Data processing method, system and equipment and storage medium

Abstract

The embodiment of the invention provides a data processing method, system and device and a storage medium. In the embodiment of the invention, on one hand, the confidential data to be backed up in the key management instance is encrypted, and the ciphertext of the confidential data is backed up, so that the security of the confidential data during backup is ensured; and on the other hand, the confidential data in the key management instance is backed up to the storage node, and even if the confidential data in the node where the key management instance is located is lost, the confidential data can be recovered through the ciphertext of the backed-up confidential data, so that the loss risk of the confidential data on the cloud is reduced, and the data security can be further improved.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a data processing method, system, device and storage medium. Background Art

[0002] Key management services can provide users with key and credential hosting functions. As confidential data, the security of keys and credentials is of vital importance. Once the data on the cloud is permanently lost, it will cause significant losses to the enterprise. As confidential data, keys and credentials will cause more serious losses than general data loss. Therefore, for cloud vendors, protecting confidential data on the cloud is the lifeline of protecting the enterprise. Summary of the invention

[0003] Multiple aspects of the present application provide a data processing method, system, device and storage medium to achieve automatic backup of confidential data and reduce the risk of confidential data loss.

[0004] The present application provides a data processing method, including:

[0005] In response to a data backup event, determining confidential data to be backed up in a key management instance in a key management system;

[0006] creating a first encryption key in the key management instance;

[0007] In the key management instance, the confidential data to be backed up is encrypted using the first encryption key to obtain a ciphertext of the confidential data to be backed up;

[0008] The ciphertext of the confidential data to be backed up is sent to a storage node, so as to back up the confidential data to be backed up at the storage node.

[0009] An embodiment of the present application also provides a data processing system, including: a key management system and a storage node; the key management system includes: a key management node; the key management node runs a key management instance of a target user; the key management system also includes: a control node of the key management instance; the key management system is used to execute the steps in the above-mentioned data processing method.

[0010] The embodiment of the present application further provides a computing device, comprising: a memory and a processor; wherein the memory is used to store a computer program;

[0011] The processor is coupled to the memory and is configured to execute the computer program to perform the steps in the above data processing method.

[0012] An embodiment of the present application also provides a computer-readable storage medium storing computer instructions. When the computer instructions are executed by one or more processors, the one or more processors are caused to execute the steps in the above-mentioned data processing method.

[0013] In the embodiments of the present application, on the one hand, the confidential data to be backed up in the key management instance is encrypted, and the ciphertext of the confidential data is backed up, thereby ensuring the security of the confidential data during backup; on the other hand, the confidential data in the key management instance is backed up to the storage node. Even if the confidential data in the node where the key management instance is located is lost, it can be restored through the ciphertext of the backed up confidential data, thereby reducing the risk of loss of confidential data on the cloud and further improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0015] Figure 1 and Figure 2 A schematic diagram of the structure of a data processing system provided in an embodiment of the present application;

[0016] Figure 3 A schematic diagram of a process of performing data backup on a data processing system provided in an embodiment of the present application;

[0017] Figure 4 A schematic diagram of a process of performing data recovery on a data processing system provided in an embodiment of the present application;

[0018] Figure 5 and Figure 6 A schematic diagram of a process of data downloading by a data processing system provided in an embodiment of the present application;

[0019] Figure 7 and Figure 8 A schematic diagram of a process of uploading backup data by a data processing system provided in an embodiment of the present application;

[0020] Fig. 9 A flowchart of a data processing method provided in an embodiment of the present application;

[0021] Fig.10 A schematic diagram of the structure of a computing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0022] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0023] In some embodiments of the present application, on the one hand, the confidential data to be backed up in the key management instance is encrypted, and the ciphertext of the confidential data is backed up, thereby ensuring the security of the confidential data during backup; on the other hand, the confidential data in the key management instance is backed up to a storage node. Even if the confidential data in the node where the key management instance is located is lost, it can be restored through the ciphertext of the backed-up confidential data, thereby reducing the risk of loss of confidential data on the cloud and further improving data security.

[0024] The technical solutions provided by various embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

[0025] It should be noted that the same reference numerals denote the same objects in the following drawings and embodiments, and therefore, once an object is defined in one drawing or embodiment, it does not need to be further discussed in the subsequent drawings and embodiments.

[0026] Figure 1 and Figure 2 A schematic diagram of the structure of a data processing system provided in an embodiment of the present application. Figure 1 and Figure 2 The data processing system includes: a key management service (KMS) system 10 and a storage node 20. The key management system 10 includes: a key management node 101; the key management node 101 runs a key management instance 102 of a target user. The key management system also includes: a management and control node 103 of the key management instance 102. The management and control node 103 manages the key management instance and can be used to manage the entire life cycle of the key management instance, such as creating, starting or destroying the key management instance.

[0027] In this embodiment, the key management system 10 can provide confidential data hosting services. Confidential data refers to information that is not disclosed, and may include: keys, credentials, and other user-defined information that is not disclosed to the outside, such as privacy data, etc. Credentials refer to information required for program operation, such as Secure Shell Protocol Key (SSHKey), token bucket (Token), and database password, etc.

[0028] Users can host confidential data in the key management system 10. The key management system 10 can start the key management instance 102 to provide users with confidential data management functions. A user's key management instance only manages the user's confidential data. It is a cloud key management service exclusively for the user. The user's confidential data is independently encrypted and stored in the user's key management instance. The key management instance is used to manage confidential data hosted by the user. Among them, for confidential data hosted by the user, the user's root key stored in the cryptographic machine corresponding to the key management instance can also be used to encrypt the confidential data, which can ensure the security of the confidential data. The cryptographic machine is a special device that uses passwords to encrypt and decrypt information and authenticate it.

[0029] The control node 103 and the key management node 101 may be deployed on the same physical machine or on different physical machines.

[0030] In this embodiment, the storage node 20 refers to a device that provides storage services. The storage node 20 can store data using a database. The database can be an object storage service (OSS) database, a relational database, a network database, or a tree database. In this embodiment, the storage node 20 can store backup data.

[0031] In some embodiments, Figure 2 As shown, the data processing system can be set up in different regions, such as Figure 2 The data processing system in region A and the data processing system in region B. The data processing system in each region requires an independent key management system and storage node. Data processing systems in different regions can be connected by communication to achieve cross-regional confidential data protection.

[0032] The data processing system provided in the embodiment of the present application can provide a persistent protection solution for confidential data. The following is an exemplary description using a key management instance as a target user.

[0033] Combination Figure 1 and Figure 2 The control node 103 can manage the key management instance. The control node 103 includes: a backup task module, a backup data processing module, a user interaction module and a data recovery module. These modules can be implemented as software function modules with corresponding functions. These modules can be located in the same physical machine or in different physical machines.

[0034] The backup task module is mainly used to manage the operation of the backup task, and is responsible for sending the backup data to the storage node 20 for storage, and communicating with the key management instance 102 to obtain the confidential data that needs to be backed up.

[0035] The backup data management module is used to compress the data to be downloaded, such as compressing it into a set compressed file format (such as zip format, etc.), and can also decompress the backup data uploaded by the user. The backup data management module can also use the private key to digitally sign the data to be downloaded, and can also verify the signature of the backup data uploaded by the user, and ensure the integrity of the data through the signature mechanism. The backup data management module can also derive keys to encrypt the data to be downloaded by the user, and decrypt the data uploaded by the user.

[0036] The user interaction module responds to the user's management operations on the backup data to start, stop, delete, and modify the running status of the backup task. The user interaction module can also handle user requests for downloading, uploading backups, and restoring data.

[0037] The data recovery module is used to obtain backup data from the storage node and communicate with the key management instance to restore the backup data to the key management instance. The data recovery module can also communicate with the management and control nodes in other regions across regions to process cross-regional recovery requests.

[0038] The key management instance 102 is used to store confidential data (such as keys, credentials, etc.). The key management instance 102 is protected by a private network and can communicate with the control node 103 through an intranet. The private network can be a local area network, a virtual private cloud network (Virtual Private Cloud, VPC) or a virtual private network (Virtual Private Network, VPN), etc.

[0039] Combination Figure 1-Figure 3 The data processing system provided in the embodiment of the present application can provide a confidential data backup service. Specifically, the control node 103 can determine the confidential data to be backed up in the key management instance 102 (corresponding to the confidential data to be backed up) in response to the data backup event. Figure 1 Steps 1 and 2). In some embodiments, Figure 3 As shown, the amount of confidential data to be backed up is large, and the confidential data to be backed up can be queried in batches. Specifically, the control node 103 can send a data query request to the key management instance 102. The data query request includes: metadata of the confidential data to be backed up. The key management instance 102 can respond to the data query request, query the stored confidential data, and obtain the confidential data to be backed up from the stored confidential data.

[0040] In the embodiments of the present application, the specific implementation form of the data backup event is not limited. Figure 1-Figure 3The data processing system provided in the embodiment of the present application can support full backup and incremental backup. For full backup, the management and control node 103 can monitor whether the triggering time of the full backup event has arrived, and trigger the data backup event when the triggering time of the full backup event has arrived. In this embodiment, the data backup event is implemented by monitoring the arrival of the triggering time of the full backup event.

