A method, device, medium and product for evaluating encryption flexibility
Patent Information
- Application Number
- CN202611164137.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-08-03
- Publication Date
- 2026-10-30
AI Technical Summary
然而现有技术在加密灵活度评估方面存在评估维度单一、缺乏统一标准等缺点，导致无法准确、全面地评估系统的加密灵活度
本申请提供了一种加密灵活度评估方法、设备、介质及产品，通过构建加密灵活度评估体系，涵盖加密算法适应性、密钥管理灵活度、协议与环境兼容性、动态调整能力、接口可扩展以及加密功能虚拟化维度，能够全面且细致地剖析信息系统的加密灵活度。通过从信息系统中获取与加密灵活度评估体系对应的数据，基于此确定信息系统的灵活度综合得分，以此评估信息系统的加密灵活度等级，全面精准评估信息系统加密灵活度的现状，有助于企业快速判断自身信息系统的密码应用灵活度所处的水平，进而有针对性地制定改进策略。
Smart Images
Figure CN123020023A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of information security technology, and in particular to a method, device, medium and product for evaluating encryption flexibility. Background Technology
[0002] In today's rapidly evolving information technology landscape, computing power is growing exponentially, cryptographic research is deepening, and cryptanalysis techniques are becoming increasingly sophisticated. These changes have subjected encryption algorithms to unprecedented challenges. Among these, the rise of quantum computers poses a significant threat to traditional public-key cryptography. To effectively counter this threat, the industry urgently needs to migrate to quantum-resistant cryptography. However, this process is costly, time-consuming, and faces interoperability issues, potentially disrupting business operations. Against this backdrop, the concept of cryptographic flexibility has emerged.
[0003] Encryption flexibility refers to the ability of information systems containing cryptographic applications to flexibly replace and adjust the encryption algorithms they use without interrupting operation, thereby enhancing the overall system's resilience and better responding to ever-changing security threats. However, there is a significant lack in current encryption flexibility assessment models. Most existing assessment techniques and methods known to the inventors employ a single dimension, making it difficult to comprehensively consider the dynamic performance of encryption flexibility in complex business scenarios. For example, some assessments only focus on the theoretical feasibility of algorithm switching, neglecting crucial factors such as the time cost during the actual switching process, the immediate impact on system performance, and the long-term stability of the system after the switch. This one-sided assessment approach leads to a severe disconnect between assessment results and actual application needs, failing to provide a reliable basis for the optimization and application of encryption technologies.
[0004] Encryption flexibility assessment aims to comprehensively and systematically measure an information system's adaptability to a constantly changing encryption environment. However, existing technologies for encryption flexibility assessment suffer from drawbacks such as a single assessment dimension and a lack of unified standards, making it impossible to accurately and comprehensively evaluate the encryption flexibility of a system. Summary of the Invention
[0005] The purpose of this application is to provide a method, device, medium, and product for evaluating encryption flexibility. To achieve the above objectives, this application provides the following solution: Firstly, this application provides a method for evaluating cryptographic flexibility, including: Construct a cryptographic flexibility evaluation system; the cryptographic flexibility evaluation system includes dimensions of cryptographic algorithm adaptability, key management flexibility, protocol and environment compatibility, dynamic adjustment capability, interface scalability, and cryptographic function virtualization; each dimension in the cryptographic flexibility evaluation system includes multiple quantitative indicators; Acquire data from the information system that corresponds to the encryption flexibility assessment framework, and use this data as information system data; the information system refers to a system that includes cryptographic applications. A comprehensive score for the flexibility of the information system is obtained based on the data from the information system. The encryption flexibility level of the information system is evaluated based on the comprehensive flexibility score.
