Homomorphic encryption method and system for realizing real-time message flow protection

Abstract

The invention belongs to the field of homomorphic encryption, relates to a data analysis technology, and is used for solving the problem that an optimal encryption algorithm cannot be matched according to a data type in the prior art, in particular to a homomorphic encryption method and system for realizing real-time message flow protection. Comprising a hierarchical processing module, an encryption transmission module, a basic processing module, an efficiency optimization module, a basic output module, a high-order processing module, a noise suppression module and a high-order output module. The hierarchical processing module is used for performing hierarchical processing on the encrypted data packet: extracting numeric data in the encrypted data packet and marking the numeric data as basic data, and extracting multimedia data in the encrypted data packet and marking the multimedia data as high-order data; according to the method, the basic data and the high-order data in the encrypted data packet can be extracted and marked according to the data type and the complexity of the encryption processing algorithm, so that a basic layer uses lightweight addition homomorphic processing high-frequency simple operation and a high-order layer uses fully homomorphic supporting complex logic.

Description

Technical Field

[0001] The present invention belongs to the field of homomorphic encryption and relates to data analysis technology, specifically a homomorphic encryption method and system for realizing real-time message stream protection. Background Art

[0002] Homomorphic encryption is a special encryption technology that allows specific calculations to be performed directly on encrypted data without first decrypting the data. After the calculation is completed, the result is decrypted and the result obtained is consistent with the result of the same calculation on the plaintext data. This feature allows calculations to be performed on the data even when it is encrypted, thereby protecting the privacy of the data.

[0003] The invention patent with publication number CN103269267A discloses a fully homomorphic encryption device, which can encrypt and decrypt data of various numerical types and perform various arithmetic operations, relational comparison operations, logical operations and other functions in a secret state, thereby ensuring the information security of the data owner; however, the encryption device lacks a dynamic algorithm switching mechanism, cannot match the most optimized encryption algorithm according to the data type, and cannot optimize the encryption efficiency and noise suppression during the encryption process.

[0004] In response to the above technical problems, this application proposes a solution. Summary of the Invention

[0005] The purpose of the present invention is to provide a homomorphic encryption method and system for protecting real-time message streams, which is used to solve the problem that the existing technology cannot match the optimized encryption algorithm according to the data type; The technical problem to be solved by the present invention is: how to provide a homomorphic encryption method and system that can realize real-time message stream protection by matching the optimized encryption algorithm according to the data type.

[0006] The purpose of the present invention can be achieved through the following technical solutions: A homomorphic encryption system for real-time message stream protection includes a layered processing module, an encryption transmission module, a basic processing module, an efficiency optimization module, a basic output module, a high-order processing module, a noise suppression module, and a high-order output module; The hierarchical processing module is used to perform hierarchical processing on the encrypted data packet: extract the numerical data in the encrypted data packet and mark it as basic data, extract the multimedia data in the encrypted data packet and mark it as high-order data, obtain the memory values of the basic data and the high-order data and mark them as basic processing values and high-order processing values respectively, form a basic processing data group with the basic data and the basic processing values, and form a high-order processing data group with the high-order data and the high-order processing values, and send the basic processing data group and the high-order processing data group to the basic processing module and the high-order processing module respectively; The basic processing module is used to encrypt the basic data to obtain a basic encrypted data packet; The efficiency optimization module is used to optimize and analyze the encryption efficiency of basic data; The high-order processing module is used to encrypt the high-order data and obtain a high-order encrypted data packet; The noise suppression module is used to perform noise suppression analysis on the encryption process of high-order data; The encryption transmission module is used to encrypt and transmit the encrypted basic encryption data packet and the high-order encryption data packet.

[0007] Furthermore, the specific process of the basic processing module encrypting the basic data includes: using an asymmetric encryption algorithm to encrypt the basic data to obtain a basic encrypted data packet, sending the basic encrypted data packet to the basic output module, and after the basic output module receives the basic encrypted data packet, sending the basic encrypted data packet to the encryption transmission module, after the basic encrypted data packet is generated, marking the ratio of the basic processing value to the encryption processing time of the basic data as the efficiency value of the basic data; and sending the efficiency value of the basic data to the efficiency optimization module.

