Multi-protocol unified encryption cloud service gateway system and method based on cryptographic middleware

Abstract

The present invention discloses a multi-protocol unified encryption cloud service gateway system and method based on cryptographic middleware, which relates to the technical field related to cloud services. The system includes: a group identification module for obtaining a first user and the encryption user group to which he belongs; a protocol selection module for performing protocol combination matching analysis to obtain a matching encryption protocol combination; an encryption protocol management module including multiple protocol blocks and cryptographic middleware; an encryption gateway control module for sending a matching encryption protocol combination to the cryptographic middleware, performing encryption protocol calls and unified template processing from multiple protocol blocks based on the matching encryption protocol combination, and serving the first user according to the returned unified encryption protocol template. This solves the technical problems in the prior art that cloud service gateways are difficult to adapt to the different encryption requirements of multiple user groups, and that the management of multiple encryption protocols is chaotic, resulting in poor overall encryption performance and security, thereby achieving the technical effect of improving the overall encryption performance and security of cryptographic cloud services.

Description

Technical Field

[0001] The present application relates to the technical field related to cloud services, and specifically to a multi-protocol unified encryption cloud service gateway system and method based on cryptographic middleware. Background Art

[0002] With the rapid development of cloud computing technology, more and more users are choosing to store their data in the cloud and use cloud services. Data security and privacy protection are crucial, and encryption has become a key means of ensuring data security. However, different user groups have different security requirements, and the existence of multiple encryption protocols in the network environment poses a challenge in efficiently adapting and properly utilizing these protocols for different user groups. For example, enterprise users have extremely high requirements for data confidentiality and prefer complex and high-strength encryption protocols; individual users prioritize convenience and cost-effectiveness and prefer relatively simple encryption methods. Furthermore, different application scenarios, such as financial transactions and medical data transmission, also require the adaptation of different encryption protocols. Traditional cloud service gateway systems lack a unified encryption management mechanism, making it difficult to meet the complex requirements of multiple user groups and multiple protocols, which in turn affects the efficiency and security of cloud service encryption.

[0003] Therefore, in the current related technologies, there are technical problems such as cloud service gateways are difficult to adapt to the different encryption needs of multiple user groups, and the management of multiple encryption protocols is chaotic, resulting in poor overall encryption performance and security. Summary of the Invention

[0004] This application solves the technical problems in the prior art that cloud service gateways are difficult to adapt to the different encryption requirements of multiple user groups, and the management of multiple encryption protocols is chaotic, resulting in poor overall encryption efficiency and security, by providing a multi-protocol unified encryption cloud service gateway system and method based on cryptographic middleware. This achieves the technical effect of improving the overall encryption efficiency and security of cryptographic cloud services.

[0005] The present application provides a multi-protocol unified encryption cloud service gateway system based on cryptographic middleware, the system including: a group identification module, the group identification module is used to obtain a first user accessing the cloud service gateway and identify the encryption user group to which the first user belongs; a protocol selection module, the protocol selection module performs protocol combination matching analysis based on the received encryption user group to obtain a matching encryption protocol combination; an encryption protocol management module, the encryption protocol management module includes multiple protocol blocks and cryptographic middleware, wherein each protocol block is used to store an encryption protocol of a corresponding type, and the cryptographic middleware is connected to the multiple protocol blocks respectively; an encryption gateway control module, the encryption gateway control module is used to send the matching encryption protocol combination to the cryptographic middleware, the cryptographic middleware performs encryption protocol call and unified template processing from the multiple protocol blocks based on the matching encryption protocol combination, and serves the first user according to the returned unified encryption protocol template.

[0006] In a possible implementation, the multi-protocol unified encryption cloud service gateway system based on cryptographic middleware also includes: obtaining a sample of historical user groups accessing the cloud service gateway; identifying the feature vectors of each user in the historical user group sample, the feature vectors including data packet pattern, encryption protocol security level, usage device and network environment; using the feature vectors as hierarchical features of the DBSCAN clustering algorithm, dividing the historical user group sample into multiple encryption user groups, and identifying the encryption user group to which the first user belongs when accessing the cloud service gateway.

[0007] In a possible implementation, the multi-protocol unified encryption cloud service gateway system based on cryptographic middleware also includes: constructing a protocol adaptation rule library, which is used to record the protocol combination adapted for each encryption user group; connecting the protocol adaptation rule library with the protocol selection module, and performing protocol combination matching analysis in the protocol adaptation rule library according to the input encryption user group to obtain a matching encryption protocol combination.

[0008] In a possible implementation, the multi-protocol unified encryption cloud service gateway system based on cryptographic middleware also includes: determining whether the first user included in the cloud service gateway is a newly accessed user; if the first user is a newly accessed user, performing protocol combination matching analysis in the protocol adaptation rule library according to the encryption user group to which the first user belongs, and obtaining a matching encryption protocol combination; if the first user is not a newly accessed user, obtaining the first user's historical encryption tasks, performing encryption protocol preference analysis according to the historical encryption tasks, updating the obtained matching encryption protocol combination according to the first user's preferred encryption protocol, and outputting the updated matching encryption protocol combination.

