307 results about "On-the-fly encryption" patented technology

The invention relates to the technical field of financial data security, and discloses an intelligent ERP financial system data security management and authentication method. The method comprises the following steps: acquiring an original transaction data stream in an ERP system, extracting key financial fields, and dividing the key financial fields into a sensitive data set and a common data set according to a preset rule; a dynamic encryption strategy framework is constructed based on sensitive data set attributes, the framework comprises multiple levels of encryption strength parameters, and the corresponding encryption strength can be automatically matched according to the authentication level of an access request. And monitoring a system data access behavior in real time, collecting feature data, inputting the feature data into the anomaly detection model, and triggering access blocking when an output anomaly access probability exceeds a threshold value. And generating a periodic integrity verification instruction according to the sensitive data updating frequency, performing integrity verification by using a hash chain technology, recording a result and marking a tampering risk level. And based on the association relationship between the tampering risk level and the abnormal access probability, generating an updated security policy and synchronizing the updated security policy to each data access node.

The invention discloses a distributed data encryption and verification system and method based on a block chain, and relates to the technical field of block chains. The method comprises the following steps: dynamically matching an initial processing node and a transmission path according to data characteristics and node capability; selecting an optimal path and an encryption strategy by combining the node capability, the network state and the data security requirement; data fragmentation encryption transmission is executed, and the transmission quality is evaluated in real time; future transmission risks are predicted based on historical data, and path sustainability is evaluated; and adjusting the path according to the real-time verification value and the prediction feasibility, and updating the block chain record. Full-link traceable auditing is realized through block chain evidence storage, the dynamic encryption strategy and predictive path optimization are combined, the transmission efficiency is improved, the security risk is reduced, the energy consumption is reduced, and the method is suitable for a high-security demand scene.

The invention provides a data processing method and device for an integrated virtual employee care Saas platform. The data processing method comprises the steps of obtaining associated data of employees through the integrated virtual employee care Saas platform; the associated data comprises historical behavior data, working state data and emotion fluctuation data; adjusting and optimizing a preset psychological state recognition algorithm based on the associated data to obtain an adjusted and optimized psychological state recognition algorithm; evaluating the associated data based on the tuning psychological state recognition algorithm, generating a psychological state evaluation result of the employee, and automatically pushing care scheme information when the psychological state evaluation result of the employee triggers an early warning threshold value; and encrypting and storing the associated data by adopting a dynamic encryption algorithm. According to the invention, the accuracy of psychological state assessment is improved, and the data security is guaranteed.

The invention provides a water conservancy information security protection method and system. The method comprises the following steps: S1, edge equipment physical security reinforcement; S2, dynamic encrypted data acquisition; S3, adaptive fragmentation redundancy transmission; a protection module is deployed in a water conservancy sensor and an RTU, equipment vibration, uncovering and environmental parameters are monitored, abnormal physical attacks or environmental overrun are detected, a secret key is automatically erased, a data protection mode is started, data leakage when equipment is physically damaged is prevented, data security of edge equipment is guaranteed, and the safety of the equipment is improved. And in cross-system data interaction, an MPC or federated learning technology is adopted, original data is locally reserved, and a block chain audit log is generated to record a calling behavior, so that data sharing is realized, data is ensured not to be locally out, data privacy is guaranteed, and a data calling tracing basis is provided.

The invention discloses a self-adaptive grid dynamic encryption method for underground water pollution migration simulation, which belongs to the technical field of underground water pollution migration simulation, and comprises the following steps of: forming 0.05-meter super-resolution grids at the periphery of a dispersed pollution source through a local grid dynamic encryption technology triggered by a pollution source intensity gradient threshold; the pollutant frontal surface tracking error is greatly reduced, and the high-precision pollutant migration simulation capability is realized. Moreover, based on an intelligent grid reconstruction algorithm of a flux threshold, the number of calculation units is reduced by 62%, the time consumed by single simulation is shortened to 3.3 hours, and the overall mass conservation error is kept to be smaller than 1% while the calculation efficiency is improved. Meanwhile, for a heterogeneous aquifer, through a pollution flux and stratum permeability coefficient dual-drive encryption strategy, the solute transport prediction precision of the model at the boundary of a clay lenticular body is greatly improved, and the problems that in the prior art, the simulation precision of the periphery of a pollution source is insufficient, and the calculation efficiency is low due to global encryption are effectively solved.