[0008] Furthermore, the specific process of the efficiency optimization module optimizing and analyzing the encryption efficiency of the basic data includes: generating an optimization cycle, forming an optimization set by all efficiency values of the basic data encryption within the optimization cycle, optimizing the optimization set to obtain the efficiency critical value, and sending the efficiency critical value to the basic processing module; when the basic processing module subsequently performs encryption processing on the basic data, if the basic processing value of the basic encrypted data packet is less than the efficiency critical value, an asymmetric encryption algorithm is used to encrypt the basic data; if the basic processing value of the basic encrypted data packet is greater than or equal to the efficiency critical value, a symmetric encryption algorithm is used to encrypt the basic data.

[0009] Furthermore, the specific process of optimizing the optimization set includes: performing variance calculation on the optimization set to obtain an efficiency stability value, and comparing the efficiency stability value with a preset efficiency stability threshold: if the efficiency stability value is greater than or equal to the efficiency stability threshold, the maximum element and the minimum element in the optimization set are eliminated, and then the efficiency stability value is recalculated, and so on, until the efficiency stability value is less than the efficiency stability threshold; if the efficiency stability value is less than the efficiency stability threshold, the basic processing value of the basic data corresponding to the minimum value of the retained elements in the optimization set is marked as the efficiency critical value.

[0010] Furthermore, the specific process of the high-order processing module encrypting the high-order data includes: using a fully homomorphic encryption algorithm to encrypt the high-order data to obtain a high-order encrypted data packet, sending the high-order encrypted data packet to the high-order output module, and the high-order output module sends the high-order encrypted data packet to the encryption transmission module after receiving the high-order encrypted data packet; in the process of encryption using the fully homomorphic encryption algorithm, the amount of noise in the calculation process is obtained through the noise counter embedded in the FPGA / ASIC chip and marked as the noise capture value, and a safe noise threshold is preset. If the noise capture value is detected to reach the safe noise threshold, the suppression operation is automatically triggered; at the same time, a noise suppression signal is generated and the noise suppression signal is sent to the noise suppression module.

[0011] Furthermore, suppression operations include: resetting ciphertext noise, key rotation: generating new keys to re-encrypt data, and interrupting the noise transmission chain.

[0012] Furthermore, the specific process of the noise suppression module performing noise suppression analysis on the encryption process of high-order data includes: generating a suppression cycle, marking the minimum value of the high-order processing value corresponding to the high-order encrypted data packet when the noise suppression signal is received within the suppression cycle as the suppression critical value, and sending the suppression critical value to the high-order processing module. When the high-order data is subsequently encrypted, if the high-order processing value is less than the suppression critical value, the fully homomorphic encryption algorithm is used to encrypt the high-order data normally; if the high-order processing value is greater than or equal to the suppression critical value, the data stream is divided into independent encryption blocks, and the noise of each block is calculated separately to avoid global accumulation.

[0013] A homomorphic encryption method for protecting real-time message streams includes the following steps: Step 1: Perform layered processing on the encrypted data packet: extract the numerical data in the encrypted data packet and mark it as basic data, and extract the multimedia data in the encrypted data packet and mark it as high-level data; Step 2: Encrypt the basic data: Use an asymmetric encryption algorithm to encrypt the basic data to obtain a basic encrypted data packet, and send the basic encrypted data packet to the basic output module; Step 3: Optimize and analyze the encryption efficiency of the basic data: Generate an optimization cycle, and form an optimization set with all the efficiency values of the basic data encryption within the optimization cycle. Optimize the optimization set to obtain the efficiency critical value; Step 4: Encrypt the high-order data: Use a fully homomorphic encryption algorithm to encrypt the high-order data to obtain a high-order encrypted data packet, and send the high-order encrypted data packet to the high-order output module; Step 5: Perform noise suppression analysis on the encryption process of high-order data: Generate a suppression period, and mark the minimum value of the high-order processing value corresponding to the high-order encrypted data packet when the noise suppression signal is received within the suppression period as the suppression critical value.

