CN114528575A - File encryption method and system - Google Patents

Abstract

The invention provides a file encryption method and a file encryption system, wherein the method comprises the following steps: dividing a file to be encrypted into a plurality of data blocks; assigning a marker to each data block and determining location coordinates for each data block based on the markers; regularizing each data block into a first character string according to a preset rule and a corresponding position coordinate; acquiring a random secret key, and encrypting the first character string again through the random secret key to obtain a second character string; and generating an encrypted file, randomly sequencing the plurality of second character strings, storing the second character strings into a file body of the encrypted file, and storing the characteristic fields for file data restoration into a file data header of the encrypted file. The beneficial effects of the invention include: the file encryption method provided by the invention is simple and reliable, is convenient for users to realize file encryption by using the method, and is easy to maintain and manage.

Description

A file encryption method and system

technical field

The invention relates to the technical field of file encryption, in particular to a file encryption method and system.

Background technique

With the vigorous development of network technology, many companies have launched information systems, which has led to a rapid increase in the utilization rate of computer files, and network security has also become an important issue of concern now. Data is transmitted through the network. If the confidential files are leaked, it will bring immeasurable losses. In this context, the method of file encryption emerges as the times require.

Therefore, how to design a file data encryption method that is simple and reliable, and is convenient for users to use and manage is urgently needed.

SUMMARY OF THE INVENTION

In order to provide a simple and reliable file encryption method, in one aspect of the present invention, a file encryption method is proposed. The method includes: dividing a file to be encrypted into multiple data blocks; mark, and determine the position coordinates of each data block based on the mark; regularize each of the data blocks into a first character string according to preset rules and corresponding position coordinates; obtain a random secret key, and use the random secret key The key encrypts the first string again to obtain the second string; generates an encrypted file, randomly sorts and saves a plurality of the second strings to the file body of the encrypted file, and uses the features for file data restoration field is saved to the file header of the encrypted file.

In one or more embodiments, each of the data blocks is divided into part of data in at least one line of the file to be encrypted, and the total number of the data blocks is less than the total number of lines of data of the file to be encrypted.

In one or more embodiments, assigning a marker to each of the data blocks, and determining the location coordinates of each data block based on the marker includes: randomly assigning a unique marker to each of the data blocks; and Take each of the data blocks as the center, determine the identification of its adjacent data blocks, and form the position coordinates of the central data blocks according to the preset order; wherein, in response to a certain adjacent position of the central data block There is no data block, the first default token is used instead.

In one or more embodiments, the indicia includes uppercase letters, lowercase letters, numbers, and special symbols; the first default indicia is one of a plurality of the indicia, responsive to one of the plurality of the indicia It is determined as the first default mark, and the first default mark is no longer used as the mark randomly allocated to the plurality of data blocks.

In one or more embodiments, the preset rule includes: judging whether the lengths of data belonging to different lines of the to-be-encrypted file divided into each of the data blocks are the same; A plurality of data in the data block is subjected to rule conversion, and the rule conversion includes converting the data block into corresponding position coordinates plus the number of data contained in the data block plus the data length plus cyclic data, and the cyclic data is: The cycle line number of the data in the data block is added to the data; in response to different lengths, irregular conversion is performed on a plurality of data in the data block, and the irregular conversion includes converting the data block into The corresponding position coordinates plus the number of data contained in the data block plus the second default value plus cyclic data, where the cyclic data is the cyclic line number of the data in the data block plus the length of the data plus the length of the data. stated data.

In one or more embodiments, the preset rule further includes: in response to the data block being divided into only data belonging to a certain row of the to-be-encrypted file, performing rule conversion on the data by default.

In one or more embodiments, the obtaining a random key, and re-encrypting the first string with the random key to obtain the second character string includes: obtaining a first random key and a first random character , and bind with the data block in the first character string; use the first random character to replace the position coordinates of the data block in the first character string; divide the length of the first character string by all The length of the first random key determines the division bits of the data block; and each bit of the first random key is sequentially inserted into the corresponding division bits to obtain a second character string.

In one or more embodiments, the method further includes: generating a new data block according to the second character string; and saving a feature field for data restoration in a data header of the new data block.

In one or more embodiments, the random ordering of the plurality of second character strings includes: allocating a second random character to each of the new data blocks; according to the size of the second random character Multiple new data blocks corresponding to multiple second character strings are reordered.

