End-to-end data security transmission method, device and medium based on field importance

Abstract

The present invention provides an end-to-end data security transmission method, device and medium based on field importance, relating to the field of data transmission technology. The method can obtain a target data block, obtain a judgment threshold based on an expected duration determined by a user and the number of target data blocks corresponding to a target field name, dynamically determine a first data block and a second data block, and encrypt the first data block and the second data block using different symmetric encryption algorithms. While meeting the expected duration determined by the user as much as possible, a first symmetric encryption algorithm with a higher security level is used to encrypt the target data block corresponding to a target field name with a higher importance score, and a second symmetric encryption algorithm with a lower security level is used to encrypt the target data block corresponding to a target field name with a lower importance score. This method can better balance data security and encryption efficiency, and is conducive to improving user experience.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a method, device and medium for secure end-to-end data transmission based on field importance. Background Art

[0002] For data stored in a data table, in order to prevent the data from being stolen, tampered with or forged during transmission, it is usually necessary to encrypt the data to ensure data security. In the existing technology, data encryption mainly relies on encryption algorithms, and usually a single encryption algorithm is used to encrypt all data in the data table.

[0003] However, the above method also has the following technical problems:

[0004] Different encryption algorithms correspond to different security levels and encryption speeds. The higher the security level of the encryption algorithm, the slower the encryption speed and the longer the encryption time. Using an encryption algorithm with a fast encryption speed to encrypt data cannot meet the requirements of high security, and using an encryption algorithm with a slow encryption speed cannot meet the requirements of high encryption efficiency. Therefore, using a single encryption algorithm to encrypt all data in a data table cannot balance data security and encryption efficiency, which will affect the user experience. Summary of the Invention

[0005] In view of the above technical problems, the technical solution adopted by the present invention is:

[0006] According to a first aspect of the present invention, a method for secure end-to-end data transmission based on field importance is provided. The method is applied to a client and comprises the following steps:

[0007] S1. Get the target field name list A = {A1, A2, ..., A i ,…,A m}, A i is the i-th target field name, i ranges from 1 to m, m is the number of target field names, and the target field name is the field name in the target data table; A i The corresponding importance score is not less than A i+1 The corresponding importance score.

[0008] S2, based on A i The number of corresponding target data blocks B i and the expected duration T determined by the user, and obtain the judgment threshold a, where A i The corresponding target data block is A according to the preset data volume i The data blocks obtained by dividing all the corresponding field values ​​are as follows:

[0009] a×t1+((∑ m i=1 B i )-a)×t2=TT 0 , t1 is the time required to encrypt data of a preset data size using the first symmetric encryption algorithm S1, t2 is the time required to encrypt data of a preset data size using the second symmetric encryption algorithm S2, T 0 The data transmission time required to transmit all target data blocks to the server. The security level of S1 is higher than that of S2; t1>t2; T>T 0 .

[0010] S3. If B1+B2+…+B i-1 <a and B1+B2+…+B i ≥a, then A1, A2, ..., A i The corresponding target data block is taken as the first data block, and A i+1 , A i+2 ,…,A m The corresponding target data block is used as the second data block.

[0011] S4. Use S1 to encrypt the first data block to obtain a first encrypted data block, and use S2 to encrypt the second data block to obtain a second encrypted data block.

[0012] S5. Transmit the first encrypted data block and the second encrypted data block to the server through a secure channel.

[0013] According to a second aspect of the present invention, a non-transitory computer-readable storage medium is provided, in which a computer program is stored. The computer program is loaded and executed by a processor to implement the aforementioned method.

[0014] According to a third aspect of the present invention, an electronic device is provided, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor implements the aforementioned method when executing the computer program.