[0014] The present invention has the following beneficial effects: 1. The layered processing module can process encrypted data packets in layers. The basic and high-level data in the encrypted data packets are extracted and marked according to the data type and the complexity of the encryption processing algorithm. This enables the base layer to use lightweight additive homomorphism to process high-frequency simple operations (such as traffic statistics) and the high-level layer to use full homomorphism to support complex logic (such as real-time semantic analysis), thereby optimizing the allocation of computing resources. 2. The efficiency optimization module can optimize and analyze the encryption efficiency of basic data. During the optimization cycle, the efficiency values of all basic data encryption processes are statistically analyzed and optimized to obtain the efficiency critical value. The efficiency critical value is then used to screen and match the subsequent encryption algorithms of basic data to ensure the encryption processing efficiency of basic data. 3. The noise suppression module can be used to perform noise suppression analysis on the encryption process of high-order data. The noise capture value and the trigger status of the noise suppression operation in the high-order encryption process are analyzed to obtain the suppression critical value. Based on the suppression critical value, the necessity of independent encryption of high-order data is analyzed to avoid global noise accumulation. At the same time, inter-block dependency verification is used to ensure that block processing does not affect the overall operation logic. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0016] Figure 1 is a block diagram of the overall system of the present invention; Figure 2 This is a system block diagram of Embodiment 1 of the present invention; Figure 3 This is a system block diagram of Embodiment 2 of the present invention; Figure 4 This is a flow chart of the method of embodiment 3 of the present invention. DETAILED DESCRIPTION

[0017] The technical solutions of the present invention will be clearly and completely described below with reference to the embodiments. Obviously, the embodiments described are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making any creative efforts shall fall within the scope of protection of the present invention.

[0018] like Figure 1As shown, a homomorphic encryption system for realizing real-time message stream protection includes a hierarchical processing module, a basic subsystem, a high-order subsystem and an encryption transmission module. The basic subsystem includes a basic processing module, an efficiency optimization module and a basic output module. The high-order subsystem includes a high-order processing module, a noise suppression module and a high-order output module.

[0019] The layered processing module is used to perform layered processing on encrypted data packets: extracting numerical data such as counting information and statistical data from the encrypted data packets and marking them as basic data; extracting multimedia data such as text data, voice data, and video data from the encrypted data packets and marking them as high-order data; obtaining the memory values of the basic data and high-order data and marking them as basic processing values and high-order processing values, respectively; forming a basic processing data group from the basic data and basic processing values, and forming a high-order processing data group from the high-order data and high-order processing values; sending the basic processing data group and the high-order processing data group to the basic subsystem and the high-order subsystem, respectively; the basic subsystem and the high-order subsystem encrypt the basic data and the high-order data, respectively; the encryption transmission module is used to encrypt and transmit the encrypted basic encrypted data packets and the high-order encrypted data packets; extracting and marking the basic data and high-order data in the encrypted data packets based on the data type and the complexity of the encryption processing algorithm, thereby achieving the use of lightweight additive homomorphism to process high-frequency simple operations (such as traffic statistics) at the basic layer and the full homomorphism to support complex logic (such as real-time semantic analysis) at the high layer, thereby optimizing the allocation of computing resources.

[0020] Example 1: Figure 2 As shown, the basic processing module is communicatively connected with the efficiency optimization module and the basic output module.

[0021] The basic processing module is used to encrypt the basic data: the basic data is encrypted using an asymmetric encryption algorithm to obtain a basic encrypted data packet, and the basic encrypted data packet is sent to the basic output module. After receiving the basic encrypted data packet, the basic output module sends the basic encrypted data packet to the encryption transmission module. After the basic encrypted data packet is generated, the ratio of the basic processing value to the encryption processing time of the basic data is marked as the efficiency value of the basic data; the efficiency value of the basic data is sent to the efficiency optimization module.

