CN114969770A - Data encryption method, device, computer-readable storage medium and product - Google Patents

Abstract

The embodiment of the disclosure provides a data encryption method, a device, a computer readable storage medium and a product, wherein the method comprises the following steps: acquiring a random number plaintext, wherein the random number plaintext is a random number generated together with an affine secret key; encrypting a random number according to the iterative affine secret key to obtain a random number ciphertext, and determining the random number ciphertext as a pseudo public key; and sending the pseudo public key to data receiving equipment, so that the data receiving equipment adopts the pseudo public key to perform data encryption operation on a plaintext to be calculated. Under the condition that the data sending equipment does not need to expose the iterative affine secret key, the data receiving equipment can still realize the conversion from the plaintext to the ciphertext, so that the data calculation at the ciphertext level can be realized on the basis of ensuring the data security. The data transmission process is high in safety, and therefore the method can be suitable for more application scenes.

Description

Data encryption method, device, computer-readable storage medium and product

technical field

Embodiments of the present disclosure relate to the field of big data, and in particular, to a data encryption method, device, computer-readable storage medium, and product.

Background technique

Federated learning can realize the joint modeling of encrypted data between multiple parties by using homomorphic encryption technology, and mine the value of data while ensuring the data security of all parties involved. The current homomorphic encryption technology used in federated learning is mainly Paillier semi-homomorphic encryption technology, which can support ciphertext addition and number multiplication homomorphism, but Paillier encryption algorithm has a large number of modular exponentiations in the process of encryption and decryption and ciphertext calculation. operation, the computational efficiency is relatively low.

In order to improve the efficiency of encryption calculation, in the prior art, iterative affine encryption technology is generally used to encrypt the plaintext.

In the process of realizing the present disclosure, the inventor found that there are at least the following problems in the prior art: since the iterative affine encryption technology is a symmetric encryption technology, once the encryption key is leaked, the decryption key will also be leaked. Therefore, the security low, and the scope of application is small.

SUMMARY OF THE INVENTION

Embodiments of the present disclosure provide a data encryption method, device, computer-readable storage medium and product, which are used to solve the technical problems of low security and low applicability of the existing iterative affine encryption technology.

In a first aspect, an embodiment of the present disclosure provides a data encryption method, including:

obtaining a random number plaintext, wherein the random number plaintext is a random number generated together with an iterative affine key;

The random number is encrypted according to the iterative affine key to obtain a random number ciphertext, and the random number ciphertext is determined as a pseudo public key;

The pseudo public key is sent to the data receiving device, so that the data receiving device uses the pseudo public key to perform a data encryption operation on the plaintext to be calculated.

The data encryption method provided by this embodiment generates a random number plaintext while generating an iterative affine key, and uses the iterative affine key to encrypt the random number plaintext to obtain a pseudo public key. The pseudo public key is sent to the data receiving device, so that the data receiving device can use the pseudo public key to encrypt the plaintext to be calculated. Since the data sending device does not need to expose the iterative affine key, the data receiving device can still realize the conversion from plaintext to ciphertext, so that data computation at the ciphertext level can be realized on the basis of ensuring data security. The security of the data transmission process is high, so the adaptability is strong.

In a second aspect, an embodiment of the present disclosure provides a data encryption method, including:

Obtaining a pseudo public key sent by the data sending device, wherein the pseudo public key is obtained after the data sending device encrypts the random number plaintext generated together with the iterative affine secret key by means of iterative affine encryption;

performing an encryption operation on the plaintext to be calculated according to the pseudo public key to obtain a second target ciphertext;

Sending the second target ciphertext to the data sending device, so that the data sending device performs a ciphertext calculation operation according to the first target ciphertext and the second target ciphertext, wherein the ciphertext calculation includes: One or more of addition calculation and number multiplication calculation, the first target ciphertext is obtained by the data sending device after encrypting the data to be calculated by using the random number plaintext.

In a third aspect, an embodiment of the present disclosure provides a data sending device, including:

an acquisition module, configured to acquire a random number plaintext, wherein the random number plaintext is a random number generated together with an iterative affine key;

an encryption module, configured to perform an encryption operation on a random number according to the iterative affine secret key, obtain a random number ciphertext, and determine the random number ciphertext as a pseudo public key;

A sending module, configured to send the pseudo public key to a data receiving device, so that the data receiving device uses the pseudo public key to perform a data encryption operation on the plaintext to be calculated.

