A method for storing sensitive data, a method for reading data and a device

Abstract

The embodiment of the present application provides a method for storing sensitive data, a data reading method and a device, the method comprising: receiving a data write request carrying sensitive data sent by a first terminal device; sending an encryption key acquisition instruction to a second terminal device according to the data write request, so that the second terminal device can obtain a target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction; receiving the target encryption key sent by the second terminal device; sending an encryption algorithm acquisition instruction to a third terminal device according to the data write request, so that the third terminal device can obtain a target encryption algorithm corresponding to the sensitive data according to the encryption algorithm acquisition instruction; receiving the target encryption algorithm sent by the third terminal device; encrypting the sensitive data using the target encryption key and the target encryption algorithm to obtain encrypted data; storing the encrypted data in a database. With the help of the above scheme, the embodiment of the present application can improve security.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a method for storing sensitive data, a method for reading data, and an apparatus. Background Art

[0002] With the rapid development of the information age, data security is increasingly valued.

[0003] Currently, existing methods generally implement control by strengthening the management of sensitive data. For example, existing methods can protect sensitive data by setting access permissions for certain enterprise personnel.

[0004] During the implementation of the present invention, the inventors discovered the following problems with the prior art: existing methods suffer from low data security. For example, existing methods only restrict the access rights of business personnel, but do not restrict the access rights of R&D personnel or operations and maintenance personnel. This means that R&D personnel or operations and maintenance personnel can remove sensitive data through their job functions. Summary of the Invention

[0005] The purpose of the embodiments of the present application is to provide a method for storing sensitive data, a method for reading data, and an apparatus to improve security.

[0006] In a first aspect, an embodiment of the present application provides a method for storing sensitive data, which is applied to a server in a sensitive data protection system. The sensitive data protection system includes a first terminal device, a second terminal device, a third terminal device, a database and a server, and the second terminal device stores at least one encryption key, and the third terminal device stores at least one encryption algorithm. The method includes: receiving a data write request carrying sensitive data sent by the first terminal device; sending an encryption key acquisition instruction to the second terminal device according to the data write request, so that the second terminal device obtains a target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction, and sends the target encryption key to the server; receiving the target encryption key sent by the second terminal device; sending an encryption algorithm acquisition instruction to the third terminal device according to the data write request, so that the third terminal device obtains the target encryption algorithm corresponding to the sensitive data according to the encryption algorithm acquisition instruction, and sends the target encryption algorithm to the server; receiving the target encryption algorithm sent by the third terminal device; encrypting the sensitive data using the target encryption key and the target encryption algorithm to obtain encrypted data; and storing the encrypted data in the database.

[0007] With the help of the above scheme, the embodiment of the present application stores the encryption keys and encryption algorithms corresponding to sensitive data in different terminal devices, so that for any one of the terminal devices, due to the lack of the corresponding encryption key or encryption algorithm, a single terminal device cannot write or read sensitive data, thereby improving security.

[0008] In one possible embodiment, the sensitive data is encrypted using a target encryption key and a target encryption algorithm, and the method further includes: determining whether the first terminal device is in an approved state; if it is determined that the first terminal device is in an approved state, encrypting the sensitive data using the target encryption key and the target encryption algorithm.

[0009] In a second aspect, an embodiment of the present application provides a data reading method, which is applied to a server in a sensitive data protection system. The sensitive data protection system includes a second terminal device, a third terminal device, a fourth terminal device, a database and a server, and the second terminal device stores at least one decryption password, and the third terminal device stores at least one decryption algorithm, and the database stores at least one encrypted data, and each of the at least one encrypted data is obtained by storing it by any of the methods for storing sensitive data in the first aspect. The data reading method includes: receiving a data reading request sent by the fourth terminal device; searching the database for target encrypted data corresponding to the data reading request; searching the database for target encrypted data corresponding to the data reading request according to the target Encrypt data, send a decryption key acquisition instruction to the second terminal device, so that the second terminal device can obtain the target decryption key corresponding to the target encrypted data according to the decryption key acquisition instruction, and send the target decryption key to the server; receive the target decryption key sent by the second terminal device; send a decryption algorithm acquisition instruction to the third terminal device according to the target encrypted data, so that the third terminal device can obtain the target decryption algorithm corresponding to the target encrypted data according to the decryption algorithm acquisition instruction, and send the target decryption algorithm to the server; receive the target decryption algorithm sent by the third terminal device; use the target decryption key and the target decryption algorithm to decrypt the target encrypted data to obtain the target sensitive data; send the target sensitive data to the fourth terminal device.