The invention belongs to the technical field of audio and video fusion transmission, and discloses an audio and video signal fusion transmission method and device, equipment and a medium, and the method comprises the steps: extracting 512-dimensional semantic feature vectors of an audio and a video, and generating a joint feature matrix through a cross-modal attention mechanism; calculating a fusion feature flow based on a coefficient alpha output by the scene classification model; a quantum random number generator is used for generating a session master key Kmain, the session master key Kmain is packaged into an encrypted session key Kenc through a Kyber-768 algorithm, and frame-level dynamic encryption is carried out on the fusion feature flow; and selecting a GPMI Type-B wired protocol or wireless transmission based on QUIC according to the transmission environment. According to the invention, the transmission efficiency, the anti-interference capability and the anti-quantum-attack security are improved, and multi-scene requirements are met.

The invention discloses a mobile payment encryption system based on a data random algorithm, and the system comprises a collection module which is used for collecting multi-modal data, and constructing a cross-modal entropy source pool; the random seed generation module is used for extracting feature vectors from the cross-modal entropy source pool and generating initial random seeds; the time sequence self-adaptive random chain module is used for generating a random factor sequence based on the initial random seed recursion and forming a random chain structure; the encryption module is used for jointly encoding the random factor sequence and transaction data to be encrypted, generating a dynamic encryption parameter set and encrypting the transaction data; and the chain type updating module is used for collecting network environment parameters, updating the time sequence self-adaptive random chain and generating a new dynamic encryption parameter set so as to form a chain type evolved encrypted data sequence. According to the method, the cross-modal entropy source and the time sequence random chain are utilized to realize dynamic encryption of the mobile payment data, and the method has the advantages of high entropy randomness, strong attack resistance and high transmission security.

The invention discloses an electronic document tracing method and device based on dynamic encryption and multi-modal watermarking, and relates to the technical field of information security and digital rights management. The method comprises the following steps: acquiring a PDF document uploaded by a user, encrypting the PDF document by adopting a randomly generated main encryption key, and acquiring and storing the encrypted PDF document; the content of the encrypted PDF document is analyzed, secret information is embedded into a picture in the document based on a two-dimensional discrete cosine transform algorithm, and picture watermark embedding is completed; a self-adaptive watermark embedding algorithm is adopted to embed secret information into a text in the document, and text watermark embedding is completed; related information of the checking operation is written into a block chain database; dynamically extracting watermark information from the divulged PDF document by adopting a watermark extraction algorithm; and querying a traceability database according to the extracted watermark information, and outputting a traceability result by comparing the extracted watermark information with information in a database storing various watermark information. According to the invention, the survival rate and the concealment of the watermark can be improved.

The invention discloses a two-dimensional code full-life-cycle tracking management system based on dynamic encryption, relates to the technical field of two-dimensional code tracking management, and is characterized in that a target object life cycle state sequence diagram is constructed, and a two-dimensional code coding index is dynamically generated based on a current state, an equipment environment and a time factor; and dynamic generation and secure binding of two-dimensional code content are realized in combination with a multi-factor asymmetric encryption mode. Meanwhile, through path consistency verification and state chain continuity judgment, validity verification is carried out on a two-dimensional code access behavior, and the validity of the two-dimensional code is judged in combination with an environment deviation detection mechanism; compared with the prior art, the method can effectively prevent the two-dimensional code from being counterfeited, replayed and visited unauthorized, improves the uniqueness, verifiability and safety of the two-dimensional code in the whole life cycle, and is suitable for high-safety product tracking, anti-counterfeiting authentication, multi-stage identity recognition and other scenes.

The invention discloses a data security management method and device based on dynamic encryption and real-time anomaly detection, and the method comprises the steps: obtaining data from a diversified data source, and obtaining standard data; dynamically encrypting the standard data to obtain encrypted data; performing feature extraction on the encrypted data to obtain data stream features; performing anomaly detection processing on the data stream features by using a detection engine to obtain a detection result; when the detection result is normal, marking the encrypted data as a safe state, and storing the encrypted data into the distributed nodes; when the detection result is abnormal, the danger is handled according to the confidence score, and a danger assessment result is obtained; and according to a risk assessment result, optimizing parameters of the detection engine, and generating a log. Therefore, the problems of static encryption failure, detection lag, response stiffness and the like in the prior art are effectively solved.

