Data processing method, device, equipment, readable storage medium and program product

Abstract

The present application provides a data processing method, device, equipment, readable storage medium and program product. The method provided by the present application receives an operation request, obtains a combination of multiple operating systems and file systems in response to the operation request, and performs a file operation corresponding to the operation request in each combination of the operating system and the file system, thereby obtaining multiple operation results, and then statistically analyzing the types of the operation results, and determining the operation result with the largest proportion in the types of the operation results as the correct operation result, thereby avoiding taking the operation result obtained by the attack as the correct operation result, thereby not responding to the attack, and increasing the security of the server. Finally, the server will also perform file overwrite processing according to the correct operation result, and by overwriting the source file, it is ensured that the source file will not be leaked due to the attack, and the security of the source file corresponding to the file operation is further ensured.

Description

Technical Field

[0001] The present application relates to the field of communication and computer technology, and in particular to a data processing method, device, equipment, readable storage medium and program product. Background Art

[0002] At present, the commonly used operating systems for computers are Windows, Linux and Mac. The servers used by enterprises also use the above operating systems. Each operating system has different versions, and the vulnerabilities of different types and versions of operating systems are different. Servers usually need to guard against attacks from the outside world using system vulnerabilities. During the attack process, the attacker can learn the type and version of the server operating system through network detection, and then launch an attack based on the vulnerabilities in the corresponding version.

[0003] Currently, in the prior art, a method of deploying multiple systems in a server is generally used to prevent attacks on the server.

[0004] However, the current measure to strengthen server security is only to deploy multiple operating systems. Due to the single response measure, there are still certain security issues. Summary of the invention

[0005] The present application provides a data processing method, apparatus, device, readable storage medium and program product, which are used to solve the problem that the existing server defense means may still be successfully attacked when being attacked.

[0006] In a first aspect, the present application provides a data processing method, comprising:

[0007] An operation request is received, and in response to the operation request, a combination of multiple operating systems and file systems is obtained, wherein the operating systems and file systems in each combination of operating systems and file systems are randomly matched; a file operation corresponding to the operation request is performed according to the operating systems and file systems in each combination of operating systems and file systems; operation results corresponding to all file operations are obtained, and types of the operation results are counted, and the operation result with the largest proportion among the types of the operation results is determined as a correct operation result; and file overwriting processing is performed according to the correct operation result.

[0008] In a possible implementation, performing file overwriting processing according to the correct operation result includes: encrypting the source file corresponding to the operation request at least once, and overwriting the at least once encrypted source file using the correct operation result.

[0009] In a possible implementation, the data processing method further includes deleting the operating system and the file system according to preset rules.

[0010] In one possible implementation, the operating system and the file system are deleted according to preset rules, including: deleting the operating system and the file system at a preset time; or, deleting the operating system and the file system according to a preset number of accesses; or, deleting the operating system and the file system in combination with a preset time and a preset number of accesses.

[0011] In a possible implementation, after executing the file operation corresponding to the operation request in the combination of each operating system and file system, it also includes: obtaining a log of the file operation according to the file operation, and recording the log of the file operation in the corresponding blockchain.

[0012] In one possible implementation, the log of the file operation is recorded in the corresponding blockchain, including: saving the log of the file operation in the forward chain and the reverse chain of the blockchain respectively, wherein each block of the forward chain saves the hash value of the block before the current block, and each block of the reverse chain saves the hash value of the block after the current block.

[0013] In a second aspect, the present application provides a data processing device, including: an operating system and file system combination acquisition module, which is used to receive an operation request, and obtain a combination of multiple operating systems and file systems in response to the operation request, wherein the operating system and file system in each operating system and file system combination are randomly matched; a file operation execution module, which is used to execute the file operation corresponding to the operation request according to the operating system and file system in each operating system and file system combination; a correct operation result determination module, which is used to obtain the operation results corresponding to all file operations, and to count the types of the operation results, and determine the operation result with the largest proportion in the types of the operation results as the correct operation result; a file overwrite processing module, which is used to perform file overwrite processing according to the correct operation result.

[0014] In a third aspect, the present application provides an electronic device comprising: a processor, and a memory communicatively connected to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the data processing method of the first aspect described above.

[0015] In a fourth aspect, the present application provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the data processing method as described in the first aspect above.

[0016] In a fifth aspect, the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the data processing method of the first aspect as described above.

