CN116366243A - Data transmission and encryption method and system for digital collaborative office - Google Patents

Abstract

The invention discloses a data transmission and encryption method and system for digital collaborative office. The method includes: for a certain data, notifying the administrator to set the key A, and notifying the user to set the key B _i ; Combined with the key B _i to form the key AB _i , which is stored in the database in the form of the key AB _i ; on the administrator side, the data is encrypted with the key A and stored in the database; when the data is sent to the client i When , use the key A to decrypt the stored ciphertext data, and obtain the key B _i according to the decryption, use the key B _i to re-encrypt the data and send it to the client i; at the client i, use the key B _i decrypts the received ciphertext data. The invention enables the administrator terminal and the user terminal to cooperate to encrypt data, and the user terminal can only see the decrypted data after inputting its own secret key, thereby preventing data leakage caused by database leakage or network hijacking.

Description

A data transmission and encryption method and system for digital collaborative office

technical field

The present invention relates to the technical field of information security, and more specifically relates to a data transmission and encryption method and system for digital collaborative office.

Background technique

At present, in many digital systems and office systems, the storage and transmission of data are realized in plain text, and a few systems use secret key encryption to store and transmit data encrypted, and store the decryption key in databases or files at the same time. , guaranteeing the confidentiality of the data to a certain extent. However, once the secret key and the ciphertext are leaked at the same time, it is easy to decipher the ciphertext, and the security of the data cannot be truly guaranteed. If it is not encrypted, system operation and maintenance personnel can directly see the original data. If the secret key is used to encrypt and the secret key is saved, it is impossible for the developer to achieve true confidentiality, because the program is written by the developer. If the secret key is placed in a third party, the developer can call the decryption tool to read data.

Therefore, how to provide a data transmission and encryption method and system for digital collaborative office that can solve the operation and maintenance personnel or developers to obtain confidential data is an urgent problem to be solved by those skilled in the art.

Contents of the invention

In view of this, the present invention provides a data transmission and encryption method and system for digital collaborative office, so that the administrator and the user end cooperate to encrypt the data, and the user end can only see it after inputting its own secret key. Decrypt data to prevent data leakage caused by database breach or network hijacking.

In order to achieve the above object, the present invention adopts the following technical solutions:

In the first aspect, the present invention provides a data transmission and encryption method for digital collaborative office, including:

For a certain piece of data, send a key coordination setting command to the administrator and at least one client, notify the administrator to set the key A, and notify the client to set their own key B _i , where i represents the i-th client;

Receive the key A set by the administrator and the key _Bi set by the client, and combine the key A with the key _Bi of each client to form the key _ABi , and store it in the database in the form of the key _ABi ;

On the administrator side, use key A to encrypt the data and store it in the database;

When sending the data to client i, use the key A to decrypt the stored ciphertext data, and retrieve the key AB _i , and decrypt it according to the key A and the key AB _i to obtain the key B _i ; use the key B _i re-encrypts the data and sends it to client i;

At the client i, the received ciphertext data is decrypted using the key _Bi .

Further, it also includes:

When a certain data needs to be sent to multiple clients, the key set for each client is different. When sending data, select the specified client and use the respective keys of the specified client to re-encrypt the data respectively. , and then distributed to specified clients.

Further, on the administrator side, the data is decrypted by the key A, and when the data is saved again after the edit operation, the key A is automatically enabled to encrypt the data.

Further, the 3DES algorithm is used to encrypt and decrypt the data.

Further, on the administrator side, before performing a certain operation, a second password verification is prompted.

In the second aspect, the present invention also provides a data transmission and encryption system for digital collaborative office, including:

The key coordination setting module is used to send a key coordination setting instruction to the administrator and at least one user end for a certain data, notify the administrator to set the key A, and notify the user to set the respective keys B _i , i Indicates the i-th client;

The key storage management module is used to receive the key A set by the administrator and the key B _i set by the user end, and combine the key A with the key B _i of each user end into a key AB _i to encrypt stored in the database in the form of the key AB _i ;

The data encryption module at the administrator end is used to encrypt the data with key A at the administrator end and store it in the database;

The data sending and re-encryption module is used to decrypt the stored ciphertext data by using the key A when sending the data to the client i, and call the key AB _i , and decrypt it according to the key A and the key AB _i Obtain the key B _i ; use the key B _i to re-encrypt the data and send it to the client i;

The client data decryption module is used to decrypt the received ciphertext data at the client i using the key _Bi .

Further, the data sending and re-encryption module is also used for selecting a designated client when sending data, and re-encrypting the data with the respective keys of the designated client, and then distributing the data to the designated client.