[0015] The present invention has at least the following beneficial effects:

[0016] The present invention provides an end-to-end data security transmission method, device and medium based on field importance. The method can obtain a target field name list, obtain a judgment threshold based on the expected duration determined by the user and the number of target data blocks corresponding to the target field name, determine a first data block and a second data block based on the judgment threshold and the target data block, use a first symmetric encryption algorithm to encrypt the first data block to obtain a first encrypted data block, and use a second symmetric encryption algorithm to encrypt the second data block to obtain a second encrypted data block, wherein the security level of the first symmetric encryption algorithm is higher than that of the second symmetric encryption algorithm, the encryption duration of the first symmetric encryption algorithm is longer than that of the second symmetric encryption algorithm, and the first encrypted data block and the second encrypted data block are encrypted by security. Full channel transmission to the server; it can be seen that the present invention can obtain the target data block, obtain the judgment threshold based on the expected time length determined by the user and the number of target data blocks corresponding to the target field name, dynamically determine the first data block and the second data block, and use different symmetric encryption algorithms to encrypt the first data block and the second data block. While satisfying the expected time length determined by the user as much as possible, the first symmetric encryption algorithm with a higher security level is used to encrypt the target data block corresponding to the target field name with a higher importance score, and the second symmetric encryption algorithm with a lower security level is used to encrypt the target data block corresponding to the target field name with a lower importance score. This can better balance data security and encryption efficiency, which is beneficial to improving user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0018] Figure 1 A flowchart of a method for secure end-to-end data transmission based on field importance is provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making any creative efforts shall fall within the scope of protection of the present invention.

[0020] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar tasks and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or server that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0021] The embodiment of the present invention provides an end-to-end data security transmission method based on field importance, which is applied to the client, such as Figure 1 As shown, the method includes the following steps:

[0022] S1. Get the target field name list A = {A1, A2, ..., A i ,…,A m}, A i is the i-th target field name, i ranges from 1 to m, and m is the number of target field names.

[0023] Specifically, the target field name is the field name in the target data table, which includes several field names, each field name corresponds to several field values, wherein the target data table is a data table pre-selected by technical personnel in this field according to actual needs, and will not be repeated here.

[0024] Specifically, the greater the importance score corresponding to the target field name, the higher the importance of the target field name and its corresponding field value.

[0025] Specifically, A i The corresponding importance score is not less than A i+1 The corresponding importance score, A i+1 The name of the i+1th target field.

[0026] Furthermore, when A i The corresponding importance score is equal to A i+1 When the corresponding importance score is i The corresponding data volume is not less than A i+1 The corresponding data volume.

[0027] Specifically, the amount of data corresponding to the target field name is the total number of bytes of all field values ​​corresponding to the target field name, and the unit of the total number of bytes is byte.

[0028] Through the above steps, the higher the importance score corresponding to the target field name, the higher its corresponding importance. When the importance scores are the same, the larger the amount of data corresponding to the target field name, the higher the importance corresponding to the target field name. This can clearly reflect the importance of the target field name. The first data block and the second data block can be determined based on the number of target data blocks corresponding to each target field name and the judgment threshold. This can more conveniently determine the first data block and the second data block, which is conducive to improving the efficiency of determining the first data block and the second data block.

[0029] S2, based on A i The number of corresponding target data blocks B i and the expected duration T determined by the user, and obtain the judgment threshold a, where A i The corresponding target data block is A according to the preset data volume i The data blocks obtained by dividing all the corresponding field values ​​are as follows:

[0030] a×t1+((∑ m i=1 B i )-a)×t2=TT 0 , t1 is the time required to encrypt data of a preset data size using the first symmetric encryption algorithm S1, t2 is the time required to encrypt data of a preset data size using the second symmetric encryption algorithm S2, T 0 The data transmission time required to transmit all target data blocks to the server. The security level of S1 is higher than that of S2.

[0031] Specifically, t1>t2.

[0032] Specifically, T>T 0

[0033] Specifically, the preset data volume is the number of bytes preset by those skilled in the art according to actual needs, for example, 102400 bytes (100KB), which will not be described in detail here.

