Computer storage data encryption method and system

Abstract

The invention discloses a computer storage data encryption method and system, and relates to the technical field of computer data security, and the main scheme is as follows: obtaining to-be-encrypted data and computer system information data in real time; calculating a security demand level evaluation index; further respectively calculating a resource availability evaluation index, an encryption strength index and a decision index; presetting decision index thresholds, comparing the decision index thresholds, and selecting a symmetric / asymmetric encryption algorithm; calculating security strength indexes of the symmetric and asymmetric encryption algorithms; calculating the number of blocks, the total encryption time, the total encryption strength and an encryption strength evaluation index to judge whether the current encryption method can be used or not; calculating a storage space security evaluation index and a ciphertext storage adaptation index to judge whether the storage space can store the ciphertext or not; according to the method, the encryption algorithm can be dynamically selected according to multiple factors such as data security requirements and system resource availability, and the security of data storage and the balance of system performance are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of computer data security, and in particular to a computer storage data encryption method and system. Background Art

[0002] In today's information society, computer-stored data covers a variety of important information, from personal privacy to corporate core secrets. However, data faces security threats from network attacks and internal leaks, and ensuring the confidentiality, integrity and availability of computer-stored data has become a key task.

[0003] In the prior art, encryption algorithms are usually used to encrypt data stored in computers. Common encryption algorithms include symmetric encryption algorithms and asymmetric encryption algorithms. Symmetric encryption algorithms use the same key for encryption and decryption, and their encryption speed is relatively fast. Asymmetric encryption algorithms use a pair of keys, namely a public key and a private key, which have higher security, but the encryption speed is relatively slow. In addition, there are some hybrid encryption methods that combine the advantages of symmetric encryption and asymmetric encryption. A symmetric encryption algorithm is first used to encrypt data, and then an asymmetric encryption algorithm is used to encrypt the symmetric encryption key to improve data security and encryption speed.

[0004] However, the existing technology still has some shortcomings. First, the data type, security requirement level and computing resource availability are not fully considered when selecting the encryption algorithm, which makes the algorithm unsuitable for specific data, affecting the encryption effect and system performance. Second, the encryption parameter configuration is unreasonable, such as short key length, inappropriate encryption mode, etc., which will reduce the encryption strength. Third, the block size is unreasonable and insufficient parallel processing will lead to long encryption time and affect the system response speed. Summary of the invention

[0005] 1. Technical issues to be resolved In view of the deficiencies in the prior art, the present invention provides a computer storage data encryption method and system, which obtains the data to be encrypted and the computer system information data in real time, calculates the security requirement level evaluation index, resource availability evaluation index, encryption strength index and decision index respectively, and selects a symmetric / asymmetric encryption algorithm; calculates the security strength index of the symmetric and asymmetric encryption algorithms; calculates the number of blocks, the total encryption time, the total encryption strength and the encryption strength evaluation index to determine whether the current encryption method can be used; calculates the storage space security evaluation index and the ciphertext storage adaptation index to determine whether the storage space can store ciphertext, thereby solving the problems of insufficient data security, limited system performance and difficult storage management.

[0006] (II) Technical solution To achieve the above objectives, the present invention is implemented through the following technical solutions: A computer storage data encryption method, comprising: Real-time acquisition of data to be encrypted and computer system information data; Calculate the security requirement level evaluation index based on the data to be encrypted ; Based on computer system information data, calculate resource availability evaluation indicators ; Calculate encryption strength index based on the data to be encrypted ; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Index and the data to be encrypted, calculate the decision indicator ; Preset decision indicator thresholds and set decision indicators Compare with the decision indicator threshold and select Symmetric encryption algorithms, 256 symmetric encryption algorithm and any one of the comprehensive encryption algorithms; the comprehensive encryption algorithm includes 256 symmetric encryption algorithm and Asymmetric encryption algorithms; Based on the data to be encrypted, calculate Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index ; Calculate the number of blocks based on the data to be encrypted , and further get the total encryption time ; Based on the number of blocks , calculate the total encryption strength ; Based on the selected encryption algorithm type, select the corresponding Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index or Comprehensive Security Strength Index One of the above, combined with the total encryption strength , Number of blocks and total encryption time , calculate the corresponding encryption strength evaluation index ; Preset encryption strength assessment index threshold, encryption strength assessment index Compare with the encryption strength assessment index threshold, and determine whether the current encryption method can be used based on the result; If the current encryption method can be used, the storage space security evaluation index is calculated based on the computer system information data ; Evaluate indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index ; Preset the ciphertext storage adaptation index threshold, and set the ciphertext storage adaptation index Compare with the ciphertext storage adaptation index threshold to determine whether the storage space can store the ciphertext; If the storage space can store the ciphertext, select the encryption algorithm corresponding to the ciphertext to encrypt and store the ciphertext; if the storage space cannot store the ciphertext, trigger an alarm of insufficient storage space, and prompt to expand the storage space.

[0007] In the preferred embodiment of the above-mentioned computer storage data encryption method: the calculation security requirement level evaluation index The method is: The data to be encrypted includes the degree of privacy , Importance and value ; According to the degree of privacy ,importance and value , calculate the safety requirement level evaluation index , the formula based on is:

[0008] in, For privacy The weight coefficient is between 0.1 and 0.3; For the degree of importance The weight coefficient is 0.3~0.4; For value The weight coefficient is between 0.3 and 0.5; + + =1.

[0009] In the preferred embodiment of the above-mentioned computer storage data encryption method: computing resource availability evaluation index The method is: Computer system information data includes Performance evaluation value , memory capacity evaluation value and storage capacity estimates ; according to Performance evaluation value , memory capacity evaluation value and storage capacity estimates , computing resource availability evaluation indicators , the formula based on is:

[0010] in, for Performance evaluation value The weight coefficient is between 0.2 and 0.4; Estimated value for memory capacity The weight coefficient is 0.3~0.4; Estimated value for storage capacity The weight coefficient is between 0.3 and 0.5; + + =1.

[0011] In the preferred embodiment of the above-mentioned computer storage data encryption method: calculating the encryption strength index The method is: The data to be encrypted also includes the key length and encryption time ; According to the key length and encryption time , calculate the encryption strength index , the calculation formula is:

[0012] in, is the key length The weight coefficient is between 0.3 and 0.5; Encryption time The weight coefficient is between 0.5 and 0.7; and + =1.

[0013] In the preferred embodiment of the above-mentioned computer storage data encryption method, the method of selecting the encryption algorithm is: The data to be encrypted also includes data algorithm adaptability indicators , Complexity Index and encrypted data size ; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Index , encryption time , Algorithm adaptability index , Complexity Index and encrypted data size , calculate the decision index , the formula based on is:

[0014] in, is the maximum encryption time; Preset decision indicator thresholds; The decision indicator threshold includes the decision indicator threshold 1 And decision indicator threshold 2 ,and ; when When Symmetric encryption algorithm; when When 256 symmetric encryption algorithm; when When 256 symmetric encryption algorithm and Asymmetric encryption algorithm.