[0022] The efficiency optimization module is used to optimize and analyze the encryption efficiency of basic data: generate an optimization cycle, and form an optimization set by all the efficiency values of basic data encryption within the optimization cycle, and optimize the optimization set: calculate the variance of the optimization set to obtain the efficiency stability value, and compare the efficiency stability value with the preset efficiency stability threshold: if the efficiency stability value is greater than or equal to the efficiency stability threshold, the maximum element and the minimum element in the optimization set are eliminated, and then the efficiency stability value is recalculated, and so on, until the efficiency stability value is less than the efficiency stability threshold; if the efficiency stability value is less than the efficiency stability threshold, the minimum value of the element retained in the optimization set is replaced by the basic data corresponding to the basic data. The basic processing value is marked as the efficiency critical value, and the efficiency critical value is sent to the basic processing module. When the basic processing module subsequently performs encryption processing on the basic data, if the basic processing value of the basic encrypted data packet is less than the efficiency critical value, the asymmetric encryption algorithm is used to encrypt the basic data; if the basic processing value of the basic encrypted data packet is greater than or equal to the efficiency critical value, the symmetric encryption algorithm is used to encrypt the basic data; within the optimization cycle, the efficiency values of all basic data encryption processes are statistically analyzed and optimized to obtain the efficiency critical value, and then the subsequent encryption algorithms of the basic data are screened and matched according to the efficiency critical value to ensure the encryption processing efficiency of the basic data.

[0023] Example 2: Figure 3 As shown, the high-order processing module is communicatively connected to the noise suppression module and the high-order output module.

[0024] The high-order processing module is used to encrypt high-order data: the high-order data is encrypted using a fully homomorphic encryption algorithm to obtain a high-order encrypted data packet, and the high-order encrypted data packet is sent to the high-order output module. After receiving the high-order encrypted data packet, the high-order output module sends the high-order encrypted data packet to the encryption transmission module; in the process of encryption using the fully homomorphic encryption algorithm, the amount of noise in the calculation process is obtained through the noise counter embedded in the FPGA / ASIC chip and marked as the noise capture value, and a preset security noise threshold (determined by the key parameters) is preset. When the noise capture value reaches the security noise threshold, the following operations are automatically triggered: Bootstrapping: reset the ciphertext noise, but it requires higher computing power; key rotation: generate a new key to re-encrypt the data, interrupting the noise transmission chain; at the same time, generate a noise suppression signal and send the noise suppression signal to the noise suppression module.

[0025] The noise suppression module is used to perform noise suppression analysis on the encryption process of high-order data: generate a suppression cycle, mark the minimum value of the high-order processing value corresponding to the high-order encrypted data packet when the noise suppression signal is received within the suppression cycle as the suppression critical value, and send the suppression critical value to the high-order processing module. When the high-order data is subsequently encrypted, if the high-order processing value is less than the suppression critical value, the high-order data encryption is performed normally using the fully homomorphic encryption algorithm; if the high-order processing value is greater than or equal to the suppression critical value, the data stream is divided into independent encryption blocks (such as adding a timestamp and session ID to each block), and the noise of each block is calculated separately to avoid global accumulation; perform noise suppression analysis on the encryption process of high-order data, analyze the noise capture value and the triggering state of the noise suppression operation in the high-order encryption processing process to obtain the suppression critical value, and analyze the necessity of independent encryption of high-order data based on the suppression critical value to avoid global accumulation of noise while ensuring that block processing does not affect the overall operation logic through inter-block dependency verification.

[0026] Example 3: Figure 4 As shown, a homomorphic encryption method for implementing real-time message stream protection includes the following steps: Step 1: Perform layered processing on the encrypted data packet: extract the numerical data in the encrypted data packet and mark it as basic data, and extract the multimedia data in the encrypted data packet and mark it as high-level data; Step 2: Encrypt the basic data: Use an asymmetric encryption algorithm to encrypt the basic data to obtain a basic encrypted data packet, and send the basic encrypted data packet to the basic output module; Step 3: Optimize and analyze the encryption efficiency of the basic data: Generate an optimization cycle, and form an optimization set with all the efficiency values of the basic data encryption within the optimization cycle. Optimize the optimization set to obtain the efficiency critical value; Step 4: Encrypt the high-order data: Use a fully homomorphic encryption algorithm to encrypt the high-order data to obtain a high-order encrypted data packet, and send the high-order encrypted data packet to the high-order output module; Step 5: Perform noise suppression analysis on the encryption process of high-order data: Generate a suppression period, and mark the minimum value of the high-order processing value corresponding to the high-order encrypted data packet when the noise suppression signal is received within the suppression period as the suppression critical value.