[0017] The data processing method, device, equipment, readable storage medium and program product provided by the present application receive operation requests, obtain a combination of multiple operating systems and file systems in response to the operation requests, and perform file operations corresponding to the operation requests in each combination of operating systems and file systems, thereby obtaining multiple operation results, and then statistically analyzing the types of operation results, and determining the operation results that account for the largest proportion of the types of operation results as the correct operation results, thereby avoiding taking the operation results obtained by the attack as the correct operation results, thereby not responding to the attack, and increasing the security of the server. Finally, the server will also perform file overwrite processing according to the correct operation results, and by overwriting the source file, it is ensured that the source file will not be leaked due to the attack, and the security of the source file corresponding to the file operation is further ensured. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0019] Figure 1 A schematic diagram of the system architecture of the data processing method provided in the embodiment of the present application;

[0020] Figure 2 A schematic diagram of a data processing method flow chart provided in an embodiment of the present application;

[0021] Figure 3 A schematic diagram of a data processing device provided in an embodiment of the present application Figure 1 ;

[0022] Figure 4 A schematic diagram of a data processing device provided in an embodiment of the present application Figure 2 ;

[0023] Figure 5 A schematic diagram of an electronic device provided in an embodiment of the present application.

[0024] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0025] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0026] With the accelerated development of the information society, network services play a key role in the process of Internet users surfing the Internet, and servers are responsible for responding to service requests, providing services, and ensuring services in the process of network services. The role played by servers in network services is crucial, which also makes servers easy targets for external attacks. Attacks on servers usually require the use of vulnerabilities in the server operating system. Different attack methods are required for different operating systems, so attackers need to know the type and version of the server operating system before attacking.

[0027] At present, attacks on servers usually adopt the method of deploying multiple operating systems in the server and using different operating systems alternately when the outside world accesses the server. In this way, when the outside world attacks the server, since the system used by the server when accessing the server is different, the system used by the server during the attack is different from the operating system previously known by the attacker, making the attack ineffective.

[0028] However, since the operating system used by the server switches alternately, the operating system used when attacked may be the same as the operating system previously known to the outside world, that is, the same as the operating system targeted by the attack, causing the attack to take effect, resulting in data leakage or server loss of function and other consequences.

[0029] In view of the above problems, the present application proposes a data processing method, which obtains multiple combinations of operating systems and file systems when receiving an operation request from the outside, and performs corresponding file operations in each combination of the operating system and file system to obtain multiple operation results. If the operation request is an attack, only a few combinations of the operating system and file system have vulnerabilities targeted by the attack, and most combinations of the operating system and file system will return the same result. A few combinations of the operating system and file system return different results due to the corresponding vulnerabilities. The operation result with the largest proportion in the type of operation result is determined as the correct operation result, and file overwrite processing is performed according to the correct operation result, so that the server will not respond to the attack operation.

[0030] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0031] The data processing method, apparatus, device, readable storage medium and program product provided in the present application can be applied to scenarios in which a server is prevented from being attacked. Figure 1 A schematic diagram of the system architecture of the data processing method provided in the embodiment of the present application is shown in FIG. Figure 1 In the scenario shown, a server 101 and a client 102 are included, and the server 101 and the client 102 are connected in communication. The client 102 may include a computer, a tablet, a mobile phone, a PDA (Personal Digital Assistant), a notebook or any other computing device with networking function, and the client may be connected to an input device such as a mouse and a keyboard. The above-mentioned server 101 can be implemented using a server or a server group with more powerful processing power and higher security, and the present application does not limit the number of servers. The network used for the communication connection between them may include various types of wired and wireless networks, such as but not limited to: the Internet, a local area network, wireless fidelity (Wireless Fidelity, WIFI), a wireless local area network (Wireless Local Area Networks, WLAN), a cellular communication network (General Packet Radio Service Technology (General Packet Radio Service, GPRS), Code Division Multiple Access (Code Division Multiple Access, CDMA), 2G / 3G / 4G / 5G cellular network), a satellite communication network, etc.

[0032] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0033] Figure 2 The data processing method provided in the embodiment of the present application can be performed by Figure 1 The server shown can also be executed by other dedicated deployment servers ( Figure 1 ), which is not shown in the figure, and no limitation is imposed on this embodiment of the present invention. Figure 2 As shown, the method includes:

[0034] S201: receiving an operation request, and acquiring a plurality of operating system and file system combinations in response to the operation request, wherein the operating system and the file system in each operating system and file system combination are randomly matched.

[0035] Specifically, the server receives an operation request sent by the client, and obtains a combination of multiple operating systems and file systems.