[0006] Optionally, a cryptographic flexibility assessment system may be constructed, including: In the dimension of encryption algorithm adaptability, quantitative indicators are set, including: the number of supported algorithm types, algorithm switching time, and algorithm customization capability; In the dimension of key management flexibility, quantitative indicators are set, including: configurable range of key length, adjustable key update cycle and key storage compatibility. In the dimension of protocol and environment compatibility, quantitative indicators are set, including: the number of compatible protocols, platform adaptability, and network environment adaptability. In the dynamic adjustment capability dimension, quantitative indicators are set, including: strategy response time, automatic optimization success rate, and resource elasticity coefficient. In the dimension of interface extensibility, set quantitative indicators, including: standardized interface coverage, dynamic loading response time and API configurability; In the virtualization dimension of encryption functions, quantitative indicators are set, including: policy loading latency, functional module reconfigurability rate, and virtualization function coverage.
[0007] Optionally, information system data can be obtained from the information interface.
[0008] Optionally, a comprehensive flexibility score for the information system is obtained based on the information system data, including: Based on the information system data, flexibility scores for each dimension in the encryption flexibility evaluation system are obtained; The overall flexibility score of the information system is obtained based on the flexibility scores of each dimension.
[0009] Optionally, flexibility scores for each dimension of the encryption flexibility evaluation system are obtained based on the information system data, including: The information system data is normalized to obtain normalized data; Based on the normalized data, flexibility scores for each dimension in the encryption flexibility evaluation system are obtained.
[0010] Optionally, the formula is used. Based on the normalized data, flexibility scores for each dimension of the encryption flexibility evaluation system are obtained; where, Indicates the first Flexibility scores across multiple dimensions Indicates the first The number of quantitative indicators in each dimension Indicates the first In the dimension of the first Normalized data for each quantitative indicator.
[0011] Optionally, the formula is used. The overall flexibility score of the information system is obtained based on the flexibility scores of each dimension; where, The overall score represents the flexibility of the information system. Indicates the first Flexibility scores across multiple dimensions Indicates the first Weights for each dimension.
[0012] In a second aspect, this application provides a computer device, including: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the encryption flexibility evaluation method described in any one of the above.
[0013] Thirdly, this application provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the encryption flexibility evaluation method described in any one of the above.
[0014] Fourthly, this application provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the encryption flexibility evaluation method described above.
[0015] According to the specific embodiments provided in this application, this application has the following technical effects: This application provides a method, device, medium, and product for assessing encryption flexibility. By constructing an encryption flexibility assessment system covering dimensions such as encryption algorithm adaptability, key management flexibility, protocol and environment compatibility, dynamic adjustment capability, interface scalability, and encryption function virtualization, it can comprehensively and meticulously analyze the encryption flexibility of information systems. By obtaining data corresponding to the encryption flexibility assessment system from the information system, a comprehensive flexibility score is determined based on this score, thereby assessing the encryption flexibility level of the information system. This comprehensive and accurate assessment of the current state of encryption flexibility helps enterprises quickly determine the level of cryptographic application flexibility in their information systems and subsequently develop targeted improvement strategies. Attached Figure Description
[0016] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0017] Figure 1 This is a schematic diagram of a method for evaluating encryption flexibility in one embodiment of this application; Figure 2 A flowchart for evaluating the encryption flexibility of an information system, provided as an embodiment of this application; Figure 3 This is a schematic diagram of the structure of a computer device provided in an embodiment of this application. Detailed Implementation
[0018] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0019] The purpose of this application is to provide a method for evaluating cryptographic flexibility, addressing the shortcomings of existing technologies. This application constructs an evaluation system encompassing six core dimensions, using quantitative indicators to assess the flexibility of systems (i.e., information systems) containing cryptographic applications. The system covers data collection, indicator normalization, dimensional score calculation, comprehensive score calculation, and result interpretation. This is significant for accurately analyzing the current state of cryptographic flexibility and optimizing the application architecture of cryptographic technologies. It provides enterprises with a clear evaluation framework, enabling them to accurately determine their current stage in cryptographic flexibility and subsequently develop targeted improvement strategies.
