CN103905187B - A kind of network service encryption method based on content - Google Patents

Abstract

A content-based network communication encryption method, in which a symmetric encryption algorithm is set at the sending end and the receiving end respectively, and then the steps are as follows: 1) The sending end determines the encryption algorithm factor according to the content of the data to be sent this time, and then passes the encryption algorithm factor to select the encryption algorithm and the minimum number of bytes N required for the key of the corresponding algorithm, and then calculate the encryption key; 2) The sender uses the encryption algorithm and the encryption key Encrypt the sent data to get the encrypted data, generate the ciphertext of this communication and send it; 3) The receiving end receives the ciphertext of this communication to obtain the corresponding decryption algorithm factor and the data to be decrypted, and performs corresponding decryption to generate the plaintext of this communication . The present invention calculates and selects the number of the encryption algorithm used, the key used, etc. according to the content of the data to be sent, does not need to transmit additional key information, is simple, quick and has high security.

Description

A Content-Based Network Communication Encryption Method

technical field

The invention relates to the field of network data security transmission, in particular to a content-based network communication encryption method.

Background technique

There are many encryption communication methods commonly used at present, which can be roughly divided into two categories according to the type of key, symmetric encryption (private key encryption) communication and asymmetric encryption (public key encryption) communication.

The same key is used for encryption and decryption in symmetric encryption communication, that is, the encryption key can also be used as the decryption key. Symmetric encryption communication is simple and fast to use, but the disadvantages are also obvious. Additional key information needs to be transmitted, which is easy to be hacked Intercept in the middle, and decrypt the data.

Asymmetric encrypted communication requires two keys, a public key and a private key. The public key and the private key are a pair. If the public key is used to encrypt data, only the corresponding private key can be used to decrypt it; if Data is encrypted using a private key, which can only be decrypted with the corresponding public key. Asymmetric encryption is highly secure. During the transmission of encrypted data, the key is not transmitted, so even if the data is intercepted midway, the data cannot be unlocked without the key. The disadvantage is that the speed is slow and the encrypted ciphertext is longer.

Contents of the invention

The main purpose of the present invention is to overcome the disadvantages in the prior art that an additional transmission key is required for communication using symmetric encryption and is easy to be intercepted, the security is not high enough, the speed of communication using asymmetric encryption is slow, and the encrypted ciphertext is longer. A content-based network communication encryption method using symmetric encryption.

The present invention adopts following technical scheme:

A content-based network communication encryption method is characterized in that: A kind of encryption algorithm and the minimum number of bytes required by the key of each encryption algorithm are set at the sending end, and A kind of decryption algorithm and each kind of decryption algorithm are correspondingly set at the receiving end. The minimum number of bytes required to decrypt the key of the algorithm, then the steps are as follows:

1) The sender determines the encryption algorithm factor based on part of the data to be sent this time, and then uses the encryption algorithm factor to select the encryption algorithm and the minimum number of bytes N required for the key of the corresponding algorithm. According to the encryption algorithm The encryption key is obtained by calculating the factor and the minimum number of bytes N;

2) The sender uses this encryption algorithm and this encryption key to encrypt another part of the data to be sent this time to obtain this encrypted data, and generates this communication ciphertext according to the encryption algorithm factor and this encrypted data, Send the ciphertext of this communication to the receiving end through the network;

3) The receiving end receives the ciphertext of this communication to obtain the corresponding decryption algorithm factor and the data to be decrypted. The decryption algorithm factor is used to determine the minimum number of bytes N required for the decryption algorithm and the key of the corresponding algorithm, and then according to The decryption algorithm factor and the minimum number of bytes N are calculated to obtain the decryption key, and the decrypted data is decrypted using the decryption key and the decryption algorithm to obtain the decrypted data, which is generated according to the decryption algorithm factor and the decrypted data The plaintext of this communication.

Further, in step 1), the sending end takes the number of a certain byte of the data to be sent this time as the encryption algorithm factor.