[0036] In this step, a combination of multiple operating systems and file systems is obtained, including extracting some combinations or selecting all combinations from existing combinations of multiple operating systems and file systems, and also including establishing new combinations of multiple operating systems and file systems when there are no combinations of multiple operating systems and file systems.

[0037] For example, there is no existing combination of operating system and file system, and a combination of operating system and file system needs to be established. The available operating systems include Windows, Linux and / or Mac, wherein Windows includes Windows7, WindowsXP and Windows10, and Linux includes Ubuntu and CentOS. The available file systems include NTFS, EXT3 and FAT32. At this time, the combination of Windows10 and NTFS, Windows7 and EXT3, and Ubuntu and FAT32 can be used, for a total of three types. For another example, when the available system and operating system are the same as the previous example, the combination of Windows7 and NTFS, WindowsXP and NTFS, Windows7 and EXT3, Ubuntu and FAT32, and Ubuntu and EXT3 can also be used, for a total of five types.

[0038] When the operation corresponding to the specific operation request can only be executed in a specific operating system, the server obtains only the specific operating system and combines it with a different file system.

[0039] If there are multiple operating system and file system combinations, then several combinations can be obtained from the multiple operating system and file system combinations to respond to the operation request. This application does not limit the combination of operating system and file system combinations, nor does it limit the method of obtaining the combination of operating system and file system.

[0040] S202: executing a file operation corresponding to the operation request according to the operating system and the file system in each combination of the operating system and the file system;

[0041] Specifically, this step uses the operating system and file combination determined in the previous step to execute the file operation corresponding to the operation request.

[0042] In this step, file operations may include reading, editing, adding, deleting, copying, cutting, pasting or renaming, etc. The embodiment of the present application does not limit the specific file operation content.

[0043] For example, the server receives a request to edit a file, and accordingly, after obtaining the three operating system and file system combinations given in the first example in step S201, the server edits the corresponding file in the three operating system and file system combinations respectively.

[0044] S203: Obtaining operation results corresponding to all file operations, counting the types of the operation results, and determining the operation result with the largest proportion among the types of the operation results as the correct operation result;

[0045] In this step, the operation result corresponds to the file operation, and may include an edited file, a newly added file, a file deletion result, or a changed file path, etc.

[0046] Specifically, when the operation request is a normal operation request, there may be only one type of operation result. When the operation request is an attack on the server, since the attack is different from the normal operation request, different operation results will appear when the combination of the operating system and file system targeted by the attack is the same as the combination of the operating system and file system obtained by the server. However, most operating system and file system combinations obtained by the server will not have the vulnerability corresponding to the attack, so most operation results are the same, and the server regards most identical operation results as correct operation results.

[0047] For example, after receiving the operation request, the server obtains three different combinations of operating systems and file systems, namely combination one, combination two and combination three. If the operation request is not an attack on the server, the file operation corresponding to the operation request is a regular file operation, and the operation results obtained are three identical results, and there is only one type of operation result; if the operation request is an attack on the server, since the combination of operating systems and file systems targeted by the attack cannot cover all the combination types of operating systems and file systems obtained by the server, when the combination of operating systems and file systems targeted by the attack is different from the above-mentioned combination one, combination two and combination three, the three combinations all return the same result. When the combination of operating systems and file systems targeted by the attack is combination one, the operation result obtained by combination one is different from the operation results obtained by combination two and combination three. There are currently two types of operation results, and the proportion of the operation types obtained by combination two and combination three is greater than that of combination one, so the server determines the operation results obtained by combination two and combination three as the correct operation results.

[0048] For specific file operations, for example, when the file operation corresponding to a web page is to update a file, the normal file operation is only to update and display the file, and the attacker will try to add other operations through the vulnerability. For example, after the update and display are completed, other files are updated or deleted. Display operations may also be performed to query data in unrelated libraries and tables, and even the password of the database user may be updated, resulting in unexpected operation results.

[0049] S204: Execute file overwriting processing according to the correct operation result.

[0050] In this step, the file overwriting process is to use the updated file to overwrite the source file. The updated file is the file obtained by the file operation, and the source file is the file before the file operation is performed.