[0015] In the preferred embodiment of the above-mentioned computer storage data encryption method: respectively calculate Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index The method is: The data to be encrypted also includes Key length for symmetric encryption algorithms , 256 symmetric encryption algorithm key length and Key length of asymmetric encryption algorithm ; choose Symmetric encryption algorithm, based on Key length of symmetric encryption algorithm ,calculate Symmetric encryption algorithm security strength index , the calculation formula is:

[0016] in, for Key length of symmetric encryption algorithm The adjustment coefficient is between 0 and 1; choose 256 symmetric encryption algorithm, based on 256 symmetric encryption algorithm key length ,calculate 256 symmetric encryption algorithm security strength index , the calculation formula is:

[0017] in, for 256 symmetric encryption algorithm key length The adjustment coefficient is between 0.5 and 1; choose 256 symmetric encryption algorithm and Asymmetric encryption algorithm, based on 256 symmetric encryption algorithm key length and Key length of asymmetric encryption algorithm , calculate the comprehensive security strength index , the calculation formula is:

[0018] in, for 256 symmetric encryption algorithm key length The weight coefficient is between 0.5 and 0.7; for Key length of asymmetric encryption algorithm The weight coefficient is between 0.3 and 0.5; + =1.

[0019] In the preferred embodiment of the above-mentioned computer storage data encryption method: calculating the total encryption time The method is: Based on the size of encrypted data , calculate the number of blocks , the calculation formula is:

[0020] in, is the expected size of a single block; Based on the number of blocks , calculate the total encryption time , the calculation formula is:

[0021] in, The encryption time of a single block; It is the ratio of the number of encrypted blocks to the total number of blocks, and the value ranges from 0 to 1.

[0022] In the preferred embodiment of the above-mentioned computer storage data encryption method, the method for determining whether the current encryption method can be used is: Based on the number of blocks , calculate the total encryption strength , the calculation formula is:

[0023] in, is the encryption strength of the i-th block; the value of i is 1, 2, 3... ; The value is a positive integer; according to Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index One of the total encryption strength , Number of blocks and total encryption time , calculate the corresponding encryption strength evaluation index , the formulas based on are: When choosing When using a symmetric encryption algorithm, calculate the encryption strength evaluation index , the formula based on is:

[0024] in, is the average single block encryption time; When choosing 256 symmetric encryption algorithm, calculate the encryption strength evaluation index , the formula based on is:

[0025] When selecting a comprehensive encryption algorithm, calculate the encryption strength evaluation index , the formula based on is:

[0026] Preset encryption strength assessment indicator threshold ;when When the encryption strength does not meet the security requirements of the system, change the encryption method; when When the encryption strength meets the security requirements of the system, continue to use the current encryption method.

[0027] In the preferred embodiment of the above-mentioned computer storage data encryption method, the method for determining whether the storage space can store ciphertext is: Computer system information data also includes access rights security assessment values , store encryption security assessment value and backup security rating ; Evaluate value based on access rights security , store encryption security assessment value and backup security rating , calculate the storage space security evaluation index , the formula based on is:

[0028] in, Evaluate values ​​for access security The weight coefficient is between 0.2 and 0.3; Encrypting security values ​​for storage The weight coefficient is 0.3~0.4; Evaluate the value of backup security The weight coefficient is between 0.4 and 0.5; and + + =1; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index , the calculation formula is:

[0029] Preset ciphertext storage adaptation index threshold ;when When , it is considered that the storage space can store ciphertext, and the encryption algorithm corresponding to the ciphertext is selected for encryption; when When the storage space is insufficient, an early warning is triggered, prompting you to expand the storage space.

[0030] The present invention also discloses a computer storage data encryption system, which is used to implement the above-mentioned computer storage data encryption method, comprising: A data acquisition module is used to acquire the data to be encrypted and computer system information data in real time; Data processing module, used to calculate security requirement level evaluation indicators based on the data to be encrypted ; Based on computer system information data, calculate resource availability evaluation indicators ; Calculate encryption strength index based on the data to be encrypted ; Encryption algorithm selection module, used to evaluate indicators based on security requirement levels , Resource availability evaluation indicators , Encryption Strength Index and the data to be encrypted, calculate the decision indicator ; Preset decision indicator thresholds and set decision indicators Compare with the decision indicator threshold and select Symmetric encryption algorithms, 256 symmetric encryption algorithm and any one of the comprehensive encryption algorithms; the comprehensive encryption algorithm includes 256 symmetric encryption algorithm and Asymmetric encryption algorithms; The encryption processing module is used to calculate the encryption Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index ; Encryption evaluation module, used to calculate the number of blocks based on the data to be encrypted , and further get the total encryption time ; Based on the number of blocks , calculate the total encryption strength ; Based on the selected encryption algorithm type, select the corresponding Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index or Comprehensive Security Strength Index One of the above, combined with the total encryption strength , Number of blocks and total encryption time , calculate the corresponding encryption strength evaluation index ; Preset encryption strength assessment index threshold, encryption strength assessment index Compare with the encryption strength assessment index threshold, and determine whether the current encryption method can be used based on the result; The storage management module calculates the storage space security evaluation index based on the computer system information data if the current encryption method can be used ; Evaluate indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index ; Preset the ciphertext storage adaptation index threshold, and set the ciphertext storage adaptation index Compare with the ciphertext storage adaptation index threshold to determine whether the storage space can store the ciphertext; The judgment module is used to select the encryption algorithm corresponding to the ciphertext to encrypt and store the ciphertext if the storage space can store the ciphertext; if the storage space cannot store the ciphertext, trigger an early warning of insufficient storage space and prompt to expand the storage space.

[0031] (III) Beneficial effects The present invention provides a computer storage data encryption method and system, which has the following beneficial effects: (1) Real-time acquisition of data to be encrypted ensures that the data can be protected as soon as it is generated or updated, avoiding security risks that exist when the data is in an unencrypted state; obtaining computer system information data can make the encryption process more intelligent and efficient.

[0032] (2) By evaluating the security requirement level, we can avoid excessive encryption leading to waste of resources or insufficient encryption leading to security risks. Computing resource availability evaluation indicators helps us understand the resource status of the computer system and ensure that insufficient resources will not affect system performance or cause encryption failure during the encryption process. Computing encryption strength indicators can give us an intuitive understanding of the strength of encryption so that we can adjust and optimize it according to actual conditions.

