Data security encryption and decryption device

Abstract

The utility model relates to the technical field of data encryption, in particular to a data security encryption and decryption device, which comprises an information input unit for inputting information and an output unit for transmitting information, the first encryption unit is used for encrypting information through a symmetric algorithm to generate a first ciphertext and a corresponding first secret key; the second encryption unit is used for encrypting the first secret key through an asymmetric algorithm to generate a second ciphertext and a corresponding second secret key; the first encryption unit and the second encryption unit are both connected with the storage unit and the controller, and the storage unit is connected with the controller. Through the characteristics and advantages of the first encryption unit, the second encryption unit, the symmetric algorithm and the asymmetric algorithm, the data is encrypted quickly through the city algorithm, and the symmetric encryption key is encrypted through the asymmetric algorithm, so that the data transmission security is effectively improved on the premise of ensuring the data security.

Description

Technical Field

[0001] The utility model relates to the technical field of data encryption, in particular to a data security encryption and decryption device. Background Art

[0002] With the continuous development of network technology and the increasingly open network environment, efficient and secure information storage and transmission have become essential features for the development of the network economy. Data loss and leakage can easily occur due to reasons such as hacker intrusion, insider leaks, and abuse of administrator privileges. The resulting serious consequences can be irreparable. The application of secure storage technology can effectively prevent such incidents to a considerable extent and avoid the serious losses caused by data leakage.

[0003] Currently, transmitted data is usually encrypted to protect security. The current mainstream data encryption is asymmetric encryption. The receiver first generates a pair of asymmetric keys, namely a public key and a private key. The sender uses the receiver's public key to encrypt the information to be transmitted (plaintext). After receiving the ciphertext, the receiver uses its own private key to decrypt it, thereby completing the secure transmission of data. However, because asymmetric encryption algorithms involve complex mathematical operations and a large amount of calculation, the encryption and decryption speeds are slow, and powerful hardware is required as support, making it difficult to efficiently meet the needs of enterprises for large-scale data transmission. Utility Model Content

[0004] The purpose of this utility model is to provide a data security encryption and decryption device to solve the above-mentioned deficiencies in the prior art.

[0005] In order to achieve the above purpose, the present invention provides the following technical solutions:

[0006] A data security encryption and decryption device includes an information input unit for inputting information and an output unit for transmitting information; it also includes: a first encryption unit, which encrypts information using a symmetric algorithm to generate a first ciphertext and a corresponding first key; a second encryption unit, which encrypts the first key using an asymmetric algorithm to generate a second ciphertext and a corresponding second key; the first encryption unit and the second encryption unit are both connected to a storage unit and a controller, and the storage unit is connected to the controller.

[0007] Furthermore, the first encryption unit includes a connected validity verification component and an internal control chip, the internal control chip is respectively connected to the second encryption unit, the storage unit and the controller, and the first encryption unit also includes an encryptor connected to the internal control chip.

[0008] Furthermore, the validity verification component includes an even check and a cyclic redundancy check.

[0009] Furthermore, it also includes an authority verification unit for verifying user authority, and the authority verification unit is connected to the controller.

[0010] Furthermore, the authority verification unit includes face recognition, fingerprint recognition and iris recognition.

[0011] Furthermore, a cache unit is included, and the storage unit, the controller and the transmission unit are all connected to the cache unit.

[0012] In the above technical solution, the data security encryption and decryption device provided by the present invention has the following beneficial effects:

[0013] By setting up a first encryption unit and a second encryption unit, the information input unit collects data (plaintext) to be transmitted and sends the collected data to the first encryption unit. The first encryption unit encrypts the plaintext through a symmetric algorithm to generate a first ciphertext and a corresponding first key. The first ciphertext is stored in a storage unit. The first key is transmitted to the second encryption unit, and the first key is encrypted through an asymmetric algorithm to generate a second ciphertext and a corresponding second key. The second ciphertext and the second key are respectively stored in the storage unit. The operator sends a control signal through the controller, causing the storage unit to send the first ciphertext, the second ciphertext and the second key to the transmission unit and to send them to the data recipient. The data recipient decrypts the second ciphertext according to the private key it has, thereby decrypting the first ciphertext and obtaining the data to be transmitted. The utility model quickly encrypts data through a symmetric algorithm and encrypts the symmetric encryption key through an asymmetric algorithm. Under the premise of ensuring data security, it effectively improves the security of data transmission.

[0014] It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.

[0015] This application document provides an overview of various implementations or examples of the technology described in this disclosure, and is not a comprehensive disclosure of the full scope or all features of the disclosed technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0017] Figure 1 This is a system framework diagram provided for an embodiment of the present utility model.