[0009] In a possible implementation, the multi-protocol unified encryption cloud service gateway system based on the cryptographic middleware also includes: when the cryptographic middleware receives the matching encryption protocol combination, it performs a combination sequence analysis on the matching encryption protocol combination to obtain a serial protocol combination and a parallel protocol combination; based on the serial protocol combination and the parallel protocol combination, it generates an encryption protocol scheduling instruction, and based on the encryption protocol scheduling instruction, it makes an encryption protocol call from the multiple protocol blocks and returns it to the cryptographic middleware.

[0010] In a possible implementation, the multi-protocol unified encryption cloud service gateway system based on cryptographic middleware also includes: a template construction engine encapsulated in the cryptographic middleware, the template construction engine is used to construct a chain template according to the serial protocol combination, and to construct a concurrent template according to the parallel protocol combination; the template fields are configured in the chain template and the concurrent template, the configured chain template and concurrent template are processed to obtain a unified encryption protocol template, and the unified encryption protocol template is bound to the first user; when the first user requests to enter the cloud service gateway, the protocol encryption service is performed according to the returned unified encryption protocol template service.

[0011] In a possible implementation, the multi-protocol unified encryption cloud service gateway system based on cryptographic middleware also includes: the cryptographic middleware includes a unified interface, the cryptographic middleware is connected to the multiple protocol blocks respectively according to the unified interface, the cryptographic middleware issues multiple encryption protocol scheduling instructions to the multiple protocol blocks according to the matching encryption protocol combination, and the multiple protocol blocks transmit the scheduled encryption protocols to the cryptographic middleware respectively according to the issued multiple encryption protocol scheduling instructions; wherein, the multiple protocol blocks include at least a symmetric encryption protocol block, an asymmetric encryption protocol block, a transmission security protocol block and a hash algorithm block.

[0012] The present application also provides a multi-protocol unified encryption cloud service gateway method based on cryptographic middleware, the method including: obtaining a first user accessing the cloud service gateway, identifying the encryption user group to which the first user belongs; performing protocol combination matching analysis based on the received encryption user group, and obtaining a matching encryption protocol combination; the encryption protocol management module includes multiple protocol blocks and cryptographic middleware, wherein each protocol block is used to store an encryption protocol of a corresponding type, and the cryptographic middleware is connected to the multiple protocol blocks respectively; sending the matching encryption protocol combination to the cryptographic middleware, and the cryptographic middleware performs encryption protocol calls and unified template processing from the multiple protocol blocks based on the matching encryption protocol combination, and serves the first user according to the returned unified encryption protocol template.

[0013] The multi-protocol unified encryption cloud service gateway system and method based on cryptographic middleware proposed in this application includes a group identification module for obtaining the first user and the encryption user group to which he belongs; a protocol selection module for performing protocol combination matching analysis to obtain a matching encryption protocol combination; an encryption protocol management module including multiple protocol blocks and cryptographic middleware; an encryption gateway control module for sending a matching encryption protocol combination to the cryptographic middleware, performing encryption protocol calls and unified template processing from multiple protocol blocks based on the matching encryption protocol combination, and serving the first user according to the returned unified encryption protocol template. This solves the technical problems in the prior art that cloud service gateways are difficult to adapt to the different encryption requirements of multiple user groups, and that the management of multiple encryption protocols is chaotic, resulting in poor overall encryption performance and security, thereby achieving the technical effect of improving the overall encryption performance and security of cryptographic cloud services. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] To more clearly illustrate the technical solutions of the embodiments of the present disclosure, the accompanying drawings of the embodiments of the present disclosure are briefly introduced below. Flowcharts are used in this application to illustrate the operations performed by the systems according to the embodiments of the present application. It should be understood that the preceding or following operations are not necessarily performed in precise order. Instead, various steps may be processed in reverse order or simultaneously as needed. Furthermore, other operations may be added to these processes, or one or more operations may be removed from these processes.

[0015] Figure 1 Schematic diagram of the structure of a multi-protocol unified encryption cloud service gateway system based on cryptographic middleware provided in an embodiment of the present application.

[0016] Figure 2 A flowchart of a multi-protocol unified encryption cloud service gateway method based on cryptographic middleware provided in an embodiment of the present application.

[0017] Description of reference numerals: group identification module 10 , protocol selection module 20 , encryption protocol management module 30 , encryption gateway control module 40 . DETAILED DESCRIPTION

[0018] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below.

[0019] In order to make the purpose, technical solutions and advantages of this application clearer, the application will be further described in detail below with reference to the accompanying drawings. The described embodiments should not be regarded as limiting this application. All other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0020] In the following description, reference is made to “some embodiments”, which describes a subset of all possible embodiments, but it will be understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict, and the terms “first\second” involved are merely used to distinguish similar objects and do not represent a specific ordering of the objects. The terms “including” and “having” and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, system, product, or server that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or modules that are not clearly listed or that are inherent to these processes, products, or devices. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which this application belongs. The terms used herein are for the purpose of describing the embodiments of this application only.