[0041] In the embodiments of the present application, the specific implementation form of the triggering timing of the full backup event is not limited. In some embodiments, the data processing system can perform full backup periodically. The triggering timing can be implemented as the arrival of the full backup cycle. Accordingly, the control node 103 can start a timer or counter to time the full backup cycle, and when the full backup cycle is reached, it is determined that the triggering timing of the full backup event has arrived.

[0042] In other embodiments, the target user or the operation and maintenance personnel of the data processing system can manually trigger the full backup. Accordingly, the management and control node 103 can provide a full backup trigger interface; and when the full backup trigger interface is detected to be triggered, it is determined that the triggering time of the full backup event has arrived.

[0043] The triggering timing of the full backup event shown in the above embodiment is only an exemplary description and does not constitute a limitation. The control node 103 can trigger the data backup event when it detects that the triggering timing of the full backup event has arrived. Further, the control node 103 can determine that all confidential data in the key management instance 102 is confidential data to be backed up in response to the data backup event.

[0044] like Figure 3 As shown, the incremental data in the key management instance 102 may be newly added confidential data, or may be a newly added version of the confidential data. For example, in some embodiments, the confidential data in the key management instance 102 is a key or a credential, and the key management node 101 may update the key by key rotation. A key supports multiple key versions. Each key version is an independently generated key, and multiple key versions under the same key are cryptographically unrelated. The key management node 101 can achieve key rotation by generating a new key version. The security of a key is inversely correlated with the amount of data encrypted by it. The amount of data usually refers to the total number of bytes of data encrypted by the same key. By rotating the key, each key can have a smaller cryptanalysis attack surface, making the encryption scheme as a whole more secure. Accordingly, the newly added version of the confidential data can be implemented as a newly added version of the key. Similarly, the key management node 101 can also update the credential by credential rotation. The key management node 101 can achieve credential rotation by generating a new credential version to improve the security of the credential. Accordingly, the newly added version of the confidential data can be implemented as a newly added version of the credential.

[0045] Accordingly, incremental backup can be implemented as backing up newly added confidential data and / or newly added versions of confidential data in the key management instance 102. Based on this, the control node 103 can monitor whether there is newly added confidential data and / or newly added versions of confidential data in the key management instance 102; and trigger a data backup event when it is detected that newly added confidential data and / or newly added versions of confidential data appear in the key management instance 102. Accordingly, the data backup event is implemented as the appearance of newly added confidential data and / or newly added versions of confidential data.

[0046] Further, the management and control node 103 may determine, in response to a data backup event, newly added confidential data in the key management instance 102 and / or newly added versions of confidential data as confidential data to be backed up.

[0047] Among them, for the combination of full backup and real-time incremental backup of confidential data in the key management instance, compared with the existing solutions based on scheduled backup mirrors or manual backup of a certain resource, this embodiment supports full backup to ensure the integrity of the backup data on the one hand; on the other hand, it ensures the timeliness of data backup through real-time incremental backup.

[0048] Accordingly, combined Figure 1 and Figure 3 , the key management node 101 can create an encryption key (Encryption Key) in the key management instance 102 (corresponding to Figure 1 Step 3). Specifically, the control node 103 may call the key management instance through a remote procedure call (RPC). The key management node 101 may create an encryption key in the key management instance 102 in response to the call of the control node 103.

[0049] The specific implementation method of creating the encryption key in the key management instance 102 is not limited in the following embodiments of the present application. In some embodiments, the key management node 101 may generate an encryption key of fixed length using a random number or pseudo-random number generation algorithm. In other embodiments, the key management node 101 may generate an encryption key using a key derivation algorithm.

[0050] In order to improve key security, the key management system can provide a customer master key (CMK). Each user corresponds to a unique CMK. CMK is a key created by a user or cloud service through key management, which is mainly used to encrypt and protect a data key (DK). A user root key can encrypt multiple data keys. A CMK can derive multiple DKs. Different applications of a user can use different data keys for data encryption, so that even if a DK is lost, it will not affect the use of other applications. If the same CMK is used to encrypt all application data of the user, once the CMK is lost, it will affect the security of all application data. In this embodiment, the root key of the target user can be stored in the cryptographic machine corresponding to the key management instance. Accordingly, the key management node 101 can obtain the root key of the target user stored in the cryptographic machine corresponding to the key management instance; and derive an encryption key based on the root key. Optionally, the key management node 101 can use a key derivation algorithm to derive an encryption key based on the root key.

[0051] Optionally, the key derivation algorithm may be a key derivation algorithm (HMAC-based Key Derivation, HKDF) based on a key-related hash operation message authentication code (Hash-basedMessage Authentication Code, HMAC) or a password-based key derivation algorithm (Password-Base Key Derivation Function 2, PBKDF2). The length of the key is not limited. In some embodiments, the encryption algorithm for encrypting data using an encryption key may be an Advanced Encryption Standard (Advanced Encryption Standard, AES) algorithm, such as AES128 algorithm, AES192 algorithm or AES256 algorithm. The encryption key corresponding to the AES128 algorithm is 128 bits. The encryption key corresponding to the AES192 algorithm is 192 bits, etc.; the encryption key corresponding to the AES256 algorithm is 256 bits, etc.

[0052] Further, combined with Figure 1 and Figure 3 , the key management node 101 can use the encryption key in the key management instance to encrypt the confidential data to be backed up to obtain the ciphertext of the confidential data to be backed up (corresponding to Figure 1 Step 4). The control node 103 can obtain the ciphertext of the confidential data to be backed up from the key management instance 102 (corresponding to Figure 1Step 5), and send the ciphertext of the confidential data to be backed up to the storage node 20, the storage node 20 stores the ciphertext of the confidential data to be backed up, and the ciphertext of the confidential data to be backed up is backed up in the storage node 20 (corresponding to Figure 1 Step 6).

[0053] In this embodiment, on the one hand, the confidential data to be backed up in the key management instance is encrypted, and the ciphertext of the confidential data is backed up, thereby ensuring the security of the confidential data during backup; on the other hand, the confidential data in the key management instance is backed up to the storage node. Even if the confidential data in the node where the key management instance is located is lost, it can be restored through the ciphertext of the backed up confidential data, thereby reducing the risk of loss of confidential data on the cloud and further improving data security.

[0054] In some embodiments, in order to further improve data security, the key management node 101 may also use the root key of the target user in the key management instance to encrypt the above encryption key to obtain the ciphertext of the encryption key; and provide the ciphertext of the encryption key to the control node 103. The control node 103 may store the ciphertext of the encryption key. In this way, when restoring the above confidential data to be backed up, the control node 103 may send the ciphertext of the encryption key and the ciphertext of the confidential data to be backed up to the key management instance 102, and request the key management instance 102 to restore the confidential data to be backed up. Accordingly, the key management node 101 may use the root key in the key management instance to decrypt the ciphertext of the encryption key to obtain the encryption key; and use the encryption key in the key management instance to decrypt the ciphertext of the confidential data to be backed up to obtain the confidential data to be backed up, thereby restoring the confidential data to be backed up to the key management instance.

[0055] In the embodiment of the present application, in order to facilitate the user to query the backed-up confidential data, such as Figure 3 As shown, the control node 103 can also record the metadata of the ciphertext of the confidential data to be backed up. Among them, the metadata of the ciphertext of the confidential data can provide the user with a query basis, and may include: the backup type of the backed up confidential data (full backup or incremental backup), data identification and backup time, etc. In this way, the user can determine the confidential data that needs to be restored through the metadata of the confidential data. Further, Figure 3 As shown, the management and control node 103 may also send the metadata of the ciphertext of the confidential data to be backed up to the storage node 20, and the storage node 20 may store the metadata of the ciphertext of the confidential data to be backed up for subsequent determination of the confidential data to be restored through the metadata.

[0056] The storage node 20 may provide a metadata query interface to the user; the user may query the metadata of the confidential data through the metadata query interface; and select the confidential data to be restored through the metadata. The metadata query interface may be provided in a visual manner, such as providing a metadata query interface, etc.; of course, it may also be implemented using an application programming interface (Application Programming Interface, API). The user may call the API interface to query metadata, etc.

[0057] In addition to providing a method for backing up confidential data, the embodiment of the present application also provides a method for restoring confidential data. The following is an exemplary description of the method for restoring confidential data provided by the embodiment of the present application.

[0058] like Figure 4 As shown, the control node 103 (or the data recovery module in the control node) can obtain the ciphertext of the confidential data to be recovered from the storage node 20 in response to the data recovery event. In the embodiment of the present application, the specific implementation form of the data recovery event is not limited. In some embodiments, such as Figure 4 As shown, the management and control node 103 (specifically, the user interaction module in the management and control node) can provide a configuration interface for data to be restored. The configuration interface for data to be restored is provided in a visual manner, such as providing a metadata query interface, on which a data to be restored selection component can be set, and the user can select the metadata of the confidential data to be restored through the data to be restored selection component, thereby configuring the metadata of the confidential data to be restored, etc.

[0059] Of course, the configuration interface of the data to be restored can also be implemented using an API. The user can call the API interface to query metadata, and configure metadata of the confidential data to be restored through the queried metadata.

[0060] The confidential data to be recovered may be single confidential data, such as a single key or a single credential, etc. Of course, the confidential data to be recovered may also be batch confidential data, such as batch keys and / or batch credentials, etc., which may be determined by the configured metadata.