[0033] (3) Calculate resource availability evaluation indicators based on computer system information data, and select symmetric encryption algorithms and / or asymmetric encryption algorithms in combination with security requirement level evaluation indicators and encryption strength indicators; this approach fully considers the actual resource status of the system and avoids system performance degradation or failure to operate normally due to the selection of inappropriate encryption algorithms. At the same time, by calculating decision indicators and comparing them with preset thresholds, encryption algorithm selection decisions can be made more scientifically, improving the reliability and adaptability of encryption schemes.

[0034] (4) Calculating the security strength index of symmetric encryption algorithms and asymmetric encryption algorithms will help further improve encryption security. By quantitatively evaluating the security strength of different encryption algorithms, it is possible to promptly determine whether the current encryption strength meets the security requirements of the data.

[0035] (5) Block encryption can improve encryption efficiency, especially for large-scale data. By calculating the total encryption time, the impact of the encryption process on system performance can be evaluated so as to make a reasonable trade-off between time and security. The calculation of total encryption strength and encryption strength evaluation index can comprehensively consider the effect of encryption and ensure that the encryption method can effectively resist various attacks. If the encryption strength evaluation index does not meet the threshold requirement, the encryption strategy can be adjusted in time to ensure data security.

[0036] (6) The storage space security evaluation index is calculated based on the computer system information data, and the storage space is compared with the ciphertext storage adaptation index threshold to determine whether the storage space can store ciphertext, thereby ensuring the security and reliability of ciphertext storage. A comprehensive judgment based on the security requirement level evaluation index, resource availability evaluation index, and encryption strength evaluation index can achieve the optimal configuration of ciphertext storage. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 The present invention is a schematic diagram of the steps of a computer storage data encryption method. DETAILED DESCRIPTION

[0038] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0039] See also Figure 1 The present invention provides a computer storage data encryption method, comprising: Step 1: Obtain the data to be encrypted and computer system information data in real time.

[0040] Step 101: From the MySQL database, you can choose to execute an SQL query statement to extract the data to be encrypted; in the Windows system, you can use the WMI API to obtain computer system information data.

[0041] Real-time acquisition of data to be encrypted ensures that data can be protected as soon as it is generated or changed, preventing sensitive information from being accidentally leaked. Real-time acquisition of computer system information data can make the encryption process more intelligent and efficient. By understanding information such as CPU usage, memory usage, storage capacity, etc., encryption algorithms and parameters can be dynamically adjusted according to the actual load of the system to avoid the encryption process from having too much impact on system performance.

[0042] Step 2: Calculate the security requirement level assessment index based on the data to be encrypted ; Based on computer system information data, calculate resource availability evaluation indicators ; Calculate encryption strength index based on the data to be encrypted .

[0043] Step 201: Analyze and evaluate the sensitivity of the personal identity information contained in the data to be encrypted, and divide the data into three levels: low, medium, and high. If the data to be encrypted only contains the name, it is considered to be of low sensitivity and is assigned a privacy level MI value of 3 points. If the data contains contact information, it is considered to be of medium sensitivity and is assigned a privacy level MI value of 5 points. If the data contains the ID card number, it is highly sensitive information and is assigned a privacy level MI value of 8 points. Determine the comprehensive privacy level based on the sensitivity of this information. .

[0044] By analyzing business data, we can understand the data requirements and obtain the business process criticality score. , Data timeliness score and data impact score .

[0045] Scoring based on business process criticality , Data timeliness score and data impact score , calculate the importance , the calculation formula is:

[0046] in, Scoring business process criticality The weight coefficient is 0.3~0.4; Score the timeliness of data The weight coefficient is between 0.1 and 0.3; Score the data impact The weight coefficient is between 0.3 and 0.5; + + =1.

[0047] Through market research and industry analysis, we understand the value and importance of the data to be encrypted in the market, and score them respectively to obtain the economic value score of the data to be encrypted. , Strategic Value Rating and business operation value score .

[0048] Scoring by economic value , Strategic Value Rating and business operation value score , calculate the value , the calculation formula is:

[0049] in, For economic value The weight coefficient is 0.3~0.4; For strategic value The weight coefficient is between 0.2 and 0.3; Value for business operations The weight coefficient is between 0.4 and 0.5.

[0050] Step 202: According to the privacy level obtained in step 201 ,importance and value , calculate the safety requirement level evaluation index , the formula based on is:

[0051] in, For privacy The weight coefficient is between 0.1 and 0.3; For the degree of importance The weight coefficient is 0.3~0.4; For value The weight coefficient is between 0.3 and 0.5; + + =1.

[0052] It should be noted that the formula comprehensively considers the privacy of the data to be encrypted. ,importance and value Three aspects to determine the safety requirements level evaluation indicators By multiplying the three parameters by their respective weight coefficients and then adding them together, a comprehensive evaluation of different factors is achieved. This weighted summation method flexibly adjusts the weight of each factor according to the specific needs of different organizations or scenarios to meet the security needs of different types of data.

[0053] Step 203: Perform a performance test on the CPU using Cinebench benchmark software, and evaluate a score based on the time and performance of completing the task. This score is used as Performance evaluation value .

[0054] In Windows, check the memory usage and available memory in the Performance tab of Task Manager; evaluate the memory usage and available memory to get the memory capacity evaluation value .

[0055] In Windows, view the capacity and usage of each disk in File Explorer; evaluate the disk capacity and usage to obtain the storage capacity evaluation value .

[0056] Step 204: Based on the acquired Performance evaluation value , memory capacity evaluation value and storage capacity estimates , computing resource availability evaluation indicators , the formula based on is:

[0057] in, for Performance evaluation value The weight coefficient is between 0.2 and 0.4; Estimated value for memory capacity The weight coefficient is 0.3~0.4; Estimated value for storage capacity The weight coefficient is between 0.3 and 0.5; + + =1.

[0058] It should be noted that Performance evaluation value Reflects the speed and ability of the system to process instructions, the weight coefficient This shows that although it is important, it is not the only factor to be solved. Reflects the amount of data and program running space that the system can process simultaneously; weight coefficient Emphasize its key position in resource availability. Storage capacity assessment value Related to data storage and reading efficiency; weight coefficient Emphasize its high status in the overall computing resource availability evaluation. The computing resource availability evaluation index is obtained by multiplying these three evaluation values ​​with their respective weight coefficients and adding them together. ,This approach fully considers the role of different resources in the system, can accurately ,reflect the actual status of the system computing resources, and ,provide a strong basis for subsequent operational decisions.

[0059] Step 205: Security requirement level evaluation index based on the data to be encrypted , calculate the key length , the calculation formula is:

[0060] Among them, A and B are safety requirement level evaluation indicators The adjustment coefficient ranges from 0 to 1.

[0061] Safety requirements level evaluation indicators It reflects the degree of data security requirements. The higher the security requirements, the longer the required key length. According to the changing trend of key length under different security requirement levels, the range of adjustment coefficients A and B reflecting the impact of security requirement level assessment indicators on key length is determined, such as 0~1. The impact relationship between adjustment coefficients A and B is that when the security requirement level assessment indicator is higher, the key length will be affected and increase.