[0034] In a specific embodiment, when A is processed according to a preset data volume, i In the process of dividing all the corresponding field values ​​into data blocks, if the total number of bytes of the remaining field values ​​is less than the preset data amount, the remaining field values ​​are treated as an independent data block; for example, if A is divided into 102400 bytes, iAfter all the corresponding field values ​​are divided into 8 data blocks, there are still several field values ​​remaining. The total number of bytes of the remaining field values ​​is 81920 bytes. Then, the remaining field values ​​are regarded as a data block. This can avoid dividing the field values ​​corresponding to different target field names into the same data block, and can also avoid missing some field values ​​during the division process.

[0035] Specifically, before step S2, the method further includes: displaying the preset data processing time interval [T 1 , T 2 ], and receive the user's preset data processing time interval [T 1 , T 2 ]Determined T, T 1 is the minimum data processing time, T 2 is the maximum data processing time, T 1 and T 2 Meet the following conditions respectively:

[0036] T 1 =(∑ m i=1 B i )×t2+T 0 ;T 2 =(∑ m i=1 B i )×t1+T 0 , where T 1 ≤T≤T 2 .

[0037] Specifically, T 0 <T 1 .

[0038] Optionally, S1 is the AES encryption algorithm.

[0039] Optionally, S2 is the ChaCha20 encryption algorithm; those skilled in the art will appreciate that the algorithms corresponding to S1 and S2 above are merely examples and are not intended to be specific limitations on the scope of protection of the present invention.

[0040] Through the above steps, the preset data processing time interval is displayed to the user, and the expected time determined by the user based on the preset data processing time interval is received. The judgment threshold is obtained according to the expected time determined by the user, the number of target data blocks corresponding to each target field name, the time required to encrypt data with a preset data size using the first symmetric encryption algorithm, and the time required to encrypt data with a preset data size using the second symmetric encryption algorithm. Furthermore, the first data block and the second data block are determined so that the first data block is encrypted using the first symmetric encryption algorithm with a higher security level, and the second data block is encrypted using the second symmetric encryption algorithm with a lower security level, while the expected time determined by the user is met as much as possible. This can better balance data security and encryption efficiency, and is conducive to improving user experience.

[0041] S3. If B1+B2+…+B i-1 <a and B1+B2+…+B i ≥a, then A1, A2, ..., A i The corresponding target data block is taken as the first data block, and A i+1 , A i+2 ,…,A m The corresponding target data block is used as the second data block, B i-1 A i-1 The number of corresponding target data blocks, A i-1 is the i-1th target field name, A i+2 The name of the i+2th target field.

[0042] Through the above steps, if B1+B2+…+B i-1 <a and B1+B2+…+B i ≥a, then A1, A2, ..., A i The corresponding target data block is taken as the first data block, and A i+1 , A i+2 ,…,A m The corresponding target data block is used as the second data block, and all target data blocks corresponding to the same target field name are used as the first data block, or all target data blocks corresponding to the same target field name are used as the second data block, so as to avoid dividing the equally important field values ​​into two categories and ensure the rationality of the classification of the first data block and the second data block.

[0043] S4. Use S1 to encrypt the first data block to obtain a first encrypted data block, and use S2 to encrypt the second data block to obtain a second encrypted data block.

[0044] Specifically, the encryption process in step S4 is serial encryption, that is, only one data block can be encrypted at a time; it can be understood that only one first data block can be encrypted at a time, or only one second data block can be encrypted at a time.

[0045] In a specific embodiment, the encryption process in step S4 is parallel encryption, that is, d data blocks can be encrypted each time, where d is the number of parallel encryption processes. When the encryption process in step S4 is parallel encryption, a, T 1 and T 2 Meet the following conditions respectively:

[0046] (a×t1+((∑ m i=1 B i )-a)×t2) / d=TT 0 ;T 1 =(∑ m i=1 B i )×t2 / d+T 0 ;T 2 =(∑ m i=1 B i )×t1 / d+T 0 .