Further, the data encryption module at the administrator end is also used to decrypt the data through the key A at the administrator end, and when the data is saved again after the editing operation, the key A is automatically enabled to encrypt the data. encryption.

Further, the system also includes:

The secondary authentication module is used to prompt the administrator to perform secondary password authentication before performing an operation.

It can be seen from the above-mentioned technical solutions that, compared with the prior art, the present invention discloses a data transmission and encryption method for digital collaborative office. For a certain data, it is necessary for the administrator and the user to collaborate on the data. Encryption, when the administrator is operating, the data is stored encrypted with the administrator's secret key, the data sent to the client is encrypted with the client's secret key, and the data sent to each client is encrypted with the secret key held by itself Decryption can also ensure that the data is lost due to the loss of the recipient's device and other reasons.

At the same time, the administrator's secret key and user's secret key are not stored, and the data is stored in the database in an encryption method that does not retain the secret key. The data cannot be decrypted by operation and maintenance and technical personnel, and it can also be resolved through normal or abnormal means. Obtaining the database and hijacking program also ensures that the data cannot be decrypted because the secret key cannot be obtained through technical or hacking means.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

Fig. 1 is a flow chart of the data transmission and encryption method for digital collaborative office provided by the present invention;

Fig. 2 is a structural block diagram of a data transmission and encryption system for digital collaborative office provided by the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

As shown in Figure 1, the embodiment of the present invention discloses a data transmission and encryption method for digital collaborative office, including the following steps:

For a certain piece of data, send a key coordination setting command to the administrator and at least one client, notify the administrator to set the key A, and notify the client to set their own key B _i , where i represents the i-th client;

Receive the key A set by the administrator and the key _Bi set by the client, and combine the key A with the key _Bi of each client to form the key _ABi , and store it in the database in the form of the key _ABi ;

On the administrator side, use key A to encrypt the data and store it in the database;

When sending the data to client i, use the key A to decrypt the stored ciphertext data, and retrieve the key AB _i , and decrypt it according to the key A and the key AB _i to obtain the key B _i ; use the key B _i re-encrypts the data and sends it to client i;

At the client i, the received ciphertext data is decrypted using the key _Bi .

The embodiment of the present invention requires the cooperative operation of the administrator end and the user end. On the administrator end, the administrator needs to input the decryption key A before operating the data, and use the key A to decrypt the encrypted data in the database. If the key A is incorrect , the correct decryption result cannot be obtained. If the secret key A is correct, the decrypted data can be obtained and the plaintext will be temporarily displayed on the page. The administrator can edit the data. When saving again, the secret key A will be automatically enabled to save the data Encrypted and saved to the database.

The administrator initiates the collaborative work of setting the user’s secret key to the user’s end. The administrator enters secret key A, and the user enters secret key B. When submitting and saving, the secret key A and secret key B are combined to obtain secret key AB, and the secret AB is stored in the database, but neither key A nor key B is saved.

When the administrator sends the data to the user, he needs to input the secret key A, decrypt the encrypted data in the database through the secret key A to obtain the original data, and take out the secret key AB at the same time, use the secret key A to decrypt the secret key AB to obtain the secret key B key, and then use the B key to encrypt the original data and send it to the client.

After receiving the encrypted data, the client needs to enter the secret key B to view the original data every time it is viewed. If the secret key is wrong, the decrypted data will not be obtained.

In the embodiment of the present invention, the data is encrypted and stored in the database. Because the administrator’s secret key and the user’s secret key are not stored, once the database is leaked, the leaked data cannot be identified, so the data cannot be accessed by operation and maintenance and technical Personnel decrypted.

More advantageously, the method also includes: when a certain data needs to be sent to multiple client terminals, the keys set by each client terminal are different; Keys are used to re-encrypt the data before distributing them to designated clients.

In this embodiment of the present invention, one or more specified clients can be selected to selectively send data, and the data is re-encrypted according to the respective keys of each specified client, and the re-encrypted data is sent to the corresponding client. The keys of each client are different, so the data sent to each client is encrypted by different encryption methods. The encrypted data requires each client to use its own secret key to decrypt its own data in order to see the result. Even if the recipient's device is lost, it will not be easily cracked to cause data loss.

Specifically, whether the data is encrypted and decrypted with key A on the administrator side, or encrypted with key B at the user side, or decrypted at the user side with key B, the 3DES algorithm can be used to decrypt the data. Perform encryption and decryption operations.

More advantageously, on the administrator side, before performing a certain operation, a second password verification is prompted. In the embodiment of the present invention, by prompting to enter a second password verification before entering the relevant page, it can avoid the situation that the administrator terminal is used by other people to cause data leakage.