Further, the encryption algorithm is a symmetric encryption algorithm, and the decryption algorithm is the same symmetric decryption algorithm as the encryption algorithm.

Further, the encryption algorithm of type A and the decryption algorithm of type A are numbered sequentially in the sending end and the receiving end respectively, and the numbers of the encryption algorithm and the decryption algorithm are in one-to-one correspondence.

Further, in step 1), the sender takes the number of the first byte of the data to be sent this time as the encryption algorithm factor.

Further, in step 1), the sender divides the encryption algorithm factor by A and takes the remainder, adds 1 to the remainder to obtain the encryption algorithm number used in this network communication, and reads the corresponding numbered encryption algorithm according to the encryption algorithm number Obtain the minimum number of bytes N required for this encryption algorithm and the key of the corresponding algorithm.

Further, in step 1), the sender divides the absolute value of the encryption algorithm factor minus 1 by 256, and takes the remainder to obtain the first byte of the encryption key; the absolute value of the encryption algorithm factor minus 2 Divide by 256, take the remainder to get the second byte of the encryption key; and so on, divide the absolute value of the encryption algorithm factor minus N by 256, take the remainder to get the Nth byte of the encryption key ; From this, calculate the first to Nth bytes of this encryption key to obtain this encryption key.

Further, in step 2), the sender extracts the data between the second byte and the last byte from the data to be sent this time to obtain the data to be encrypted, and then uses the encryption key of this time and the encryption key of this time The method encrypts the data to be encrypted to obtain the encrypted data.

Further, in step 2), the first byte of the current communication ciphertext generated by the sender is the encryption algorithm factor, and the second byte to the last byte are the encrypted data of this time.

Further, in step 3), the receiving end reads the number of the first byte of the communication ciphertext to obtain the decryption algorithm factor, divides the decryption algorithm factor by A to obtain the remainder, and adds 1 to the remainder to obtain the decryption algorithm Number and the minimum number of bytes N required for the key of the corresponding algorithm.

Further, in step 3), the receiving end divides the absolute value of the decryption algorithm factor minus 1 by 256, and takes the remainder to obtain the first byte of the decryption key; the receiving end subtracts the absolute value of the decryption algorithm factor by 2 Divide by 256, take the remainder to get the second byte of the decryption key; and so on, the receiver divides the absolute value of the decryption algorithm factor minus N by 256, and take the remainder to get the Nth byte of the decryption key section; thus calculate the 1st to Nth bytes of the decryption key to obtain the decryption key this time.

Further, in step 3), the receiving end extracts the data between the second byte and the last byte from the ciphertext of this communication to obtain the data to be decrypted, and uses the decryption key and the decryption algorithm of this time Decrypt the data to be decrypted to obtain the decrypted data.

Further, in step 3), the first byte of the plaintext of this communication is the factor of the decryption algorithm, and the second byte to the last byte are the decrypted data of this time.

As can be seen from the above description of the present invention, compared with the prior art, the present invention has the following beneficial effects:

A content-based network communication encryption method of the present invention adopts a symmetric encryption algorithm to encrypt and decrypt data according to the content of the data. A variety of one-to-one corresponding symmetric encryption algorithms are preset and numbered at the sending end and the receiving end respectively. The data content calculation selects the encryption algorithm number used, the key used, etc., without the need to transmit additional key information, which is simple, fast, and highly secure.

Detailed ways

The present invention will be further described below through specific embodiments.

A content-based network communication encryption method, setting 8 kinds of symmetric encryption algorithms and the minimum number of bytes N required for the key of each symmetric encryption algorithm at the sending end, and numbering ①, ②, ③, ④, ⑤, ⑥ , ⑦, ⑧; 8 kinds of symmetric decryption algorithms that are the same as the symmetric encryption algorithm of the sender and the minimum number of bytes N required for the key of each decryption algorithm are correspondingly set at the receiving end, and numbered ①, ②, ③, ④, ⑤, ⑥, ⑦, ⑧, the number of the same algorithm is consistent with that of the sender, and the steps are as follows:

1) The sender takes the number of the first byte of the data to be sent this time as the encryption algorithm factor, then divides the encryption algorithm factor by 8 and takes the remainder, and adds 1 to the remainder to obtain the encryption algorithm number used in this network communication , according to the encryption algorithm number, read the corresponding numbered encryption algorithm to obtain the minimum number of bytes N required for this encryption algorithm and the key of the corresponding algorithm.

