where The first preset length in the embodiment of the present invention is In other embodiments, the implementer can set the first preset length as needed. The value of , where it should be noted that, in order to ensure the complexity of the subsequent encryption result, Must be greater than or equal to .

[0022] At this point, the preprocessing of the Internet sales data has been completed and the sequence to be encrypted has been obtained.

[0023] S002. Build a chain encryption table and set the initial key.

[0024] The embodiment of the present invention constructs a chain encryption table and transforms each element in the sequence to be encrypted according to the content in the chain encryption table. bit binary number conversion, and Binary numbers include arrive common , converted to decimal number is arrive Therefore, the value range of each element in the sequence to be encrypted is ,Will In order to encrypt each element in the encryption sequence, it is necessary to ensure that Each integer in the range has a corresponding transformation object in the chained encryption table, so Each integer in the range is used as the row index of the chain encryption table, and the value of each row of the chain encryption table is used as the transformation object. In order to increase the complexity of the encryption result, the chain encryption table can be set to multiple columns. At the same time, in order to simplify encryption, the range of the encryption result is specified to be consistent with the range of each element in the sequence to be encrypted, that is, the value range of the transformation object is .

[0025] In an embodiment of the present invention, the method for constructing a chain encryption table is: Build a OK The table of columns, the row indexes of the table are arrive , the column indexes of the table are , , , Each column in the table contains For each integer in the range, the value of each row in the table is different, and in order to ensure that the encryption result of each element in the sequence to be encrypted is different from the element itself, the value of each row in the table is also different from the index of the row.

[0026] Get any table that meets the above conditions as a chain encryption table. See the chain encryption diagram for details. Figure 2 .

[0027] It should be noted that the chain encryption table is a key in the encryption process, which is pre-built by the merchant and distributed to customers. The tables that meet the above conditions are There are several possible chain encryption tables: It is difficult for attackers to obtain the contents of the chain encryption table by brute force. Therefore, encrypting Internet sales data based on the chain encryption table is highly secure.

[0028] The encryption concept of the embodiment of the present invention is to chain a transformation object in the chain encryption table for each element in the sequence to be encrypted as a value in the encryption process, and each row in the chain encryption table corresponds to four transformation objects, so an initial key needs to be set, and the transformation object of the corresponding column is selected according to the initial key. The column indexes of the chain encryption table are , , , , each column index is a two-digit binary number, so the initial key needs to be a binary number. In order to make the encryption result complex, multiple transformations can be performed during the encryption process, that is, the initial key can be set to a longer length.

[0029] In the embodiment of the present invention, a length of As the initial key, is the second preset length. It should be noted that the initial key is pre-set by the merchant and distributed to the customer. In order to protect the privacy of customers in Internet sales data from being leaked, the merchant needs to set different initial keys for different customers. In other embodiments, the implementer can set The value of .

[0030] At this point, the chain encryption table and the initial key are obtained. The embodiment of the present invention ensures that the key in the encryption process is complex and the key space is large by constructing the chain encryption table and the initial key. It is difficult for attackers to obtain the contents of the chain encryption table and the initial key by brute force. The encryption of Internet sales data based on the chain encryption table and the initial key is highly secure. At the same time, the embodiment of the present invention sets different initial keys for different customers, ensuring that customer privacy is not leaked, and increasing the security of Internet sales data.

[0031] S003. Dynamically encrypt the sequence to be encrypted according to the initial key and the chain encryption table to obtain ciphertext data.

[0032] It should be noted that the encryption idea of ​​the embodiment of the present invention is to transform each element in the encryption sequence according to the chain encryption table to achieve encryption. In order to ensure that the encryption result is complex and difficult to crack, multiple transformations are required during the encryption process. In the embodiment of the present invention, the number of transformations for each element in the encryption sequence is ,in is the first preset number. Each element needs to select the transformation object according to the key during the transformation process. Each column index of the chain encryption table is a two-digit binary number, which requires that the key for each transformation is also a two-digit binary number. The key required for this transformation is binary number, Recorded as the second length. In other embodiments, the implementer can set It should be noted that in order to ensure the complexity of the encryption result, Must be greater than or equal to At the same time, in order to further increase the complexity of the encryption result, the ciphertext of the previous element in the sequence to be encrypted can be associated with the encryption key of the next element.

[0033] In this embodiment, the specific method for encrypting the sequence to be encrypted is as follows: 1. Take the first element in the sequence to be encrypted as the plaintext to be encrypted and obtain the first A binary number is used as the first key, and the first key is used as the encryption key of the plaintext to be encrypted.

[0034] 2. Encrypt the plaintext to be encrypted, including: splitting the encryption key into Two-digit binary numbers are used as the transformation keys of the plaintext to be encrypted. The value of the first transformation key position in the chained encryption table with the row index being the plaintext to be encrypted and the column index being the plaintext to be encrypted is obtained as the first encryption process value. At this time, one transformation is completed. The value of the second transformation key position in the chained encryption table with the row index being the first encryption process value and the column index being the plaintext to be encrypted is obtained as the second encryption process value. At this time, two transformations are completed. And so on, until the completion Stop at the first transformation and get the The encryption process value is used as the ciphertext of the plaintext to be encrypted.