[0047] S5. Transmit the first encrypted data block and the second encrypted data block to the server through a secure channel.

[0048] Through the above steps, a list of target field names is obtained, a judgment threshold is obtained based on the expected duration determined by the user and the number of target data blocks corresponding to the target field names, a first data block and a second data block are determined based on the judgment threshold and the target data blocks, the first data block is encrypted using a first symmetric encryption algorithm to obtain a first encrypted data block, and the second data block is encrypted using a second symmetric encryption algorithm to obtain a second encrypted data block, wherein the security level of the first symmetric encryption algorithm is higher than that of the second symmetric encryption algorithm, and the encryption duration of the first symmetric encryption algorithm is longer than the encryption duration of the second symmetric encryption algorithm, the first encrypted data block and the second encrypted data block are transmitted to the server through a secure channel, and while meeting the expected duration determined by the user as much as possible, the target data blocks corresponding to the target field names with higher importance scores can be encrypted using the first symmetric encryption algorithm with higher security level, and the target data blocks corresponding to the target field names with lower importance scores can be encrypted using the second symmetric encryption algorithm with lower security level, which can better balance data security and encryption efficiency, and is conducive to improving user experience.

[0049] Specifically, before step S5, the following steps are also included:

[0050] S01. Use the received public key to encrypt a first key and a second key to obtain a first encryption key corresponding to the first key and a second encryption key corresponding to the second key.

[0051] Specifically, before step S01, the process further includes: sending a data transmission request to the server, and when the server responds to the data transmission request, sending a public key generated by a preset asymmetric encryption algorithm to the client.

[0052] In a specific embodiment, new public keys and private keys generated by a preset asymmetric encryption algorithm are used to replace old public keys and private keys at fixed time intervals. Regularly updating public keys and private keys is beneficial to improving data security.

[0053] Specifically, the first key is a key generated for S1, and the second key is a key generated for S2.

[0054] S02. Send the first encryption key and the second encryption key to the server through a secure channel.

[0055] Specifically, in response to receiving the first encryption key and the second encryption key, the server uses a private key generated by a preset asymmetric encryption algorithm to decrypt the first encryption key and the second encryption key to obtain the first key and the second key.

[0056] Optionally, the preset asymmetric encryption algorithm is an RSA encryption algorithm; those skilled in the art will appreciate that the algorithm corresponding to the preset asymmetric encryption algorithm is merely an example and is not intended to be a specific limitation on the scope of protection of the present invention.

[0057] Through the above steps, the first key and the second key are encrypted using the received public key to obtain a first encryption key corresponding to the first key and a second encryption key corresponding to the second key. The first encryption key and the second encryption key are sent to the server through a secure channel to complete the synchronization of the first key and the second key, thereby ensuring the security of the first key and the second key.

[0058] Specifically, after step S5, the method further includes: after all the first encrypted data blocks and all the second encrypted data blocks are transmitted, destroying the first key and the second key, which can prevent the first key and the second key from being leaked, and is conducive to improving data security.

[0059] In a specific embodiment, while using S1 to encrypt the first data block to obtain a first encrypted data block, the MD5 hash value of the first data block is also calculated; while using S2 to encrypt the second data block to obtain a second encrypted data block, the MD5 hash value of the second data block is also calculated.

[0060] Specifically, while the first encrypted data block and the second encrypted data block are transmitted to the server through a secure channel, the MD5 hash value of the first data block corresponding to the first encrypted data block and the MD5 hash value of the second data block corresponding to the second encrypted data block are also transmitted to the server through a secure channel.

[0061] Specifically, in response to receiving the first encrypted data block, the server uses the first key to decrypt the first encrypted data block to obtain the first data block and calculates the MD5 hash value of the first data block to perform integrity verification on the first data block. If the calculated MD5 hash value is the same as the MD5 hash value transmitted by the client, it indicates that the verification is successful and the data block is complete; otherwise, it indicates that the verification fails and the data block is incomplete. When the verification fails, the data transmission is terminated and the first key is destroyed.