In a second aspect of the present invention, a file encryption system is proposed, comprising: a data dividing module configured to divide a to-be-encrypted file into a plurality of data blocks; a data marking module configured to provide each of the data blocks Allocating marks, and determining the position coordinates of each data block based on the marks; a first encryption module, configured to regularize each of the data blocks into disordered first characters according to preset rules and corresponding position coordinates a second encryption module, configured to obtain a random secret key, and re-encrypt the first character string with the random secret key to obtain a second character string; an encrypted file generation module, configured to generate an encrypted file, The second character strings are randomly sorted and saved in the file body of the encrypted file, and the characteristic field used for file data restoration is saved in the file data header of the encrypted file.

The beneficial effects of the present invention include: the file encryption method proposed by the method of the present invention is simple and reliable, which is convenient for users to realize file encryption by using the above method, and is easy to maintain and manage.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other embodiments can also be obtained according to these drawings without creative efforts.

Fig. 1 is the working flow chart of a kind of file encryption method of the present invention;

FIG. 2 is a schematic structural diagram of a file encryption system according to the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention more clearly understood, the embodiments of the present invention will be further described in detail below with reference to the specific embodiments and the accompanying drawings.

It should be noted that all expressions using "first" and "second" in the embodiments of the present invention are for the purpose of distinguishing two entities with the same name but not the same or non-identical parameters. It can be seen that "first" and "second" It is only for the convenience of expression and should not be construed as a limitation to the embodiments of the present invention, and subsequent embodiments will not describe them one by one.

Fig. 1 shows a working flow chart of a file encryption method of the present invention. As shown in FIG. 1, the workflow of the file encryption method of the present invention includes: step S1, dividing the file to be encrypted into a plurality of data blocks; step S2, assigning a mark to each data block, and determining each data block based on the mark step S3, regularize each of the data blocks into a first character string according to preset rules and corresponding position coordinates; step S4, obtain a random secret key, and encrypt the first character string again with the random secret key to Obtain a second character string; and step S5, generate an encrypted file, randomly sort and save a plurality of second character strings to the file body of the encrypted file, and sequentially save the characteristic fields corresponding to the second character string to the file data of the encrypted file head.

In order to explain the technical solution of the present invention more clearly, each step of the present invention will be described in more detail below.

For step S1, the present invention uses step S1 to decompose a complete data file into data blocks with discontinuous data, so that even if some data blocks are leaked, correct information cannot be restored from the data blocks, or at least cannot be restored. out complete information. Wherein, the to-be-encrypted file of the present invention is a data file after binary conversion.

In an optional embodiment, in order to achieve the above technical effect of decomposing a complete data file into data blocks with discontinuous data, when dividing data blocks, try to divide the same line of data in the data file into multiple data blocks. In the block, each data block will contain partial data from multiple lines in the data file, wherein each data block is divided into partial data in at least one line of the file to be encrypted, and the total number of data blocks is less than the data of the file to be encrypted. the total number of rows.

In a specific implementation, by analyzing the to-be-encrypted file, according to the total number of data lines in the to-be-encrypted file, determine the row grouping to determine the number of rows of data contained in each data block, and then determine the column grouping to determine A line of data in the file to be encrypted needs to be divided into several segments. The divided files to be encrypted will form a form similar to the following table:

It can be seen from the above that the more the number of column groupings, the worse the data integrity in each data block, but the number of data blocks should not be too large. Too many data blocks will greatly increase the risk of data block loss. Therefore, in a preferred embodiment , the number of data blocks can be half of the total number of lines in the file to be encrypted.

For step S2, the present invention will assign a mark to each data, and the purpose is to use the mark to generate the position coordinates of the data block in the table of the above embodiment, so as to be used when restoring the to-be-encrypted file after disrupting the arrangement of the data blocks in the subsequent steps .

In an optional embodiment, in order to reduce the possibility of the above-mentioned position coordinates being identified and derived, the present invention will randomly assign non-repetitive marks to each data block; and take each data block as the center to determine its phase The identifiers of adjacent data blocks, and the position coordinates of the central data block are formed in a preset order (such as up, down, left, and right); wherein, in response to the absence of a data block in a certain adjacent position of the central data block, the first default mark is used instead. Wherein, the first default marker is one of the multiple markers, and in response to one of the multiple markers being determined as the first default marker, the first default marker is no longer used as the marker randomly assigned to the multiple data blocks. That is, there will be a mark record table in the present invention, and the special function of the special mark will be recorded in the record table, such as the first default mark in this embodiment and the second default value in subsequent embodiments, etc.; When a marker is used for a special purpose, it will no longer be used to form a combination of position coordinates.