In a fourth aspect, an embodiment of the present disclosure provides a data receiving device, including:

A pseudo-public key acquisition module, configured to obtain a pseudo-public key sent by a data sending device, wherein the pseudo-public key is a random number generated by the data sending device using an iterative affine encryption method together with the iterative affine key The plaintext is obtained after encryption operation;

a processing module, configured to perform an encryption operation on the plaintext to be calculated according to the pseudo public key to obtain a second target ciphertext;

A transmission module, configured to send the second target ciphertext to the data sending device, so that the data sending device performs a ciphertext calculation operation according to the first target ciphertext and the second target ciphertext, wherein the The ciphertext calculation includes one or more of addition calculation and number multiplication calculation, and the first target ciphertext is obtained by the data sending device after encrypting the data to be calculated by using the random number plaintext.

In a fifth aspect, an embodiment of the present disclosure provides an electronic device including: a memory, and a processor;

memory; memory for storing instructions executable by the processor;

Wherein, the processor is configured to invoke the program instructions in the memory to execute the data encryption method according to the first aspect or the second aspect.

In a sixth aspect, embodiments of the present disclosure provide a computer-readable storage medium, where computer-executable instructions are stored in the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, are used to implement the first aspect or the first The data encryption method described in the second aspect.

In a seventh aspect, an embodiment of the present disclosure provides a computer program product, including a computer program that, when executed by a processor, implements the data encryption method according to the first aspect or the second aspect.

The data encryption method, device, computer-readable storage medium and product provided by the embodiments of the present disclosure generate a random number plaintext while generating an iterative affine key, and use the iterative affine key to encrypt the random number plaintext , to obtain the fake public key. The pseudo public key is sent to the data receiving device, so that the data receiving device can use the pseudo public key to encrypt the plaintext to be calculated. Since the data sending device does not need to expose the iterative affine key, the data receiving device can still realize the conversion from plaintext to ciphertext, so that data computation at the ciphertext level can be realized on the basis of ensuring data security. The security of the data transmission process is high, so the adaptability is strong.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description serve to explain the principles of the disclosure.

1 is a schematic diagram of a system architecture on which the present disclosure is based;

2 is a schematic flowchart of a data encryption method provided in Embodiment 1 of the present disclosure;

FIG. 3 is a schematic flowchart of generating a pseudo public key according to an embodiment of the present disclosure;

4 is a schematic flowchart of a data encryption method according to Embodiment 2 of the present disclosure;

5 is a schematic flowchart of a data encryption method provided in Embodiment 3 of the present disclosure;

6 is a schematic structural diagram of a data sending device according to Embodiment 4 of the present disclosure;

7 is a schematic structural diagram of a data receiving device according to Embodiment 5 of the present disclosure;

FIG. 8 is a schematic structural diagram of an electronic device according to Embodiment 6 of the present disclosure.

The above-mentioned drawings have shown clear embodiments of the present disclosure, and will be described in more detail hereinafter. These drawings and written descriptions are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the disclosed concepts to those skilled in the art by referring to specific embodiments.

Detailed ways

Exemplary embodiments will be described in detail herein, examples of which are illustrated in the accompanying drawings. Where the following description refers to the drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the illustrative examples below are not intended to represent all implementations consistent with this disclosure. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present disclosure as recited in the appended claims.

First, the terms involved in the embodiments of the present disclosure are explained:

Homomorphic encryption: An encryption technique in which the result of an operation on the ciphertext of the data can be equivalent to the addition or multiplication operation on the plaintext.

Semi-homomorphic encryption: The basic meaning is the same as that of homomorphic encryption, but only one of additive homomorphism or multiplication homomorphism can be supported.

Multiplication homomorphism: Multiplication homomorphism means that both the multiplier and the multiplicand are ciphertext, and the multiplication homomorphism means that one of the multiplier and the multiplicand is the ciphertext, and the other is the plaintext.

In view of the above-mentioned technical problems of low security and low applicability of the existing iterative affine encryption technology, the present disclosure provides a data encryption method, device, computer-readable storage medium and product.

It should be noted that the present disclosure provides data encryption methods, devices, computer-readable storage media and products that can be used in various scenarios of multi-party data secure transmission.

Existing iterative affine encryption methods are generally symmetric encryption. To achieve encryption at the ciphertext level, it is necessary to synchronize the iterative affine cipher to the data receiver, so that the data receiver can use the iterative affine cipher for data encryption. However, at this time, the data transmission is equivalent to plaintext transmission.