[0061] Accordingly, the control node 103 may determine that a data recovery event has occurred when the metadata of the confidential data to be recovered configured through the data to be recovered configuration interface is obtained. Further, the control node 103 (specifically, the data recovery module in the control node) may respond to the data recovery event and obtain the ciphertext of the confidential data to be recovered from the storage node 20 according to the metadata of the confidential data to be recovered.

[0062] Further, the control node 103 may request the key management instance to restore the confidential data to be restored. Specifically, the control node 103 may send a data restoration request to the key management instance 102 to request the key management instance 102 to restore the confidential data to be restored. The data restoration request includes: the ciphertext of the encryption key used to encrypt the ciphertext of the confidential data to be restored and the ciphertext of the confidential data to be restored.

[0063] In the embodiment of the present application, for the convenience of description and distinction, the encryption key for encrypting the confidential data to be backed up is defined as the first encryption key; and the encryption key for encrypting the confidential data to be restored is defined as the second encryption key. The ciphertext of the second encryption key is obtained by encrypting the second encryption key by the key management instance 102 using the root key of the target user.

[0064] Accordingly, the key management node 101 can obtain the root key of the target user stored in the cipher machine corresponding to the key management instance 102 in response to the data recovery request; and use the root key of the target user to decrypt the ciphertext of the second encryption key to obtain the second encryption key. Further, the key management node 101 can use the second encryption key in the key management instance 102 to decrypt the ciphertext of the confidential data to be recovered to obtain the confidential data to be recovered; and store the confidential data to be recovered in the key management instance 102, thereby restoring the confidential data to be recovered to the key management instance, thereby realizing the recovery of the confidential data.

[0065] In this embodiment, the confidential data restored in the key management instance can be a single confidential data or a batch of confidential data, so that even if there is new confidential data in the key management instance before the confidential data to be restored is restored, the data recovery will not affect the new confidential data, which can overcome the defect that the traditional method of restoring confidential data based on the scheduled backup mirror solution will affect the new confidential data in the key management instance before the data recovery. Among them, the traditional method of restoring confidential data based on the scheduled backup mirror solution, because the data backup is a full backup, is also a full recovery during data recovery, which will rewrite the key management instance and overwrite the new data generated by the key management instance after the full backup and before the data recovery, thereby affecting the new data generated after the full backup and before the data recovery.

[0066] The embodiment of the present application also supports users to download the backup confidential data locally, so that even if the cloud platform fails, the confidential data downloaded locally by the user can be used to restore the confidential data in the cloud, reducing the risk of confidential data loss. The following is an exemplary description of the backup data download method provided in the embodiment of the present application.

[0067] like Figure 5As shown, when the target user needs to download backup data, he can initiate a backup data download request to the management and control node 103 through the terminal device 30. In this embodiment, in order to improve the security of confidential data, the target user can also provide a password, which is used to encrypt the ciphertext of the confidential data to be downloaded, so as to achieve double encryption of the confidential data, which helps to improve the security of the confidential data. In this way, when data recovery is performed based on the confidential data downloaded by the user, the user and the key management instance in the cloud need to participate together to recover it, which helps to improve the security of the confidential data. On the other hand, only users with the password can realize the recovery of confidential data, which can prevent the ciphertext of the confidential data downloaded by the user from being lost or stolen. Since the stealing user has no password, he cannot request the cloud to recover the confidential data, which can further improve the security of the confidential data.

[0068] Accordingly, the control node 103 (specifically, the user interaction module in the control node) can obtain the backup data download request and the password provided by the target user. The backup data download request may include metadata of the ciphertext of the confidential data to be downloaded. Further, the control node 103 (specifically, the backup data processing module in the control node) can determine the ciphertext of the confidential data to be downloaded from the storage node 20 in response to the backup data download request; and encrypt the ciphertext of the confidential data to be downloaded based on the password provided by the target user to obtain the double encrypted ciphertext of the confidential data to be downloaded.

[0069] In the embodiment of the present application, the control node 103 can use the password provided by the target user as the encryption password to encrypt the ciphertext of the confidential data to be downloaded, so as to obtain the double encrypted ciphertext of the confidential data to be downloaded. Since the password provided by the user is generally a short password, it is easy to be cracked. Based on this, in some embodiments, such as Figure 6 As shown, in order to improve data security, the control node 103 may derive an encryption key (defined as a third encryption key) based on the password provided by the target user. The length of the third encryption key is greater than the length of the password provided by the target user. For example, in some embodiments, the third encryption key may be an AES256 key, that is, a 256-bit key, etc. Regarding the key derivation algorithm used to derive the third encryption key based on the password, please refer to the relevant content of deriving the first encryption key based on the root key of the target user in the above embodiment, which will not be repeated here.

[0070] Since the length of the derived third encryption key is greater than the password provided by the target user, the data is encrypted using the third encryption key, and the data security is higher. Further, the management and control node 103 can use the third encryption key to encrypt the ciphertext of the confidential data to be downloaded to obtain the double encrypted ciphertext of the confidential data to be downloaded.

[0071] In some embodiments, in order to ensure the integrity of the confidential data, before encrypting the ciphertext of the confidential data to be downloaded based on the password provided by the target user, such as Figure 6 As shown, the control node 103 (specifically, the backup data processing module in the control node) can also use the private key of the key management system 10 to digitally sign the ciphertext of the confidential data to be downloaded to obtain the ciphertext of the confidential data carrying the signature information. Further, based on the password provided by the target user, the confidential data carrying the signature information can be encrypted to obtain the doubly encrypted ciphertext of the confidential data to be downloaded. In this embodiment, the doubly encrypted ciphertext of the confidential data to be downloaded is the ciphertext of the ciphertext of the confidential data to be downloaded carrying the signature information. Regarding the specific implementation method of encrypting the ciphertext of the confidential data to be downloaded carrying the signature information based on the password provided by the target user, please refer to the above-mentioned related content of encrypting the ciphertext of the confidential data to be downloaded based on the password provided by the target user, which will not be repeated here.

[0072] In other embodiments, the confidential data to be downloaded may be batch data. In order to reduce the amount of data encryption calculation and the amount of data to be downloaded, and to increase the data encryption speed and data download speed, before encrypting the ciphertext of the confidential data to be downloaded based on the password provided by the target user, Figure 6 As shown, the control node 103 (specifically, the backup data processing module in the control node) can also compress the ciphertext of the key data to be downloaded to obtain a compressed file of the ciphertext of the confidential data to be downloaded. Further, based on the password provided by the target user, the compressed file of the ciphertext of the confidential data to be downloaded can be encrypted to obtain the doubly encrypted ciphertext of the confidential data to be downloaded. In this embodiment, the doubly encrypted ciphertext of the confidential data to be downloaded is the ciphertext of the compressed file of the ciphertext of the confidential data to be downloaded. Regarding the specific implementation method of encrypting the compressed file of the ciphertext of the confidential data to be downloaded based on the password provided by the target user, please refer to the above-mentioned related content of encrypting the ciphertext of the confidential data to be downloaded based on the password provided by the target user, which will not be repeated here.

[0073] In some other embodiments, in order to ensure data security, before encrypting the compressed file of the ciphertext of the confidential data to be downloaded based on the password provided by the target user, such as Figure 6As shown, the control node 103 (specifically, the backup data processing module in the control node) can also use the private key of the key management system 10 to digitally sign the compressed file to obtain a compressed file carrying signature information; further, based on the password provided by the target user, the compressed file carrying signature information can be encrypted to obtain the double encrypted ciphertext of the confidential data to be downloaded. In this embodiment, the double encrypted ciphertext of the confidential data to be downloaded is the ciphertext of the compressed file carrying signature information.

[0074] Furthermore, the management and control node 103 may provide the double-encrypted ciphertext of the confidential data to be downloaded to the terminal device 30 of the target user, thereby enabling the user to locally download the confidential data to be downloaded.

[0075] In the embodiment of the present application, the specific implementation method of the control node 103 providing the double encrypted ciphertext of the confidential data to be downloaded to the terminal device 30 of the target user is not limited. In some embodiments, the control node 103 can send the double encrypted ciphertext of the confidential data to be downloaded to the terminal device 30 of the target user. In other embodiments, such as Figure 6 As shown, the control node 103 (specifically, the backup data processing module in the control node) can also generate a download address for the double encrypted ciphertext of the confidential data to be downloaded, and provide the download address to the terminal device 30 of the target user, so that the target user can download the double encrypted ciphertext of the confidential data to be downloaded from the download address, thereby realizing the user's local download of the confidential data. The download address can be provided to the terminal device 30 of the target user by the user interaction module in the control node.

[0076] In this embodiment, even if the cloud platform fails and causes the loss of confidential data in the key management instance, the double encrypted ciphertext of the confidential data downloaded by the user locally can be used to restore the confidential data in the key management instance, thereby reducing the risk of confidential data loss. On the other hand, based on the password provided by the target user, the ciphertext of the downloaded confidential data is double encrypted, which helps to improve the security of the confidential data. In this way, when data recovery is performed based on the confidential data downloaded by the user, the user and the key management instance in the cloud need to participate together to recover it, which helps to improve the security of the confidential data. In addition, only users with the password can restore the confidential data, which can prevent the ciphertext of the confidential data downloaded by the user from being lost or stolen. The stealing user cannot request the cloud to restore the confidential data because he has no password, which can further improve the security of the confidential data.