[0021] The embodiment of the present application provides a multi-protocol unified encryption cloud service gateway system based on cryptographic middleware, such as Figure 1 As shown, the system includes:

[0022] The group identification module 10 is used to obtain a first user who accesses the cloud service gateway and identify the encrypted user group to which the first user belongs.

[0023] Preferably, when a user (i.e., the first user) accesses the cloud service gateway system, the group identification module collects and analyzes relevant information of the user, which may include but is not limited to the user's identity (for example, a corporate user may have specific corporate registration information, and a personal user may have identity authentication information such as an ID number), the user's usage scenario (such as whether it is used for financial business, medical data processing, daily office work, etc.), the user's security needs and preferences (such as the requirements for encryption strength, whether frequent encryption and decryption operations are required, etc.), and the user's authority level (ordinary user, administrator user, etc.); by analyzing and processing these user information, it is determined which specific encryption user group the first user belongs to. For example, users may be divided into corporate encryption user groups (which can be further divided into different types such as financial enterprises, medical enterprises, etc.), personal ordinary encryption user groups, personal high-security encryption user groups, etc., thereby meeting the user group's needs in terms of data security and privacy protection.

[0024] Furthermore, the specific configuration of the group identification module 10 also includes obtaining a sample of historical user groups that access the cloud service gateway; identifying the feature vectors of each user in the historical user group sample, the feature vectors including the data packet pattern, encryption protocol security level, usage equipment and network environment; using the feature vectors as hierarchical features of the DBSCAN clustering algorithm, dividing the historical user group sample into multiple encrypted user groups, and identifying the encrypted user group to which the first user belongs when accessing the cloud service gateway.

[0025] Preferably, the cloud service gateway accumulates a large amount of user-related data during operation, obtains relevant information of these historical users to form a set, that is, a historical user group sample, such as the information set of all users who have accessed the cloud service gateway in the past month, and then extracts information that can describe the user's characteristics for each user in the historical user group sample, including data packet mode, encryption protocol security level, device used, and network environment. This information constitutes the user's feature vector, where the data packet mode refers to the characteristics of the data packet during the data transmission process when the user uses the cloud service, such as the size distribution of the data packet, the sending frequency, the time interval between data packets, etc. Different types of users may have significantly different data packet modes when performing data transmission. For example, enterprise users may have large The data packets transmitted by cloud users are large and relatively regular, while individual users may have relatively small and irregular data packet transmissions; the encryption protocol security level refers to the security level of the encryption protocol adopted by users when using cloud services. Different encryption protocols have different security levels, and some high-level encryption protocols can provide stronger data protection; the device used refers to the type of device used by users to access the cloud service gateway, such as personal computers, smart phones, tablets, etc. The performance and security features of different devices affect the user's use of cloud services and security requirements; the network environment refers to the network environment in which users access cloud services, such as home networks, corporate LANs, public wireless networks, etc. Different network environments have different security risks, and users may adopt different encryption measures and usage habits in different network environments.

[0026] Preferably, the feature vector is used as the input hierarchical feature of DBSCAN (density-based spatial clustering algorithm), and the historical user group sample is analyzed and processed, and the clusters are automatically divided according to the density distribution of data points in space. Specifically, the neighborhood radius (determines the neighborhood range of the data point) and the minimum number of points (the minimum number of points required in the neighborhood of a data point) are set, and then the feature vector of each user in the historical user group sample is standardized to eliminate the impact of the dimensions between different features. For each user's feature vector, its neighborhood in the feature space is calculated according to the neighborhood radius. If the number of points contained in the neighborhood of a certain feature vector is greater than or equal to the minimum number of points, the point corresponding to the feature vector is defined as the core point, and other points in the neighborhood around the core point will be classified into the same cluster as the core point; if a point is neither a core point nor has a path connected to the core point in its neighborhood, it is marked as a noise point, and the historical user group sample is divided into multiple different encrypted user groups. When the first user accesses the cloud service gateway, the user's feature vector is first extracted and normalized. Then, the distance between the feature vector and the center of each divided encrypted user group (which can be the mean of all feature vectors in the group) is calculated. Finally, the first user's feature vector is assigned to the encrypted user group with the closest distance.

[0027] The protocol selection module 20 performs protocol combination matching analysis based on the received encryption user group to obtain a matching encryption protocol combination.

[0028] Optimally, the most appropriate combination of encryption protocols should be selected from a wide range of available protocols based on the characteristics and needs of the encryption user group to provide efficient and secure encryption services. Specifically, different encryption user groups differ in terms of data security needs, usage scenarios, and device capabilities. For example, enterprise users may have extremely high requirements for data confidentiality, requiring high-strength encryption algorithms and strict access control; whereas individual users may prioritize encryption convenience and minimal impact on device performance. Furthermore, it's important to understand the characteristics of various encryption protocols (including encryption strength, key management methods, support for different data types, and compatibility with various devices and network environments) to accurately assess their compatibility with the needs of the encryption user group.