In the process of solving the above technical problems, the inventor found through research that in order to realize data calculation at the ciphertext level on the basis of ensuring data security, a pseudo public key can be designed, so that the data receiving end can use the pseudo public key Perform data encryption operations. Specifically, while generating the iterative affine key, a random number plaintext is generated, and the random number plaintext is encrypted by using the iterative affine key to obtain a pseudo public key. The pseudo public key is sent to the data receiving device, so that the data receiving device can use the pseudo public key to encrypt the plaintext to be calculated. Therefore, the data receiving device can still realize the conversion from plaintext to ciphertext without exposing the iterative affine key.

The technical solutions of the present disclosure and how the technical solutions of the present disclosure solve the above-mentioned technical problems will be described in detail below with specific examples. The following specific embodiments may be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present disclosure will be described below with reference to the accompanying drawings.

FIG. 1 is a schematic diagram of a system architecture on which the present disclosure is based. As shown in FIG. 1 , the system architecture on which the present disclosure is based at least includes: a data sending device 1 and a data receiving device 2, wherein the data sending device 1 and the data receiving device 2 are both provided with A data encryption device, the data encryption device can be written in languages such as C/C++, Java, Shell or Python.

FIG. 2 is a schematic flowchart of a data encryption method according to Embodiment 1 of the present disclosure. As shown in FIG. 2 , the method includes:

Step 201: Obtain a random number plaintext, where the random number plaintext is a random number generated together with an iterative affine key.

The execution body of this embodiment is a data encryption device, and the data encryption device can be coupled to a data transmission device, and the data transmission device can be communicatively connected with a data reception device, thereby enabling data interaction.

In this embodiment, in order to realize data calculation at the ciphertext level on the basis of ensuring data security, a pseudo public key can be designed, so that the data receiving end can use the pseudo public key to perform data encryption operations.

Compared with the ordinary iterative affine encryption method, in the secret key data structure with the pseudo public key encryption method, a random number is generated when the secret key is generated, and then the random number is encrypted by the encryption method as the encrypted pseudo public key. The pseudo public key can be obtained through the get_public_key() method of the key. In order to realize the generation of the pseudo public key, the plaintext of the random number can be obtained.

Step 202: Perform an encryption operation on a random number according to the iterative affine key to obtain a random number ciphertext, and determine the random number ciphertext as a pseudo public key.

In this embodiment, after the random number plaintext is obtained, an encryption operation can be performed on the random number plaintext to generate a random number ciphertext corresponding to the random number plaintext, and the random number ciphertext is determined as a pseudo public key.

Specifically, the iterative affine key can be used to perform an affine encryption operation on the random number plaintext to obtain the random number ciphertext. Optionally, an affine encryption operation may be performed on the plaintext of the random number, or an iterative affine encryption operation may be performed, which is not limited in the present disclosure.

Step 203: Send the pseudo public key to the data receiving device, so that the data receiving device uses the pseudo public key to perform a data encryption operation on the plaintext to be calculated.

In this embodiment, after the corresponding pseudo public key is generated according to the plaintext of the random number, the pseudo public key may be sent to the data receiving device. Correspondingly, after acquiring the pseudo public key, the data receiving device can use the pseudo public key to perform a data encryption operation on the plaintext to be calculated. In this way, the plaintext to be calculated can be converted into ciphertext, and then the ciphertext homomorphic encryption operation can be performed according to the ciphertext and the ciphertext encrypted by the data sender through iterative affine encryption, without secreting the iterative affine in the iterative affine process. The key is sent to the data receiver, which can improve the security of data transmission.

Further, on the basis of Embodiment 1, step 202 specifically includes:

According to the iterative affine key, the random number plaintext is encrypted by adopting an iterative affine encryption method to obtain the random number ciphertext.

In this embodiment, the iterative affine key may be used to perform an iterative affine encryption operation on the random number plaintext simultaneously generated by the iterative affine key to obtain the random number plaintext. Iterative affine encryption operations for a preset number of N can be performed on it.

Optionally, any encryption technology with homomorphic encryption can realize the generation and use of a pseudo public key by uploading, wherein the encryption technology with homomorphic encryption includes semi-homomorphic encryption and full homomorphic encryption.

Further, on the basis of Embodiment 1, according to the iterative affine key, the random number plaintext is encrypted by means of iterative affine encryption to obtain the random number ciphertext, including:

Perform a decimal point shift operation on the floating point number in the random number plaintext to obtain an integer plaintext corresponding to the random number plaintext;

Using the iterative affine key, perform a preset number of iterative affine encryption operations on the integer plaintext to obtain the random number ciphertext.

In this embodiment, the floating point number in the plaintext of the random number can be converted into an integer through scale transformation, so as to obtain the plaintext of the integer corresponding to the plaintext of the random number. At this time, the floating-point number is expanded by a certain number of data bits, but the precision of the decimal has been encoded into the integer field, and then the iterative affine key is used, and after a preset number of iterative affine encryption operations and modular exponentiation operations, the The final random number ciphertext.