[0062] Based on the key length of the data to be encrypted , calculate encryption time , the calculation formula is:

[0063] in, is the size of the data to be encrypted; C is the size of the data to be encrypted The adjustment coefficient is between 0 and 1; is the key length The adjustment coefficient is between 0 and 1.

[0064] For data stored in the database, the size of the data to be encrypted is determined by querying the number of records and field lengths in the database statistics table. For example, if a database table has 1 million records, each record contains 10 fields, and the average length of each field is 50 characters, then the size of the table can be estimated to be 1000000×10×50=500000000 characters.

[0065] It should be noted that multiple experiments were conducted on an encryption algorithm to record the encryption time TP and the corresponding key length LP under different data sizes DH. Through data analysis, an adjustment coefficient range that reflects the impact of the size of the data to be encrypted on the encryption time was determined, such as 0~1. If the encryption algorithm is more efficient under a smaller data size, the adjustment coefficient The value of is relatively small; on the contrary, if the data size is large and the encryption efficiency is reduced, the adjustment coefficient The value will increase.

[0066] Perform performance tests on an encryption algorithm under different key lengths to observe the changing trend of encryption time with key length. Through data analysis, determine an adjustment coefficient range that reflects the impact of key length on encryption time, such as 0~1. If the increase in key length causes encryption time to grow exponentially, the value of adjustment coefficient D is larger; if the growth is relatively slow, the value of adjustment coefficient D is relatively small.

[0067] Step 206: Based on the key length and encryption time , calculate the encryption strength index , the calculation formula is:

[0068] in, is the key length The weight coefficient is between 0.3 and 0.5; Encryption time The weight coefficient is between 0.5 and 0.7; and + =1.

[0069] It should be noted that the encryption strength index The calculation takes into account the key length and encryption time There are two important factors. The key length is related to the security of the encryption algorithm. A longer key length means higher security, but it also brings huge overhead. is the weight coefficient of the key length, indicating that when evaluating encryption strength, although the key length is important, it is less important than the encryption time. Because in some cases, excessive pursuit of a long key length will lead to a long encryption time, affecting the performance and availability of the system. The encryption time reflects the efficiency of the encryption process. A shorter encryption time is crucial for some application scenarios with high real-time requirements. is the weight coefficient of encryption time, which reflects the high importance of encryption time in encryption strength assessment. By multiplying the key length and encryption time by their respective weight coefficients and then adding them together, a comprehensive balance between the two factors is achieved.

[0070] Step 207: Perform compatibility testing on the encrypted data, install and run the encryption algorithm on different operating systems, and test the performance of the encryption algorithm on different hardware platforms, and score them. Based on the scoring results, evaluate the compatibility of the encryption algorithm in a specific operating system and hardware environment, obtain the corresponding adaptability score, and then obtain the data algorithm adaptability index. .

[0071] Setting complexity metrics , by counting the frequency of occurrence of different data types in the statistics, such as numeric data, text data, and date and time data, as well as the conversion and interaction between different types. According to the diversity of data types, a diversity score is assigned to it. The more data types the data contains, the higher the score; and the complexity of the data structure is scored. For example, if a data set only contains the name and age information of employees, then 10 points are assigned as the diversity score, and 20 points are assigned as a lower complexity score. The overall complexity index =10+20=30 points; an enterprise's project management system data includes project information, task list, employee assignment and progress status, etc.; project information also includes project name, project description, start date and end date, etc., then 70 points are given as the diversity score, and 80 points are given as the higher complexity score, then the overall complexity index It is 70+80=150 points.

[0072] By calculating the security requirement level evaluation index, we can accurately grasp the importance and sensitivity of the data to be encrypted, so as to adopt appropriate encryption strategies in a targeted manner to ensure that high-value data is better protected. The calculation resource availability evaluation index can fully understand the resource status of the computer system, reasonably allocate the resources required for encryption, and avoid affecting the normal operation of the system due to excessive resource occupation during the encryption process. Calculating the encryption strength index helps to ensure that the encryption strength is moderate, so that the data will not be easily cracked due to insufficient encryption strength, and unnecessary performance overhead will not be caused due to excessive encryption, so as to achieve a balance between data security and system performance.

[0073] Step 3: Evaluate indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Index and the data to be encrypted, calculate the decision indicator ; Preset decision indicator thresholds and set decision indicators Compare with the decision indicator threshold and select Symmetric encryption algorithms, 256 symmetric encryption algorithm and any one of the comprehensive encryption algorithms; the comprehensive encryption algorithm includes 256 symmetric encryption algorithm and Asymmetric encryption algorithm.

[0074] Step 301: Based on encryption time , from which the maximum encryption time is obtained .

[0075] Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Index , encryption time , Algorithm adaptability index , Complexity Index , Maximum encryption time and encrypted data size , calculate the decision index , the formula based on is:

[0076] It should be noted that Combine the security requirement level with the encryption strength to ensure that data with high security requirements is encrypted with sufficient strength. The algorithm adaptability index and complexity index are processed. Logarithmic operation makes the influence of complexity index smoother, avoiding large fluctuations in results due to small changes in data. Square root operation appropriately reduces the weight of this part to balance it with other factors. Compare the actual encryption time with the maximum encryption time to ensure that the encryption time is within the acceptable range. If the actual encryption time is close to or exceeds the maximum encryption time, the value of this part will decrease, thereby lowering the decision indicator. The resource availability and encrypted data size are processed. The logarithmic operation also makes the impact of the encrypted data size smoother, and the cube root operation reduces the weight of this part to balance the relationship with the numerator. The higher the resource availability evaluation index, the more sufficient the system resources are.

[0077] Step 302: Preset decision indicator thresholds; the decision indicator thresholds include decision indicator thresholds 1 and 2. And decision indicator threshold 2 ,and By collecting decision indicator data of similar encryption projects in the past, including the specific values ​​of factors such as security requirement level, resource availability and encryption strength, as well as the final decision indicator results. For data that was considered to have low decision indicators in the past, its decision indicators are calculated. The average value of Similarly, analyze the data with high decision indicators and determine the decision indicator threshold value. .

[0078] Step 303: When When Symmetric encryption algorithm; when When 256 symmetric encryption algorithm; when When 256 symmetric encryption algorithm and Asymmetric encryption algorithm.

[0079] It should be noted that It is a symmetric key encryption algorithm, which means that the same key is used for encryption and decryption. Using a 128-bit key length, the plaintext is converted into ciphertext through multiple rounds of substitution, permutation, and obfuscation operations.

[0080] The 256 encryption process is similar to AES-128, but due to the longer key length, it is more secure. , the encryption and decryption speed will be slightly slower and the consumption of computing resources will be slightly higher.