[0010] In a possible embodiment, sending target sensitive data to a fourth terminal device includes: adding a watermark to a document recording the target sensitive data to obtain a target document; and sending the target document to the fourth terminal device.

[0011] In one possible embodiment, adding a watermark to a document recording target sensitive data to obtain a target document includes: adding a watermark to a document recording target sensitive data to obtain an intermediate document; and encrypting the intermediate document using a preset encryption password to obtain the target document.

[0012] In a third aspect, an embodiment of the present application provides a device for storing sensitive data, which is applied to a server in a sensitive data protection system. The sensitive data protection system includes a first terminal device, a second terminal device, a third terminal device, a database and a server, and the second terminal device stores at least one encryption key, and the third terminal device stores at least one encryption algorithm. The device includes: a first receiving module for receiving a data write request carrying sensitive data sent by the first terminal device; a first sending module for sending an encryption key acquisition instruction to the second terminal device according to the data write request, so that the second terminal device obtains a target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction, and sends the target encryption key to the server; a second receiving module for receiving the target encryption key sent by the second terminal device; a second sending module for sending an encryption algorithm acquisition instruction to the third terminal device according to the data write request, so that the third terminal device obtains the target encryption algorithm corresponding to the sensitive data according to the encryption algorithm acquisition instruction, and sends the target encryption algorithm to the server; a third receiving module for receiving the target encryption algorithm sent by the third terminal device; an encryption module for encrypting the sensitive data using the target encryption key and the target encryption algorithm to obtain encrypted data; and a storage module for storing the encrypted data in the database.

[0013] In a possible embodiment, the encryption module is specifically used to: determine whether the first terminal device is in an approved state; if it is determined that the first terminal device is in an approved state, encrypt the sensitive data using a target encryption key and a target encryption algorithm.

[0014] In a fourth aspect, an embodiment of the present application provides a data reading device, which is applied to a server in a sensitive data protection system. The sensitive data protection system includes a second terminal device, a third terminal device, a fourth terminal device, a database and a server, and the second terminal device stores at least one decryption password, and the third terminal device stores at least one decryption algorithm, and the database stores at least one encrypted data, and each of the at least one encrypted data is obtained by storing it by any of the methods for storing sensitive data in the first aspect. The data reading device includes: a fourth receiving module for receiving a data reading request sent by the fourth terminal device; a search module for searching the database for target encrypted data corresponding to the data reading request; and a third sending module for sending a data read request to the second terminal device according to the target encrypted data. The terminal device sends a decryption key acquisition instruction so that the second terminal device can obtain the target decryption key corresponding to the target encrypted data according to the decryption key acquisition instruction, and send the target decryption key to the server; the fifth receiving module is used to receive the target decryption key sent by the second terminal device; the fourth sending module is used to send a decryption algorithm acquisition instruction to the third terminal device according to the target encrypted data, so that the third terminal device can obtain the target decryption algorithm corresponding to the target encrypted data according to the decryption algorithm acquisition instruction, and send the target decryption algorithm to the server; the sixth receiving module is used to receive the target decryption algorithm sent by the third terminal device; the encryption module is used to use the target decryption key and the target decryption algorithm to decrypt the target encrypted data to obtain the target sensitive data; the fifth sending module is used to send the target sensitive data to the fourth terminal device.

[0015] In a possible embodiment, the fifth sending module is specifically configured to: add a watermark to a document recording target sensitive data to obtain a target document; and send the target document to a fourth terminal device.

[0016] In a possible embodiment, the fifth sending module is specifically configured to: add a watermark to a document recording target sensitive data to obtain an intermediate document; and encrypt the intermediate document using a preset encryption password to obtain a target document.

[0017] In a fifth aspect, an embodiment of the present application provides a storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the method described in the first aspect or any optional implementation of the first aspect is executed.

[0018] In a sixth aspect, an embodiment of the present application provides a storage medium having a computer program stored thereon, and the computer program is executed by a processor to execute the method described in the second aspect or any optional implementation of the second aspect.

[0019] In the seventh aspect, an embodiment of the present application provides an electronic device, comprising: a processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor, and when the electronic device is running, the processor and the memory communicate through the bus, and when the machine-readable instructions are executed by the processor, the method described in the first aspect or any optional implementation of the first aspect is executed.

[0020] In an eighth aspect, an embodiment of the present application provides an electronic device comprising: a processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor. When the electronic device is running, the processor and the memory communicate through the bus, and when the machine-readable instructions are executed by the processor, the method described in the second aspect or any optional implementation of the second aspect is executed.