Then, the sender divides the absolute value of the encryption algorithm factor minus 1 by 256, and takes the remainder to obtain the first byte of the encryption key; divides the absolute value of the encryption algorithm factor minus 2 by 256, and takes the remainder to get The second byte of this encryption key; and so on, divide the absolute value of the encryption algorithm factor minus N by 256, and take the remainder to get the Nth byte of this encryption key; thus calculate this time The 1st to Nth bytes of the encryption key get the current encryption key.

2) The sender takes out the data between the second byte and the last byte from the data to be sent this time to obtain the data to be encrypted, and then uses the encryption key and the encryption method of this time to encrypt the data to be encrypted Encrypt to get the encrypted data this time, and generate the communication ciphertext according to the encryption algorithm factor and the encrypted data this time, the first byte of the communication ciphertext is the encryption algorithm factor, the second byte to the last 1 word Section is the encrypted data of this time, and the ciphertext of this communication is sent to the receiving end through the network.

3) The receiving end reads the number of the first byte of the communication ciphertext to obtain the decryption algorithm factor, divides the decryption algorithm factor by 8 to get the remainder, and adds 1 to the remainder to obtain the decryption algorithm number and the key of the corresponding algorithm The minimum number of bytes N required.

The receiving end divides the absolute value of the decryption algorithm factor minus 1 by 256, and takes the remainder to obtain the first byte of the decryption key; the receiving end divides the absolute value of the decryption algorithm factor minus 2 by 256, and takes the remainder to obtain the current key. The second byte of the decryption key; and so on, the receiving end divides the absolute value of the decryption algorithm factor minus N by 256, and takes the remainder to obtain the Nth byte of the decryption key; thus, the decryption is calculated The 1st to Nth bytes of the key get the decryption key for this time.

The receiving end takes the data between the second byte and the last byte from the ciphertext of this communication to obtain the data to be decrypted, and uses the decryption key and the decryption algorithm to decrypt the data to be decrypted to obtain the decryption Data, according to the decryption algorithm factor and the current decrypted data to generate the communication plaintext, the first byte of the communication plaintext is the decryption algorithm factor, and the second byte to the last byte is the current decryption data.

The above is only a specific embodiment of the present invention, but the design concept of the present invention is not limited thereto, and any insubstantial changes made to the present invention by using this concept should be an act of violating the protection scope of the present invention.

Claims (11)