[0081] It is an asymmetric encryption algorithm that uses a pair of keys, namely a public key and a private key. The public key is used to encrypt data, and the private key is used to decrypt data. Using a 4096-bit key length provides extremely high security. It is mainly used to encrypt a small amount of critical data, such as the key of a symmetric encryption algorithm.

[0082] By calculating the decision indicators, the encryption algorithm can be accurately matched to the actual situation. The preset decision indicator threshold is compared to provide a scientific basis for selecting the appropriate encryption algorithm, ensuring that system resources are used to the maximum extent and encryption efficiency is improved while meeting the security requirement level.

[0083] Step 4: Calculate the encrypted data separately Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index .

[0084] Step 401: For the selected encryption algorithm, consult its technical specification information; obtain Key length of symmetric encryption algorithm , 256 symmetric encryption algorithm key length and Key length of asymmetric encryption algorithm .

[0085] Step 402: Select Symmetric encryption algorithm, based on Key length of symmetric encryption algorithm ,calculate Symmetric encryption algorithm security strength index , the calculation formula is:

[0086] in, for Key length of symmetric encryption algorithm The adjustment coefficient is between 0 and 1.

[0087] Analyze the security requirement level of the data to be encrypted. If the privacy, importance, and value of the data are high, the security requirements for the encryption algorithm will be higher. At this time, an adjustment coefficient range that reflects the impact of the key length on the security strength index is required, such as 0~1. The adjustment coefficient b is used to emphasize the impact of the key length on the security strength. The larger the key length, the higher the security strength index.

[0088] It should be noted that the logarithmic function with base 2 is used , mapping keys of different lengths to a relatively reasonable numerical range, which is convenient for calculating and comparing the security strength index. As the key length increases, the improvement in security strength is not linear, but exponential. Logarithmic operations can better reflect this nonlinear relationship, so that the growth of the security strength index matches the actual security improvement trend of the key length. The function of the adjustment coefficient b is to adjust the security strength calculated based on the key length.

[0089] Step 403: Select 256 symmetric encryption algorithm, based on 256 symmetric encryption algorithm key length ,calculate 256 symmetric encryption algorithm security strength index , the calculation formula is:

[0090] in, for 256 symmetric encryption algorithm key length The adjustment coefficient is between 0.5 and 1.

[0091] Perform a comprehensive risk assessment on the encrypted data, taking into account potential attack threats, the impact of data leakage, and possible losses. If the assessment results show that there is a high security risk, a more secure symmetric encryption algorithm needs to be selected, so the adjustment coefficient c is set to adjust the security strength index.

[0092] It should be noted that the logarithmic function with base 2 Map keys of different lengths to a numerical range that is relatively easy to compare and analyze. 256 The key length of the symmetric encryption algorithm is usually longer than Symmetric encryption algorithms are longer, and logarithmic operations can effectively compress the data range, making the calculation of the security strength index more reasonable. The adjustment coefficient c is used to adjust the security strength calculated based on the key length.

[0093] Step 404: Select 256 symmetric encryption algorithm and Asymmetric encryption algorithm, based on 256 symmetric encryption algorithm key length and Key length of asymmetric encryption algorithm , calculate the comprehensive security strength index , the calculation formula is:

[0094] in, for 256 symmetric encryption algorithm key length The weight coefficient is between 0.5 and 0.7; for Key length of asymmetric encryption algorithm The weight coefficient is between 0.3 and 0.5; + =1.

[0095] It should be noted that and The purpose is to compress a larger range of key length values ​​into a more manageable range. This can avoid the problem of too large or too small values ​​that may occur when directly using the key length for calculation, making the calculation result more stable and reasonable. The weight coefficient reflects the relative importance of the two encryption algorithms in the comprehensive security strength index. By multiplying the key lengths of the two encryption algorithms by the corresponding weight coefficients after logarithmic operation and adding them together, a comprehensive security strength index is obtained. This index can intuitively reflect the overall security level when using both AES-256 and RSA-4096 encryption algorithms.

[0096] By accurately quantifying the security strength of encryption algorithms, we can intuitively understand the security level of the current encryption scheme. This helps to effectively resist potential attacks, protect sensitive data from being stolen or tampered with, and provide reliable security for data storage and transmission.

[0097] Step 5: Calculate the number of blocks based on the data to be encrypted , and further get the total encryption time ; Based on the number of blocks , calculate the total encryption strength ; Based on the selected encryption algorithm type, select the corresponding Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index or Comprehensive Security Strength Index One of the above, combined with the total encryption strength , Number of blocks and total encryption time , calculate the encryption strength evaluation index ; Preset encryption strength assessment index threshold, encryption strength assessment index The result is compared with the encryption strength assessment index threshold, and the user is judged whether the current encryption method can be used based on the result.

[0098] Step 501: Based on the encrypted data size , calculate the number of blocks , the calculation formula is:

[0099] in, is the expected size of a single chunk.

[0100] Smaller blocks can increase the security of encryption. Even if a block is cracked, the amount of data leaked is relatively small. However, too small blocks will reduce the performance of encryption because more blocks need to be processed. On the contrary, larger blocks can improve performance, but security will be affected to a certain extent. According to the security requirements and performance requirements of the data to be encrypted, select a block size corresponding to the existing size as the expected size SH of a single block.

[0101] Step 502: Use different encryption algorithms to perform multiple encryption tests on blocks of the same size, and take the average time as the encryption time of a single block. .

[0102] During the encryption process, the number of encrypted blocks and the total number of blocks are monitored in real time. Through these two values, the ratio of the number of currently encrypted blocks to the total number of blocks is calculated, that is, For example, at the beginning of encryption, the number of encrypted blocks is 0 and the total number of blocks is H. = 0. As encryption progresses, each time a block is encrypted, the number of encrypted blocks increases by 1. When encryption reaches a certain level, assuming that the number of encrypted blocks is n, then P = n / H.

[0103] According to the number of blocks and encryption time of a single block , calculate the total encryption time , the calculation formula is:

[0104] in, It is the ratio of the number of encrypted blocks to the total number of blocks, and the value ranges from 0 to 1.

[0105] It should be noted that Indicates the number of blocks. The number of blocks depends on the total size of the data to be encrypted and the size of each block. Generally speaking, the larger the data, the more blocks there are. The ratio of the number of encrypted blocks to the total number of blocks. If the data of some blocks have been processed by other security methods or do not need to be encrypted, then The value of will be less than 1. The formula takes into account three factors: the encryption time of a single block, the number of blocks, and the encryption block ratio to calculate the total encryption time.