In another optional embodiment, in order to further reduce the possibility of the above-mentioned position coordinates being identified and derived, the marks assigned to each data block include but are not limited to uppercase letters, lowercase letters, numbers and special symbols. In a preferred embodiment, adjacent data are randomly assigned different kinds of labels to maximize the difficulty of inference and identification.

In the following implementation, in order to be able to explain other encryption steps more clearly, only the digital mark will be used as an example for description.

In a specific embodiment, each data block sequentially forms the position coordinates of the central data block according to the labels of the adjacent upper, lower, left and right data blocks, and for the case that there is no adjacent data block in a certain direction, the first A default flag "0" instead. For example, the location coordinate of data block 1 is 0402; for another example, the location coordinate of data block 5 is 2046.

For step S3, the present invention utilizes step S3 to realize the first encryption of the data block. The main purpose of this encryption is to bind the position coordinates with the corresponding data block, so as to restore the position after the subsequent data block arrangement is scrambled. Prepare. Of course, step S3 itself can also achieve the technical effect of data encryption.

In an optional embodiment, the preset rules include:

Step S31, judge whether the length of the data of the different rows of the file to be encrypted that is divided into in each data block is the same; that is, when the data block contains multiple pieces of data, judge whether the lengths of the multiple pieces of data are the same;

Step S32, if the length is the same, then the multiple data in the data block is subjected to rule conversion, and the rule conversion includes converting the data block into a corresponding position coordinate plus the number of data contained in the data block plus the data length plus cyclic data, wherein, The loop data is the loop line number of the data in the data block plus data;

For example, suppose that data block 1 contains three pieces of data with the same length, and the specific composition is shown in Table 1 below:

Table 1 Composition of data block 1

line number regularized data 1 QWERT 2 ASDFG 3 ZXCVB

Among them, since the three pieces of data in data block 1 have the same length, the regular conversion will be used to convert data block 1. The conversion result is: 0402351QWERT2ASDFG3ZXCVB, where 0402 is the position coordinate of data block 1, 3 means that the data block has three rows of data, 5 Indicates that the length of the regularized data is 5, 1 is the loop line number, QWERT is the encrypted data, and so on to form the above string.

Step S33, if the lengths are different, then perform irregular conversion on a plurality of data in the data block, and the irregular conversion includes converting the data block into corresponding position coordinates plus the number of data contained in the data block plus the second default value plus circulation. Data, the loop data is the loop line number of the data in the data block plus the length of the data plus the data. It can be understood that in the irregular conversion, because the length of the data is inconsistent, the length of each data needs to be recorded separately by the cyclic data;

For example, suppose that data block 5 contains three pieces of data with the same length, and the specific composition is shown in Table 2 below:

Table 2 Composition of data block 5

line number Irregular speech data 1 QWERTFD 2 ASDSAASFGD 3 ASFS

The irregular conversion result of data block 5 is: 20463017QWERTFD210ASDSAASFGD34ASFS. Among them, 2046 is the position coordinate of data block 5, 3 indicates that there are three lines of data in data block 5, the second default value "0" indicates that the current data block 5 is unstructured data, "1" is the loop line number, "7" is the length of the data, "QWERTFD" is the encrypted data, and so on to form the above string.

In another optional implementation, in response to the data block being divided into only data belonging to a certain row of the file to be encrypted, the data block is subjected to rule conversion by default.

For step S4, the main purpose of using step S4 in the present invention is to encrypt the real position coordinates of the data block.

In an optional embodiment, obtaining a random secret key, and encrypting the first character string again with the random secret key to obtain a second character string includes: step S41, obtaining a random secret key and a random character, and combining them with the first character string Step S42, utilize random character to replace the position coordinates of the data block in the first character string; Step S43, utilize the length of the first character string divided by the length of the random secret key to determine the division position of the data block; Step S44: Insert each bit of the random key into the corresponding split bit in turn to obtain a second character string. In subsequent data restoration, the second character string can be restored to the first character string by simply removing the random secret key and random characters in the second character string.