FIG. 3 is a schematic flowchart of a pseudo public key generation provided by an embodiment of the present disclosure. As shown in FIG. 3 , first, a random number plaintext 31 needs to be obtained, and a decimal point shift operation is performed on the random number plaintext 31 to obtain an integer plaintext 32 . The integer plaintext 32 performs N times of iterative affine encryption operations to obtain the random number ciphertext 33 .

The data encryption method provided by this embodiment generates a random number plaintext while generating an iterative affine key, and uses the iterative affine key to encrypt the random number plaintext to obtain a pseudo public key. The pseudo public key is sent to the data receiving device, so that the data receiving device can use the pseudo public key to encrypt the plaintext to be calculated. Since the data sending device does not need to expose the iterative affine key, the data receiving device can still realize the conversion from plaintext to ciphertext, so that data computation at the ciphertext level can be realized on the basis of ensuring data security. The security of the data transmission process is high, so the adaptability is strong.

FIG. 4 is a schematic flowchart of the data encryption method provided in Embodiment 2 of the present disclosure. On the basis of Embodiment 1, as shown in FIG. 4 , after step 201, the method further includes:

Step 401: Acquire data to be calculated.

Step 402: Multiply the data to be calculated by the plaintext of the random number to obtain preprocessed data.

Step 403: According to the iterative affine key, perform an encryption operation on the preprocessed data by means of iterative affine encryption to obtain a first target ciphertext.

In this embodiment, when the data transmission device performs data transmission, the data encryption operation can be performed according to the random number plaintext and the iterative affine key. Specifically, the data to be calculated can be obtained first, and the data to be calculated can be multiplied by the plaintext of the random number to obtain the preprocessed data. According to the iterative affine key, an iterative affine encryption operation is performed on the preprocessed data to obtain the first target ciphertext.

Correspondingly, the data sending device may also perform a decryption operation on the first target ciphertext. Specifically, after obtaining the first target ciphertext, an iterative affine inverse transformation process can be performed (that is, the operation steps of the encryption process are the same, but the operation parameters are reversed from the encryption process, and the decryption parameters are the inverse of the encryption parameters), Finally, multiply the inverse of the random number to obtain the data to be calculated corresponding to the first target ciphertext.

Optionally, after the preprocessing data is obtained, the floating point numbers in the preprocessing data can also be converted into integers. Correspondingly, after performing the inverse transformation on the first target ciphertext, the integer in the result of the inverse transformation can also be converted into a floating point number, and then multiplied by the inverse of the random number to obtain the data to be calculated corresponding to the first target ciphertext. .

Further, on the basis of any of the above embodiments, after step 203, it also includes:

Obtain the second target ciphertext sent by the data receiving device, the first target ciphertext and the second target ciphertext are in the same ciphertext domain, wherein the second target ciphertext is the data receiving device using the pseudo public The key is obtained after performing a data encryption operation on the plaintext to be calculated;

A ciphertext calculation operation is performed according to the first target ciphertext and the second target ciphertext to obtain a calculation result, wherein the ciphertext calculation includes one or more of addition calculation and number multiplication calculation.

In this embodiment, after acquiring the pseudo public key, the data receiving device can use the pseudo public key to perform a data encryption operation on the plaintext to be calculated for data transmission to obtain the second target ciphertext. Correspondingly, the second target ciphertext sent by the data receiving device can also be acquired, wherein the second target ciphertext and the first target ciphertext are in the same ciphertext domain, so that the two can perform ciphertext-level data computing operations. . Therefore, a ciphertext calculation operation can be performed according to the first target ciphertext and the second target ciphertext to obtain a calculation result, wherein the ciphertext calculation includes one or more of addition calculation and multiplication calculation.

In the data encryption method provided by this embodiment, when the data transmission device performs data transmission, the data encryption operation can be performed according to the plaintext of the random number and the iterative affine key, so that the first target ciphertext and the second target ciphertext can be kept in the same position. In the same ciphertext field, on the basis of ensuring data security, ciphertext-level data calculation is realized.

FIG. 5 is a schematic flowchart of a data encryption method according to Embodiment 3 of the present disclosure. As shown in FIG. 5 , the method includes:

Step 501: Obtain a pseudo public key sent by the data sending device, wherein the pseudo public key is obtained after the data sending device encrypts the random number plaintext generated together with the iterative affine secret key by means of iterative affine encryption. acquired.

Step 502: Perform an encryption operation on the plaintext to be calculated according to the pseudo public key to obtain a second target ciphertext.