[0035] In the embodiment of the present invention, an example of encrypting the plaintext to be encrypted is shown in Figure 3 In this example, the plaintext to be encrypted is , the encryption key is , the chain encryption table is Figure 2 First, the encryption key Split into Transformation Key , , , , , get the row index in the chained encryption table as encrypted plaintext , column index is the first transformation key Value As the first encryption process value; get the row index in the chain encryption table as the first encryption process value , column index is the second transformation key Value As the second encryption process value, similarly, the third, fourth, and fifth encryption process values ​​are respectively , , . Then the plaintext to be encrypted The ciphertext is .

[0036] 3. Convert the plaintext to be encrypted into bit binary number, convert the ciphertext to be encrypted Bit binary number, the corresponding The binary number corresponds to the ciphertext of the plaintext to be encrypted. The second key is obtained by performing an XOR operation on the binary number. Position, when When the encrypted sequence is not treated The first key in the initial key is encrypted. A binary number is used as the new first key, where Recorded as the third length. Obtain the next element of the plaintext to be encrypted in the sequence to be encrypted as the new plaintext to be encrypted. Concatenate the second key with the new first key to obtain a result as the encryption key of the new plaintext to be encrypted.

[0037] It should be noted that the initial key length is In the process of obtaining a new first key, the initial key may not contain enough A binary number, at this time, the cycle starts from the starting position of the initial key to obtain a new first key. For example, the initial key is , , the first key is (Corresponding to the initial key Position and bit), the first key in the initial key After that, it is insufficient A binary number, in which case the last and first digits of the initial key are used as the new first key. .

[0038] 4. Repeat steps 2-3 to encrypt the new plaintext to be encrypted until all elements in the sequence to be encrypted have been encrypted. The ciphertext of all elements in the sequence to be encrypted is used as the ciphertext data.

[0039] At this point, the dynamic encryption of the sequence to be encrypted is completed, and the ciphertext data is obtained. The embodiment of the present invention uses the plaintext to be encrypted as the index of the chain encryption table, dynamically searches for the transformation object in the chain encryption table according to the encryption key, and obtains the ciphertext of the plaintext to be encrypted after multiple transformations, so that the encryption result is complex and difficult to crack. At the same time, the embodiment of the present invention obtains the encryption key of the next element according to the previous element in the sequence to be encrypted and the ciphertext of the element, making the encryption result more chaotic but at the same time having a very strong avalanche effect. The value of each element in the sequence to be encrypted affects the encryption results of all subsequent elements, so that the embodiment of the present invention can resist known plaintext attacks, that is, even if the attacker intercepts a part of the plaintext and the corresponding ciphertext, it is impossible to infer the encryption method and key based on the correspondence between the plaintext and the ciphertext, thereby ensuring the security of Internet sales data on the blockchain.

[0040] S004. Decrypt the ciphertext data.

[0041] The e-commerce client in the customer's mobile phone stores the encrypted data of the customer data in the blockchain. The merchant stores the encrypted data of the merchant data in the blockchain. It should be noted that the chain encryption table and the initial key in the encryption process are kept locally by the merchant and the customer, and are not stored in the blockchain with the encrypted data.

[0042] The merchant decrypts the ciphertext data stored by the customer, and the e-commerce client in the customer's mobile phone decrypts the ciphertext data stored by the merchant. The method for decrypting the ciphertext data is: 1. Take the first element in the ciphertext data as the ciphertext to be decrypted and obtain the first A binary number is used as the first key, and the first key is used as the decryption key of the ciphertext to be decrypted.

[0043] 2. Decrypt the ciphertext to be decrypted, including: splitting the decryption key into Two-digit binary numbers are used as the transformation keys of the ciphertext to be decrypted. The column of the transformation key is obtained, and the row index corresponding to the element whose value in the column is the ciphertext to be encrypted is used as the first The encryption process value is a reverse transformation. Get the index of the chain encryption table as the first column of the plaintext to be encrypted. The column with the transformation key is obtained by The row index corresponding to the element of the encrypted process value is used as the first The encryption process value has completed two inverse transformations. And so on until the completion Stop at the second inverse transformation and obtain the The encryption process value is used as the plaintext of the ciphertext to be decrypted.

[0044] 3. Convert the ciphertext to be decrypted into bit binary number, convert the plaintext to be decrypted into Bit binary number, the corresponding ciphertext to be decrypted The binary number corresponds to the plaintext of the ciphertext to be decrypted. The second key is obtained by performing an XOR operation on the binary number. The binary number is used as the new first key. The next element of the ciphertext to be decrypted in the ciphertext data is obtained as the new ciphertext to be decrypted. The result obtained by concatenating the second key with the new first key is used as the decryption key of the new ciphertext to be decrypted.

[0045] It should be noted that the initial key length is In the process of obtaining a new first key, the initial key may not contain enough A binary number of bits is generated, and at this time, a cycle is started from the starting position of the initial key to obtain a new first key.

[0046] 4. Repeat steps 2-3 to decrypt the new ciphertext until all elements in the ciphertext data have been decrypted. The plaintext of all elements in the ciphertext data is used as the plaintext data.