[0029] Preferably, based on the analysis of the characteristics of the encryption user group and the evaluation results of the encryption protocol characteristics, the protocol selection module performs a matching analysis, that is, considers how to combine different encryption protocols to best meet the needs of a specific encryption user group. For example, for an encryption user group with high requirements for data security and real-time performance, a high-intensity symmetric encryption protocol is selected to be combined with a fast asymmetric encryption protocol for key exchange, and a suitable hash algorithm is used to ensure data integrity. The protocol selection module determines the optimal protocol combination based on encryption efficiency, security, compatibility, etc., which serves as the basis for the system to provide encryption services to users in this group, ensuring that user data is effectively protected during transmission and storage, while meeting the user's usage needs in different scenarios. For example, for a specific encryption user group, the final matching encryption protocol combination may include the AES encryption protocol for data encryption, the RSA encryption protocol for key management, and the HMAC-SHA256 algorithm for data integrity verification.

[0030] Furthermore, the specific configuration of the protocol selection module 20 also includes constructing a protocol adaptation rule library, which is used to record the protocol combination adapted for each encryption user group; connecting the protocol adaptation rule library with the protocol selection module, performing protocol combination matching analysis in the protocol adaptation rule library based on the input encryption user group, and obtaining a matching encryption protocol combination.

[0031] Preferably, various information related to encryption user groups and encryption protocols is collected, including the characteristics of different types of user groups (such as corporate users, individual users, financial institution users, etc.), such as requirements for data security, usage scenarios (such as real-time communication, data storage and backup, etc.), device performance limitations, etc., and at the same time, the characteristics of various encryption protocols are determined, such as encryption strength, computing speed, applicable data types, etc.; based on the collected information, the protocol combination suitable for each encryption user group is analyzed. For example, for corporate user groups with extremely high security requirements and large amounts of data, a combination of AES (Advanced Encryption Standard) symmetric encryption protocol and RSA asymmetric encryption protocol may be adapted, where RSA is used for key exchange and AES is used for data encryption; then the correspondence between each encryption user group obtained from the analysis and its adapted protocol combination is recorded in the protocol adaptation rule library, where the protocol adaptation rule library stores matching information of various user groups and protocol combinations.

[0032] Preferably, the protocol adaptation rule library is connected to the protocol selection module. When new encryption user group information is input, the protocol selection module can analyze and process it according to the content in the rule library. Specifically, when the group identification module identifies the encryption user group to which the first user accessing the cloud service gateway belongs, the information of the encryption user group is passed to the protocol selection module as input; the protocol selection module searches for the corresponding protocol combination in the protocol adaptation rule library based on the input encryption user group. For example, if the input is an enterprise user group, the protocol selection module will find a pre-set protocol combination (AES+RSA combination) suitable for the enterprise user group in the rule library; after matching and searching, the protocol selection module obtains the matching encryption protocol combination suitable for the encryption user group from the protocol adaptation rule library, and uses this result for subsequent encryption processing, thereby being able to quickly and accurately provide suitable encryption protocol combinations for different encryption user groups, thereby improving the pertinence and effectiveness of encryption services.

[0033] Furthermore, the specific configuration of the protocol selection module 20 also includes determining whether the first user included in the cloud service gateway is a newly accessed user; if the first user is a newly accessed user, performing a protocol combination matching analysis in the protocol adaptation rule library according to the encryption user group to which the first user belongs, and obtaining a matching encryption protocol combination; if the first user is not a newly accessed user, obtaining the first user's historical encryption tasks, performing an encryption protocol preference analysis according to the historical encryption tasks, updating the obtained matching encryption protocol combination according to the first user's preferred encryption protocol, and outputting the updated matching encryption protocol combination.

[0034] Preferably, when a first user accesses the cloud service gateway, a determination is made as to whether this is their first time access. Specifically, the system checks whether the user's identity identifier (e.g., user ID, device fingerprint, etc.) is present in the system's user list. If not, the user is considered a new user; if present, the user is considered an existing user who has previously accessed the cloud service gateway. If the first user is determined to be a new user, the group identification module identifies the encryption user group to which the user belongs. The protocol selection module then searches and matches the protocol adaptation rule library based on this encryption user group information to obtain a matching encryption protocol combination suitable for the encryption user group to which the first user belongs. If it is determined that the first user is not a new user, information about the encryption tasks previously performed by the user (such as the encryption protocols used by the user in the past, the type of encrypted data, and detailed encryption scenarios) is obtained from the user's historical records. An encryption protocol preference analysis is then performed, analyzing the user's preferences for encryption protocol usage. For example, if the user has consistently selected a specific encryption algorithm in multiple past encryption tasks, or consistently used a combination of protocols in certain scenarios, a preference for a new protocol can be inferred. Based on the results of the encryption protocol preference analysis, the matching encryption protocol combinations obtained from the protocol adaptation rule library based on the encryption user group to which the first user belongs are updated. Finally, the updated matching encryption protocol combinations are output and used to provide subsequent encryption services to the first user to better meet the user's personalized needs. By tailoring this approach to different user types, the cloud service gateway system can not only provide new users with a general encryption protocol combination suitable for their group, but also make personalized adjustments based on the historical preferences of existing users, thereby improving user satisfaction with encryption services and the security and flexibility of the system.