Step 503: Perform a ciphertext calculation operation according to the first target ciphertext and the second target ciphertext sent by the data sending device, wherein the ciphertext calculation includes one or more of addition calculation and number multiplication calculation. item, the first target ciphertext is obtained by the data sending device after encrypting the data to be calculated by using the random number plaintext.

The execution body of this embodiment is a data encryption device, and the data encryption device can be coupled to a data receiving device, and the data receiving device can be connected in communication with the data sending device.

In this embodiment, the data receiving device can obtain the pseudo public key sent by the data transmitting device. Among them, compared with the common iterative affine encryption method, in the secret key data structure with the pseudo public key encryption method, a random number plaintext will be generated when the secret key is generated. The data sending device can perform an iterative affine encryption operation on the plaintext of the random number to obtain a pseudo public key, so that the data sending device can send the pseudo public key to the data receiving device. After acquiring the pseudo public key, the data receiving device can use the pseudo public key to perform data encryption operations on the plaintext to be calculated that needs to be transmitted to obtain the second target ciphertext. A ciphertext calculation operation is performed on the target ciphertext and the second target ciphertext, wherein the second target ciphertext and the first target ciphertext are in the same ciphertext domain, so that they can perform ciphertext-level data calculation operations. The ciphertext calculation includes one or more of addition calculation and number multiplication calculation.

Further, on the basis of Embodiment 3, step 502 specifically includes:

A number multiplication operation is performed on the plaintext to be calculated and the pseudo public key to obtain a second target ciphertext.

In this embodiment, the pseudo-public key encryption operation can be specifically classified into stealth application and explicit application. Among them, the implicit application of pseudo-public key encryption is the addition of plaintext and ciphertext. When ciphertext and plaintext are added, the plaintext to be calculated needs to be multiplied with the pseudo-public key cipher_scale, that is, the plaintext to be calculated can be multiplied Converted to ciphertext, and then the operation of the plaintext to be calculated and the first target ciphertext is converted into the addition of the first target ciphertext and the second target ciphertext.

Further, on the basis of Embodiment 3, step 502 specifically includes:

Perform an assignment initialization operation on the pseudo public key to obtain a target pseudo public key, wherein the target pseudo public key has a preset target attribute after assignment initialization.

The plaintext to be calculated is encrypted by using the target pseudo public key to obtain the second target ciphertext.

In this embodiment, the explicit application of pseudo-public key encryption is to directly encrypt the plaintext to be calculated by using the pseudo-public key cipher_scale. Because cipher_scale is a special ciphertext, it also has the cipher_scale attribute. During the initialization process, you can Directly setting this parameter to a negative number can distinguish it from general ciphertext. Because the encryption process requires modular exponentiation, the ciphertext cannot be negative. Based on this, the general ciphertext can be restricted from using the encryption function. In addition, the ciphertext generated using pseudo-public key encryption must also have the same cipher_scale attribute as other ciphertexts encrypted by the secret key. Therefore, in the pseudo-public key encryption process, the pseudo-public key ciphertext itself needs to be used as the ciphertext The cipher_scale attribute is initialized by assignment to obtain a target pseudo-public key, wherein the target pseudo-public key has a preset target attribute after the assignment and initialization. The plaintext to be calculated is encrypted by using the target pseudo public key to obtain the second target ciphertext. The second target ciphertext encrypted by the pseudo-public key can be made consistent with the directly encrypted ciphertext.

Further, on the basis of Embodiment 3, performing an encryption operation on the plaintext to be calculated by using the target pseudo-public key to obtain the second target ciphertext, including:

A multiplication operation is performed on the target pseudo-public key and the to-be-computed plaintext to obtain a second target ciphertext.

Specifically, a multiplication operation may be performed on the target pseudo-public key and the plaintext to be calculated to obtain the second target ciphertext.

In the data encryption method provided by this embodiment, after obtaining the pseudo public key, the pseudo public key can be used to perform data encryption operation on the plaintext to be calculated that needs to be transmitted to obtain the second target ciphertext, and the second target ciphertext can also be obtained. The two-target ciphertext is sent to the data sending device, so that the data receiving device can still realize the conversion from plaintext to ciphertext without exposing the iterative affine key, so that encryption can be realized on the basis of ensuring data security. Text-level data calculations.