[0020] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments.
[0021] In one exemplary embodiment, such as Figure 1 As shown, a method for evaluating cryptographic flexibility is provided, including: Step 1: Construct a cryptographic flexibility assessment system. This system includes dimensions such as cryptographic algorithm adaptability, key management flexibility, protocol and environment compatibility, dynamic adjustment capability, interface scalability, and cryptographic function virtualization. Each dimension comprises multiple quantitative indicators.
[0022] Step 2: Obtain the data corresponding to the encryption flexibility assessment framework from the information system, as the information system data. The information system refers to a system that includes cryptographic applications.
[0023] Step 3: Obtain the comprehensive flexibility score of the information system based on the information system data. Evaluate the encryption flexibility level of the information system based on the comprehensive flexibility score.
[0024] As an optional implementation method, in order to accurately analyze the encryption flexibility of information systems, an encryption flexibility evaluation system is constructed, including: (1) setting quantitative indicators in the encryption algorithm adaptability dimension, including: the number of supported algorithm types, algorithm switching time, and algorithm customization capabilities. (2) setting quantitative indicators in the key management flexibility dimension, including: the configurable range of key length, the adjustability of key update cycle, and key storage compatibility. (3) setting quantitative indicators in the protocol and environment compatibility dimension, including: the number of compatible protocols, platform adaptability, and network environment adaptability. (4) setting quantitative indicators in the dynamic adjustment capability dimension, including: policy response time, automatic optimization success rate, and resource elasticity coefficient. (5) setting quantitative indicators in the interface scalability dimension, including: standardized interface coverage, dynamic loading response time, and API configurability. (6) setting quantitative indicators in the encryption function virtualization dimension, including: policy loading latency, functional module reconfigurability rate, and virtualization function coverage.
[0025] For example, the constructed cryptographic flexibility evaluation system is shown in Table 1.
[0026] Table 1. Encryption Flexibility Assessment System
[0027] Information systems refer to systems that include cryptographic applications (i.e., cryptographic devices).
[0028] As an optional implementation, the system including cryptographic applications has an information interface. Therefore, step 2 above involves obtaining information system data from the information interface.
[0029] As an optional implementation method, to ensure that the evaluation results accurately reflect the encryption flexibility of the information system, step 3, which involves obtaining the comprehensive flexibility score of the information system based on the information system data, includes the following steps: Step 31: Obtain the flexibility scores for each dimension of the encryption flexibility assessment system based on the information system data. Wherein: Step 311: Normalize the information system data to obtain normalized data.
[0030] Step 312: Obtain the flexibility scores for each dimension of the encryption flexibility evaluation system based on normalized data. For example, using the formula... Based on normalized data, flexibility scores for each dimension of the encryption flexibility evaluation system are obtained. Where, Indicates the first Flexibility scores across multiple dimensions Indicates the first The number of quantitative indicators in each dimension Indicates the first In the dimension of the first Normalized data for each quantitative indicator.
[0031] Step 32: Obtain the comprehensive flexibility score of the information system based on the flexibility scores of each dimension. For example, using the formula... The overall flexibility score of the information system is obtained based on the flexibility scores of each dimension. In the formula, The overall score represents the flexibility of the information system. Indicates the first Flexibility scores across multiple dimensions Indicates the first Weights of each dimension .
[0032] Based on the above description, the method for evaluating the encryption flexibility level of an information system based on the comprehensive flexibility score in step 3 can be to classify the encryption flexibility level according to the comprehensive flexibility score. For example, the comprehensive flexibility score ranges from 0 to 100 points, with a higher score indicating a higher encryption flexibility level, meaning that the system containing cryptographic applications has stronger flexibility and agility. The classification and description of encryption flexibility levels are shown in Table 2.
[0033] Table 2. Classification of Encryption Flexibility Levels
[0034] In an exemplary embodiment, the encryption flexibility assessment method described in the above embodiments is used to assess the encryption flexibility of an information system containing cryptographic devices, thereby determining the encryption flexibility level of the information system. Figure 2 As shown.