[0051] From the description of the above embodiment, it can be seen that the embodiment of the present application receives an operation request, obtains a combination of multiple operating systems and file systems in response to the operation request, and performs a file operation corresponding to the operation request in each combination of the operating system and the file system, thereby obtaining multiple operation results, and then by counting the types of the operation results, and determining the operation result with the largest proportion in the types of the operation results as the correct operation result, it avoids taking the operation result obtained by the attack as the correct operation result, so as not to respond to the attack, and increase the security of the server. Finally, the server will also perform file overwrite processing according to the correct operation result, and by overwriting the source file, it is ensured that the source file will not be leaked due to the attack, and further ensures the security of the source file corresponding to the file operation.

[0052] In a possible implementation, the file overwriting process is performed according to the correct operation result, which may be to encrypt the source file corresponding to the operation request at least once, and to overwrite the at least once encrypted source file using the correct operation result.

[0053] Among them, encryption can adopt encryption methods such as MD5 (Message-Digest Algorithm), AES (Advanced Encryption Standard), DES (Data Encryption Standard) and combinations of the above encryption methods, or other encryption methods. This application does not limit the specific encryption method.

[0054] From the description of the above embodiment, it can be seen that the embodiment of the present application encrypts the source file corresponding to the operation request at least once, and overwrites the source file with the operation result after encryption, making the source file unrecoverable, thereby ensuring the security of the source file and further strengthening the security of the server.

[0055] In a possible implementation, the operating system and the file system may also be deleted according to preset rules.

[0056] Specifically, the operating system and the file system may be deleted according to a preset time, or according to a preset number of accesses, or in combination with a preset time and a preset number of accesses.

[0057] For example, when the preset time is 5 hours, the current server obtains three combinations of Windows 10 and NTFS, Windows 7 and EXT3, and Ubuntu and FAT32, and records the current time. After 5 hours, the server will delete Windows 10, Windows 7, Ubuntu, NTFS, EXT3, and FAT32. The server can also record the number of accesses after the combination of the operating system and the file system is established, and delete the operating system and the file system when the number of accesses reaches 30,000. Alternatively, the server records the time when the combination of the operating system and the file system is established, and also records the number of accesses after the combination is established. When any of the preset establishment time and access times is reached, the operating system and the file system are deleted.

[0058] From the description of the above embodiments, it can be seen that by deleting the operating system and file system according to a preset time, a preset number of accesses, or a combination of a preset time and a preset number of accesses, the server can change the system type during subsequent services, thereby making it more difficult for the outside world to obtain the current operating system and file system type, and more difficult to launch attacks on the operating system and file system used by the current server. At the same time, when the operating system and file system are deleted, the files saved in the existing operating system and file system will also be deleted, further ensuring the information security in the server.

[0059] In a possible implementation, after the above step S204, a log of the file operation can be obtained according to the file operation, and the log of the file operation can be recorded in the corresponding blockchain.

[0060] In this step, the log includes the operation content, operation time, operation initiator's IP address (Internet Protocol Address), source file path and target file path. Among them, the target file is the file corresponding to the operation result.

[0061] From the description of the above embodiment, it can be seen that by storing the log in the blockchain, the log can be prevented from being tampered with, thereby ensuring that detailed information of the attack is obtained after the attack, facilitating related work such as file recovery, and improving the function of the server.

[0062] In one possible implementation, the log of the file operation is recorded in the corresponding blockchain, and the log of the file operation can be saved in the forward chain and reverse chain of the blockchain respectively, wherein each block of the forward chain saves the hash value of the block before the current block, and each block of the reverse chain saves the hash value of the block after the current block.

[0063] In this step, each block in the forward chain records a log, and each block in the reverse chain also records a log. The difference is that the last block of the forward chain records the latest log, and the first block of the reverse chain records the latest log. Every time a new log is added, the block corresponding to the newly added log becomes the first block.

[0064] From the description of the above embodiment, it can be seen that by adding a reverse chain, it can be ensured that the first block of the reverse chain can only be changed when a new log is added, ensuring that the new log will not be tampered with, further ensuring the security of the server.

[0065] In one possible implementation, the server uses smart contracts to restrict file operations corresponding to the logs.

[0066] In this embodiment, the smart contract records the method for determining the correct operation results in the above embodiment, the deletion rules of the operating system and the file system, and the method for determining the attack operation, and stipulates that the last block of the reverse chain in the blockchain of the above embodiment cannot be tampered with, and the hash value in the reverse chain is only allowed to be updated when a new log is added. When the log is tampered with, due to violation of the smart contract, other blocks will not recognize the tampered last log content when calculating the hash value.