[0035] The encryption protocol management module 30 includes a plurality of protocol blocks and cryptographic middleware, wherein each protocol block is used to store a corresponding type of encryption protocol, and the cryptographic middleware is connected to the plurality of protocol blocks respectively.

[0036] Preferably, the encryption protocol management module includes multiple protocol blocks and cryptographic middleware. Specifically, the protocol block is the storage unit of the encryption protocol management module, and each protocol block is responsible for storing a corresponding type of encryption protocol. For example, one protocol block specifically stores symmetric encryption protocols such as AES (Advanced Encryption Standard) and DES (Data Encryption Standard); another protocol block stores asymmetric encryption protocols such as RSA and ECC (Elliptic Curve Cryptography); and there may also be protocol blocks storing hash algorithm-related protocols such as SHA-1 and SHA-256. The cryptographic middleware is the core component of the encryption protocol management module and is connected to multiple protocol blocks. When the cloud service gateway needs to use a certain encryption protocol to encrypt or decrypt data, the cryptographic middleware obtains the required encryption protocol from the corresponding protocol block based on the system request and provides it to the module or application that needs to use it. The cryptographic middleware can convert between protocols to ensure that data can be correctly transmitted and processed between different encryption environments. The cryptographic middleware is also responsible for managing the keys required by the encryption protocol, including key generation, storage, distribution, and update functions to ensure the security and correctness of the keys and the proper operation of the encryption protocol. Through the collaborative work of multiple protocol blocks and cryptographic middleware, the encryption protocol management module can efficiently and securely manage various encryption protocols, provide reliable encryption support for the cloud service gateway, and ensure the security and confidentiality of data during transmission and storage.

[0037] An encryption gateway control module 40 is used to send the matching encryption protocol combination to the cryptographic middleware. The cryptographic middleware performs encryption protocol calls and unified template processing from the multiple protocol blocks based on the matching encryption protocol combination, and serves the first user according to the returned unified encryption protocol template.

[0038] Preferably, the encryption gateway control module is the key part of the system responsible for coordinating and controlling encryption operations. When the system determines the encryption user group to which the first user belongs through the group identification module, and the protocol selection module obtains the matching encryption protocol combination of the user group, the encryption gateway control module obtains the matching encryption protocol combination and sends it to the cryptographic middleware. Assuming that the matching encryption protocol combination is composed of the AES symmetric encryption protocol and the RSA asymmetric encryption protocol, the encryption gateway control module will pass this combination information containing the two protocols to the cryptographic middleware. After the cryptographic middleware receives the matching encryption protocol combination from the encryption gateway control module, since each protocol block stores the corresponding type of encryption protocol, it calls the corresponding encryption protocol from multiple protocol blocks based on the protocol information in this combination. Therefore, the cryptographic middleware can accurately call and obtain the AES protocol from the block storing the symmetric encryption protocol and obtain the RSA protocol from the block storing the asymmetric encryption protocol; then the encryption protocol is processed in a unified template, including integrating different encryption protocols according to certain rules and formats to form a unified encryption protocol template, which specifies how to use these protocols to encrypt and decrypt data, including protocol parameter settings, operation sequence, etc. For example, the unified template may stipulate that the RSA protocol is used for key exchange first, and then the AES protocol is used to encrypt the actual data. After the encryption protocol is called and the unified template is processed, the cryptographic middleware returns a unified encryption protocol template. After receiving the unified encryption protocol template, the encryption gateway control module provides encryption services for the first user in accordance with the provisions of the template. That is, when the first user's data needs to be encrypted, the system uses the corresponding encryption protocol to process the data according to the method and sequence specified in the unified encryption protocol template, thereby ensuring that the first user's data is effectively protected during transmission and storage, thereby realizing customized and standardized encryption services for users based on the user's group and matching encryption protocol combination, and ensuring encryption efficiency and security.

[0039] Furthermore, the specific configuration of the encryption gateway control module 40 also includes: a template construction engine is encapsulated in the cryptographic middleware, and the template construction engine is used to construct a chain template according to the serial protocol combination, and to construct a concurrent template according to the parallel protocol combination; the template fields are configured in the chain template and the concurrent template, the configured chain template and concurrent template are processed to obtain a unified encryption protocol template, and the unified encryption protocol template is bound to the first user; when the first user requests to enter the cloud service gateway, the protocol encryption service is performed according to the returned unified encryption protocol template service.