[0077] The following is an exemplary description of the process of restoring data based on the backup data downloaded locally by the target user. Figure 7As shown, the control node 103 (specifically, the backup data processing module in the control node) can obtain the double encrypted ciphertext of the target confidential data uploaded by the target user through the terminal device 30 and the password uploaded by the target user. Regarding the implementation method of downloading the double encrypted ciphertext to the target user's local computer, please refer to the relevant content of the above embodiment, which will not be repeated here. In the embodiment of the present application, for the convenience of description and distinction, the password provided by the target user during the above backup data download process is defined as the first password; and the password uploaded by the target user in this embodiment is defined as the second password. Among them, the second password and the first password can be the same or different. Among them, the double encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data based on the second password. Among them, the associated data of the ciphertext of the target confidential data can be the ciphertext of the target confidential data itself, or it can be other data generated based on the ciphertext of the target confidential data.

[0078] For example, in some embodiments, the associated data of the ciphertext of the target confidential data may be a compressed file of the ciphertext of the target confidential data. In other embodiments, during the downloading process of the ciphertext of the target confidential data, the ciphertext of the target confidential data may be digitally signed using the private information of the key management system to obtain the ciphertext of the target confidential data carrying the signature information. Accordingly, the associated data of the ciphertext of the target confidential data is the ciphertext of the target confidential data carrying the signature information. In still other embodiments, during the downloading process of the ciphertext of the target confidential data, the compressed file of the ciphertext of the target confidential data may be compressed to obtain the compressed file of the ciphertext of the target confidential data; and the compressed file of the ciphertext of the target confidential data may be digitally signed using the private information of the key management system to obtain the compressed file of the ciphertext of the target confidential data carrying the signature information. Accordingly, the associated data of the ciphertext of the target confidential data is the compressed file of the ciphertext of the target confidential data carrying the signature information.

[0079] In the embodiment of the present application, the specific implementation method of the control node 103 obtaining the double encrypted ciphertext of the target confidential data is not limited. In some embodiments, the target user can directly send the double encrypted ciphertext of the target confidential data to the control node 103 through the terminal device 30. The control node 103 can receive the double encrypted ciphertext of the target confidential data sent by the terminal device 30.

[0080] In other embodiments, since the control node 103 cannot determine the amount of data sent by the terminal device 30, if the amount of data is too large, the storage space of the control node 103 will be tight. Figure 8As shown, the terminal device 30 may first send a backup data upload request to the control node 103. The control node 103 (specifically, the backup data processing module in the control node) may generate an upload address in response to the backup data upload request. The upload address is an upload address for instructing the terminal device 30 to upload data.

[0081] In some embodiments, the backup data upload request may include: the data volume of the dual confidential ciphertext of the target confidential data. The management and control node 103 may apply for a storage space in the storage node 20 in advance that can accommodate the data volume of the dual confidential ciphertext of the target confidential data according to the data volume of the dual confidential ciphertext of the target confidential data; and generate an upload address based on the applied storage space.

[0082] Further, the control node 103 (specifically, the user interaction module in the control node) can send the upload address to the terminal device 30. The terminal device 30 can upload the double encrypted ciphertext of the target confidential data to the above upload address. The control node 103 (specifically, the backup data processing module in the control node) can obtain the double encrypted ciphertext and the second password of the target confidential data from the upload address. In some embodiments, the control node 103 can obtain the double encrypted ciphertext of the target confidential data in batches from the upload address.

[0083] Further, if Figure 7 As shown, the control node 103 can decrypt the double encrypted ciphertext of the target confidential data based on the second password to obtain the associated data of the ciphertext of the target confidential data. In some embodiments, the double encrypted ciphertext of the target confidential data is obtained by directly encrypting the associated data of the ciphertext of the target confidential data using the second password, and then the double encrypted ciphertext of the target confidential data can be decrypted using the second password as the decryption key to obtain the associated data of the ciphertext of the target confidential data.

[0084] In other embodiments, the double encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data using the encryption key derived from the second password. Figure 8 As shown, an encryption key (defined as a fourth encryption key) can be derived based on the second password. The length of the fourth encrypted ciphertext is greater than the second password. In this embodiment, the double encrypted ciphertext of the target confidential data is also obtained by encrypting the associated data of the ciphertext of the target confidential data using the fourth encryption key.

[0085] Accordingly, if Figure 8 As shown, the control node 103 can use the fourth encryption key to decrypt the double-encrypted ciphertext of the target confidential data to obtain the associated data of the ciphertext of the target confidential data.

[0086] Further, combined with Figure 7 and Figure 8 , the control node 103 (specifically, the backup data processing module in the control node) can obtain the ciphertext of the target confidential data based on the associated data of the ciphertext of the target confidential data. For the embodiment in which the associated data of the ciphertext of the target confidential data is the target confidential data itself, the control node 103 can directly obtain the ciphertext of the target confidential data by decrypting the double encrypted ciphertext of the target confidential data.

[0087] For the embodiment in which the associated data of the ciphertext of the target confidential data is the ciphertext of the target confidential data carrying the signature information, such as Figure 8 As shown, the management and control node 103 (specifically, the backup data processing module in the management and control node) can use the private key of the key management system 10 to perform digital signature verification on the ciphertext of the target confidential data carrying the signature information; and when the ciphertext of the target confidential data passes the digital signature verification, the ciphertext of the target confidential data is obtained from the ciphertext of the target confidential data carrying the signature information.

[0088] For the embodiment in which the associated data of the ciphertext of the target confidential data is a compressed file of the ciphertext of the target confidential data carrying the signature information, such as Figure 8 As shown, the management and control node 103 can use the private key of the key management system 10 to perform digital signature verification on the compressed file of the ciphertext of the target confidential data carrying the signature information. When the compressed file of the ciphertext of the target confidential data passes the digital signature verification, the compressed file of the ciphertext of the target confidential data is decompressed to obtain the ciphertext of the target confidential data.

[0089] Further, combined with Figure 7 and Figure 8 The control node 103 (specifically, the backup data processing module in the control node) can send the ciphertext of the target confidential data to the storage node 20, so that the storage node 20 can store the ciphertext of the target confidential data, thereby realizing the uploading of the ciphertext of the target confidential data.

[0090] If the target confidential data in the key management instance of the target user is lost, the control node 103 can also restore the target confidential data in the key management instance by using the ciphertext of the target confidential data uploaded by the user to the storage node 20. The specific recovery process can refer to the recovery process of the confidential data to be restored in the above embodiment, which will not be repeated here.

[0091] Fig. 9 The following is a flow chart of a data processing method provided in an embodiment of the present application. Fig. 9 As shown, the data processing method mainly includes:

[0092] 901. In response to a data backup event, determine confidential data to be backed up in a key management instance in a key management system.

[0093] 902. Create a first encryption key in a key management instance.

[0094] 903. In the key management instance, the confidential data to be backed up is encrypted using the first encryption key to obtain a ciphertext of the confidential data to be backed up.

[0095] 904. Send the ciphertext of the confidential data to be backed up to the storage node, so as to back up the confidential data to be backed up at the storage node.

[0096] In this embodiment, the key management system includes: a key management node. The key management node runs a key management instance of a target user. The key management system also includes: a control node of the key management instance. For the description of the key management node and the control node, please refer to the relevant content of the above system embodiment, which will not be repeated here.

[0097] In this embodiment, the key management system can provide confidential data hosting services. The key management instance is used to manage the confidential data hosted by the user. The confidential data of the user is stored in the cryptographic machine corresponding to the key management instance, and can be encrypted with the root key of the user stored in the cryptographic machine to ensure the security of the confidential data. In this embodiment, the storage node can store backup data.

[0098] The embodiment of the present application provides a persistent protection solution for confidential data, and an exemplary description is given below using a key management instance as an example of a key management instance of a target user.

[0099] like Fig. 9 As shown, the data processing method provided in the embodiment of the present application can provide a confidential data backup service. Specifically, in step 901, in response to a data backup event, the confidential data to be backed up in the key management instance can be determined. In the embodiment of the present application, the specific implementation form of the data backup event is not limited. The data processing system provided in the embodiment of the present application can support full backup and incremental backup. For a full backup, it is possible to monitor whether the trigger timing of the full backup event has arrived, and when it is monitored that the trigger timing of the full backup event has arrived, it is determined that a data backup event has occurred. In this embodiment, the data backup event is implemented by monitoring the arrival of the trigger timing of the full backup event. Further, in response to the data backup event, it can be determined that all confidential data in the key management instance is confidential data to be backed up.

[0100] In this embodiment, the incremental data in the key management instance may be newly added confidential data, or may be a newly added version of confidential data. Accordingly, for incremental backup, it can be implemented as backing up the newly added confidential data and / or the newly added version of confidential data in the key management instance. Based on this, it is possible to monitor whether there is newly added confidential data and / or the newly added version of confidential data in the key management instance; and when it is monitored that newly added confidential data and / or the newly added version of confidential data appear in the key management instance, it is determined that a data backup event has occurred. Accordingly, the data backup event is implemented as the appearance of newly added confidential data and / or the newly added version of confidential data. Further, in response to the data backup event, it is possible to determine that the newly added confidential data and / or the newly added version of confidential data in the key management instance are confidential data to be backed up.