[0067] Among them, the determination method of the attack operation can be a determination method based on historical operation statistics and a determination method based on an attack feature library. The attack feature library is specifically, for example, a SQL injection attack feature library, which can be used to identify SQL injection attacks. The determination method based on historical operation statistics is specifically, for example: when the operations corresponding to a web page received by the server are all changes to the user name, the operation requests within the expected range of this web page are limited to changes to the user name, and other operation requests outside the expected range are determined as attack operations. When a file operation is an attack operation, the smart contract can prohibit the modification of the log by the attack operation.

[0068] From the description of the above embodiment, it can be seen that by embedding a smart contract in the server and using the smart contract to determine whether an operation request corresponding to a log received by the server is an attack, the server's automation of attack processing can be increased, the log can be prevented from being tampered with by unknown means by the attacker, and the log can be further prevented from being tampered with.

[0069] In a specific implementation, a program is developed based on the "Ubuntu Server 20.04 64-bit" system. This application needs to run in this operating system. The server obtains the "Ubuntu Server 20.04 64-bit" system as the operating system, and obtains different file systems, such as NTFS, EXT3, and FAT32. When the program needs to write to the index.html file in a certain directory, the index.html is copied into the combination of three sets of operating systems and file systems at the same time, and the write operation is performed to obtain three index.html files after writing. The three index.html files after writing are compared to determine that the three index.html files after writing are the same, that is, the operation request is not an attack, and the original index.html is encrypted three times to obtain the encrypted index.html, and a randomly selected index.html file after writing is copied back to the basic environment to overwrite the encrypted index.html file. After overwriting the encrypted index.html file, the logs of all the above operation steps of this embodiment are recorded in the corresponding blockchain.

[0070] In a specific implementation, a server receives a file read request, and a file read operation corresponding to the file read request can be performed in Windows Server 2008 64bit and CentOS7 64bit operating systems. The server combines Windows Server 2008 64bit and CentOS7 64bit operating systems with NTFS, EXT3 and FAT32 file systems to obtain a total of 6 combinations, and performs file read operations in these 6 combinations respectively. If the read file is a file generated by a previously obtained operating system, the server associates the file read operation with the 6 file systems generated this time, and reads the file in the file system of the previously obtained operating system combination.

[0071] Figure 3 A schematic diagram of a data processing device provided in an embodiment of the present application Figure 1 For an example, see Figure 3 As shown, the data processing device 300 may include: an operating system and file system combination acquisition module 301, a file operation execution module 302, a correct operation result determination module 303 and a file overwrite processing module 304.

[0072] The operating system and file system combination acquisition module 301 is used to receive an operation request, and acquire multiple operating system and file system combinations in response to the operation request, wherein the operating system and file system in each operating system and file system combination are randomly matched.

[0073] The file operation execution module 302 is used to execute the file operation corresponding to the operation request according to the operating system and the file system in each combination of the operating system and the file system.

[0074] The correct operation result determination module 303 is used to obtain the operation results corresponding to all file operations, count the types of the operation results, and determine the operation result with the largest proportion among the types of the operation results as the correct operation result.

[0075] The file overwriting processing module 304 is used to perform file overwriting processing according to the correct operation result.

[0076] In a possible implementation, the file overwriting processing module 304 is specifically configured to encrypt the source file corresponding to the operation request at least once, and overwrite the encrypted source file at least once with the correct operation result.

[0077] Figure 4 A schematic diagram of a data processing device provided in an embodiment of the present application Figure 2 For an example, see Figure 4 As shown, the data processing device 300 further includes a system deletion module 305 for deleting the operating system and the file system according to preset rules.

[0078] In a possible implementation, the system deletion module 305 is specifically used to delete the operating system and the file system according to a preset time, delete the operating system and the file system according to a preset number of accesses, or delete the operating system and the file system in combination with a preset time and a preset number of accesses.

[0079] Continue to refer Figure 4 In a possible implementation, the data processing device 300 further includes a log recording module 306. The log recording module 306 is configured to obtain a log of the file operation according to the file operation, and record the log of the file operation into the corresponding blockchain.

[0080] In one possible implementation, the logging module 306 is specifically used to save the logs of file operations in the forward chain and the reverse chain of the blockchain respectively, wherein each block of the forward chain saves the hash value of the block before the current block, and each block of the reverse chain saves the hash value of the block after the current block.

[0081] Figure 5 A schematic diagram of an electronic device provided in an embodiment of the present application, for example, see Figure 5 As shown, the electronic device 500 may include a processor 501 and a memory 502 .

[0082] The memory 502 is used to store computer programs.