[0062] Specifically, in response to receiving the second encrypted data block, the server uses the second key to decrypt the second encrypted data block to obtain the second data block and calculates the MD5 hash value of the second data block to perform integrity verification on the second data block. If the calculated MD5 hash value is the same as the MD5 hash value received from the client, it indicates that the verification is successful and the data block is complete; otherwise, it indicates that the verification fails and the data block is incomplete. When the verification fails, the data transmission is terminated and the second key is destroyed.

[0063] Specifically, after the server obtains all the first data blocks and the second data blocks, the first key and the second key are immediately destroyed; this can be understood as immediately destroying the first key and the second key after the data transmission is completed.

[0064] In a specific embodiment, before each data transmission, a new first key is generated using S1 and a new second key is generated using S2. The first key and the second key are updated before each data transmission, which is conducive to improving data security.

[0065] Specifically, before step S1, the following steps are also included:

[0066] S11, get the initial field name list C = {C1, C2, ..., C j ,…,C n}, C j The field name of the j-th field in the target data table. The value of j ranges from 1 to n, and n is the number of fields in the target data table.

[0067] Specifically, n=m.

[0068] S12, if C j If the preset key words are included in C j The preset key words in Cj The corresponding keywords are used to obtain C j Corresponding keyword list D j ={D j1 , D j2 ,…,D je ,…,D jf(j)}, D je C j The corresponding keyword is e, and the value of e is 1 to f(j), and f(j) is C j The number of corresponding keywords, wherein the preset key words are words pre-set by those skilled in the art according to actual needs, and will not be repeated here.

[0069] S13, obtain the preset importance score mapping list E={E1, E2, ..., E g ,…,E h}, E g =(E g1 , E g2 ), E g is the preset importance score group corresponding to the g-th preset key word in E, the value of g ranges from 1 to h, h is the number of preset key words, E g1 is the g-th preset key word, E g2 For E g1 The corresponding preset importance score.

[0070] Specifically, 0<E g2 ≤1, E g2 The larger the E g1 The higher the severity.

[0071] S14, when D je =E g1 When E g2 As D je The corresponding key score F je To obtain D j Corresponding key score list F j ={F j1 , F j2 ,…,F je ,…,F jf(j)}.

[0072] S15, F j1 , F j2 ,…,F je ,…,F jf(j) The maximum value in ZY j , ZY j C j The corresponding importance score.

[0073] Through the above steps, if the field name of the field in the target data table contains preset key words, a keyword list corresponding to the field name is obtained, and the key score corresponding to the keyword is obtained based on the preset importance score corresponding to the preset key word. The higher the preset importance score, the more important the corresponding preset key word, the higher the corresponding key score, the more important the corresponding keyword, and the more important the field name corresponding to the keyword. Therefore, the largest key score in the key scores corresponding to the keyword list corresponding to the field name of the field in the target data table is used as the importance score corresponding to the field name, so that the higher the importance score, the higher the importance of the field name, which can reasonably represent the importance of the field name of the field in the target data table and is conducive to improving the accuracy of obtaining the importance score corresponding to the field name.

[0074] Specifically, after step S15, the following steps are also included:

[0075] S10, if C j If the preset key words are not included in the j Corresponding target query statement list G j ={G j1 , G j2 ,…,G jx ,…,G jp(j)}, G jx C j The corresponding x-th target query statement, x ranges from 1 to p(j), and p(j) is C j The number of corresponding target query statements, C j The corresponding target query statement is used to find C in the historical time period j The query statement for the corresponding field value.

[0076] S20, get G jx The corresponding query field name list includes several query field names. The query field name is the field name corresponding to the field value returned in the query result corresponding to the target query statement.