FIG. 6 is a schematic structural diagram of a data sending device according to Embodiment 4 of the present disclosure. As shown in FIG. 6 , the data sending device includes an obtaining module 61 , an encryption module 62 and a sending module 63 . The obtaining module 61 is used to obtain the random number plaintext, wherein the random number plaintext is a random number generated together with the iterative affine key; the encryption module 62 is used to pair the random number according to the iterative affine key. Perform an encryption operation, obtain a random number ciphertext, and determine the random number ciphertext as a pseudo public key; the sending module 63 is used to send the pseudo public key to the data receiving device, so that the data receiving device adopts the The pseudo public key performs data encryption operations on the plaintext to be computed.

Further, on the basis of Embodiment 4, the encryption module is configured to: perform an encryption operation on the plaintext of the random number by using an iterative affine encryption method according to the iterative affine key to obtain the random number secret key. arts.

Further, on the basis of Embodiment 4, the encryption module is used to: perform a decimal point shift operation on the floating point number in the plaintext of the random number to obtain an integer plaintext corresponding to the plaintext of the random number; adopt the iterative affine A secret key, which performs a preset number of iterative affine encryption operations on the integer plaintext to obtain the random number ciphertext.

Further, on the basis of any of the above-mentioned embodiments, the device further includes: a data acquisition module to be calculated, for acquiring the data to be calculated; a calculation module, for comparing the data to be calculated with the plaintext of the random number multiplication to obtain preprocessed data; an encryption processing module, configured to perform an encryption operation on the preprocessed data by means of iterative affine encryption according to the iterative affine key to obtain the first target ciphertext.

Further, on the basis of any of the above-mentioned embodiments, the apparatus further includes: an acquisition module configured to acquire a second target ciphertext sent by the data receiving device, where the first target ciphertext and the second target ciphertext are in the same In the same ciphertext field, wherein, the second target ciphertext is obtained after the data receiving device uses the pseudo public key to perform data encryption on the plaintext to be calculated; A ciphertext calculation operation is performed on the target ciphertext and the second target ciphertext to obtain a calculation result, wherein the ciphertext calculation includes one or more of addition calculation and number multiplication calculation.

FIG. 7 is a schematic structural diagram of a data receiving device according to Embodiment 5 of the present disclosure. As shown in FIG. 7 , the data receiving device includes: a pseudo-public key acquisition module 71 , a processing module 72 , and a transmission module 73 . The pseudo public key acquisition module 71 is configured to obtain a pseudo public key sent by the data sending device, wherein the pseudo public key is generated by the data sending device using iterative affine encryption together with the iterative affine key The random number plaintext is obtained after encrypting the plaintext; the processing module 72 is used to encrypt the plaintext to be calculated according to the pseudo public key to obtain the second target ciphertext; the transmission module 73 is used to A ciphertext calculation operation is performed on the first target ciphertext sent by the data sending device and the second target ciphertext, wherein the ciphertext calculation includes one or more of addition calculation and number multiplication calculation. The target ciphertext is obtained by the data sending device after encrypting the data to be calculated by using the random number plaintext.

Further, on the basis of Embodiment 5, the processing module is configured to: perform a digital multiplication operation on the plaintext to be calculated and the pseudo public key to obtain a second target ciphertext.

Further, on the basis of Embodiment 5, the processing module is configured to: perform an assignment initialization operation on the pseudo public key to obtain a target pseudo public key, wherein the target pseudo public key has a preset value after assignment initialization. The target attribute; using the target pseudo public key to encrypt the plaintext to be calculated to obtain the second target ciphertext.

Further, on the basis of Embodiment 5, the processing module is configured to: perform a multiplication operation on the target pseudo-public key and the plaintext to be calculated to obtain a second target ciphertext.

Another embodiment of the present disclosure also provides an electronic device, including: a memory, and a processor;

memory; memory for storing instructions executable by the processor;

Wherein, the processor is configured to call program instructions in the memory to execute the data encryption method according to any one of the foregoing embodiments.

Yet another embodiment of the present disclosure further provides a computer-readable storage medium, where computer-executable instructions are stored in the computer-readable storage medium, and when executed by a processor, the computer-executable instructions are used to implement any of the foregoing embodiments the data encryption method.

Yet another embodiment of the present disclosure further provides a computer program product, including a computer program that, when executed by a processor, implements the data encryption method according to any of the foregoing embodiments.

8 is a schematic structural diagram of an electronic device according to Embodiment 6 of the present disclosure. The device may be a mobile phone, a computer, a digital broadcasting terminal, a message sending and receiving device, a tablet device, a medical device, a personal digital assistant, and the like.

As shown in FIG. 8, device 800 may include one or more of the following components: processing component 802, memory 804, power supply component 806, multimedia component 808, audio component 810, input/output (I/O) interface 812, sensor component 814 , and the communication component 816 .