The invention discloses a data anti-crawler method and system based on user behavior dynamic encryption, and relates to the technical field of network data anti-crawler. According to the method, the real-time user interaction behavior data of the user side is collected, the corresponding user behavior characteristic value is generated, the unique dynamic secret keys of different users are generated in combination with the dynamic regularized multilayer salt values, and the inconsistency of the dynamic secret keys is increased, so that a crawler is difficult to break through the secret keys and cannot simulate the complex behaviors of the users, and the user experience is improved. Therefore, the data security is improved, and the cracking difficulty of the crawler is improved; according to the method, abnormal real-time user interaction behavior data is captured, the activity type of the current session is judged, the effective recognition accuracy of crawler activities is improved, unauthorized crawler programs are effectively prevented from capturing website data, the protection level of the data is improved, and the randomness and complexity of protection are enhanced through unique user behaviors.

The invention relates to a fingerprint lock dynamic encryption authentication method and system and a medium. The method comprises a registration stage and an authentication stage. Wherein in the registration stage, lock body environment real-time physical parameters are collected, and a dynamic environment secret key is generated through a chaotic mapping function; acquiring a user fingerprint, identifying core and non-core feature regions, and encrypting the two types of regions by combining a dynamic environment key and a user key to generate registration encrypted fingerprint data; and dividing the data into two data fragments by using a quantum noise source true random sequence, storing the first data fragment in a local security chip, and encrypting the second data fragment and storing the encrypted second data fragment in a cloud server. In the authentication stage, environment parameters are collected in real time to generate a verification key, and the verification key is compared with a registration key; and when the two fragments are consistent, recombining the two fragments to restore the encrypted fingerprint data, authenticating the fingerprint input by the user, unlocking if the authentication succeeds, and triggering risk grading processing if the continuous failure reaches a threshold value. The overall safety and reliability of the fingerprint lock system are improved.

According to the clinical nursing patient information monitoring and inputting method and system, the data accuracy, the data inputting efficiency and the privacy protection safety are improved; the method comprises the following steps: firstly, collecting and preprocessing vital sign data of a patient in real time through various physiological sensors; then, acquiring a nursing record image, acquiring nursing record data through an OCR model, acquiring nursing information voice, transwriting the nursing record data and the nursing information voice into nursing information data through a medical scene voice transwriting model, and performing unified standardization processing on the three groups of data to generate patient information data; and finally, when patient information data is input, symmetric encryption is carried out by adopting a national cryptographic SM4 algorithm, encrypted data is obtained, a dynamic encryption key is generated through an ECDH key distribution technology, and the dynamic encryption key can be called to carry out decryption operation after authentication of a dual protection mechanism of Hash value pre-verification and identity authentication is passed.

The invention relates to the technical field of whole-process intelligent supervision, in particular to a whole-process intelligent supervision system and method for epidemic woods based on a block chain and the Internet of Things, and the system comprises an epidemic wood dynamic identification module, an integrated pressure sensor NFC chip is installed on the trunk of each epidemic wood, a pressure sensor is used for periodically collecting pressure values, monitoring the change of a packaging state, and carrying out the monitoring of the whole-process intelligent supervision of the epidemic woods. A new encryption sequence is generated through the NFC chip according to a preset time interval and stored, a mobile terminal APP reads the current encryption sequence of the NFC chip, the current encryption sequence and a background encryption key are matched and verified, and after verification is passed, a pressure value and the encryption sequence are combined. According to the method, the pressure sensor and the NFC chip are integrated for the trunk of each epidemic wood, real-time monitoring of packaging integrity and generation and verification of a dynamic encryption sequence are achieved, uniqueness and anti-counterfeiting capability of the identity of the source epidemic wood are improved, and it is ensured that each unit of epidemic wood can be accurately and safely tracked from the initial stage.

The invention discloses a dynamic encryption transmission method and system for sound-light alarm signals, and relates to the field of data encryption, and the method comprises the steps: obtaining a dynamic environment entropy value; generating a pseudo-random chaotic sequence; obtaining a helium-oxygen mixed gas density parameter in the dynamic environment entropy value; segmenting a preset standard alarm waveform into a plurality of signal waveforms in a time domain, and generating a distorted signal waveform according to the helium-oxygen mixed gas density parameter; performing encryption modulation on the distorted signal waveform to generate an encrypted distorted signal waveform; determining a sending sequence and a sending interval of the encrypted distortion signal waveform by combining a pseudo-random chaos sequence based on an impedance fluctuation value and background acoustic spectrum characteristics in the dynamic environment entropy; generating a dynamic modulation signal based on the transmission sequence and the transmission interval; the dynamic modulation signal is sent to a water surface console through an umbilical cable; and receiving the guide pulse, performing phase conjugation processing on the guide pulse, generating an echo verification signal, and transmitting the echo verification signal back to the water surface console.