[0106] Step 503: According to the encryption environment and security requirements, the encryption strength value is assigned to the block. If the encryption is performed in an environment with high security requirements, such as the military and financial fields, the encryption strength of each block needs to be higher, such as a value range of 80-100; if the encryption strength is performed in an environment with low security requirements, such as internal file sharing in an enterprise, personal file storage, etc., the encryption strength of each block is lower, such as a value range of 30-60. Therefore, the encryption strength of each block is determined according to the security level of the encryption environment. .

[0107] Based on the number of blocks , calculate the total encryption strength , the calculation formula is:

[0108] in, is the encryption strength of the i-th block; the value of i is 1, 2, 3... ; The value is a positive integer.

[0109] Step 504: Based on the total encryption time and number of blocks , calculate the average single block encryption time , the calculation formula is:

[0110] Based on the average single block encryption time , Symmetric encryption algorithm security strength index , Total encryption strength , Number of blocks and total encryption time , calculate the encryption strength evaluation index , the formula based on is:

[0111] It should be noted that It is the security strength index of the symmetric encryption algorithm and provides a basis for subsequent calculations; The relationship between the total encryption strength and the total encryption time is considered. A high total encryption strength and a long total encryption time means that the encryption process is complex but also highly secure. Compared with the number of blocks and the average encryption time of a single block, a large number of blocks and a short average encryption time of a single block indicate high encryption efficiency. The division operation balances the relationship between security strength and efficiency. The square root operation makes the result smoother and avoids excessive deviation of the result due to extreme values ​​of individual parameters. At the same time, it can also keep the encryption strength evaluation index EM within a reasonable range, which is convenient for comparison and analysis.

[0112] Step 505: Based on the average single block encryption time , 256 symmetric encryption algorithm security strength index , Total encryption strength , Number of blocks and total encryption time , calculate the encryption strength evaluation index , the formula based on is:

[0113] Step 506: Based on the average single block encryption time , Comprehensive Security Strength Index , Total encryption strength , Number of blocks and total encryption time , calculate the encryption strength evaluation index , the formula based on is:

[0114] Step 507: Preset encryption strength assessment index threshold ; By analyzing the types and intensity of attacks faced, such as external hacker attacks, internal malicious operations, physical attacks and other potential threats, select successful cases for encryption strength evaluation index calculation, and calculate the encryption strength evaluation index mean of the cases, and determine an encryption strength evaluation index threshold that can effectively resist these attacks based on the calculation results .

[0115] when When the encryption strength does not meet the security requirements of the system, change the encryption method; when When the encryption strength meets the security requirements of the system, continue to use the current encryption method.

[0116] By calculating the number of blocks and the total encryption time, encryption resources and time arrangements can be better planned to improve encryption efficiency. Comprehensive evaluation using a variety of encryption strength-related indicators can accurately measure the security and applicability of encryption methods. Preset threshold comparison provides a clear basis for judging whether to adopt the current encryption method, ensuring that the encryption solution can meet security requirements and achieve a balance between resource utilization and efficiency, effectively reducing the risk of data leakage and improving the security of data storage and transmission.

[0117] Step 6: If the current encryption method can be used, calculate the storage space security assessment index based on the computer system information data ; Evaluate indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index ; Preset the ciphertext storage adaptation index threshold, and set the ciphertext storage adaptation index The result is compared with the ciphertext storage adaptation index threshold to determine whether the storage space can store ciphertext.

[0118] Step 601: Review the system's access control list, user authentication mechanism, and permission change process management, and score them respectively, and obtain the user authentication mechanism score , Permission hierarchical management score and access logging scores ; Score based on user authentication mechanism , Permission hierarchical management score and access logging scores , calculate the access rights security evaluation value , the calculation formula is:

[0119] in, Score the user authentication mechanism The weight coefficient is between 0.3 and 0.5; Score for permission hierarchical management The weight coefficient is between 0.1 and 0.3; Scoring access logging The weight coefficient is 0.3~0.4; and + + =1.

[0120] Step 602: By analyzing the security of the encryption algorithm, reviewing the key management process, and checking the physical security of the storage device, scoring them respectively and obtaining the encryption algorithm strength score , Key Management Score and data integrity protection score .

[0121] Score based on encryption algorithm strength , Key Management Score and data integrity protection score , calculate the storage encryption security evaluation value , the calculation formula is:

[0122] in, Score the strength of the encryption algorithm The weight coefficient is between 0.1 and 0.4; Score Key Management The weight coefficient is between 0.2 and 0.5; Score data integrity protection The weight coefficient is 0.3~0.4; and + + =1.

[0123] Step 603: Check the backup strategy, backup storage security settings, and backup recovery test, and score them respectively, and obtain the backup frequency score , Backup storage location score and backup verification mechanism score .

[0124] Score based on backup frequency , Backup storage location score and backup verification mechanism score , calculate the backup security assessment value , the calculation formula is:

[0125] in, Score backup frequency The weight coefficient is 0.3~0.4; Score a backup storage location The weight coefficient is between 0.2 and 0.5; Score the backup verification mechanism The weight coefficient is between 0.2 and 0.4; and + + =1.

[0126] Step 604: Evaluate the security value based on the access rights , store encryption security assessment value and backup security rating , calculate the storage space security evaluation index , the formula based on is:

[0127] in, Evaluate values ​​for access security The weight coefficient is between 0.2 and 0.3; Encrypting security values ​​for storage The weight coefficient is 0.3~0.4; Evaluate the value of backup security The weight coefficient is between 0.4 and 0.5; and + + =1.

[0128] It should be noted that the access rights security assessment value Reflects the system's ability to control access to data. Reasonable access permission settings can prevent unauthorized access and reduce the risk of data leakage. Weight coefficient This indicates that the importance of access rights security in the overall assessment is relatively low, but it still cannot be ignored. Storage encryption security assessment value Reflects the degree of encryption of data on the storage device. Weight coefficient This indicates that storage encryption plays a key role in protecting data security, so it is given a relatively high weight. Backup security assessment value Indicates the security of backup data, weight coefficient This indicates that backup security is crucial to the long-term preservation and recovery of data, so it is given the highest weight.

[0129] Step 605: Evaluate indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index , the calculation formula is:

[0130] It should be noted that the safety requirement level evaluation index is multiplied by , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators These four indicators are combined to comprehensively consider the impact of various factors on the adaptability of ciphertext storage. If the value of any of these indicators is low, the adaptability index of ciphertext storage is reduced. The multiplication operation makes the various indicators correlated with each other, emphasizing their synergistic role in ciphertext storage. Only when all indicators are at a high level will the ciphertext storage adaptability index be high, indicating that the system can adapt well to the needs of ciphertext storage.