[0083] The processor 501 is used to read the computer program stored in the memory 502 and execute the technical solution of the data processing method in any of the above embodiments according to the computer program in the memory 502.

[0084] Optionally, the memory 502 may be independent or integrated with the processor 501. When the memory 502 is a device independent of the processor 501, the server may further include: a bus for connecting the memory 502 and the processor 501.

[0085] Optionally, this embodiment further includes: a receiver and a transmitter (not shown in the figure), the receiver and the transmitter are connected to the server. The processor can control the receiver and the transmitter to send information to the client and receive information from the client.

[0086] The embodiment of the present application also provides a computer storage medium, in which computer execution instructions are stored. When a processor executes the computer execution instructions, the above data processing method is implemented.

[0087] An embodiment of the present application also provides a computer program product, including a computer program, which implements the above data processing method when executed by a processor.

[0088] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules is only a logical function division, and there may be other division methods in actual implementation, such as multiple modules can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or modules, which can be electrical, mechanical or other forms.

[0089] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to implement the solution of this embodiment.

[0090] In addition, each functional module in each embodiment of the present application can be integrated into one processing unit, or each module can exist physically separately, or two or more modules can be integrated into one unit. The above-mentioned module-composed unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

[0091] The above-mentioned integrated module implemented in the form of a software function module can be stored in a computer-readable storage medium. The above-mentioned software function module is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to perform some steps of the data processing method of each embodiment of the present application.

[0092] It should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the invention may be directly implemented as being executed by a hardware processor, or may be implemented by a combination of hardware and software modules in the processor.

[0093] The memory may include a high-speed RAM memory, and may also include a non-volatile storage NVM, such as at least one disk memory, and may also be a USB flash drive, a mobile hard disk, a read-only memory, a magnetic disk or an optical disk, etc.

[0094] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0095] The above storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The storage medium can be any available medium that can be accessed by a general or special purpose computer.

[0096] An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the storage medium can also exist as discrete components in an electronic device or a main control device.

[0097] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0098] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0099] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A data processing method, characterized in that: include: receiving an operation request, and acquiring a plurality of combinations of operating systems and file systems in response to the operation request, wherein the operating systems and file systems in each combination of operating system and file system are randomly matched; Execute the file operation corresponding to the operation request according to the operating system and the file system in each combination of the operating system and the file system; Obtaining operation results corresponding to all the file operations, counting the types of the operation results, and determining the operation result with the largest proportion among the types of the operation results as the correct operation result; The file overwriting process is performed according to the correct operation result.

2. The method according to claim 1, characterized in that The performing of file overwriting processing according to the correct operation result includes: The source file corresponding to the operation request is encrypted at least once, and the source file encrypted at least once is overwritten using the correct operation result.

3. The method according to claim 1, characterized in that: Also includes: The operating system and the file system are deleted according to preset rules.

4. The method according to claim 3, characterized in that Deleting the operating system and the file system according to the preset rules includes: Deleting the operating system and the file system at a preset time; or, Deleting the operating system and the file system according to a preset number of accesses; or, The operating system and the file system are deleted in combination with a preset time and a preset number of accesses.

5. The method according to any one of claims 1 to 4, characterized in that After executing the file operation corresponding to the operation request according to each combination of the operating system and the file system, the method further includes: A log of the file operation is obtained according to the file operation, and the log of the file operation is recorded in the corresponding blockchain.

6. The method according to claim 5, characterized in that The recording of the log of the file operation into the corresponding blockchain includes: The log of the file operation is saved in the forward chain and the reverse chain of the blockchain respectively, wherein each block of the forward chain saves the hash value of the block before the current block, and each block of the reverse chain saves the hash value of the block after the current block.

7. A data processing device, comprising: An operating system and file system combination acquisition module, used for receiving an operation request, and acquiring a plurality of operating system and file system combinations in response to the operation request, wherein the operating system and the file system in each operating system and file system combination are randomly matched; A file operation execution module, configured to execute the file operation corresponding to the operation request according to the operating system and the file system in each combination of the operating system and the file system; A correct operation result determination module is used to obtain the operation results corresponding to all the file operations, count the types of the operation results, and determine the operation result with the largest proportion among the types of the operation results as the correct operation result; The file overwriting processing module is used to perform file overwriting processing according to the correct operation result.

8. An electronic device comprising: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the data processing method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the data processing method according to any one of claims 1 to 6 when executed by a processor.

10. A computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the data processing method according to any one of claims 1 to 6 is implemented.

Images