[0040] Preferably, a template building engine is encapsulated in the cryptographic middleware, and the template building engine builds a chain template based on the received serial protocol combination, wherein the serial protocol combination refers to an encryption protocol combination that needs to be executed in sequence in a specific order. For example, it may be necessary to use one encryption protocol to perform preliminary encryption of data first, and then use another protocol to further process the data after preliminary encryption. The template building engine organizes these protocols into a chain structure based on this sequential relationship to form a chain template, and clearly stipulates the order in which each protocol is executed. For parallel protocol combinations, that is, encryption protocol combinations that can be executed simultaneously, the template building engine builds a concurrent template. For example, two different encryption algorithms are used to encrypt different parts of the data at the same time to improve encryption efficiency. The template building engine organizes these parallel-executed protocols into a concurrent structure to form a concurrent template, and defines the rules for the simultaneous execution of each protocol in the concurrent template.

[0041] Preferably, after constructing the chain template and concurrent template, template fields are configured within the templates. These fields may include various parameters and information related to encryption operations, such as encryption algorithm parameter settings (e.g., key length, number of encryption rounds), data input and output format requirements, and protocol execution conditions. By configuring the template fields, the templates become more specific and operational. The chain template and concurrent template are then integrated to generate a unified encryption protocol template. The unified encryption protocol template integrates serial and parallel encryption protocol execution methods and related parameter configurations, providing a complete template for guiding encryption operations. The generated unified encryption protocol template is then bound to the first user. This involves recording the correspondence between the user identifier and the template, establishing an association between the template and the user, and the system recording the encryption method customized for the user. When the first user requests access to the cloud service gateway, protocol encryption services are provided to the user based on the bound encryption protocol template. This involves encrypting the user's data according to the encryption protocol execution sequence, parameter settings, and other requirements specified in the template, ensuring the security and privacy of the user data within the cloud service gateway, thereby ensuring the standardization and security of encryption services.

[0042] Furthermore, the specific configuration of the encryption gateway control module 40 also includes that the cryptographic middleware includes a unified interface, and the cryptographic middleware is connected to the multiple protocol blocks respectively according to the unified interface, and the cryptographic middleware issues multiple encryption protocol scheduling instructions to the multiple protocol blocks according to the matching encryption protocol combination, and the multiple protocol blocks transmit the scheduled encryption protocols to the cryptographic middleware respectively according to the issued multiple encryption protocol scheduling instructions; wherein, the multiple protocol blocks include at least a symmetric encryption protocol block, an asymmetric encryption protocol block, a transmission security protocol block and a hash algorithm block.

[0043] Preferably, the cryptographic middleware includes a unified interface, which serves as a standard channel for connecting and communicating with multiple protocol blocks. Specifically, through the unified interface, the cryptographic middleware can interact with different protocol blocks in a consistent manner, eliminating the need to set up different connection methods for each protocol block. This is similar to a universal plug that can be plugged into different types of sockets, enabling connections and data transmission between different devices, thereby improving the compatibility and scalability of the system. According to the unified interface, the cryptographic middleware establishes connections with multiple protocol blocks. That is, whether it is a symmetric encryption protocol block, an asymmetric encryption protocol block, a transport security protocol block, or a hash algorithm block, they are all connected to the cryptographic middleware through this unified interface, thereby enabling the cryptographic middleware to transmit data and interact with instructions with each protocol block. When the cryptographic middleware receives a matching encryption protocol combination (determined by the protocol selection module and sent via the encryption gateway control module), it issues multiple encryption protocol scheduling instructions to multiple protocol blocks based on this combination. The encryption protocol scheduling instructions specify which encryption protocols need to be obtained from each protocol block. For example, if the matching encryption protocol combination includes a symmetric encryption protocol and a hash algorithm, the cryptographic middleware will send corresponding scheduling instructions to the symmetric encryption protocol block and the hash algorithm block respectively to obtain the corresponding encryption protocol.

[0044] Preferably, after receiving the encryption protocol scheduling instructions issued by the cryptographic middleware, the multiple protocol blocks transmit the scheduled encryption protocols to the cryptographic middleware respectively according to the requirements of the encryption protocol scheduling instructions. For example, the symmetric encryption protocol block will transmit the specified symmetric encryption protocol (such as the AES protocol) to the cryptographic middleware, the asymmetric encryption protocol block will send the corresponding asymmetric encryption protocol (such as the RSA protocol), and the transmission security protocol block and the hash algorithm block will also transmit their corresponding protocols according to the instructions; wherein, the multiple protocol blocks include at least a symmetric encryption protocol block, an asymmetric encryption protocol block, a transmission security protocol block and a hash algorithm block. The symmetric encryption protocol block is used to store protocols related to the symmetric encryption algorithm, and the same key is used for encryption and decryption; the asymmetric encryption protocol block stores the protocols of the asymmetric encryption algorithm, and different keys are used for encryption and decryption; the transmission security protocol block stores protocols used to ensure the security of data during transmission; the hash algorithm block stores various hash algorithm-related protocols for data integrity verification, etc. Through the classified storage of protocol blocks, the cryptographic middleware can quickly and accurately obtain the required encryption protocols, thereby achieving efficient management and calling of encryption protocols, ensuring that the cloud service gateway can use appropriate encryption protocols to encrypt data according to user needs, thereby ensuring encryption efficiency and encryption security.