[0131] Step 606: Preset the ciphertext storage adaptation index threshold ; By calculating the ciphertext storage adaptation index of different files and devices in the past, the system's encryption and decryption time, storage resource usage, data access speed and other performance indicators are scored under different ciphertext storage adaptation indexes, and the scores are summed up. The ciphertext storage adaptation index in the top one-third or one-quarter is selected as a reference for the ciphertext storage adaptation index threshold. By setting the ciphertext storage adaptation index threshold, the relationship between security and performance is weighed to ensure system performance to a certain extent.

[0132] By comprehensively considering multiple security-related factors in computer system information data to calculate storage space security assessment indicators and ciphertext storage adaptation index, it can fully and accurately reflect the security status of the storage environment and avoid the one-sidedness of single factor evaluation. Presetting the ciphertext storage adaptation index threshold for comparison can provide a clear judgment standard for ciphertext storage, ensuring that ciphertext storage is only performed when the storage environment reaches a certain security level, greatly reducing the risk of data leakage.

[0133] Step 7: If the storage space can store the ciphertext, select the encryption algorithm corresponding to the ciphertext to encrypt and store the ciphertext; if the storage space cannot store the ciphertext, trigger an alarm of insufficient storage space and prompt to expand the storage space.

[0134] when When , it is considered that the storage space can store ciphertext, and the encryption algorithm corresponding to the ciphertext is selected to encrypt and store the ciphertext; when When the storage space is insufficient, an early warning is triggered, prompting you to expand the storage space.

[0135] Choosing the right encryption algorithm according to different situations can protect data from unauthorized access and theft to the greatest extent, especially for sensitive information, which can effectively reduce the risk of data leakage. If the storage space cannot store ciphertext, an early warning prompt will be triggered to expand the storage space, which can timely remind and take measures to avoid the inability to encrypt and store data due to insufficient storage space, thus ensuring the continuity and stability of data storage.

[0136] On the other hand, the present invention also discloses a computer storage data encryption system, which is used to implement the above-mentioned computer storage data encryption method, comprising: A data acquisition module is used to acquire the data to be encrypted and computer system information data in real time; Security policy management module, used to calculate security requirement level evaluation indicators based on the data to be encrypted ; Based on computer system information data, calculate resource availability evaluation indicators ; Calculate encryption strength index based on the data to be encrypted ; Data processing module for evaluating indicators according to security requirement levels , Resource availability evaluation indicators , Encryption Strength Index and the data to be encrypted, calculate the decision indicator ; Preset decision indicator thresholds and set decision indicators Compare with the decision indicator threshold and select Symmetric encryption algorithms, 256 symmetric encryption algorithm and any one of the comprehensive encryption algorithms; the comprehensive encryption algorithm includes 256 symmetric encryption algorithm and Asymmetric encryption algorithms; The encryption processing module is used to calculate the encryption Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index ; Encryption evaluation module, used to calculate the number of blocks based on the data to be encrypted , and further get the total encryption time ; Based on the number of blocks , calculate the total encryption strength ; Based on the selected encryption algorithm type, select the corresponding Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index or Comprehensive Security Strength Index One of the above, combined with the total encryption strength , Number of blocks and total encryption time , calculate the corresponding encryption strength evaluation index ; Preset encryption strength assessment index threshold, encryption strength assessment index Compare with the encryption strength assessment index threshold, and determine whether the current encryption method can be used based on the result; The storage management module calculates the storage space security evaluation index based on the computer system information data if the current encryption method can be used ; Evaluate indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index ; Preset the ciphertext storage adaptation index threshold, and set the ciphertext storage adaptation index Compare with the ciphertext storage adaptation index threshold to determine whether the storage space can store the ciphertext; The judgment module is used to select the encryption algorithm corresponding to the ciphertext to encrypt and store the ciphertext if the storage space can store the ciphertext; if the storage space cannot store the ciphertext, trigger an early warning of insufficient storage space and prompt to expand the storage space.

[0137] The above embodiments may be implemented in whole or in part by software, hardware, firmware or any other combination thereof. When implemented using software, the above embodiments may be implemented in whole or in part in the form of a computer program product. A person of ordinary skill in the art may appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein may be implemented in electronic hardware or in combination with computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution.

[0138] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0139] The above description is only a specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application.

Claims

1. A method for encrypting computer stored data, characterized in that: include: Real-time acquisition of data to be encrypted and computer system information data; Calculate the security requirement level evaluation index based on the data to be encrypted ; Based on computer system information data, calculate resource availability evaluation indicators ; Calculate encryption strength index based on the data to be encrypted ; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Index and the data to be encrypted, calculate the decision indicator ; Preset decision indicator thresholds and set decision indicators Compare with the decision indicator threshold and select Symmetric encryption algorithms, 256 symmetric encryption algorithm and any one of the comprehensive encryption algorithms; the comprehensive encryption algorithm includes 256 symmetric encryption algorithm and Asymmetric encryption algorithms; Based on the data to be encrypted, calculate Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index ; Calculate the number of blocks based on the data to be encrypted , and further get the total encryption time ; Based on the number of blocks , calculate the total encryption strength ; Based on the selected encryption algorithm type, select the corresponding Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index or Comprehensive Security Strength Index One of the above, combined with the total encryption strength , Number of blocks and total encryption time , calculate the corresponding encryption strength evaluation index ; Preset encryption strength assessment index threshold, encryption strength assessment index Compare with the encryption strength assessment index threshold, and determine whether the current encryption method can be used based on the result; If the current encryption method can be used, the storage space security evaluation index is calculated based on the computer system information data ; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index ; Preset the ciphertext storage adaptation index threshold and set the ciphertext storage adaptation index Compare with the ciphertext storage adaptation index threshold to determine whether the storage space can store the ciphertext; If the storage space can store the ciphertext, select the encryption algorithm corresponding to the ciphertext to encrypt and store the ciphertext; if the storage space cannot store the ciphertext, trigger an alarm of insufficient storage space, and prompt to expand the storage space.

2. A computer storage data encryption method according to claim 1, characterized in that: Calculation of safety requirements level evaluation indicators The method is: The data to be encrypted includes the degree of privacy , Importance and value ; According to the degree of privacy ,importance and value , calculate the safety requirement level evaluation index , the formula based on is: ； in, For privacy The weight coefficient is between 0.1 and 0.3; For the degree of importance The weight coefficient is 0.3~0.4; For value The weight coefficient is between 0.3 and 0.5; + + =1.

3. A computer storage data encryption method according to claim 2, characterized in that: Computing resource availability evaluation indicators The method is: Computer system information data includes Performance evaluation value , memory capacity evaluation value and storage capacity estimates ; according to Performance evaluation value , memory capacity evaluation value and storage capacity estimates , computing resource availability evaluation indicators , the formula based on is: ； in, for Performance evaluation value The weight coefficient is between 0.2 and 0.4; Estimated value for memory capacity The weight coefficient is 0.3~0.4; Estimated value for storage capacity The weight coefficient is between 0.3 and 0.5; + + =1.