[0077] Specifically, the historical time period is a time period preset by those skilled in the art according to actual needs, and will not be described in detail here.

[0078] S30, against G j1 , G j2 ,…,G jx ,…,G jp(j) All query field names in C are deduplicated to obtain j Corresponding associated field name list H j ={H j1 , H j2 ,…,H jy ,…,Hjq(j)}, H jy C j The corresponding yth associated field name, y value ranges from 1 to q(j), q(j) is C j The number of corresponding associated field names.

[0079] S40, if H jy Include preset key words and H jy If the corresponding importance score is not less than the preset score, then H jy As C j The corresponding key field name, wherein the preset score is a score less than 1 and greater than 0 pre-set by those skilled in the art according to actual needs, for example: 0.6, 0.75, which will not be repeated here.

[0080] S50, based on p(j), q(j) and C j The number of corresponding key field names U j , get ZY j , ZY j Meet the following conditions:

[0081] ZY j =(W1×p(j) / p max +W2×q(j) / q max +W3×U j / U max ) / (W1+W2+W3), W1 is the preset importance weight corresponding to the target query statement, W2 is the preset importance weight corresponding to the associated field name, W3 is the preset importance weight corresponding to the key field name, p max is the maximum value among p(1), p(2), ..., p(j), ..., p(n), q max is the maximum value among q(1), q(2), ..., q(j), ..., q(n), U max U1, U2, ..., U j ,…,U n The maximum value in .

[0082] Specifically, the larger W1 is, the more important the target query statement is.

[0083] Specifically, the larger W2 is, the more important the associated field name is.

[0084] Specifically, the larger W3 is, the more important the key field name is.

[0085] Optionally, W1=W2=W3=1, wherein when W1=W2=W3, it indicates that the importance of the target query statement, the associated field name, and the key field name are equally high.

[0086] Specifically, in a specific embodiment, the importance score is calculated once before each data transmission, and the latest importance score can be obtained, which is conducive to improving the accuracy of the importance score, thereby helping to improve the accuracy of obtaining the first data block and the second data block.

[0087] Specifically, in a specific embodiment, the importance score is calculated once at fixed time intervals, and there is no need to calculate the importance score frequently, which is conducive to saving resources and can improve the efficiency of obtaining the first data block and the second data block.

[0088] Through the above steps, if the field name of the field in the target data table does not contain the preset key words, the target query statement corresponding to the field name and the query field name list corresponding to the target query statement are obtained, wherein, the more target query statements corresponding to the field name of the field in the target data table, the more times the field value corresponding to the field name is queried, and the more important the field name is. All query field names in the query field name list corresponding to all target query statements corresponding to the field name of the field in the target data table are deduplicated to obtain the associated field name list corresponding to the field name, wherein, the more associated field names in the associated field name list corresponding to the field name, the more field names associated with the field name are, and the more important the field name is. Furthermore, if the associated field name includes the preset key words and the corresponding importance score If it is not less than the preset score, the associated field name will be used as the key field name corresponding to the field name. The more key field names there are, the more associated field names there are that include preset key words and whose corresponding importance scores are not less than the preset scores, and the more important the field name is. Therefore, based on the target query statements corresponding to all field names in the target data table that do not contain preset key words, the number of associated field names, the number of key field names, and the preset importance weights corresponding to the target query statements, the preset importance weights corresponding to the associated field names, and the preset importance weights corresponding to the key field names, the importance scores corresponding to the field names of the fields in the target data table are obtained. This can reasonably express the importance of the field names of the fields in the target data table and comprehensively consider multiple influencing factors to obtain the importance scores, which is conducive to improving the accuracy of obtaining the importance scores.

[0089] An embodiment of the present invention also provides a non-transitory computer-readable storage medium, which can be set in an electronic device to store a computer program related to a method in the method embodiment. The computer program is loaded and executed by the processor to implement the method provided in the above embodiment.

[0090] An embodiment of the present invention further provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method provided in the above embodiment when executing the computer program.