[0018] Description of the drawings: 1. Information input unit; 2. First encryption unit; 21. Validity verification component; 22. Internal control chip; 23. Encryptor; 3. Second encryption unit; 4. Storage unit; 5. Controller; 6. Transmission unit; 7. Cache unit; 8. Authority verification unit. DETAILED DESCRIPTION

[0019] To make the purpose, technical solutions, and advantages of the embodiments of the present disclosure more clear, the technical solutions of the embodiments of the present disclosure will be clearly and completely described below in conjunction with the accompanying drawings of the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the described embodiments of the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

[0020] See also Figure 1 A data security encryption and decryption device includes an information input unit 1 for inputting information and an output unit for transmitting information; it also includes: a first encryption unit 2, which encrypts information through a symmetric algorithm to generate a first ciphertext and a corresponding first key; a second encryption unit 3, which encrypts the first key through an asymmetric algorithm to generate a second ciphertext and a corresponding second key; the first encryption unit 2 and the second encryption unit 3 are both connected to a storage unit 4 and a controller 5, and the storage unit 4 is connected to the controller 5.

[0021] The information input unit 1 collects the data (plaintext) to be transmitted and sends the collected data to the first encryption unit 2. The first encryption unit 2 encrypts the plaintext through a symmetric algorithm to generate a first ciphertext and a corresponding first key. The first ciphertext is stored in the storage unit 4. The first key is transmitted to the second encryption unit 3. The first key is encrypted through an asymmetric algorithm to generate a second ciphertext and a corresponding second key. The second ciphertext and the second key are respectively stored in the storage unit 4. The operator sends a control signal through the controller 5, so that the storage unit 4 sends the first ciphertext, the second ciphertext and the second key to the transmission unit 6 and sends them to the data recipient. The data recipient decrypts the second ciphertext according to the private key it has, thereby decrypting the first ciphertext to obtain the data to be transmitted.

[0022] Furthermore, the first encryption unit 2 includes a connected validity verification component 21 and an internal control chip 22, the internal control chip 22 is respectively connected to the second encryption unit 3, the storage unit 4 and the controller 5, and the first encryption unit 2 also includes an encryptor 23 connected to the internal control chip 22. The validity verification component 21 includes an even check and a cyclic redundancy check.

[0023] Even parity is a data verification method used to detect errors during data transmission or storage. Cyclic Redundancy Check (CRC) is an error detection method based on polynomial division. CRC can detect most common errors, such as single-bit errors, double-bit errors, odd-bit errors, and burst errors, further ensuring the validity of the transmitted data. The internal control chip 22 receives the data after validity verification and transmits it to the encryptor 23. The encryptor 23 encrypts the data using a symmetric algorithm under the control signal of the controller 5, and stores the encrypted first ciphertext and first key in the storage module and transmits it to the second encryption unit 3, respectively.

[0024] Furthermore, the system includes a permission verification unit 8 for verifying user permissions, which is connected to the controller 5. This unit 8 includes facial recognition, fingerprint recognition, and iris recognition. Only users who pass permission verification can deny access to unauthorized users, reducing the likelihood of network attacks and further improving data security.

[0025] Furthermore, a cache unit 7 is included, and the storage unit 4, controller 5, and transmission unit 6 are all connected to the cache unit 7. The cache module is a high-speed storage medium that stores copies of data that may be frequently accessed. It can quickly obtain data, avoid frequent access to the storage unit 4, and reduce the system burden.

[0026] The above description is merely illustrative of certain exemplary embodiments of the present invention. It goes without saying that those skilled in the art will be able to modify the described embodiments in various ways without departing from the spirit and scope of the present invention. Therefore, the above drawings and description are illustrative in nature and should not be construed as limiting the scope of protection of the claims of the present invention.

Claims

1. A data security encryption and decryption device, comprising an information input unit (1) for inputting information and an output unit for transmitting information; Its characteristics are: Also includes: A first encryption unit (2) encrypts information using a symmetric algorithm to generate a first ciphertext and a corresponding first key; A second encryption unit (3) encrypts the first key using an asymmetric algorithm to generate a second ciphertext and a corresponding second key; The first encryption unit (2) and the second encryption unit (3) are both connected to a storage unit (4) and a controller (5), and the storage unit (4) is connected to the controller (5).

2. The data security encryption and decryption device according to claim 1, characterized in that: The first encryption unit (2) includes a connected validity verification component (21) and an internal control chip (22), the internal control chip (22) being connected to the second encryption unit (3), the storage unit (4) and the controller (5), respectively. The first encryption unit (2) also includes an encryptor (23) connected to the internal control chip (22).

3. The data security encryption and decryption device according to claim 2, characterized in that: The validity verification component (21) includes an even check and a cyclic redundancy check.

4. The data security encryption and decryption device according to claim 1, characterized in that: It also includes an authority verification unit (8) for verifying user authority, and the authority verification unit (8) is connected to the controller (5).

5. The data security encryption and decryption device according to claim 4, characterized in that: The authority verification unit (8) includes face recognition, fingerprint recognition and iris recognition.

6. The data security encryption and decryption device according to claim 1, characterized in that: It also includes a cache unit (7), and the storage unit (4), the controller (5) and the transmission unit (6) are all connected to the cache unit (7).

Images