4. A computer storage data encryption method according to claim 3, characterized in that: Calculating the Encryption Strength Index The method is: The data to be encrypted also includes the key length and encryption time ; According to the key length and encryption time , calculate the encryption strength index , the calculation formula is: ;in, is the key length The weight coefficient is between 0.3 and 0.5; Encryption time The weight coefficient is between 0.5 and 0.7; and + =1.

5. A computer storage data encryption method according to claim 4, characterized in that: The method for selecting encryption algorithm is: The data to be encrypted also includes data algorithm adaptability indicators , Complexity Index and encrypted data size ; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Index , encryption time , Algorithm adaptability index , Complexity Index and encrypted data size , calculate the decision index , the formula based on is: ； in, is the maximum encryption time; Preset decision indicator thresholds; The decision indicator threshold includes the decision indicator threshold 1 And decision indicator threshold 2 ,and ; when When Symmetric encryption algorithm; when When 256 symmetric encryption algorithm; when When 256 symmetric encryption algorithm and Asymmetric encryption algorithm.

6. A computer storage data encryption method according to claim 5, characterized in that: Calculate separately 128 Symmetric Encryption Algorithm Security Strength Index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index The method is: The data to be encrypted also includes Key length of symmetric encryption algorithm , 256 symmetric encryption algorithm key length and Key length of asymmetric encryption algorithm ; choose Symmetric encryption algorithm, based on Key length of symmetric encryption algorithm ,calculate Symmetric encryption algorithm security strength index , the calculation formula is: ； in, for Key length for symmetric encryption algorithms The adjustment coefficient is between 0 and 1; choose 256 symmetric encryption algorithm, based on 256 symmetric encryption algorithm key length ,calculate 256 symmetric encryption algorithm security strength index , the calculation formula is: ； in, for 256 symmetric encryption algorithm key length The adjustment coefficient is between 0.5 and 1; choose 256 symmetric encryption algorithm and Asymmetric encryption algorithm, based on 256 symmetric encryption algorithm key length and Key length of asymmetric encryption algorithm , calculate the comprehensive security strength index , the calculation formula is: ； in, for 256 symmetric encryption algorithm key length The weight coefficient is between 0.5 and 0.7; for Key length of asymmetric encryption algorithm The weight coefficient is between 0.3 and 0.5; + =1.

7. A computer storage data encryption method according to claim 6, characterized in that: Calculate total encryption time The method is: Based on the size of encrypted data , calculate the number of blocks , the calculation formula is: ； in, is the expected size of a single block; Based on the number of blocks , calculate the total encryption time , the calculation formula is: ； in, The encryption time of a single block; It is the ratio of the number of encrypted blocks to the total number of blocks, and the value ranges from 0 to 1.

8. A computer storage data encryption method according to claim 7, characterized in that: The method to determine whether the current encryption method can be used is: Based on the number of blocks , calculate the total encryption strength , the calculation formula is: ； in, is the encryption strength of the i-th block; the value of i is 1, 2, 3... ; The value is a positive integer; according to Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index One of the total encryption strength , Number of blocks and total encryption time , calculate the corresponding encryption strength evaluation index , the formulas based on are: When choosing When using a symmetric encryption algorithm, calculate the encryption strength evaluation index , the formula based on is: ； in, is the average single block encryption time; When choosing 256 symmetric encryption algorithm, calculate the encryption strength evaluation index , the formula based on is: ； When selecting a comprehensive encryption algorithm, calculate the encryption strength evaluation index , the formula based on is: ； Preset encryption strength assessment indicator threshold ;when When the encryption strength does not meet the security requirements of the system, change the encryption method; when When the encryption strength meets the security requirements of the system, continue to use the current encryption method.

9. A computer storage data encryption method according to claim 7, characterized in that: The method to determine whether the storage space can store ciphertext is: Computer system information data also includes access rights security assessment values , store encryption security assessment value and backup security rating ; Evaluate value based on access rights security , store encryption security assessment value and backup security rating , calculate the storage space security evaluation index , the formula based on is: ； in, Evaluate values ​​for access security The weight coefficient is between 0.2 and 0.3; Encrypting security values ​​for storage The weight coefficient is 0.3~0.4; Evaluate the value of backup security The weight coefficient is between 0.4 and 0.5; and + + =1; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index , the calculation formula is: ； Preset ciphertext storage adaptation index threshold ;when When , it is considered that the storage space can store ciphertext, and the encryption algorithm corresponding to the ciphertext is selected to encrypt and store the ciphertext; when When the storage space is insufficient, an early warning is triggered, prompting you to expand the storage space.

10. A computer storage data encryption system, characterized in that: A data acquisition module, used to acquire the data to be encrypted and computer system information data in real time; Data processing module, used to calculate security requirement level evaluation indicators based on the data to be encrypted ; Based on computer system information data, calculate resource availability evaluation indicators ; Calculate encryption strength index based on the data to be encrypted ; Encryption algorithm selection module, used to evaluate indicators based on security requirement levels , Resource availability evaluation indicators , Encryption Strength Index and the data to be encrypted, calculate the decision indicator ; Preset decision indicator thresholds and set decision indicators Compare with the decision indicator threshold and select Symmetric encryption algorithms, 256 symmetric encryption algorithm and any one of the comprehensive encryption algorithms; the comprehensive encryption algorithm includes 256 symmetric encryption algorithm and Asymmetric encryption algorithms; The encryption processing module is used to calculate the encryption Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index and comprehensive security strength index ; Encryption evaluation module, used to calculate the number of blocks based on the data to be encrypted , and further get the total encryption time ; Based on the number of blocks , calculate the total encryption strength ; Based on the selected encryption algorithm type, select the corresponding Symmetric encryption algorithm security strength index , 256 symmetric encryption algorithm security strength index or Comprehensive Security Strength Index One of the above, combined with the total encryption strength , Number of blocks and total encryption time , calculate the corresponding encryption strength evaluation index ; Preset encryption strength assessment index threshold, encryption strength assessment index Compare with the encryption strength assessment index threshold, and determine whether the current encryption method can be used based on the result; The storage management module calculates the storage space security evaluation index based on the computer system information data if the current encryption method can be used ; Evaluation indicators based on security requirements level , Resource availability evaluation indicators , Encryption Strength Evaluation Index and storage space security evaluation indicators , calculate the ciphertext storage adaptation index ; Preset the ciphertext storage adaptation index threshold and set the ciphertext storage adaptation index Compare with the ciphertext storage adaptation index threshold to determine whether the storage space can store the ciphertext; A judgment module, used for selecting an encryption algorithm corresponding to the ciphertext to encrypt and store the ciphertext if the storage space can store the ciphertext; If the storage space cannot store the ciphertext, an insufficient storage space warning is triggered, prompting you to expand the storage space.

Images