[0021] In the ninth aspect, the present application provides a computer program product, which includes a computer-readable storage medium storing a computer program, and when the computer program is executed by at least one processor, causes the at least one processor to execute the method described in the first aspect or any optional implementation of the first aspect.

[0022] In the tenth aspect, the present application provides a computer program product, which includes a computer-readable storage medium storing a computer program, and when the computer program is executed by at least one processor, causes the at least one processor to execute the method described in the second aspect or any optional implementation of the second aspect.

[0023] In order to make the above-mentioned objectives, features and advantages to be achieved by the embodiments of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without creative work.

[0025] Figure 1 A schematic diagram of a sensitive data protection system provided by an embodiment of the present application is shown;

[0026] Figure 2 A flowchart of a method for storing sensitive data provided by an embodiment of the present application is shown;

[0027] Figure 3A flow chart of a data reading method provided by an embodiment of the present application is shown;

[0028] Figure 4 A structural block diagram of a device for storing sensitive data provided by an embodiment of the present application is shown;

[0029] Figure 5 A structural block diagram of a data reading device provided in an embodiment of the present application is shown;

[0030] Figure 6 A structural block diagram of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0031] In order to make the purpose, technical solutions and advantages of this application more clear, the following further describes this application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain this application and are not intended to limit this application.

[0032] With the development of information technology, information security has become an increasingly important issue in today's Internet Technology (IT) industry. Nowadays, there are many mature technologies that can ensure that information is not leaked.

[0033] However, in information security, it is far from enough to simply ensure external information security. Internal personnel on the enterprise side are also the focus of information leakage prevention. Therefore, it is becoming increasingly important for the enterprise to have a set of effective protection methods.

[0034] Currently, existing methods usually adopt the method of strengthening management. For example, if business personnel want to use sensitive data, they need to obtain approval.

[0035] However, although the existing methods solve the possibility of data leakage by business personnel, for R&D personnel or operation and maintenance personnel, they can bring out sensitive data through their work functions.

[0036] Therefore, the existing methods have the problem of low security.

[0037] Based on this, an embodiment of the present application provides a solution for processing sensitive data, by storing the encryption key and encryption algorithm (or decryption password and decryption algorithm) corresponding to the sensitive data in different terminal devices, so that for any one of the terminal devices, due to the lack of the corresponding encryption key or encryption algorithm, a single terminal device cannot write or read sensitive data, thereby improving security.

[0038] For example, for a second terminal device that stores a decryption key, although the second terminal device stores the decryption key, it does not store the corresponding decryption algorithm, so access to sensitive data cannot be achieved only through the second terminal device.

[0039] For another example, for R&D personnel, although the terminal devices they use can store decryption passwords, since the decryption algorithm corresponding to the decryption key is stored in the terminal devices of the operation and maintenance personnel, the R&D personnel cannot access sensitive data only through their own devices.

[0040] See Figure 1 , Figure 1 FIG. 1 shows a schematic diagram of a sensitive data protection system provided by an embodiment of the present application. Figure 1 The sensitive data protection system shown includes a first terminal device, a second terminal device, a third terminal device, a fourth terminal device, a server, and a database, wherein the server is connected to the first terminal device, the second terminal device, the third terminal device, the fourth terminal device, and the database respectively.

[0041] It should be understood that the specific device of the first terminal device can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0042] For example, the first terminal device may be a mobile phone or a computer.

[0043] Correspondingly, the specific equipment of the second terminal device, the specific equipment of the third terminal device, the specific equipment of the fourth terminal device, the specific equipment of the server and the specific type of the database can all be set according to actual needs, and the embodiments of the present application are not limited to this.

[0044] For example, the server can be a single server or a server cluster.

[0045] It should also be understood that although Figure 1 A specific sensitive data protection system is shown, but those skilled in the art may adaptively adjust the sensitive data protection system, and the embodiments of the present application are not limited thereto.

[0046] For example, the sensitive data protection system may also include management equipment, etc.

[0047] See Figure 2 , Figure 2 A flow chart of a method for storing sensitive data provided by an embodiment of the present application is shown. Figure 2The method shown can be applied to a server in a sensitive data protection system. The sensitive data protection system includes a first terminal device, a second terminal device, a third terminal device, a database, and a server. The second terminal device stores at least one encryption key, and the third terminal device stores at least one encryption algorithm. The method includes:

[0048] In step S210, the server receives a data write request carrying sensitive data sent by the first terminal device, wherein the data write request is used to request to write the sensitive data into the database.