1. A content-based network communication encryption method, characterized in that: A kind of encryption algorithm is set at the sending end and numbered sequentially, and the minimum number of bytes required for the key of each encryption algorithm is set correspondingly at the receiving end The decryption algorithm of type A is numbered in sequence, and the minimum number of bytes required for the key of each decryption algorithm, the encryption algorithm and the decryption algorithm number are in one-to-one correspondence; then the steps are as follows: 1) The sending end determines the encryption algorithm factor according to the first byte in the data to be sent this time, and then selects the encryption algorithm and the minimum number of bytes N required by the key of the corresponding algorithm through the encryption algorithm factor, Calculate the encryption key according to the encryption algorithm factor and the minimum number of bytes N; 2) The sender uses the encryption algorithm and the encryption key to encrypt another part of the data to be sent this time to obtain the encrypted data, and generates the communication ciphertext according to the encryption algorithm factor and the encrypted data this time, Send the ciphertext of this communication to the receiving end through the network; 3) The receiving end receives the ciphertext of this communication to obtain the corresponding decryption algorithm factor and the data to be decrypted, and determines the minimum number of bytes N required by the decryption algorithm and the key of the corresponding algorithm through the decryption algorithm factor, and then according to The decryption algorithm factor and the minimum number of bytes N are calculated to obtain the decryption key, and the decrypted data is decrypted using the decryption key and the decryption algorithm to obtain the decrypted data, which is generated according to the decryption algorithm factor and the decrypted data The plaintext of this communication. 2. A content-based network communication encryption method according to claim 1, characterized in that: the encryption algorithm is a symmetric encryption algorithm, and the decryption algorithm is the same symmetric decryption algorithm as the encryption algorithm. 3. A content-based network communication encryption method as claimed in claim 2, characterized in that: in step 1), the sending end takes the number of the first byte of the data to be sent this time as the encryption algorithm factor. 4. a kind of content-based network communication encryption method as claimed in claim 3, it is characterized in that: in step 1) in sending end, get remainder after dividing encryption algorithm factor by A, remainder adds 1 and obtains this network communication The number of the encryption algorithm used, according to the number of the encryption algorithm, read the encryption algorithm of the corresponding number to obtain the minimum number of bytes N required for the encryption algorithm and the key of the corresponding algorithm. 5. a kind of content-based network communication encryption method as claimed in claim 3 or 4, is characterized in that: in step 1), sending end divides the absolute value after encryption algorithm factor minus 1 by 256, gets remainder to obtain The first byte of this encryption key; divide the absolute value of the encryption algorithm factor minus 2 by 256, and take the remainder to get the second byte of this encryption key; and so on, subtract N from the encryption algorithm factor The final absolute value is divided by 256, and the remainder is taken to obtain the Nth byte of the encryption key; thus, the first to N bytes of the encryption key are calculated to obtain the encryption key of this time. 6. a kind of content-based network communication encryption method as claimed in claim 5, is characterized in that: in step 2), sender takes out the 2nd byte to the last 1 byte from the data to be sent this time The data in between is obtained as the data to be encrypted, and then the data to be encrypted is encrypted by using the encryption key and the encryption method of this time to obtain the encrypted data this time. 7. a kind of content-based network communication encryption method as claimed in claim 6, is characterized in that: in step 2), the 1st byte of this communication ciphertext that sender generates is encryption algorithm factor, the 1st byte 2 bytes to the last 1 byte are the encrypted data this time. 8. a kind of content-based network communication encryption method as claimed in claim 6 or 7, it is characterized in that: in step 3), the receiving end reads the number of the 1st byte of this communication ciphertext and obtains decryption Algorithm factor, divide the decryption algorithm factor by A to get the remainder, and add 1 to the remainder to obtain the decryption algorithm number and the minimum number of bytes N required for the key of the corresponding algorithm. 9. A kind of network communication encryption method based on content as claimed in claim 8, it is characterized in that: in step 3), receiving end divides the absolute value of deciphering algorithm factor minus 1 by 256, gets remainder and obtains this deciphering The first byte of the key; the receiving end divides the absolute value of the decryption algorithm factor minus 2 by 256, and takes the remainder to obtain the second byte of the decryption key; and so on, the receiving end subtracts the decryption algorithm factor by N The absolute value of is divided by 256 and the remainder is obtained to obtain the Nth byte of the decryption key; thus, the 1st to Nth bytes of the decryption key are calculated to obtain the decryption key of this time. 10. a kind of content-based network communication encryption method as claimed in claim 9, is characterized in that: in step 3) in, receiving end takes out the 2nd byte to last 1 byte from this communication ciphertext The data to be decrypted is obtained by using the decryption key and the decryption algorithm to decrypt the data to be decrypted to obtain the decrypted data. 11. a kind of content-based network communication encryption method as claimed in claim 9 or 10, it is characterized in that: in step 3) in, the 1st byte number of this communication plaintext is decryption algorithm factor, the 2nd The byte to the last byte is the decrypted data this time.