[0027] It should be noted that steps 2 and 3, and steps 4 and 5 are performed simultaneously without any difference in sequence priority.

[0028] A homomorphic encryption method and system for implementing real-time message stream protection. During operation, numerical data in an encrypted data packet is extracted and marked as basic data, and multimedia data in the encrypted data packet is extracted and marked as high-order data; an asymmetric encryption algorithm is used to encrypt the basic data to obtain a basic encrypted data packet, and the basic encrypted data packet is sent to a basic output module; an optimization cycle is generated, an optimization set is formed by all efficiency values of basic data encryption within the optimization cycle, and the optimization set is optimized to obtain an efficiency critical value; a fully homomorphic encryption algorithm is used to encrypt high-order data to obtain a high-order encrypted data packet, and the high-order encrypted data packet is sent to a high-order output module; a suppression cycle is generated, and the minimum value of the high-order processing value corresponding to the high-order encrypted data packet when a noise suppression signal is received within the suppression cycle is marked as the suppression critical value.

[0029] The above content is merely an example and explanation of the structure of the present invention. Those skilled in the art may make various modifications or additions to the described specific embodiments or replace them in a similar manner. As long as they do not deviate from the structure of the invention or exceed the scope defined by the claims, they should all fall within the scope of protection of the present invention.

[0030] Throughout this specification, references to terms such as "one embodiment," "example," or "specific example" indicate that the specific features, structures, materials, or characteristics described in conjunction with that embodiment or example are included in at least one embodiment or example of the present invention. In this specification, schematic representations of these terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

[0031] The preferred embodiments of the present invention disclosed above are intended only to help illustrate the present invention. These preferred embodiments do not exhaustively describe all details, nor do they limit the present invention to specific embodiments. Obviously, many modifications and variations are possible based on the contents of this specification. These embodiments are selected and described in detail in this specification to better explain the principles and practical applications of the present invention, thereby enabling those skilled in the art to better understand and utilize the present invention. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. A homomorphic encryption system for protecting real-time message streams, characterized in that: It includes layered processing module, encryption transmission module, basic processing module, efficiency optimization module, basic output module, high-level processing module, noise suppression module and high-level output module; The hierarchical processing module is used to perform hierarchical processing on the encrypted data packet: extract the numerical data in the encrypted data packet and mark it as basic data, extract the multimedia data in the encrypted data packet and mark it as high-order data, obtain the memory values of the basic data and the high-order data and mark them as basic processing values and high-order processing values respectively, form a basic processing data group with the basic data and the basic processing values, and form a high-order processing data group with the high-order data and the high-order processing values, and send the basic processing data group and the high-order processing data group to the basic processing module and the high-order processing module respectively; The basic processing module is used to encrypt the basic data to obtain a basic encrypted data packet; The efficiency optimization module is used to optimize and analyze the encryption efficiency of basic data; The high-order processing module is used to encrypt the high-order data and obtain a high-order encrypted data packet; The noise suppression module is used to perform noise suppression analysis on the encryption process of high-order data; The encryption transmission module is used to encrypt and transmit the encrypted basic encryption data packet and the high-order encryption data packet.

2. A homomorphic encryption system for implementing real-time message stream protection according to claim 1, characterized in that: The specific process of the basic processing module encrypting the basic data includes: using an asymmetric encryption algorithm to encrypt the basic data to obtain a basic encrypted data packet, sending the basic encrypted data packet to the basic output module, and after the basic output module receives the basic encrypted data packet, sending the basic encrypted data packet to the encryption transmission module. After the basic encrypted data packet is generated, the ratio of the basic processing value to the encryption processing time of the basic data is marked as the efficiency value of the basic data; and the efficiency value of the basic data is sent to the efficiency optimization module.