The processing component 802 generally controls the overall operation of the device 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 can include one or more processors 820 to execute instructions to perform all or some of the steps of the methods described above. Additionally, processing component 802 may include one or more modules that facilitate interaction between processing component 802 and other components. For example, processing component 802 may include a multimedia module to facilitate interaction between multimedia component 808 and processing component 802.

Memory 804 is configured to store various types of data to support operation at device 800 . Examples of such data include instructions for any application or method operating on device 800, contact data, phonebook data, messages, pictures, videos, and the like. Memory 804 may be implemented by any type of volatile or nonvolatile storage device or combination thereof, such as static random access memory (SRAM), electrically erasable programmable read only memory (EEPROM), erasable Programmable Read Only Memory (EPROM), Programmable Read Only Memory (PROM), Read Only Memory (ROM), Magnetic Memory, Flash Memory, Magnetic or Optical Disk.

Power supply assembly 806 provides power to various components of device 800 . Power components 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to device 800 .

Multimedia component 808 includes a screen that provides an output interface between the device 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from a user. The touch panel includes one or more touch sensors to sense touch, swipe, and gestures on the touch panel. The touch sensor may not only sense the boundaries of a touch or swipe action, but also detect the duration and pressure associated with the touch or swipe action. In some embodiments, the multimedia component 808 includes a front-facing camera and/or a rear-facing camera. When the device 800 is in an operation mode, such as a shooting mode or a video mode, the front camera and/or the rear camera may receive external multimedia data. Each of the front and rear cameras can be a fixed optical lens system or have focal length and optical zoom capability.

Audio component 810 is configured to output and/or input audio signals. For example, audio component 810 includes a microphone (MIC) that is configured to receive external audio signals when device 800 is in operating modes, such as call mode, recording mode, and voice recognition mode. The received audio signal may be further stored in memory 804 or transmitted via communication component 816 . In some embodiments, audio component 810 also includes a speaker for outputting audio signals.

The I/O interface 812 provides an interface between the processing component 802 and a peripheral interface module, which may be a keyboard, a click wheel, a button, or the like. These buttons may include, but are not limited to: home button, volume buttons, start button, and lock button.

Sensor assembly 814 includes one or more sensors for providing status assessments of various aspects of device 800 . For example, the sensor component 814 can detect the open/closed state of the device 800, the relative positioning of components, such as the display and keypad of the device 800, and the sensor component 814 can also detect a change in the position of the device 800 or a component of the device 800 , the presence or absence of user contact with the device 800 , the orientation or acceleration/deceleration of the device 800 and the temperature change of the device 800 . Sensor assembly 814 may include a proximity sensor configured to detect the presence of nearby objects in the absence of any physical contact. Sensor assembly 814 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

Communication component 816 is configured to facilitate wired or wireless communications between device 800 and other devices. Device 800 may access wireless networks based on communication standards, such as WiFi, 2G or 3G, or a combination thereof. In one exemplary embodiment, the communication component 816 receives broadcast signals or broadcast related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

In an exemplary embodiment, device 800 may be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable A gate array (FPGA), controller, microcontroller, microprocessor or other electronic component implementation is used to perform the above method.

In an exemplary embodiment, there is also provided a non-transitory computer-readable storage medium including instructions, such as memory 804 including instructions, executable by processor 820 of device 800 to perform the above method. For example, the non-transitory computer-readable storage medium may be ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like.

A non-transitory computer-readable storage medium, when an instruction in the storage medium is executed by a processor of a terminal device, enables the terminal device to execute the above-mentioned method for split-screen processing of the terminal device.

Other embodiments of the present disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common general knowledge or techniques in the technical field not disclosed by this disclosure . The specification and examples are to be regarded as exemplary only, with the true scope and spirit of the disclosure being indicated by the following claims.

It is to be understood that the present disclosure is not limited to the precise structures described above and illustrated in the accompanying drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims (14)