[0101] Among them, for the combination of full backup and real-time incremental backup of confidential data in the key management instance, compared with the existing solutions based on scheduled backup mirrors or manual backup of a certain resource, this embodiment supports full backup to ensure the integrity of the backup data on the one hand; on the other hand, it ensures the timeliness of data backup through real-time incremental backup.

[0102] Accordingly, in step 902, an encryption key may be created in the key management instance. Specifically, the key management instance may be called through a remote procedure call. The key management node may create an encryption key in the key management instance in response to the call of the control node.

[0103] The specific implementation method of creating encryption keys in the key management implementation is not limited in the embodiments of the present application. In some embodiments, a random number or pseudo-random number generation algorithm can be used to generate an encryption key of fixed length. In other embodiments, a key derivation algorithm can be used to generate an encryption key.

[0104] In order to improve key security, the key management system may provide a user root key. In this embodiment, the root key of the target user may be stored in the cryptographic machine corresponding to the key management instance. Accordingly, the root key of the target user stored in the cryptographic machine corresponding to the key management instance may be obtained; and based on the root key, an encryption key may be derived. Optionally, an encryption key may be derived based on the root key using a key derivation algorithm.

[0105] Further, in step 903, the encryption key may be used in the key management instance to encrypt the confidential data to be backed up, so as to obtain the ciphertext of the confidential data to be backed up. Further, the ciphertext of the confidential data to be backed up may be obtained from the key management instance, and in step 904, the ciphertext of the confidential data to be backed up may be sent to the storage node, thereby backing up the ciphertext of the confidential data to be backed up at the storage node.

[0106] In this embodiment, on the one hand, the confidential data to be backed up in the key management instance is encrypted, and the ciphertext of the confidential data is backed up, thereby ensuring the security of the confidential data during backup; on the other hand, the confidential data in the key management instance is backed up to the storage node. Even if the confidential data in the node where the key management instance is located is lost, it can be restored through the ciphertext of the backed up confidential data, thereby reducing the risk of loss of confidential data on the cloud and further improving data security.

[0107] In some embodiments, in order to further improve data security, the above encryption key can also be encrypted using the root key of the target user in the key management instance to obtain the ciphertext of the encryption key; and the ciphertext of the encryption key can be provided to the control node. The control node can store the ciphertext of the encryption key. In this way, when restoring the above confidential data to be backed up, the control node can send the ciphertext of the encryption key and the ciphertext of the confidential data to be backed up to the key management instance, and request the key management instance to restore the confidential data to be backed up. Accordingly, the ciphertext of the encryption key can be decrypted using the root key in the key management instance to obtain the encryption key; and the ciphertext of the confidential data to be backed up can be decrypted using the encryption key in the key management instance to obtain the confidential data to be backed up, thereby restoring the confidential data to be backed up to the key management instance.

[0108] In an embodiment of the present application, in order to facilitate users to query the backed-up confidential data, the metadata of the ciphertext of the confidential data to be backed up can also be recorded. Among them, the metadata of the ciphertext of the confidential data can provide the user with a query basis, and may include: the backup type of the backed-up confidential data (full backup or incremental backup), data identification and backup time, etc. In this way, the user can determine the confidential data that needs to be restored through the metadata of the confidential data. Furthermore, the metadata of the ciphertext of the confidential data to be backed up can also be sent to the storage node so that the storage node can store the metadata; and the confidential data that needs to be restored is determined based on the metadata.

[0109] The storage node can provide users with a metadata query interface; users can query the metadata of confidential data through the metadata query interface; and select confidential data that needs to be restored through metadata. The metadata query interface can be provided in a visual way, such as providing a metadata query interface, etc.; of course, it can also be implemented using an API. Users can call the API interface to query metadata, etc.

[0110] In addition to providing a method for backing up confidential data, the embodiment of the present application also provides a method for restoring confidential data. The following is an exemplary description of the method for restoring confidential data provided by the embodiment of the present application.

[0111] Specifically, in response to the data recovery event, the ciphertext of the confidential data to be recovered can be obtained from the storage node. For the specific implementation of the data recovery event, please refer to the relevant content of the above system embodiment, which will not be repeated here.

[0112] The confidential data to be recovered may be single confidential data, such as a single key or a single credential, etc. Of course, the confidential data to be recovered may also be batch confidential data, such as batch keys and / or batch credentials, etc., which may be determined by the configured metadata.

[0113] Furthermore, the key management instance may be requested to restore the confidential data to be restored. Specifically, the control node may send a data restoration request to the key management instance to request the key management instance to restore the confidential data to be restored. The data restoration request includes: the ciphertext of the encryption key used to encrypt the ciphertext of the confidential data to be restored and the ciphertext of the confidential data to be restored.

[0114] In the embodiment of the present application, for the convenience of description and distinction, the encryption key used to encrypt the confidential data to be backed up is defined as the first encryption key; and the encryption key used to encrypt the confidential data to be restored is defined as the second encryption key. The ciphertext of the second encryption key is obtained by encrypting the second encryption key using the root key of the target user by the key management instance.

[0115] Accordingly, in response to a data recovery request, the root key of the target user stored in the cryptographic machine corresponding to the key management instance can be obtained; and the ciphertext of the second encryption key can be decrypted using the root key of the target user to obtain the second encryption key. Further, the ciphertext of the confidential data to be recovered can be decrypted using the second encryption key in the key management instance to obtain the confidential data to be recovered; and the confidential data to be recovered can be stored in the key management instance, thereby restoring the confidential data to be recovered to the key management instance to achieve recovery of the confidential data.

[0116] In this embodiment, the confidential data restored in the key management instance can be a single confidential data or a batch of confidential data, so that even if there is new confidential data in the key management instance before the confidential data to be restored is restored, the data recovery will not affect the new confidential data, which can overcome the defect that the traditional method of restoring confidential data based on the scheduled backup mirror solution will affect the new confidential data in the key management instance before the data recovery. Among them, the traditional method of restoring confidential data based on the scheduled backup mirror solution, because the data backup is a full backup, is also a full recovery during data recovery, which will rewrite the key management instance and overwrite the new data generated by the key management instance after the full backup and before the data recovery, thereby affecting the new data generated after the full backup and before the data recovery.

[0117] The embodiment of the present application also supports users to download the backup confidential data locally, so that even if the cloud platform fails, the confidential data downloaded locally by the user can be used to restore the confidential data in the cloud, reducing the risk of confidential data loss. The following is an exemplary description of the backup data download method provided in the embodiment of the present application.

[0118] When the target user needs to download backup data, he can initiate a backup data download request to the management and control node through the terminal device. In this embodiment, in order to improve the security of confidential data, the target user can also provide a password (defined as the first password), which is used to encrypt the ciphertext of the confidential data to be downloaded, thereby realizing double encryption of the confidential data, which helps to improve the security of the confidential data. In this way, when data recovery is performed based on the confidential data downloaded by the user, the user and the key management instance in the cloud need to participate together to recover it, which helps to improve the security of the confidential data. On the other hand, only users with the first password can recover the confidential data, which can prevent the ciphertext of the confidential data downloaded by the user from being lost or stolen. Since the stealing user does not have the first password, he cannot request the cloud to recover the confidential data, which can further improve the security of the confidential data.

[0119] Accordingly, a backup data download request and a first password provided by the target user may be obtained. The backup data download request may include metadata of the ciphertext of the confidential data to be downloaded. Further, in response to the backup data download request, the ciphertext of the confidential data to be downloaded may be determined from the storage node; and based on the first password provided by the target user, the ciphertext of the confidential data to be downloaded may be encrypted to obtain a double-encrypted ciphertext of the confidential data to be downloaded.

[0120] In an embodiment of the present application, the password provided by the target user can be used as the encryption password to encrypt the ciphertext of the confidential data to be downloaded to obtain the double encrypted ciphertext of the confidential data to be downloaded. Since the password provided by the user is generally a short password, it is easy to be cracked. Based on this, in some embodiments, in order to improve data security, an encryption key (defined as a third encryption key) can be derived based on the first password provided by the target user. Among them, the length of the third encryption key is greater than the length of the first password provided by the target user. Since the length of the derived third encryption key is greater than the first password provided by the target user, the data is encrypted using the third encryption key, and the data security is higher. Further, the ciphertext of the confidential data to be downloaded can be encrypted using the third encryption key to obtain the double encrypted ciphertext of the confidential data to be downloaded.

[0121] In some embodiments, in order to ensure the integrity of confidential data, before encrypting the ciphertext of confidential data to be downloaded based on the first password provided by the target user, the ciphertext of confidential data to be downloaded may be digitally signed using the private key of the key management system to obtain the ciphertext of confidential data carrying signature information. Further, the confidential data carrying signature information may be encrypted based on the first password provided by the target user to obtain a doubly encrypted ciphertext of the confidential data to be downloaded. In this embodiment, the doubly encrypted ciphertext of the confidential data to be downloaded is the ciphertext of the ciphertext of the confidential data to be downloaded carrying signature information. Regarding the specific implementation method of encrypting the ciphertext of confidential data to be downloaded carrying signature information based on the first password provided by the target user, please refer to the above-mentioned content related to encrypting the ciphertext of confidential data to be downloaded based on the first password provided by the target user, which will not be repeated here.