The invention relates to the technical field of payment security, and particularly discloses a security payment system and method based on biological recognition. The method is characterized by comprising the following steps: synchronously acquiring fingerprint, finger vein and pressure behavior characteristics through a coaxial integrated sensor; a dynamic encryption engine is adopted to bind the biological characteristics with the transaction parameters to generate a one-time payment token; living body verification is realized based on physiological synchronism of vein pulsation and pressure fluctuation; and establishing a user pressing behavior baseline model to identify abnormal operation. The terminal equipment is provided with a sapphire microlens array and a dynamic pressure-sensitive array. The problems of biological feature forgery, replay attack and living body cheating are solved, the forgery detection rate reaches 99.6%, and the false identification rate is smaller than or equal to 0.0001%.

The invention discloses an audio and video transmission method and device based on multi-mode AI enhancement and dynamic end-to-end encryption, equipment and a storage medium, and relates to the technical field of digital audio and video processing and secure transmission, and the method comprises the steps: obtaining an original audio and video stream, and separating the original audio and video stream into audio data, video data and subtitle text data; performing multi-mode AI enhancement processing on the audio data, the video data and the subtitle text data to obtain enhanced audio and video data; generating an encryption decision instruction based on the real-time network state, and performing encryption processing on the enhanced audio and video data according to the encryption decision instruction to generate encrypted data with a tamper-proof watermark; and when the encrypted data passes integrity verification and copyright legality judgment, the encrypted data is transmitted through a secure transmission channel, and collaborative optimization of security and efficiency is realized through a core technology chain of multi-modal separation enhancement, dynamic encryption decision, hardware-level watermark binding and credible verification transmission.

The invention discloses a data encryption and access control device for an intelligent fire-fighting internet of things system in the technical field of data protection. The data encryption and access control device comprises a dynamic encryption engine, a multi-mode access control module and a safety coprocessor. The dynamic encryption engine adaptively selects an SM4-GCM and SM9-Kyber hybrid encryption algorithm based on the data sensitivity level and the equipment type, so that the transmission encryption delay is less than or equal to 0.9 ms; the multi-mode access control module supports dynamic permission upgrading and tamper-proof evidence storage in a fire emergency scene through a three-layer architecture of RBAC + ABAC + block chain auditing; the security coprocessor adopts an FPGA hardware acceleration SM4 algorithm, and the energy efficiency ratio reaches 15Gbps / W. Anti-quantum security: the post-quantum algorithm Kyber-768 passes through the third round of authentication of NIST, and the key negotiation efficiency is improved by 3 times compared with that of the traditional ECDH (test data: the negotiation time consumption of 100,000 times is reduced from 18 seconds to 5.7 seconds). Technical optimization of the device comprises fine-grained access control innovation, a multi-modal strategy engine, block chain auditing and tracing, hardware acceleration efficiency optimization and distributed key management.

The invention relates to the technical field of digital information transmission security, and discloses a database data protection device, which comprises five core modules, namely a dynamic encryption transmission module, an intelligent behavior authentication module, a real-time threat sensing module, a hierarchical key management module and a rapid disaster recovery module, and the dynamic encryption transmission module integrates a quantum key distribution (QKD) chip and a software defined encryption (SDE) engine and is used for dynamically adjusting an encryption strategy according to real-time link parameters. According to the database data protection device and method, an encryption strategy is adjusted in real time through the dynamic encryption transmission module according to link parameters, abnormal behaviors of a user are accurately recognized in combination with the intelligent behavior authentication module, the real-time threat sensing module quickly responds to attacks, and the hierarchical key management module guarantees the safety of a key in the whole life cycle; and minute-level fault backtracking is realized by a rapid disaster recovery module, and external attacks and internal risks are comprehensively resisted.