[0045] In the above, refer to Figure 1The multi-protocol unified encryption cloud service gateway system based on cryptographic middleware according to an embodiment of the present invention is described in detail. Figure 2 The present invention describes a multi-protocol unified encryption cloud service gateway method based on cryptographic middleware according to an embodiment of the present invention.

[0046] Multi-protocol unified encryption cloud service gateway method based on cryptographic middleware, such as Figure 2 As shown, the method includes: obtaining a first user who accesses the cloud service gateway, identifying the encryption user group to which the first user belongs; performing protocol combination matching analysis based on the received encryption user group to obtain a matching encryption protocol combination; the encryption protocol management module includes multiple protocol blocks and cryptographic middleware, wherein each protocol block is used to store an encryption protocol of a corresponding type, and the cryptographic middleware is connected to the multiple protocol blocks respectively; sending the matching encryption protocol combination to the cryptographic middleware, and the cryptographic middleware performs encryption protocol calls and unified template processing from the multiple protocol blocks based on the matching encryption protocol combination, and serves the first user according to the returned unified encryption protocol template.

[0047] In one possible implementation, the multi-protocol unified encryption cloud service gateway method based on cryptographic middleware also includes: obtaining a sample of historical user groups accessing the cloud service gateway; identifying the feature vectors of each user in the historical user group sample, the feature vectors including data packet pattern, encryption protocol security level, usage device and network environment; using the feature vectors as hierarchical features of the DBSCAN clustering algorithm, dividing the historical user group sample into multiple encryption user groups, and identifying the encryption user group to which the first user belongs when accessing the cloud service gateway.

[0048] In one possible implementation, the multi-protocol unified encryption cloud service gateway method based on cryptographic middleware also includes: constructing a protocol adaptation rule library, which is used to record the protocol combination adapted for each encryption user group; connecting the protocol adaptation rule library with the protocol selection module, and performing protocol combination matching analysis in the protocol adaptation rule library according to the input encryption user group to obtain a matching encryption protocol combination.

[0049] In one possible implementation, the multi-protocol unified encryption cloud service gateway method based on cryptographic middleware also includes: determining whether the first user included in the cloud service gateway is a newly accessed user; if the first user is a newly accessed user, performing protocol combination matching analysis in the protocol adaptation rule library according to the encryption user group to which the first user belongs, and obtaining a matching encryption protocol combination; if the first user is not a newly accessed user, obtaining the first user's historical encryption tasks, performing encryption protocol preference analysis according to the historical encryption tasks, updating the obtained matching encryption protocol combination according to the first user's preferred encryption protocol, and outputting the updated matching encryption protocol combination.

[0050] In one possible implementation, the multi-protocol unified encryption cloud service gateway method based on cryptographic middleware also includes: when the cryptographic middleware receives the matching encryption protocol combination, performing a combination sequence analysis on the matching encryption protocol combination to obtain a serial protocol combination and a parallel protocol combination; based on the serial protocol combination and the parallel protocol combination, generating an encryption protocol scheduling instruction, and performing an encryption protocol call from the multiple protocol blocks according to the encryption protocol scheduling instruction, and returning the result to the cryptographic middleware.

[0051] In one possible implementation, the multi-protocol unified encryption cloud service gateway method based on cryptographic middleware also includes: a template construction engine is encapsulated in the cryptographic middleware, and the template construction engine is used to construct a chain template according to the serial protocol combination, and to construct a concurrent template according to the parallel protocol combination; the template fields are configured in the chain template and the concurrent template, the configured chain template and concurrent template are processed to obtain a unified encryption protocol template, and the unified encryption protocol template is bound to the first user; when the first user requests to enter the cloud service gateway, the protocol encryption service is performed according to the returned unified encryption protocol template service.

[0052] In one possible implementation, the multi-protocol unified encryption cloud service gateway method based on cryptographic middleware also includes: the cryptographic middleware includes a unified interface, the cryptographic middleware is connected to the multiple protocol blocks respectively according to the unified interface, the cryptographic middleware issues multiple encryption protocol scheduling instructions to the multiple protocol blocks according to the matching encryption protocol combination, and the multiple protocol blocks transmit the scheduled encryption protocols to the cryptographic middleware respectively according to the issued multiple encryption protocol scheduling instructions; wherein, the multiple protocol blocks include at least a symmetric encryption protocol block, an asymmetric encryption protocol block, a transmission security protocol block and a hash algorithm block.

[0053] The multi-protocol unified encryption cloud service gateway system based on cryptographic middleware provided in an embodiment of the present invention can execute the multi-protocol unified encryption cloud service gateway method based on cryptographic middleware provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0054] Although the present application makes various references to certain modules in the system according to the embodiments of the present application, any number of different modules may be used and run on the user terminal and / or server, and the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other and are not used to limit the scope of protection of the present invention.

[0055] The above specific embodiments do not constitute a limitation on the scope of protection of this application. Those skilled in the art should understand that various modifications, combinations, and substitutions may be made based on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this application shall be included within the scope of protection of this application.