[0122] In other embodiments, the confidential data to be downloaded may be batch data. In order to reduce the amount of data encryption calculation and the amount of data to be downloaded, and to increase the data encryption speed and the data download speed, before encrypting the ciphertext of the confidential data to be downloaded based on the first password provided by the target user, the ciphertext of the key data to be downloaded may be compressed to obtain a compressed file of the ciphertext of the confidential data to be downloaded. Further, the compressed file of the ciphertext of the confidential data to be downloaded may be encrypted based on the first password provided by the target user to obtain a double-encrypted ciphertext of the confidential data to be downloaded. In this embodiment, the double-encrypted ciphertext of the confidential data to be downloaded is the ciphertext of the compressed file of the ciphertext of the confidential data to be downloaded. Regarding the specific implementation method of encrypting the compressed file of the ciphertext of the confidential data to be downloaded based on the first password provided by the target user, please refer to the above-mentioned content of encrypting the ciphertext of the confidential data to be downloaded based on the first password provided by the target user, which will not be repeated here.

[0123] In some other embodiments, in order to ensure data security, before encrypting the compressed file of the ciphertext of the confidential data to be downloaded based on the first password provided by the target user, the private key of the key management system may be used to digitally sign the compressed file to obtain a compressed file carrying signature information; further, based on the first password provided by the target user, the compressed file carrying signature information may be encrypted to obtain a double-encrypted ciphertext of the confidential data to be downloaded. In this embodiment, the double-encrypted ciphertext of the confidential data to be downloaded is the ciphertext of the compressed file carrying signature information.

[0124] Furthermore, the double-encrypted ciphertext of the confidential data to be downloaded can be provided to the terminal device of the target user, so that the user can download the confidential data to be downloaded locally.

[0125] In the embodiments of the present application, the specific implementation method of providing the double encrypted ciphertext of the confidential data to be downloaded to the terminal device of the target user is not limited. In some embodiments, the double encrypted ciphertext of the confidential data to be downloaded can be sent to the terminal device of the target user. In other embodiments, a download address can also be generated for the double encrypted ciphertext of the confidential data to be downloaded, and the download address can be provided to the terminal device of the target user, so that the target user can download the double encrypted ciphertext of the confidential data to be downloaded from the download address, thereby realizing the user's local download of the confidential data. Among them, the download address can be provided to the terminal device of the target user by the user interaction module in the control node.

[0126] In this embodiment, even if the cloud platform fails and causes the loss of confidential data in the key management instance, the double encrypted ciphertext of the confidential data downloaded by the user locally can be used to restore the confidential data in the key management instance, thereby reducing the risk of confidential data loss. On the other hand, based on the password provided by the target user, the ciphertext of the downloaded confidential data is double encrypted, which helps to improve the security of the confidential data. In this way, when data recovery is performed based on the confidential data downloaded by the user, the user and the key management instance in the cloud need to participate together to recover it, which helps to improve the security of the confidential data. In addition, only users with the password can restore the confidential data, which can prevent the ciphertext of the confidential data downloaded by the user from being lost or stolen. The stealing user cannot request the cloud to restore the confidential data because he has no password, which can further improve the security of the confidential data.

[0127] The following is an exemplary description of the process of data recovery based on the backup data downloaded locally by the target user. The double encrypted ciphertext of the target confidential data uploaded by the target user through the terminal device and the second password uploaded by the target user can be obtained. Regarding the implementation method of downloading the double encrypted ciphertext to the target user locally, please refer to the relevant content of the above embodiment, which will not be repeated here. Among them, the second password and the first password can be the same or different. Among them, the double encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data based on the second password. Among them, the associated data of the ciphertext of the target confidential data can refer to the relevant content of the above system embodiment, which will not be repeated here.

[0128] In the embodiments of the present application, the specific implementation method of the control node obtaining the double encrypted ciphertext of the target confidential data is not limited. In some embodiments, the target user can directly send the double encrypted ciphertext of the target confidential data to the control node through the terminal device. Accordingly, the double encrypted ciphertext of the target confidential data sent by the terminal device can be received.

[0129] In other embodiments, since the amount of data sent by the terminal device cannot be determined, if the amount of data is too large, it will cause the storage space of the control node to be tight. Therefore, the terminal device may first send a backup data upload request to the control node. The control node may generate an upload address in response to the backup data upload request. The upload address is an upload address for instructing the terminal device to upload data.

[0130] In some embodiments, the backup data upload request may include: the data volume of the dual-confidential ciphertext of the target confidential data. Accordingly, according to the data volume of the dual-confidential ciphertext of the target confidential data, a storage space of the size of the data volume of the dual-confidential ciphertext of the target confidential data may be applied for in advance in the storage node; and an upload address may be generated based on the applied storage space.

[0131] Further, the upload address may be sent to the terminal device. The terminal device may upload the double encrypted ciphertext of the target confidential data to the above upload address. For the control node, the double encrypted ciphertext of the target confidential data and the second password may be obtained from the upload address. In some embodiments, the double encrypted ciphertext of the target confidential data may be obtained in batches from the upload address.

[0132] Furthermore, the double encrypted ciphertext of the target confidential data can be decrypted based on the second password to obtain the associated data of the ciphertext of the target confidential data. In some embodiments, the double encrypted ciphertext of the target confidential data is obtained by directly encrypting the associated data of the ciphertext of the target confidential data using the second password, and the double encrypted ciphertext of the target confidential data can be decrypted using the second password as the decryption key to obtain the associated data of the ciphertext of the target confidential data.

[0133] In other embodiments, the double encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data using the encryption key derived from the second password, and then an encryption key (defined as a fourth encryption key) can be derived based on the second password. The length of the fourth encrypted ciphertext is greater than the second password. In this embodiment, the double encrypted ciphertext of the target confidential data is also obtained by encrypting the associated data of the ciphertext of the target confidential data using the fourth encryption key.

[0134] Accordingly, the doubly encrypted ciphertext of the target confidential data may be decrypted using the fourth encryption key to obtain associated data of the ciphertext of the target confidential data.

[0135] Further, the ciphertext of the target confidential data can be obtained based on the associated data of the ciphertext of the target confidential data. For the embodiment where the associated data of the ciphertext of the target confidential data is the target confidential data itself, the ciphertext of the target confidential data can be directly obtained by decrypting the double encrypted ciphertext of the target confidential data.

[0136] For the embodiment in which the associated data of the ciphertext of the above-mentioned target confidential data is the ciphertext of the target confidential data carrying signature information, the private key of the key management system can be used to perform digital signature verification on the ciphertext of the target confidential data carrying the signature information; and when the ciphertext of the target confidential data passes the digital signature verification, the ciphertext of the target confidential data can be obtained from the ciphertext of the target confidential data carrying the signature information.

[0137] For the embodiment in which the associated data of the ciphertext of the above-mentioned target confidential data is a compressed file of the ciphertext of the target confidential data carrying signature information, the private key of the key management system can be used to perform digital signature verification on the compressed file of the ciphertext of the target confidential data carrying signature information. When the compressed file of the ciphertext of the target confidential data passes the digital signature verification, the compressed file of the ciphertext of the target confidential data is decompressed to obtain the ciphertext of the target confidential data.

[0138] Furthermore, the ciphertext of the target confidential data may be sent to a storage node so that the storage node can store the ciphertext of the target confidential data, thereby realizing the uploading of the ciphertext of the target confidential data.

[0139] If the target confidential data in the key management instance of the target user is lost, the ciphertext of the target confidential data uploaded to the storage node can be used to restore the target confidential data in the key management instance. The specific restoration process can refer to the restoration process of the confidential data to be restored in the above embodiment, which will not be repeated here.

[0140] It should be noted that the execution subject of each step of the method provided in the above embodiment can be the same device, or the method can be executed by different devices. For example, the execution subject of steps 901 and 902 can be device A; for another example, the execution subject of step 901 can be device A, and the execution subject of step 902 can be device B; and so on.

[0141] In addition, in some of the processes described in the above embodiments and the accompanying drawings, multiple operations appearing in a specific order are included, but it should be clearly understood that these operations may not be executed in the order in which they appear in this document or may be executed in parallel, and the sequence numbers of the operations, such as 901, 902, etc., are only used to distinguish between different operations, and the sequence numbers themselves do not represent any execution order. In addition, these processes may include more or fewer operations, and these operations may be executed in sequence or in parallel.

[0142] Accordingly, an embodiment of the present application also provides a computer-readable storage medium storing computer instructions. When the computer instructions are executed by one or more processors, the one or more processors are caused to execute the steps in the above-mentioned data processing method.

[0143] Fig.10This is a schematic diagram of the structure of a computing device provided in an embodiment of the present application. Fig.10 As shown, the computing device mainly includes: a memory 100a and a processor 100b. The memory 100a is used to store computer programs.

[0144] The processor 100b is coupled to the memory 100a, and is used to execute a computer program for: determining, in response to a data backup event, confidential data to be backed up in a key management instance in a key management system; creating a first encryption key in the key management instance; encrypting the confidential data to be backed up using the first encryption key in the key management instance to obtain a ciphertext of the confidential data to be backed up; and sending the ciphertext of the confidential data to be backed up to a storage node, so as to back up the confidential data to be backed up at the storage node.