The invention relates to the technical field of network security management, and discloses a federated learning-based dynamic encryption network security management system, which comprises a network data acquisition module, a federated learning processing module, a security state monitoring module and the like. The network data acquisition module acquires flow and encryption state data in real time, and generates a characteristic value and encryption strategy dynamic adjustment set; the federal learning processing module generates a personalized encryption strategy according to the traffic characteristic value; the safety state monitoring module screens abnormal safety data; the strategy matching module determines a target adjustment strategy through multi-dimensional matching; the strategy adjustment module drives the encryption engine to correct the strategy; and the strategy self-learning module updates the strategy correction factor based on the feedback data. The system realizes dynamic encryption strategy adjustment and self-optimization, improves the intelligence and self-adaptive capability of network security protection, and is suitable for distributed network security management.

The invention provides an airborne high-speed image hierarchical compression and encrypted storage method and system, electronic equipment and a storage medium, and relates to the technical field of airborne image processing and data security storage. The method comprises the following steps: acquiring an airborne high-speed image sequence, synchronously monitoring surface pneumatic pressure pulsation data of an aircraft, converting the surface pneumatic pressure pulsation data into a deformable mirror surface group curvature control signal, adjusting mirror surface deformation parameters to compensate optical path wavefront distortion, and generating a stable image; air vortex characteristics are extracted to calculate an intensity distribution diagram, turbulence levels are divided, and corresponding compression strategies are adopted; extracting vortex phase features of each level to generate a dynamic key, and encrypting the layered compressed data stream; according to the invention, layered high-efficiency compression and dynamic encryption storage of airborne high-speed images in a turbulent environment can be realized, and data processing effectiveness and storage security are guaranteed.

The invention belongs to the technical field of network security, and discloses a network security inspection system based on big data, which combines a'man-machine 'binding security mechanism constructed by a biological feature anchoring module through a dual authentication mechanism of quantum fingerprint and equipment physical feature binding. A closed-loop defense system from node identity verification to operation and maintenance right management and control is formed, and the problems that a traditional password or digital certificate is easy to counterfeit and quantum computing can be cracked are thoroughly solved; different from the limitation of a single authentication mode and the collaborative design of a dynamic encryption channel and a distributed probe architecture in the prior art, the heterogeneous network environment can be adapted, the data integrity and the system overhead can be balanced through adaptive sampling, a'zero-pollution 'trusted data basis is provided for subsequent modules, malicious node access is blocked from the source, and the network security is improved. The linkage mechanism of double authentication and authority closed loop breaks through the bottleneck of isolated application of the traditional identity authentication technology.

Examples are described for dynamically encrypting and / or decrypting a file formed of multiple blocks of ordered data. In one example, a method of dynamically encrypting a file to enable partial decryption of the file includes generating, using a secret key and one or more initialization vectors, a keystream for the multiple blocks of ordered data, encrypting the multiple blocks of ordered data of the file by performing a logical operation of the keystream with the multiple blocks of ordered data in a one-to-one correspondence, and building a file index of the file to identify location information of the multiple blocks of ordered data. The method may further include dynamically decrypting at least a portion of the file by decrypting at least one selected block of encrypted data of the file using a portion of the keystream, the portion of the keystream corresponding to the at least one selected block.

The invention discloses a method and system for communication through a unified communication slot, and relates to the technical field of intelligent communication networks, and the method comprises the steps that the communication slot receives heterogeneous protocol data streams in real time, parses protocol grammar structures and semantic features of the heterogeneous protocol data streams in parallel through two channels, fuses the protocol grammar structures and the semantic features, generates PIR vectors, and sends the PIR vectors to a server; acquiring broadcast information and dynamic routing update messages of adjacent equipment in real time, and generating a real-time topology state library; and on the basis of a PIR vector, a delay sensitivity coefficient and a fault-tolerant threshold parameter are extracted, a quantum optimization model is constructed in combination with a real-time topology state library, a path with the minimum comprehensive transmission cost is calculated, physical address mapping, protocol compression packaging and service index verification are carried out, and a simplified quantum routing tag is generated. Unified semantic representation of heterogeneous protocols is realized through dual-channel protocol analysis and feature fusion, and high-timeliness secure transmission is realized through quantum optimization routing and dynamic encryption binding.

The invention provides a block chain-based dynamic encryption evidence storage data property right registration method and system, and relates to the technical field of block chains, and the method comprises the steps: carrying out the trusted measurement of to-be-registered data through constructing a trust transfer network; establishing a dynamic verification mechanism and selecting a verification path; constructing a data block association graph based on verification node importance to realize distributed storage; and finally, submitting the storage index and the verification summary information to a block chain network to complete evidence storage and generate a registration certificate. According to the invention, the credibility and verification efficiency of data property right registration are improved, and the security and integrity of evidence storage data are enhanced.