3. A homomorphic encryption system for implementing real-time message stream protection according to claim 2, characterized in that: The specific process of the efficiency optimization module optimizing and analyzing the encryption efficiency of the basic data includes: generating an optimization cycle, forming an optimization set by all efficiency values of the basic data encryption within the optimization cycle, optimizing the optimization set to obtain the efficiency critical value, and sending the efficiency critical value to the basic processing module. When the basic processing module subsequently performs encryption processing on the basic data, if the basic processing value of the basic encrypted data packet is less than the efficiency critical value, an asymmetric encryption algorithm is used to encrypt the basic data; if the basic processing value of the basic encrypted data packet is greater than or equal to the efficiency critical value, a symmetric encryption algorithm is used to encrypt the basic data.

4. A homomorphic encryption system for implementing real-time message stream protection according to claim 3, characterized in that: The specific process of optimizing the optimization set includes: performing variance calculation on the optimization set to obtain an efficiency stability value, and comparing the efficiency stability value with a preset efficiency stability threshold: if the efficiency stability value is greater than or equal to the efficiency stability threshold, the maximum element and the minimum element in the optimization set are eliminated, and then the efficiency stability value is recalculated, and so on, until the efficiency stability value is less than the efficiency stability threshold; if the efficiency stability value is less than the efficiency stability threshold, the basic processing value of the basic data corresponding to the minimum value of the retained elements in the optimization set is marked as the efficiency critical value.

5. A homomorphic encryption system for implementing real-time message stream protection according to claim 4, characterized in that: The specific process of the high-order processing module encrypting the high-order data includes: using a fully homomorphic encryption algorithm to encrypt the high-order data to obtain a high-order encrypted data packet, sending the high-order encrypted data packet to the high-order output module, and after the high-order output module receives the high-order encrypted data packet, sending the high-order encrypted data packet to the encryption transmission module; in the process of encryption using the fully homomorphic encryption algorithm, the noise amount in the calculation process is obtained through the noise counter embedded in the FPGA / ASIC chip and marked as the noise capture value, and a safe noise threshold is preset. If the noise capture value is detected to reach the safe noise threshold, the suppression operation is automatically triggered; at the same time, a noise suppression signal is generated and sent to the noise suppression module.

6. A homomorphic encryption system for implementing real-time message stream protection according to claim 5, characterized in that: Suppression operations include: resetting ciphertext noise, key rotation: generating new keys to re-encrypt data, and interrupting the noise transmission chain.

7. A homomorphic encryption system for implementing real-time message stream protection according to claim 6, characterized in that: The specific process of the noise suppression module performing noise suppression analysis on the encryption process of high-order data includes: generating a suppression cycle, marking the minimum value of the high-order processing value corresponding to the high-order encrypted data packet when the noise suppression signal is received within the suppression cycle as the suppression critical value, and sending the suppression critical value to the high-order processing module. When the high-order data is subsequently encrypted, if the high-order processing value is less than the suppression critical value, the fully homomorphic encryption algorithm is used to encrypt the high-order data normally; if the high-order processing value is greater than or equal to the suppression critical value, the data stream is divided into independent encryption blocks, and the noise of each block is calculated separately to avoid global accumulation.

8. A homomorphic encryption method for protecting real-time message streams, characterized in that: The following steps are involved: Step 1: Perform layered processing on the encrypted data packet: extract the numerical data in the encrypted data packet and mark it as basic data, and extract the multimedia data in the encrypted data packet and mark it as high-level data; Step 2: Encrypt the basic data: Use an asymmetric encryption algorithm to encrypt the basic data to obtain a basic encrypted data packet, and send the basic encrypted data packet to the basic output module; Step 3: Optimize and analyze the encryption efficiency of the basic data: Generate an optimization cycle, and form an optimization set with all the efficiency values of the basic data encryption within the optimization cycle. Optimize the optimization set to obtain the efficiency critical value; Step 4: Encrypt the high-order data: Use a fully homomorphic encryption algorithm to encrypt the high-order data to obtain a high-order encrypted data packet, and send the high-order encrypted data packet to the high-order output module; Step 5: Perform noise suppression analysis on the encryption process of high-order data: Generate a suppression period, and mark the minimum value of the high-order processing value corresponding to the high-order encrypted data packet when the noise suppression signal is received within the suppression period as the suppression critical value.

Images