[0145] In some embodiments, processor 100b is also used to: monitor whether there is new confidential data or new versions of confidential data in the key management instance; and trigger a data backup event when new confidential data and / or new versions of confidential data are detected in the key management instance.

[0146] When the processor 100b determines the confidential data to be backed up in the key management instance in response to the data backup event, it is specifically used to: in response to the data backup event, determine the newly added confidential data and / or the newly added version of the confidential data in the key management instance as the confidential data to be backed up.

[0147] Alternatively, the processor 100b is used to: monitor whether the triggering timing of the full backup event has arrived, and when the triggering timing of the full backup event has arrived, determine that a data backup event has occurred. Accordingly, when the processor 100b determines the confidential data to be backed up in the key management instance in response to the data backup event, it is specifically used to: determine that all confidential data in the key management instance is confidential data to be backed up in response to the data backup event.

[0148] Optionally, when the processor 100b creates the first encryption key in the key management instance, it is specifically used to: obtain the root key of the target user stored in the cryptographic machine corresponding to the key management instance; and derive the first encryption key based on the root key.

[0149] Optionally, the processor 100b is also used to: encrypt the first encryption key using the root key in the key management instance to obtain the ciphertext of the first encryption key; store the ciphertext of the first encryption key in the control node in the key management service, so that in the process of restoring the confidential data to be backed up, the ciphertext of the first encryption key and the ciphertext of the data to be restored are provided to the key management instance, so that the key management instance can use the root key to decrypt the ciphertext of the first encryption key, and use the ciphertext of the first encryption key to decrypt the ciphertext of the confidential data to be backed up.

[0150] Optionally, the processor 100b is also used to: record the metadata of the ciphertext of the confidential data to be backed up; and send the metadata of the ciphertext of the confidential data to be backed up to the storage node, so that the storage node stores the metadata of the ciphertext of the confidential data to be backed up, and determines the confidential data that needs to be restored based on the metadata of the ciphertext of the confidential data to be backed up.

[0151] In some embodiments of the present application, the processor 100b is also used to: in response to a data recovery event, obtain the ciphertext of the confidential data to be recovered from the storage node; send a data recovery request to the key management instance to request the key management instance to recover the confidential data to be recovered; the data recovery request includes: the ciphertext of the second encryption key for encrypting the confidential data to be recovered and the ciphertext of the confidential data to be recovered; in response to the data recovery request, obtain the root key of the target user stored in the cryptographic machine corresponding to the key management instance; use the root key to decrypt the ciphertext of the second encryption key to obtain the second encryption key; use the second encryption key to decrypt the ciphertext of the confidential data to be recovered in the key management instance to obtain the confidential data to be recovered; and store the confidential data to be recovered in the key management instance.

[0152] In some embodiments, the processor 100b is further configured to: provide a configuration interface for data to be recovered; and determine that a data recovery event has occurred when metadata of confidential data to be recovered configured through the configuration interface for data to be recovered is obtained. Accordingly, when the processor 100b obtains the ciphertext of confidential data to be recovered from the storage node in response to the data recovery event, it is specifically configured to: obtain the ciphertext of confidential data to be recovered from the storage node in response to the data recovery event according to the metadata of confidential data to be recovered.

[0153] In other embodiments of the present application, the processor 100b is also used to: obtain a backup data download request and a first password provided by a target user through the communication component 100c; determine the ciphertext of the confidential data to be downloaded from the storage node in response to the backup data download request; encrypt the ciphertext of the confidential data to be downloaded based on the first password to obtain a doubly encrypted ciphertext of the confidential data to be downloaded; and provide the doubly encrypted ciphertext of the confidential data to be downloaded to the terminal device of the target user through the communication component 100c.

[0154] Optionally, when the processor 100b encrypts the ciphertext of the confidential data to be downloaded based on the first password, it is specifically used to: derive a third encryption key based on the first password; the length of the third encryption key is greater than the first password; and use the third encryption key to encrypt the ciphertext of the confidential data to be downloaded to obtain a double encrypted ciphertext of the confidential data to be downloaded.

[0155] Optionally, the processor 100b is also used to: compress the ciphertext of the confidential data to be downloaded before encrypting the ciphertext of the confidential data to be downloaded based on the first password to obtain a first compressed file of the ciphertext of the confidential data to be downloaded; and digitally sign the first compressed file using the private key of the key management system to obtain a first compressed file carrying signature information.

[0156] Correspondingly, when the processor 100b encrypts the ciphertext of the confidential data to be downloaded based on the first password, it is specifically used to: encrypt the first compressed file carrying the signature information based on the first password to obtain the double encrypted ciphertext of the confidential data to be downloaded; the double encrypted ciphertext of the confidential data to be downloaded is the ciphertext of the first compressed file carrying the signature information.

[0157] Optionally, when the processor 100b provides the doubly encrypted ciphertext of confidential data to be downloaded to the terminal device of the target user, it is specifically used to: generate a download address for the doubly encrypted ciphertext of confidential data to be downloaded; and provide the download address to the terminal device of the target user through the communication component 100c, so that the target user can download the doubly encrypted ciphertext of the confidential data to be downloaded from the download address.

[0158] In some embodiments, the processor 100b is also used to: obtain, through the communication component 100c, the doubly encrypted ciphertext of the target confidential data uploaded by the target user and the second password uploaded by the target user; the doubly encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data based on the second password; based on the second password, decrypt the doubly encrypted ciphertext of the target confidential data to obtain the associated data of the ciphertext of the target confidential data; based on the associated data of the ciphertext of the target confidential data, obtain the ciphertext of the target confidential data; and send the ciphertext of the target confidential data to a storage node so that the storage node can store the ciphertext of the target confidential data.

[0159] Optionally, the associated data of the ciphertext of the target confidential data is a second compressed file of the ciphertext of the target confidential data carrying signature information; the signature information is obtained by digitally signing the compressed file with the private key of the key management system. Accordingly, the processor 100b is also used to: before obtaining the ciphertext of the target confidential data based on the associated data of the ciphertext of the target confidential data, use the private key of the key management system to perform digital signature verification on the second compressed file carrying the signature information; when the second compressed file carrying the signature information passes the digital signature verification, execute the operation of obtaining the ciphertext of the target confidential data based on the associated data of the ciphertext of the target confidential data.

[0160] Correspondingly, when the processor 100b obtains the ciphertext of the target confidential data based on the associated data of the ciphertext of the target confidential data, it is specifically configured to: decompress the second compressed file to obtain the ciphertext of the target confidential data.

[0161] Optionally, when obtaining the double encrypted ciphertext of the target confidential data uploaded by the target user, the processor 100b is specifically used to: generate an upload address in response to a backup data upload request; send the upload address to the target user's terminal device through the communication component 100c, so that the target user can upload the double encrypted ciphertext of the target confidential data to the upload address; and obtain the double encrypted ciphertext of the target confidential data from the upload address.

[0162] In some embodiments, when the processor 100b decrypts the double encrypted ciphertext of the target confidential data based on the second password, it is specifically used to: derive a fourth encryption key based on the second password; the length of the fourth encrypted ciphertext is greater than the second password; the double encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data using the fourth encryption key; and, decrypt the double encrypted ciphertext of the target confidential data using the fourth encryption key to obtain the associated data of the ciphertext of the target confidential data.

[0163] In some optional embodiments, such as Fig.10As shown, the computing device may further include: a power supply component 100d and other components. In some embodiments, the computing device may be implemented as a terminal device such as a computer or a workstation. Accordingly, the computing device may further include: a display component 100e and an audio component 100f and other components. Fig.10 The components are shown schematically only and do not necessarily include Fig.10 The components shown do not necessarily mean that the computing device can only include Fig.10 Components shown.

[0164] The computing device provided in this embodiment, on the one hand, encrypts the confidential data to be backed up in the key management instance, and backs up the ciphertext of the confidential data, thereby ensuring the security of the confidential data during backup; on the other hand, the confidential data in the key management instance is backed up to the storage node. Even if the confidential data in the node where the key management instance is located is lost, it can be restored through the ciphertext of the backed up confidential data, thereby reducing the risk of loss of confidential data on the cloud and further improving data security.

[0165] In an embodiment of the present application, the memory is used to store a computer program and can be configured to store various other data to support operations on the device where it is located. Among them, the processor can execute the computer program stored in the memory to implement the corresponding control logic. The memory can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (Static Random-Access Memory, SRAM), electrically erasable programmable read only memory (Electrically Erasable Programmable Read Only Memory, EEPROM), erasable programmable read only memory (Electrical Programmable Read Only Memory, EPROM), programmable read only memory (Programmable Read Only Memory, PROM), read only memory (Read Only Memory, ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0166] In the embodiment of the present application, the processor can be any hardware processing device that can execute the logic of the above method. Optionally, the processor can be a central processing unit (CPU), a graphics processing unit (GPU) or a microcontroller unit (MCU); it can also be a field programmable gate array (FPGA), a programmable array logic device (PAL), a general array logic device (GAL), a complex programmable logic device (CPLD) and other programmable devices; or an advanced reduced instruction set (RISC) processor (Advanced RISC Machines, ARM) or a system on chip (SoC), etc., but not limited to this.