[0049] It should be understood that the specific data of sensitive data can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0050] For example, sensitive data can include personal privacy data such as name, ID number, phone number and email address, or it can include data that is not suitable for enterprises or organizations to disclose, such as business operations and IP address lists.

[0051] For another example, the server may perform keyword judgment on the data to be stored. If it is determined that the data to be stored contains keywords, the server determines that the data to be stored is sensitive data.

[0052] To facilitate understanding of step S210, a specific embodiment is used to describe it below.

[0053] Specifically, when a server receives the first data write request sent by a first terminal device, the server may send an approval request to the corresponding management device based on the first data write request, so that the corresponding management device can approve the permission of the first terminal device. If the approval is passed, it indicates that the first terminal device has permission to store sensitive data in the database, and the management device will feedback approval information to the server, and the server will feedback the approval result to the first terminal device. In addition, for subsequent data write requests from the first terminal device, as long as the first terminal device is in the approved state, it is not necessary to send approval requests to the management device each time. The server may subsequently save the validity period or number of valid approvals for the first terminal device. If the approval is not passed, it indicates that the first terminal device does not have permission to store sensitive data in the database, and the management device will feedback approval failure information to the server, and the server will feedback the approval result to the first terminal device. If the server does not match the approval record information related to the first terminal device, it determines that the first terminal device does not have data storage permission.

[0054] It should be understood that the specific process of the server sending the approval request to the corresponding management device based on the first data write request can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0055] For example, when the sensitive data protection system includes multiple management devices and each of the multiple management devices has a corresponding business type, the server can determine the type of sensitive data in the first data write request, and based on the type of sensitive data, send an approval request to the management device corresponding to the type of sensitive data (that is, the management device can handle the approval process related to the type).

[0056] It should be understood that the specific type of sensitive data can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0057] For example, the type of the sensitive data may be the project to which it belongs or the business type.

[0058] In addition, each approved first terminal device has a corresponding preset usage duration, wherein the preset usage duration indicates the duration that the approved first terminal device is in the approved status, and the approved status indicates that the first terminal device has passed the device approval and does not need to be re-approved.

[0059] That is to say, as long as the first terminal device is within the time range of the preset usage time, the approval process can be omitted. However, if it exceeds the preset usage time, it needs to be approved again.

[0060] For example, when the first terminal device passes the approval, the server may set a preset usage time for each approved first terminal device and record the corresponding preset usage time.

[0061] It should be understood that the specific duration of the preset usage time can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0062] For example, the preset usage time can be 5 minutes or 1 hour.

[0063] It should also be understood that although the above description is based on the example of the server setting the preset usage time for the first terminal device, the preset usage time can also be set by the management device, etc., and the embodiments of the present application are not limited to this.

[0064] It should also be understood that although the above description is based on the preset usage time as an example, those skilled in the art should understand that it can also be implemented in other ways, and the embodiments of the present application are not limited thereto.

[0065] For example, for each first terminal device that has passed the approval, the preset usage duration may be replaced with a preset number of usage times.

[0066] In step S220, the server sends an encryption key acquisition instruction to the second terminal device according to the data write request. Correspondingly, the second terminal device receives the encryption key acquisition instruction sent by the server. The encryption key acquisition instruction is used to instruct the second terminal device to feedback the target encryption key.

[0067] It should be understood that the specific device of the second terminal device can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0068] For example, the second terminal device may be a device used by operation and maintenance personnel, or a device used by research and development personnel.

[0069] In step S230, the second terminal device obtains a target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction, wherein the target encryption key is used to encrypt the sensitive data.

[0070] It should be understood that the specific key type of the target encryption key can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0071] To facilitate understanding of step S230, a specific embodiment is used to describe it below.

[0072] Specifically, when at least one encryption key is stored in the second terminal device and each of the at least one encryption key has a corresponding business type, the server can determine the business type of the sensitive data to be stored, generate an encryption key acquisition instruction carrying the business type of the sensitive data to be stored, and send the encryption key acquisition instruction to the second terminal device.

[0073] Furthermore, after the second terminal device obtains the encryption key acquisition instruction, the second terminal device can search for a target encryption key corresponding to the target business type from at least one encryption key according to the business type of the sensitive data to be stored in the encryption key acquisition instruction.

[0074] In step S240, the second terminal device sends the target encryption key to the server. Correspondingly, the server receives the target encryption key sent by the second terminal device.