Wherein, for step S43, in an optional embodiment, the remainder of dividing the length of the first character string by the length of the random secret key can be used to determine the division bits of the data block, and when the remainder is less than 3, the default is to use every 3 bits Determine a division bit; for example, for the first character string 0402351QWERT2ASDFG3ZXCVB, set the obtained random key to be TSDS, and the obtained random character to be 9879; use 9879 to replace the position coordinate 0402 to obtain 9879351QWERT2ASDFG3ZXCVB, a total of 24 bits, divide by 24 The remainder of 4 is 0, and 0 is less than or equal to 3, so the result of determining a division bit for every three bits and inserting the key bit is: T_987_S_935_D_1QW_S_ERT_T_2AS_S_DFG_D_3ZX_S_CVB_T. It should be noted that there is no underline in the actual data. This article adds an underline for better understanding. In another optional embodiment, the string length may be added at the foremost end of the second string, and the generated new string is: 24T987S935D1QWSERTT2ASSDFGD3ZXSCVBT.

In an optional embodiment, after the second string is generated, the second string needs to be packaged into a new data block, and the characteristic field used for data restoration is stored in the data header of the new data block.

For step S5, use step S5 to disrupt the order of the data blocks and generate a new encrypted file. The specific steps include: step S51, assigning a second random character to each new data block; and step S52, reordering multiple new data blocks corresponding to multiple second character strings according to the size of the second random character.

In an optional embodiment, the composition of the feature field used for file data restoration includes: secret key + direction bit 1 + random symbol corresponding to direction bit 1 + direction bit 2 + random symbol corresponding to direction bit 2 + direction bit 3 + random symbol corresponding to direction bit 3+... + azimuth N+ random symbol corresponding to direction bit N+secret key+data division identifier+secret key. Among them, through the feature field "orientation bit 1 + random symbol corresponding to orientation 1 + orientation bit 2 + random symbol corresponding to orientation bit 2 + orientation bit 3 + random symbol corresponding to orientation bit 3 + ... + orientation N + orientation bit N corresponds to The “random character” can restore the order of multiple new data blocks before they are scrambled; and the data corresponding to the data segmentation identifier records the division method of the file to be encrypted, which is used for the verification work after the file data is restored, and The key in the feature field is mainly used for separation.

As in the above-mentioned embodiments, the file encryption method proposed by the method of the present invention is simple and reliable, which is convenient for users to realize file encryption by using the above-mentioned method, and is easy to maintain and manage.

In a second aspect of the present invention, a file encryption device is provided. FIG. 2 is a schematic structural diagram of a file confidentiality system of the present invention. As shown in FIG. 2, the file encryption system of the present invention includes: a data division module 100, configured to divide a file to be encrypted into multiple data blocks; a data marking module 200, configured to assign a mark to each data block, and based on The mark determines the position coordinates of each data block; the first encryption module 300 is configured to regularize each data block into an unordered first character string according to preset rules and corresponding position coordinates; the second encryption module 400, is configured to obtain a random secret key, and encrypt the first character string again by using the random secret key to obtain a second character string; and an encrypted file generation module 500, configured to generate an encrypted file, and randomly order and save a plurality of second character strings to the file body of the encrypted file, and save the characteristic fields used for file data restoration to the file data header of the encrypted file.

The file encryption system proposed by the method of the present invention is simple and reliable, which is convenient for users to use the system to realize file encryption and easy to maintain and manage.

The above are exemplary embodiments of the present disclosure, but it should be noted that various changes and modifications may be made without departing from the scope of the disclosure of the embodiments of the present invention as defined in the claims. The functions, steps and/or actions of the method claims in accordance with the disclosed embodiments described herein need not be performed in any particular order. Furthermore, although elements disclosed in the embodiments of the present invention may be described or claimed in the singular, unless explicitly limited to the singular, the plural may also be construed.

It should be understood that, as used herein, the singular form "a" is intended to include the plural form as well, unless the context clearly supports an exception. It will also be understood that "and/or" as used herein is meant to include any and all possible combinations of one or more of the associated listed items.

The above-mentioned embodiments of the present invention disclose the serial numbers of the embodiments only for description, and do not represent the advantages and disadvantages of the embodiments.