As shown in Figure 2, the embodiment of the present invention also provides a data transmission and encryption system for digital collaborative office, including:

The key coordination setting module is used to send a key coordination setting instruction to the administrator and at least one user end for a certain data, notify the administrator to set the key A, and notify the user to set the respective keys B _i , i Indicates the i-th client;

The key storage management module is used to receive the key A set by the administrator and the key B _i set by the user end, and combine the key A with the key B _i of each user end into a key AB _i to encrypt stored in the database in the form of the key AB _i ;

The data encryption module at the administrator end is used to encrypt the data with key A at the administrator end and store it in the database;

The data sending and re-encryption module is used to decrypt the stored ciphertext data by using the key A when sending the data to the client i, and call the key AB _i , and decrypt it according to the key A and the key AB _i Obtain the key B _i ; use the key B _i to re-encrypt the data and send it to the client i;

The client data decryption module is used to decrypt the received ciphertext data at the client i using the key _Bi .

Wherein, the data encryption module at the administrator end is also used to decrypt the data through the key A at the administrator end, and automatically enable the key A to encrypt the data when the data is saved again after the editing operation.

More advantageously, the data sending and re-encryption module is also used for selecting a designated client when sending data, and re-encrypting the data with their respective keys respectively, and then distributing the data to the designated client.

In other embodiments, the system of the present invention also includes:

The secondary authentication module is used to prompt the administrator to perform secondary password authentication before performing an operation.

The system of the invention can be applied to various digital collaborative office software, and improves the security of the digital collaborative office software.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for relevant details, please refer to the description of the method part.

The above description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention will not be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (9)

1. A data transmission and encryption method for digital collaborative office, characterized in that it comprises: For a certain piece of data, send a key coordination setting command to the administrator and at least one client, notify the administrator to set the key A, and notify the client to set their own key B _i , where i represents the i-th client; Receive the key A set by the administrator and the key _Bi set by the client, and combine the key A with the key _Bi of each client to form the key _ABi , and store it in the database in the form of the key _ABi ; On the administrator side, use key A to encrypt the data and store it in the database; When sending the data to client i, use the key A to decrypt the stored ciphertext data, and retrieve the key AB _i , and decrypt it according to the key A and the key AB _i to obtain the key B _i ; use the key B _i re-encrypts the data and sends it to client i; At the client i, the received ciphertext data is decrypted using the key _Bi . 2. The data transmission and encryption method for digital collaborative office according to claim 1, further comprising: When a certain data needs to be sent to multiple clients, the key set for each client is different. When sending data, select the specified client and use the respective keys of the specified client to re-encrypt the data respectively. , and then distributed to specified clients. 3. The data transmission and encryption method for digital collaborative office according to claim 1, characterized in that, at the administrator side, the data is decrypted by key A, and saved again after editing the data , key A is automatically enabled to encrypt the data. 4. The data transmission and encryption method for digital collaborative office according to claim 1, characterized in that 3DES algorithm is used to encrypt and decrypt data. 5. The data transmission and encryption method for digital collaborative office according to claim 1, characterized in that, at the administrator end, before performing a certain operation, it prompts for a second password verification. 6. A data transmission and encryption system for digital collaborative office, characterized in that it includes: The key coordination setting module is used to send a key coordination setting instruction to the administrator and at least one user end for a certain data, notify the administrator to set the key A, and notify the user to set the respective keys B _i , i Indicates the i-th client; The key storage management module is used to receive the key A set by the administrator and the key B _i set by the user end, and combine the key A with the key B _i of each user end into a key AB _i to encrypt stored in the database in the form of the key AB _i ; The data encryption module at the administrator end is used to encrypt the data with key A at the administrator end and store it in the database; The data sending and re-encryption module is used to decrypt the stored ciphertext data by using the key A when sending the data to the client i, and call the key AB _i , and decrypt it according to the key A and the key AB _i Obtain the key B _i ; use the key B _i to re-encrypt the data and send it to the client i; The client data decryption module is used to decrypt the received ciphertext data at the client i using the key _Bi . 7. The data transmission and encryption system for digital collaborative office according to claim 6, characterized in that, the data transmission and re-encryption module is also used to select a designated user end when sending data, and adopt a designated user After re-encrypting the data with their respective keys, the data is distributed to the specified client. 8. The data transmission and encryption system for digital collaborative office according to claim 6, characterized in that, the data encryption module at the administrator end is also used to decrypt the data through key A at the administrator end , and when the data is saved again after editing, the key A is automatically enabled to encrypt the data. 9. The data transmission and encryption system for digital collaborative office according to claim 6, further comprising: The secondary authentication module is used to prompt the administrator to perform secondary password authentication before performing an operation.

Images