[0091] An embodiment of the present invention further provides a computer program product comprising program code. When the program product is run on an electronic device, the program code is used to enable the electronic device to execute the steps of the method according to various exemplary embodiments of the present invention described above in this specification.

[0092] The present invention provides an end-to-end data security transmission method, device and medium based on field importance. The method can obtain a target field name list, obtain a judgment threshold based on the expected duration determined by the user and the number of target data blocks corresponding to the target field name, determine a first data block and a second data block based on the judgment threshold and the target data block, use a first symmetric encryption algorithm to encrypt the first data block to obtain a first encrypted data block, and use a second symmetric encryption algorithm to encrypt the second data block to obtain a second encrypted data block, wherein the security level of the first symmetric encryption algorithm is higher than that of the second symmetric encryption algorithm, the encryption duration of the first symmetric encryption algorithm is longer than that of the second symmetric encryption algorithm, and the first encrypted data block and the second encrypted data block are encrypted by security. Full channel transmission to the server; it can be seen that the present invention can obtain the target data block, obtain the judgment threshold based on the expected time length determined by the user and the number of target data blocks corresponding to the target field name, dynamically determine the first data block and the second data block, and use different symmetric encryption algorithms to encrypt the first data block and the second data block. While satisfying the expected time length determined by the user as much as possible, the first symmetric encryption algorithm with a higher security level is used to encrypt the target data block corresponding to the target field name with a higher importance score, and the second symmetric encryption algorithm with a lower security level is used to encrypt the target data block corresponding to the target field name with a lower importance score. This can better balance data security and encryption efficiency, which is beneficial to improving user experience.

[0093] Although some specific embodiments of the present invention have been described in detail by way of examples, it should be understood by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present invention. It should also be understood by those skilled in the art that various modifications may be made to the embodiments without departing from the scope and spirit of the present invention.

Claims

1. A method for secure end-to-end data transmission based on field importance, characterized in that: The method is applied to a client and comprises the following steps: S1. Get the target field name list A = {A1, A2, ..., A i ,…,A m }, A i is the i-th target field name, i ranges from 1 to m, m is the number of target field names, and the target field name is the field name in the target data table; A i The corresponding importance score is not less than A i+1 The corresponding importance score; S2, based on A i The number of corresponding target data blocks B i and the expected duration T determined by the user, and obtain the judgment threshold a, where A i The corresponding target data block is A according to the preset data volume i The data blocks obtained by dividing all the corresponding field values ​​are as follows: a×t1+((∑ m i=1 B i )-a)×t2=TT 0 , t1 is the time required to encrypt data of a preset data size using the first symmetric encryption algorithm S1, t2 is the time required to encrypt data of a preset data size using the second symmetric encryption algorithm S2, T 0 The data transmission time required to transmit all target data blocks to the server. The security level of S1 is higher than that of S2; t1>t2; T>T 0 ; S3. If B1+B2+…+B i-1 <a and B1+B2+…+B i ≥a, then A1, A2, ..., A i The corresponding target data block is taken as the first data block, and A i+1 , A i+2 ,…,A m The corresponding target data block is used as the second data block; S4, encrypting the first data block using S1 to obtain a first encrypted data block, and encrypting the second data block using S2 to obtain a second encrypted data block; S5. Transmit the first encrypted data block and the second encrypted data block to the server through a secure channel.