1. a data encryption method, is characterized in that, comprises: obtaining a random number plaintext, wherein the random number plaintext is a random number generated together with an iterative affine key; The random number is encrypted according to the iterative affine key to obtain a random number ciphertext, and the random number ciphertext is determined as a pseudo public key; The pseudo public key is sent to the data receiving device, so that the data receiving device uses the pseudo public key to perform a data encryption operation on the plaintext to be calculated. 2. The method according to claim 1, wherein, performing an encryption operation on a random number according to the iterative affine key to obtain a random number ciphertext, comprising: According to the iterative affine key, the random number plaintext is encrypted by adopting an iterative affine encryption method to obtain the random number ciphertext. 3. The method according to claim 2, wherein, according to the iterative affine secret key, the random number plaintext is encrypted by means of iterative affine encryption to obtain the random number ciphertext ,include: Perform a decimal point shift operation on the floating point number in the random number plaintext to obtain an integer plaintext corresponding to the random number plaintext; Using the iterative affine key, perform a preset number of iterative affine encryption operations on the integer plaintext to obtain the random number ciphertext. 4. The method according to claim 1, wherein after obtaining the random number plaintext, further comprising: Get the data to be calculated; Multiplying the data to be calculated by the plaintext of the random number to obtain preprocessed data; According to the iterative affine key, the preprocessing data is encrypted by means of iterative affine encryption to obtain the first target ciphertext. 5. The method according to claim 4, wherein after the sending the pseudo public key to the data receiving device, the method further comprises: Obtain the second target ciphertext sent by the data receiving device, the first target ciphertext and the second target ciphertext are in the same ciphertext domain, wherein the second target ciphertext is the data receiving device using the pseudo public The key is obtained after performing a data encryption operation on the plaintext to be calculated; A ciphertext calculation operation is performed according to the first target ciphertext and the second target ciphertext to obtain a calculation result, wherein the ciphertext calculation includes one or more of addition calculation and number multiplication calculation. 6. a data encryption method, is characterized in that, comprises: Obtaining a pseudo public key sent by the data sending device, wherein the pseudo public key is obtained after the data sending device encrypts the random number plaintext generated together with the iterative affine secret key by means of iterative affine encryption; performing an encryption operation on the plaintext to be calculated according to the pseudo public key to obtain a second target ciphertext; Sending the second target ciphertext to the data sending device, so that the data sending device performs a ciphertext calculation operation according to the first target ciphertext and the second target ciphertext, wherein the ciphertext calculation includes: One or more of addition calculation and number multiplication calculation, the first target ciphertext is obtained by the data sending device after encrypting the data to be calculated by using the random number plaintext. 7. The method according to claim 6, wherein the performing an encryption operation on the plaintext to be calculated according to the pseudo public key to obtain a second target ciphertext, comprising: A number multiplication operation is performed on the plaintext to be calculated and the pseudo public key to obtain a second target ciphertext. 8. The method according to claim 6, wherein the performing an encryption operation on the plaintext to be calculated according to the pseudo public key to obtain the second target ciphertext, comprising: performing an assignment initialization operation on the pseudo public key to obtain a target pseudo public key, wherein the target pseudo public key has a preset target attribute after assignment initialization; The plaintext to be calculated is encrypted by using the target pseudo public key to obtain the second target ciphertext. 9 . The method according to claim 8 , wherein, performing an encryption operation on the plaintext to be calculated by using the target pseudo-public key to obtain the second target ciphertext, comprising: 10 . A multiplication operation is performed on the target pseudo-public key and the to-be-computed plaintext to obtain a second target ciphertext. 10. A data transmission device, comprising: an acquisition module, configured to acquire a random number plaintext, wherein the random number plaintext is a random number generated together with an iterative affine key; an encryption module, configured to perform an encryption operation on a random number according to the iterative affine secret key, obtain a random number ciphertext, and determine the random number ciphertext as a pseudo public key; A sending module, configured to send the pseudo public key to a data receiving device, so that the data receiving device uses the pseudo public key to perform a data encryption operation on the plaintext to be calculated. 11. A data receiving device, characterized in that, comprising: A pseudo-public key acquisition module, configured to obtain a pseudo-public key sent by a data sending device, wherein the pseudo-public key is a random number generated by the data sending device using an iterative affine encryption method together with the iterative affine key The plaintext is obtained after encryption operation; a processing module, configured to perform an encryption operation on the plaintext to be calculated according to the pseudo public key to obtain a second target ciphertext; A transmission module, configured to send the second target ciphertext to the data sending device, so that the data sending device performs a ciphertext calculation operation according to the first target ciphertext and the second target ciphertext, wherein the The ciphertext calculation includes one or more of addition calculation and number multiplication calculation, and the first target ciphertext is obtained by the data sending device after encrypting the data to be calculated by using the random number plaintext. 12. An electronic device, comprising: a memory, a processor; memory; memory for storing instructions executable by the processor; Wherein, the processor is configured to call program instructions in the memory to execute the data encryption method according to any one of claims 1-5 or 6-9. 13. A computer-readable storage medium, characterized in that, computer-executable instructions are stored in the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, are used to implement the method according to claim 1-5 or 6- 9. The data encryption method of any one. 14. A computer program product, characterized by comprising a computer program that, when executed by a processor, implements the data encryption method according to any one of claims 1-5 or 6-9.

Images