[0047] 5. Each element in the plaintext data is a decimal number. Convert each element in the plaintext data into a Bit binary number, all The binary numbers are spliced ​​together to obtain binary data, and the binary data is decoded to obtain Internet sales data.

[0048] At this point, the decryption of the ciphertext data is completed and the Internet sales data is obtained.

[0049] After decrypting customer data such as customer clicks, impressions, average user stickiness and other key digital marketing indicators, merchants can formulate targeted marketing strategies and marketing data based on the content of customer data, such as merchant marketing content, product information, quotation information to customers and other merchant data.

[0050] After decrypting the merchant's marketing content, product information, quotation information to customers and other merchant data, the e-commerce client in the customer's mobile phone will display the relevant data to the customer to attract the customer to purchase related products.

[0051] Through the above steps, the encryption and decryption of Internet data are completed, and point-to-point precision marketing from merchants to customers is realized.

[0052] The embodiment of the present invention ensures that the key in the encryption process is complex and the key space is large by constructing a chain encryption table and an initial key, and it is difficult for an attacker to obtain the contents of the chain encryption table and the initial key by brute force cracking means. The security of encrypting Internet sales data based on the chain encryption table and the initial key is high; at the same time, the present invention sets different initial keys for different customers, ensures that customer privacy is not leaked, and increases the security of Internet sales data; the present invention uses the plaintext to be encrypted as the index of the chain encryption table, dynamically searches for the transformation object in the chain encryption table according to the encryption key, and obtains the ciphertext of the plaintext to be encrypted after multiple transformations, so that the encryption result is complex and difficult to be cracked; the present invention obtains the encryption key of the next element according to the previous element in the sequence to be encrypted and the ciphertext of the element, so that the encryption result is more chaotic but has a very strong avalanche effect at the same time, and the value of each element in the sequence to be encrypted affects the encryption results of all subsequent elements, destroying the data regularity in the sequence to be encrypted, so that the present invention can resist known plaintext attacks, that is, even if the attacker intercepts a part of the plaintext and the corresponding ciphertext, it is impossible to infer the encryption method and the key according to the corresponding relationship between the plaintext and the ciphertext, thereby ensuring the security of Internet sales data on the blockchain.

[0053] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A security protection method for Internet data information, characterized in that: The method comprises the following steps: S1: Obtain the sequence to be encrypted; set a chain encryption table, the row index of the chain encryption table is each integer within a preset range, and the column index is , , as well as , each column element of the chain encryption table contains all integers within a preset range, all elements in each row are different, and each element in each row is different from the value of the row index; the initial key is obtained according to the second preset length; S2: multiply the first preset number by two to obtain a second length; use the first element in the sequence to be encrypted as the plaintext to be encrypted, obtain the first binary numbers of the second length in the initial key as the first key, and use the first key as the encryption key for the plaintext to be encrypted; S3: obtaining multiple transformation keys according to the encryption key; using the plaintext to be encrypted as the encryption process value and the first transformation key as the first transformation key; S4: Obtain the value of the position where the row index is the encryption process value and the column index is the first transformation key in the chained encryption table as the new encryption process value; and use the next transformation key of the first transformation key as the new first transformation key; S5: repeat S4 until the first preset number of times is reached, and then stop, and use the latest encryption process value as the ciphertext of the plaintext to be encrypted; S6: Obtain a second key according to the plaintext to be encrypted and the ciphertext of the plaintext to be encrypted; obtain a new first key according to the first preset length, the second length, the first key and the initial key; obtain the next element of the plaintext to be encrypted in the sequence to be encrypted as the new plaintext to be encrypted; concatenate the second key after the new first key to obtain a new encryption key for the plaintext to be encrypted; S7: Repeat S3-S6 until the ciphertexts of all elements in the sequence to be encrypted are obtained; the ciphertexts of all elements in the sequence to be encrypted are used as ciphertext data.

2. A method for protecting Internet data information security according to claim 1, characterized in that: The step of obtaining the initial key according to the second preset length comprises: A binary sequence having a length equal to a second preset length is randomly set as an initial key.

3. A method for protecting Internet data information security according to claim 1, characterized in that: The step of obtaining multiple transformation keys according to the encryption key comprises: The encryption key is split into a first preset number of two-digit binary numbers, and each of the two-digit binary numbers is used as a transformation key for the plaintext to be encrypted.

4. A method for protecting Internet data information security according to claim 1, characterized in that: The step of obtaining the second key according to the plaintext to be encrypted and the ciphertext of the plaintext to be encrypted comprises: Convert the plaintext to be encrypted into a binary number of a first preset length as a first code; The ciphertext of the plaintext to be encrypted is converted into a binary number of a first preset length as a second code, and an XOR operation is performed on the first code and the second code to obtain a second key.

5. A method for protecting Internet data information security according to claim 1, characterized in that: The step of obtaining a new first key according to the first preset length, the second length, the first key and the initial key comprises: The third length is obtained by subtracting the first preset length from the second length, and the third length of binary numbers after the first key in the initial key is obtained as a new first key.

Images