Those of ordinary skill in the art should understand that the discussion of any of the above embodiments is only exemplary, and is not intended to imply that the scope (including the claims) disclosed by the embodiments of the present invention is limited to these examples; under the idea of the embodiments of the present invention , the technical features in the above embodiments or different embodiments can also be combined, and there are many other changes in different aspects of the above embodiments of the present invention, which are not provided in detail for the sake of brevity. Therefore, any omission, modification, equivalent replacement, improvement, etc. made within the spirit and principle of the embodiments of the present invention should be included within the protection scope of the embodiments of the present invention.

Claims (10)

1. A method for encrypting a file, the method comprising:

dividing a file to be encrypted into a plurality of data blocks;

assigning a marker to each of the data blocks and determining location coordinates of each data block based on the markers;

regularizing each data block into a first character string according to a preset rule and a corresponding position coordinate;

acquiring a random secret key, and encrypting the first character string again through the random secret key to obtain a second character string;

and generating an encrypted file, randomly sequencing the second character strings, storing the second character strings into a file body of the encrypted file, and storing the characteristic fields for file data restoration into a file data header of the encrypted file.

2. The file encryption method according to claim 1, wherein each of the data blocks is divided into partial data in at least one line of the file to be encrypted, and the total number of the data blocks is smaller than the total number of lines of data of the file to be encrypted.

3. The file encryption method of claim 1, wherein assigning a marker to each of the data blocks and determining location coordinates for each data block based on the markers comprises:

randomly distributing non-repeated marks for each data block; and is

Respectively taking each data block as a center, determining the identification of the adjacent data blocks, and forming the position coordinates of the central data block according to a preset sequence; wherein a first default marker is substituted in response to no data block being located in a certain adjacent position of the central data block.

4. The file encryption method of claim 3,

the marks comprise capital letters, lowercase letters, numbers and special symbols;

the first default flag is one of a plurality of the flags, and the first default flag is no longer used as a randomly assigned flag for the plurality of data blocks in response to the one of the plurality of the flags being determined to be the first default flag.

5. The file encryption method according to claim 2, wherein the preset rule includes:

judging whether the lengths of the data which belong to different lines of the file to be encrypted and are divided in each data block are the same or not;

in response to the length being the same, performing rule conversion on the plurality of data in the data block, the rule conversion including converting the data block into corresponding position coordinates plus the number of data contained in the data block plus data length plus cycle data, the cycle data being the number of a cycle line of the data in the data block plus the data;

and in response to the length difference, performing irregular conversion on the plurality of data in the data block, wherein the irregular conversion comprises converting the data block into corresponding position coordinates plus the number of data contained in the data block plus a second default value plus cycle data, and the cycle data is the cycle line number of the data in the data block plus the length of the data plus the data.

6. The file encryption method according to claim 5, wherein the preset rule further comprises:

and in response to the data block being divided into only data in a certain row belonging to the file to be encrypted, performing rule conversion on the data by default.

7. The file encryption method according to claim 1, wherein the obtaining of the random key, and re-encrypting the first string by the random key to obtain a second string, comprises:

acquiring a first random key and a first random symbol, and binding the first random key and the first random symbol with a data block in the first character string;

replacing the position coordinates of the data blocks in the first character string with the first random character;

determining a partition bit of the data block using a length of the first string divided by a length of the first random key;

and sequentially inserting each bit of the first random secret key into the corresponding segmentation bit to obtain a second character string.

8. The file encryption method of claim 7, wherein the method further comprises:

generating a new data block according to the second character string;

and saving the characteristic field for data recovery in the data header of the new data block.

9. The file encryption method of claim 8, wherein said randomly ordering a plurality of said second strings comprises:

allocating a second random symbol to each new data block;

and reordering a plurality of new data blocks corresponding to the second character strings according to the size of the second random character.

10. A file encryption system, comprising:

the data dividing module is configured to divide a file to be encrypted into a plurality of data blocks;

a data marking module configured to assign a mark to each of the data blocks and determine a position coordinate of each data block based on the mark;

the first encryption module is configured to normalize each data block into a disordered first character string according to a preset rule and a corresponding position coordinate;

the second encryption module is configured to obtain a random key, and encrypt the first character string again through the random key to obtain a second character string;

and the encrypted file generation module is configured to generate an encrypted file, randomly sequence and store the plurality of second character strings into a file body of the encrypted file, and store the characteristic field for file data restoration into a file data header of the encrypted file.

Images