[0167] In an embodiment of the present application, the communication component is configured to facilitate wired or wireless communication between the device in which it is located and other devices. The device in which the communication component is located can access a wireless network based on a communication standard, such as WiFi, 2G or 3G, 4G, 5G or a combination thereof. In an exemplary embodiment, the communication component receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component can also be based on near field communication (NFC) technology, radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (Ultra WideBand, UWB) technology, Bluetooth (BT) technology or other technologies to achieve.

[0168] In an embodiment of the present application, the display component may include a liquid crystal display (LCD) and a touch panel (TP). If the display component includes a touch panel, the display component may be implemented as a touch screen to receive input signals from a user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation.

[0169] In an embodiment of the present application, a power supply component is configured to provide power to various components of the device in which it is located. The power supply component may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the device in which the power supply component is located.

[0170] In an embodiment of the present application, the audio component may be configured to output and / or input audio signals. For example, the audio component includes a microphone (Microphone, MIC), and when the device where the audio component is located is in an operating mode, such as a call mode, a recording mode, and a speech recognition mode, the microphone is configured to receive an external audio signal. The received audio signal may be further stored in a memory or sent via a communication component. In some embodiments, the audio component also includes a speaker for outputting an audio signal. For example, for a device with a language interaction function, voice interaction with a user can be achieved through an audio component.

[0171] It should be noted that the descriptions such as “first” and “second” in this article are used to distinguish different messages, devices, modules, etc., and do not represent the order of precedence, nor do they limit “first” and “second” to different types.

[0172] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), optical storage, etc.) that contain computer-usable program code.

[0173] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0174] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0175] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0176] In a typical configuration, a computing device includes one or more processors (CPU, etc.), input / output interfaces, network interfaces, and memory.

[0177] Memory may include non-permanent storage in a computer-readable medium, random-access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0178] The storage medium of a computer is a readable storage medium, which may also be referred to as a readable medium. The readable storage medium includes permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. The information can be a computer-readable instruction, a data structure, a module of a program, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, magnetic cassettes, disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include temporary computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0179] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of further restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the above elements.

[0180] The above contents are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A data processing method, characterized in that: include: In response to a data backup event, determining confidential data to be backed up in a key management instance in a key management system; creating a first encryption key in the key management instance; In the key management instance, the confidential data to be backed up is encrypted using the first encryption key to obtain a ciphertext of the confidential data to be backed up; The ciphertext of the confidential data to be backed up is sent to a storage node, so as to back up the confidential data to be backed up at the storage node.

2. The method according to claim 1, characterized in that The method further comprises: In case of monitoring the presence of newly added confidential data and / or newly added versions of confidential data in the key management instance, triggering the data backup event; The determining, in response to the data backup event, the confidential data to be backed up in the key management instance comprises: determining, in response to the data backup event, newly added confidential data and / or newly added versions of confidential data in the key management instance as the confidential data to be backed up; or, When the triggering time of the full backup event is detected to have arrived, the data backup event is triggered; The step of determining, in response to a data backup event, confidential data to be backed up in the key management instance comprises: In response to a data backup event, all confidential data in the key management instance is determined as the confidential data to be backed up.

3. The method according to claim 1, characterized in that The creating a first encryption key in the key management instance includes: Obtaining a root key of a target user stored in a cryptographic machine corresponding to the key management instance; the target user is a user to which the key management instance belongs; Based on the root key, the first encryption key is derived.

4. The method according to claim 3, characterized in that Also includes: encrypting the first encryption key using the root key in the key management instance to obtain a ciphertext of the first encryption key; and storing the ciphertext of the first encryption key in the control node in the key management service, so that in the process of restoring the confidential data to be backed up, the ciphertext of the first encryption key and the ciphertext of the confidential data to be backed up are provided to the key management instance, so that the key management instance uses the root key to decrypt the ciphertext of the first encryption key, and uses the ciphertext of the first encryption key to decrypt the ciphertext of the confidential data to be backed up; and / or, Recording metadata of the ciphertext of the confidential data to be backed up; The metadata of the ciphertext of the confidential data to be backed up is sent to the storage node so that the storage node stores the metadata of the ciphertext of the confidential data to be backed up, and determines the confidential data to be restored based on the metadata of the ciphertext of the confidential data to be backed up.

5. The method according to any one of claims 1 to 4, characterized in that: The method further comprises: In response to a data recovery event, obtaining a ciphertext of the confidential data to be recovered from the storage node; Sending a data recovery request to the key management instance to request the key management instance to recover the confidential data to be recovered; the data recovery request includes: a ciphertext of a second encryption key used to encrypt the confidential data to be recovered and the ciphertext of the confidential data to be recovered; In response to the data recovery request, obtaining the root key of the target user stored in the cryptographic machine corresponding to the key management instance; decrypting the ciphertext of the second encryption key using the root key to obtain the second encryption key; decrypting the ciphertext of the confidential data to be restored by using the second encryption key in the key management instance to obtain the confidential data to be restored; The confidential data to be restored is stored in the key management instance.

6. The method according to claim 5, characterized in that The method further comprises: In the case where metadata of the confidential data to be restored configured through the to-be-restored data configuration interface is acquired, determining that the data restoration event occurs; The step of obtaining, in response to a data recovery event, ciphertext of confidential data to be recovered from the storage node comprises: In response to a data recovery event, the ciphertext of the confidential data to be recovered is obtained from the storage node according to the metadata of the confidential data to be recovered.

7. The method according to any one of claims 1 to 4, characterized in that: The method further comprises: Obtaining a backup data download request and a first password provided by the target user; In response to the backup data download request, determining the ciphertext of the confidential data to be downloaded from the storage node; Based on the first password, encrypting the ciphertext of the confidential data to be downloaded to obtain a double encrypted ciphertext of the confidential data to be downloaded; The double encrypted ciphertext of the confidential data to be downloaded is provided to the terminal device of the target user.

8. The method according to claim 7, characterized in that The step of encrypting the ciphertext of the confidential data to be downloaded based on the first password includes: Based on the first password, deriving a third encryption key; the length of the third encryption key is greater than the first password; The ciphertext of the confidential data to be downloaded is encrypted using the third encryption key to obtain the double-encrypted ciphertext of the confidential data to be downloaded.

9. The method according to claim 7, characterized in that: Before encrypting the ciphertext of the confidential data to be downloaded based on the first password, the method further includes: Compressing the ciphertext of the confidential data to be downloaded to obtain a first compressed file of the ciphertext of the confidential data to be downloaded; Digitally signing the first compressed file using the private key of the key management system to obtain a first compressed file carrying signature information; The step of encrypting the ciphertext of the confidential data to be downloaded based on the first password to obtain the double encrypted ciphertext of the confidential data to be downloaded includes: Based on the first password, the first compressed file carrying the signature information is encrypted to obtain a double encrypted ciphertext of the confidential data to be downloaded.

10. The method according to claim 7, characterized in that The method further comprises: Obtaining a double encrypted ciphertext of the target confidential data uploaded by the target user and a second password uploaded by the target user; the double encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data based on the second password; decrypting the double encrypted ciphertext of the target confidential data based on the second password to obtain associated data of the ciphertext of the target confidential data; Based on the associated data of the ciphertext of the target confidential data, obtaining the ciphertext of the target confidential data; The ciphertext of the target confidential data is sent to the storage node, so that the storage node stores the ciphertext of the target confidential data.

11. The method according to claim 10, characterized in that The associated data of the ciphertext of the target confidential data is a second compressed file of the ciphertext of the target confidential data carrying signature information; The signature information is obtained by digitally signing the compressed file using the private key of the key management system; The method further comprises: Before obtaining the ciphertext of the target confidential data based on the associated data of the ciphertext of the target confidential data, using the private key of the key management system to perform digital signature verification on the second compressed file carrying the signature information; When the second compressed file carrying the signature information passes the digital signature verification, executing the operation of acquiring the ciphertext of the target confidential data based on the associated data of the ciphertext of the target confidential data; The step of obtaining the ciphertext of the target confidential data based on the associated data of the ciphertext of the target confidential data comprises: The second compressed file is decompressed to obtain the ciphertext of the target confidential data.

12. The method according to claim 10, characterized in that The decrypting, based on the second password, the double encrypted ciphertext of the target confidential data to obtain the associated data of the ciphertext of the target confidential data includes: A fourth encryption key is derived based on the second password; the length of the fourth encrypted ciphertext is greater than the second password; the double encrypted ciphertext of the target confidential data is obtained by encrypting the associated data of the ciphertext of the target confidential data using the fourth encryption key; The double encrypted ciphertext of the target confidential data is decrypted using the fourth encryption key to obtain associated data of the ciphertext of the target confidential data.

13. A data processing system, characterized in that: include: Key management system and storage nodes; The key management system includes: a key management node; the key management node runs a key management instance of a target user; the key management system also includes: a control node of the key management instance; the key management system is used to execute the steps in the method described in any one of claims 1-12.

14. A computing device, characterized in that include: A memory and a processor; wherein the memory is used to store a computer program; The processor is coupled to the memory and is configured to execute the computer program to perform the steps of the method according to any one of claims 1 to 12.

15. A computer-readable storage medium storing computer instructions, characterized in that: When the computer instructions are executed by one or more processors, the one or more processors are caused to execute the steps in the method according to any one of claims 1 to 12.

Images