The invention relates to the technical field of user privacy data encryption and decryption, and discloses a user privacy data encryption and decryption system which comprises a user privacy data encryption and decryption system body. The user privacy data encryption and decryption system body comprises a data sovereignty layer, a strategy engine, a key management layer, a dynamic encryption layer, an intelligent decryption layer and a security audit and traceability layer. According to the user privacy data encryption and decryption system and method, user data privacy is guaranteed through cooperation of all the layers and the whole process from data authority management to encryption and decryption, data is prevented from being accessed and used without authorization, all the layers are clear in division of labor, the data sovereignty layer determines data attribution and access authority, the strategy engine formulates an access strategy, and the user privacy data encryption and decryption efficiency is improved. The key management layer is responsible for key full-life-cycle management, the dynamic encryption layer implements encryption operation, the intelligent decryption layer processes decryption requests, and the architecture enables each function module of the system to perform own functions and is convenient to develop, maintain and manage.

The invention discloses an information security data processing method based on biological characteristics and quantum enhancement, and belongs to the technical field of network and information security. Comprising the steps of collecting and preprocessing multi-dimensional biological characteristic data of a user; generating a dynamic correlation factor through weighted coupling calculation; a dynamic encryption key is generated through nonlinear coupling in combination with the quantum random number sequence; evaluating the environmental safety of the terminal by using a cognitive environmental credibility verification model; if the environment is credible, configuring a chaotic encryption parameter based on a dynamic key to encrypt target data and generate an integrity check code; and the receiving end generates a key through the same process and completes decryption and integrity verification. According to the method, the dynamic generation and'one-time pad 'of the secret key are realized, the secret key does not need to be stored, and a'biology-quantum-environment' three-in-one safety protection system is constructed by combining biological characteristic uniqueness, quantum randomness and environment credibility verification, so that the anti-cracking capability of data encryption and the adaptability of a terminal environment are effectively improved.

According to the secure data transmission system based on dynamic encryption authentication provided by the invention, a trust root which cannot be tampered is established for the whole system through the hardware password module, and continuous derivation and rotation of a session key are realized by the dynamic key management module on the basis, so that the security risk caused by long-term use of a static key is effectively solved. And the secure communication gateway module executes bidirectional authentication and anti-hijacking challenge response by using a dynamic key, so that the real-time credibility and session continuity of the communication process are ensured. And the strategy control engine uniformly coordinates the behaviors of key management and the communication gateway by receiving and compiling the declarative strategy, so that flexible deployment and centralized management and control of the security strategy are realized. According to the system, a cryptographic basis, a dynamic strategy, real-time monitoring and automatic response are deeply fused, a self-adaptive and automatic deep defense system with the capability of continuously resisting advanced threats is constructed, and the overall safety level and the operation efficiency of data transmission are remarkably improved.

A method for secure collection of sensitive data at a computer device includes receiving a request for sensitive data. The request indicates a set of parameters and a dynamic encryption key. The dynamic encryption key is generated by an authorized data requester based on a login session identifier. The method includes creating a user interface for collecting the set of parameters by an artificial intelligence (AI) software of the computer device. The method includes providing the user interface for collecting the set of parameters. Responsive to collecting the set of parameters from the user, the method includes encrypting the set of parameters using the dynamic encryption key and an encryption algorithm associated with the authorized data requester. The method includes transmitting the encrypted set of parameters to the authorized data requester to be decrypted.

The invention discloses a railway freight data security encryption method based on distributed storage, which relates to the technical field of railway information security, and comprises the following steps: registering distributed storage nodes, collecting railway freight tasks, tracks and node registration data, constructing a distributed storage network based on the node registration data, generating a node list, and encrypting the node list. Performing identity authentication, key initialization and identity verification during access among the nodes on the nodes in the node list, issuing a short-time access token after verification is passed, generating a track interval key according to freight track data, fragmenting the track interval key by using a threshold secret sharing method, distributing the track interval key to multiple nodes and dynamically deriving a key, and based on the derived key, using an improved ECC parallel encryption method in combination with Paillier dynamic encryption to encrypt data, and generating an encrypted data packet. According to the invention, track data is used as key drive, and dynamic hierarchical encryption and collaborative credible decryption of railway freight task data in a distributed environment are realized.