Claims

1. A multi-protocol unified encryption cloud service gateway system based on cryptographic middleware, characterized by: The system comprises: A group identification module, configured to obtain a first user accessing the cloud service gateway and identify an encrypted user group to which the first user belongs; A protocol selection module, wherein the protocol selection module performs protocol combination matching analysis based on the received encryption user group to obtain a matching encryption protocol combination; An encryption protocol management module, the encryption protocol management module including a plurality of protocol blocks and cryptographic middleware, wherein each protocol block is used to store a corresponding type of encryption protocol, and the cryptographic middleware is connected to the plurality of protocol blocks respectively; an encryption gateway control module, the encryption gateway control module being configured to send the matching encryption protocol combination to the cryptographic middleware, the cryptographic middleware performing encryption protocol calls and unified template processing from the multiple protocol blocks based on the matching encryption protocol combination, and serving the first user according to the returned unified encryption protocol template; The steps performed by the protocol selection module include: Constructing a protocol adaptation rule base, wherein the protocol adaptation rule base is used to record the protocol combination adapted for each encryption user group; Connecting the protocol adaptation rule base with the protocol selection module, performing protocol combination matching analysis in the protocol adaptation rule base according to the input encryption user group, and obtaining a matching encryption protocol combination; Determining whether the first user included in the cloud service gateway is a new access user; If the first user is a newly accessed user, perform protocol combination matching analysis in the protocol adaptation rule base according to the encryption user group to which the first user belongs, and obtain a matching encryption protocol combination; If the first user is not a newly accessed user, obtain the first user's historical encryption tasks, perform encryption protocol preference analysis according to the historical encryption tasks, update the obtained matching encryption protocol combination according to the first user's preferred encryption protocol, and output the updated matching encryption protocol combination.

2. The multi-protocol unified encryption cloud service gateway system based on cryptographic middleware according to claim 1, characterized in that: The steps performed by the group identification module include: Obtain a historical user group sample that accesses the cloud service gateway; Identifying a feature vector of each user in the historical user group sample, the feature vector including data packet pattern, encryption protocol security level, device used, and network environment; The feature vector is used as a hierarchical feature of the DBSCAN clustering algorithm to divide the historical user group sample into multiple encrypted user groups, and the encrypted user group to which the first user belongs is identified when the first user accesses the cloud service gateway.

3. The multi-protocol unified encryption cloud service gateway system based on cryptographic middleware according to claim 1, characterized in that: The steps performed by the encryption gateway control module also include: After receiving the matching encryption protocol combination, the cryptographic middleware performs combination sequence analysis on the matching encryption protocol combination to obtain a serial protocol combination and a parallel protocol combination; An encryption protocol scheduling instruction is generated according to the serial protocol combination and the parallel protocol combination, and an encryption protocol call is performed from the multiple protocol blocks according to the encryption protocol scheduling instruction, and the call is returned to the cryptographic middleware.

4. The multi-protocol unified encryption cloud service gateway system based on cryptographic middleware according to claim 3, characterized in that: The steps performed by the encryption gateway control module also include: The cryptographic middleware is encapsulated with a template construction engine, which is used to construct chain templates according to the serial protocol combination and to construct concurrent templates according to the parallel protocol combination; Configuring template fields in the chain template and the concurrent template, processing the configured chain template and concurrent template to obtain a unified encryption protocol template, and binding the unified encryption protocol template to the first user; When the first user requests to enter the cloud service gateway, the protocol encryption service is performed according to the returned unified encryption protocol template service.

5. The multi-protocol unified encryption cloud service gateway system based on cryptographic middleware according to claim 1, characterized in that: The cryptographic middleware includes a unified interface, and the cryptographic middleware is connected to the multiple protocol blocks respectively according to the unified interface. The cryptographic middleware issues multiple encryption protocol scheduling instructions to the multiple protocol blocks according to the matching encryption protocol combination, and the multiple protocol blocks transmit the scheduled encryption protocols to the cryptographic middleware respectively according to the issued multiple encryption protocol scheduling instructions; The multiple protocol blocks include at least a symmetric encryption protocol block, an asymmetric encryption protocol block, a transmission security protocol block and a hash algorithm block.

6. A multi-protocol unified encryption cloud service gateway method based on cryptographic middleware, characterized in that: The method is applied to the multi-protocol unified encryption cloud service gateway system based on cryptographic middleware according to any one of claims 1 to 5, and the method includes: Acquire a first user accessing the cloud service gateway, and identify the encrypted user group to which the first user belongs; Performing protocol combination matching analysis based on the received encryption user group to obtain a matching encryption protocol combination; The encryption protocol management module includes a plurality of protocol blocks and cryptographic middleware, wherein each protocol block is used to store a corresponding type of encryption protocol, and the cryptographic middleware is connected to the plurality of protocol blocks respectively; The matching encryption protocol combination is sent to the cryptographic middleware. The cryptographic middleware performs encryption protocol calls and unified template processing from the multiple protocol blocks based on the matching encryption protocol combination, and serves the first user according to the returned unified encryption protocol template.

Images