[0035] S1, based on the encryption flexibility evaluation system in the above embodiments, data on various quantitative indicators of the information system are obtained through the information system's interfaces, configuration documents, testing tools, etc. For non-numerical quantitative indicators (e.g., the number of supported algorithm types), data is obtained by directly counting; for continuous quantitative indicators (e.g., algorithm switching time), multiple tests are performed and the average is taken to obtain data.
[0036] S2, normalizes the data obtained in S1 to obtain normalized data: (1) For positive indicators in quantitative indicators (i.e., the larger the value, the stronger the encryption flexibility of the information system, for example) , (etc.), using formula Normalization is performed to obtain normalized data. In the formula, Indicates the first In the dimension of the first Data for each quantitative indicator, Indicates the first In the dimension of the first The maximum and minimum values of each quantitative indicator. It can be obtained based on the benchmarks of information systems containing cryptographic devices in the encryption industry.
[0037] (2) For the inverse indicators in the quantitative indicators (i.e., the smaller the value, the stronger the encryption flexibility of the information system, for example...), , (etc.), using formula Normalization is performed to obtain normalized data.
[0038] S3, based on normalized data, uses the formula The flexibility scores for each dimension in the cryptographic flexibility assessment system are obtained.
[0039] S4, based on flexibility scores across various dimensions, uses a formula... The overall score for the flexibility of the information system is obtained.
[0040] S5. Determine the encryption flexibility level of the information system based on the encryption flexibility level classification table and the comprehensive flexibility score in S4.
[0041] Based on the steps in the above embodiments, this application constructs a unique encryption flexibility evaluation system encompassing six core dimensions: encryption algorithm adaptability, key management flexibility, protocol and environment compatibility, dynamic adjustment capability, interface scalability, and encryption function virtualization. Compared to traditional single-dimensional evaluations, this system can comprehensively and meticulously analyze the flexibility of encryption systems.
[0042] This application establishes specific quantitative indicators across six core dimensions. These indicators precisely measure various key aspects of the flexibility of the encryption system, providing solid data support for the evaluation results through accurate data measurement and calculation. This ensures the accuracy and reliability of the evaluation process and is a core element for achieving accurate evaluation.
[0043] This application provides a complete evaluation process for encryption flexibility. In the data acquisition phase, raw data is obtained through multiple channels, and appropriate processing methods are adopted for different quantitative indicators to ensure data quality. In the indicator normalization phase, different formulas are used to transform the indicators into uniform and comparable standard values based on their nature. In the encryption flexibility score calculation phase, the flexibility scores for each dimension are first calculated using an arithmetic mean, and then a weighted sum is used to obtain a comprehensive encryption flexibility score, ensuring that the evaluation results accurately reflect the encryption flexibility of the information system.
[0044] This application categorizes cryptographic flexibility into four levels based on scores, helping enterprises quickly assess the level of flexibility in their information systems' cryptographic applications and subsequently develop targeted improvement strategies. The encryption flexibility assessment method provided in this application not only accurately evaluates the current status of cryptographic device applications in information systems but also provides optimization guidance based on the assessment results. By analyzing the indicators across each dimension, the strengths and weaknesses of the system can be identified, enabling targeted improvement strategies to be developed.
[0045] In one exemplary embodiment, a computer device is provided, which may be a server or a terminal, and its internal structure diagram may be as follows. Figure 3 As shown, this computer device includes a processor, memory, input / output (I / O) interfaces, and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores data related to a cryptographic flexibility evaluation method. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network connection. When the computer program is executed by the processor, it implements a cryptographic flexibility evaluation method.
[0046] Those skilled in the art will understand that Figure 3 The structures shown are merely block diagrams of some structures related to the present application and do not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than shown in the figures, or combine certain components, or have different component arrangements. In an exemplary embodiment, a computer device is provided, including a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the steps in the above-described method embodiments.