2. The end-to-end data security transmission method based on field importance according to claim 1 is characterized in that: T 0 <T 1 ≤T≤T 2 , T 1 is the minimum data processing time, T 2 is the maximum data processing time, T 1 and T 2 Meet the following conditions respectively: T 1 =(∑ m i=1 B i )×t2+T 0 ;T 2 =(∑ m i=1 B i )×t1+T 0 。 3. The end-to-end data security transmission method based on field importance according to claim 1 is characterized in that: Before step S1, the following steps are also included: S11, get the initial field name list C = {C1, C2, ..., C j ,…,C n }, C j is the name of the jth field in the target data table. The value of j ranges from 1 to n, where n is the number of fields in the target data table. S12, if C j If the preset key words are included in C j The preset key words in C j The corresponding keywords are used to obtain C j Corresponding keyword list D j ={D j1 , D j2 ,…,D je ,…,D jf(j) }, D je C j The corresponding keyword is e, and the value of e is 1 to f(j), and f(j) is C j The number of corresponding keywords; S13, obtain the preset importance score mapping list E={E1, E2, ..., E g ,…,E h }, E g =(E g1 , E g2 ), E g is the preset importance score group corresponding to the g-th preset key word in E, the value of g ranges from 1 to h, h is the number of preset key words, E g1 is the g-th preset key word, E g2 For E g1 The corresponding preset importance score; S14, when D je =E g1 When E g2 As D je The corresponding key score F je To obtain D j Corresponding key score list F j ={F j1 , F j2 ,…,F je ,…,F jf(j) }; S15, F j1 , F j2 ,…,F je ,…,F jf(j) The maximum value in ZY j , ZY j C j The corresponding importance score.

4. The end-to-end data security transmission method based on field importance according to claim 3 is characterized in that: After step S15, the following steps are also included: S10, if C j If the preset key words are not included in the j Corresponding target query statement list G j ={G j1 , G j2 ,…,G jx ,…,G jp(j) }, G jx C j The corresponding x-th target query statement, x ranges from 1 to p(j), and p(j) is C j The number of corresponding target query statements, C j The corresponding target query statement is used to find C in the historical time period j Query statement for the corresponding field value; S20, get G jx The corresponding query field name list includes several query field names. The query field name is the field name corresponding to the field value returned in the query result corresponding to the target query statement; S30, against G j1 , G j2 ,…,G jx ,…,G jp(j) All query field names in C are deduplicated to obtain j Corresponding associated field name list H j ={H j1 , H j2 ,…,H jy ,…,H jq(j) }, H jy C j The corresponding yth associated field name, y value ranges from 1 to q(j), q(j) is C j The number of corresponding associated field names; S40, if H jy Include preset key words and H jy If the corresponding importance score is not less than the preset score, then H jy As C j The corresponding key field name; S50, based on p(j), q(j) and C j The number of corresponding key field names U j , get ZY j , ZY j Meet the following conditions: ZY j =(W1×p(j) / p max +W2×q(j) / q max +W3×U j / U max ) / (W1+W2+W3), W1 is the preset importance weight corresponding to the target query statement, W2 is the preset importance weight corresponding to the associated field name, W3 is the preset importance weight corresponding to the key field name, p max is the maximum value among p(1), p(2), ..., p(j), ..., p(n), q max is the maximum value among q(1), q(2), ..., q(j), ..., q(n), U max U1, U2, ..., U j ,…,U n The maximum value in .

5. The end-to-end data security transmission method based on field importance according to claim 3 is characterized in that: n=m.

6. The end-to-end data security transmission method based on field importance according to claim 2 is characterized in that: Before step S2, the following steps are also included: Show the user the preset data processing time interval [T 1 , T 2 ].

7. The end-to-end data security transmission method based on field importance according to claim 6 is characterized in that: When displaying the preset data processing time interval [T 1 , T 2 ]After that, the following steps are also included: Receive user data processing time interval according to preset [T 1 , T 2 ]Determined T.

8. The end-to-end data security transmission method based on field importance according to claim 3 is characterized in that: 0＜E g2 ≤1。 9. A non-transitory computer-readable storage medium, characterized in that The storage medium stores a computer program, which is loaded and executed by a processor to implement the end-to-end data security transmission method based on field importance as described in any one of claims 1 to 8.

10. An electronic device comprising: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the method for secure end-to-end data transmission based on field importance as described in any one of claims 1 to 8 is implemented.

Images