[0047] In one exemplary embodiment, a computer-readable storage medium is provided storing a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.
[0048] In one exemplary embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above-described method embodiments.
[0049] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.
[0050] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM).
[0051] The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.
[0052] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0053] This document uses specific examples to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. Furthermore, those skilled in the art will recognize that, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of this application.
Claims
1. A method for evaluating encryption flexibility, characterized in that, The encryption flexibility evaluation method includes: Construct a cryptographic flexibility evaluation system; the cryptographic flexibility evaluation system includes dimensions of cryptographic algorithm adaptability, key management flexibility, protocol and environment compatibility, dynamic adjustment capability, interface scalability, and cryptographic function virtualization; each dimension in the cryptographic flexibility evaluation system includes multiple quantitative indicators; Data corresponding to the encryption flexibility assessment system in the information system is obtained as information system data; the information system refers to a system that includes cryptographic applications. A comprehensive score for the flexibility of the information system is obtained based on the data from the information system. The encryption flexibility level of the information system is evaluated based on the comprehensive flexibility score.
2. The encryption flexibility evaluation method according to claim 1, characterized in that, Construct a cryptographic flexibility assessment system, including: In the dimension of encryption algorithm adaptability, quantitative indicators are set, including: the number of supported algorithm types, algorithm switching time, and algorithm customization capability; In the dimension of key management flexibility, quantitative indicators are set, including: configurable range of key length, adjustable key update cycle and key storage compatibility. In the dimension of protocol and environment compatibility, quantitative indicators are set, including: the number of compatible protocols, platform adaptability, and network environment adaptability. In the dynamic adjustment capability dimension, quantitative indicators are set, including: strategy response time, automatic optimization success rate, and resource elasticity coefficient. In the dimension of interface extensibility, set quantitative indicators, including: standardized interface coverage, dynamic loading response time and API configurability; In the virtualization dimension of encryption functions, quantitative indicators are set, including: policy loading latency, functional module reconfigurability rate, and virtualization function coverage.
3. The encryption flexibility evaluation method according to claim 1, characterized in that, Obtain information system data from the information interface.
4. The encryption flexibility evaluation method according to claim 1, characterized in that, Based on the data from the information system, a comprehensive score for the flexibility of the information system is obtained, including: Based on the information system data, flexibility scores for each dimension in the encryption flexibility evaluation system are obtained; The overall flexibility score of the information system is obtained based on the flexibility scores of each dimension.
5. The encryption flexibility evaluation method according to claim 4, characterized in that, Based on the information system data, flexibility scores for each dimension of the encryption flexibility evaluation system are obtained, including: The information system data is normalized to obtain normalized data; Based on the normalized data, flexibility scores for each dimension in the encryption flexibility evaluation system are obtained.
6. The encryption flexibility evaluation method according to claim 5, characterized in that, Using formula Based on the normalized data, flexibility scores for each dimension of the encryption flexibility evaluation system are obtained; where, Indicates the first Flexibility scores across multiple dimensions Indicates the first The number of quantitative indicators in each dimension Indicates the first In the dimension of the first Normalized data for each quantitative indicator.
7. The encryption flexibility evaluation method according to claim 4, characterized in that, Using formula The overall flexibility score of the information system is obtained based on the flexibility scores of each dimension; where, The overall score represents the flexibility of the information system. Indicates the first Flexibility scores across multiple dimensions Indicates the first Weights for each dimension.
8. A computer device, comprising: A memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that the processor executes the computer program to implement the cryptographic flexibility evaluation method according to any one of claims 1-7.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by a processor, the computer program implements the encryption flexibility evaluation method as described in any one of claims 1-7.
10. A computer program product, comprising a computer program, characterized in that, When executed by a processor, the computer program implements the encryption flexibility evaluation method as described in any one of claims 1-7.