[0075] In step S250, the server sends an encryption algorithm acquisition instruction to the third terminal device based on the data write request. Correspondingly, the third terminal device receives the encryption algorithm acquisition instruction sent by the server. The encryption algorithm acquisition instruction is used to instruct the third terminal device to feedback the target encryption algorithm.

[0076] It should be understood that the specific device of the third terminal device can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0077] For example, when the second terminal device is a device used by operation and maintenance personnel, the third terminal device may be a device used by R&D personnel; for another example, when the second terminal device is a device used by R&D personnel, the third terminal device may be a device used by operation and maintenance personnel.

[0078] In step S260, the third terminal device obtains a target encryption algorithm corresponding to the sensitive data according to the encryption algorithm acquisition instruction.

[0079] It should be understood that the specific algorithm of the target encryption algorithm can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0080] For example, the target encryption algorithm may be an Advanced Encryption Standard (AES) algorithm, or a base64 algorithm that represents binary data based on 64 printable characters.

[0081] To facilitate understanding of step S260, a specific embodiment is used to describe it below.

[0082] Optionally, when at least one encryption algorithm is stored in the third terminal device and each of the at least one encryption algorithm has a corresponding business type, the server can determine the business type of the sensitive data to be stored, generate an encryption algorithm acquisition instruction carrying the business type of the sensitive data to be stored, and send the encryption algorithm acquisition instruction to the third terminal device.

[0083] Furthermore, after the third terminal device obtains the encryption algorithm acquisition instruction, the third terminal device can search for a target encryption algorithm corresponding to the target business type from at least one encryption algorithm based on the business type of the sensitive data to be stored in the encryption algorithm acquisition instruction.

[0084] Optionally, after the server receives the target encryption key, the server may determine the type of the target encryption key, generate an encryption algorithm acquisition instruction carrying the type of the target encryption key, and send the encryption algorithm acquisition instruction to the third terminal device.

[0085] Furthermore, after the third terminal device obtains the encryption algorithm acquisition instruction, the third terminal device can find the target encryption algorithm corresponding to the type of the target encryption key from at least one encryption algorithm, that is, the target encryption algorithm is the algorithm that matches the target encryption key.

[0086] In step S270, the third terminal device sends the target encryption algorithm to the server. Correspondingly, the server receives the target encryption algorithm sent by the third terminal device.

[0087] In step S280, the server encrypts the sensitive data using the target encryption key and the target encryption algorithm to obtain encrypted data.

[0088] Specifically, the server can determine whether the current first terminal device is in an approved state. If it is determined that the first terminal device is in an approved state, the sensitive data is encrypted using the target encryption key and target encryption algorithm; if it is determined that the first terminal device is not in an approved state, the next approval process is executed.

[0089] For example, since the server can record the preset usage time of each approved first terminal device, the server can determine whether the current time is within the preset usage time. If it is determined that the current time is within the preset usage time, the target encryption key and target encryption algorithm are used to encrypt the sensitive data; if it is determined that the current time is not within the preset usage time, the next approval process is executed.

[0090] For another example, since the server can record the preset usage times of each approved first terminal device, the server can determine whether the current usage times of the current first terminal device is less than or equal to the preset usage times. If it is determined that the current usage times are less than or equal to the preset usage times, the sensitive data is encrypted using the target encryption key and the target encryption algorithm; if it is determined that the current usage times are greater than the preset usage times, the next approval process is executed.

[0091] Of course, it is understandable that the server may also determine whether the first terminal device is in an approved state before step S220. If it is in an approved state, step S220 is executed; if not, step S220 is not executed.

[0092] In step S290, the server stores the encrypted data in the database.

[0093] Therefore, the embodiment of the present application can encrypt sensitive data, and the encryption key and encryption algorithm used for encryption are stored in different terminal devices respectively, and a single terminal device cannot independently write and read sensitive data, thereby preventing the leakage of sensitive data.

[0094] In addition, the writing of sensitive data in the embodiments of the present application requires approval, and after approval, the server sets a corresponding preset usage time or preset number of uses for it, and records the storage process of the sensitive data, thereby not only realizing the management and control of permissions, but also realizing the recording of usage traces.

[0095] It should be understood that the above method for storing sensitive data is merely exemplary, and those skilled in the art may make various modifications based on the above method, and the modified or deformed content is also within the scope of protection of this application.

[0096] For example, although the method for storing sensitive data is described according to the process from step S210 to step S290, those skilled in the art should understand that it is not a limitation on the execution steps.

[0097] See Figure 3 , Figure 3 FIG. 1 shows a flow chart of a data reading method provided by an embodiment of the present application. Figure 3 The data reading method shown can be applied to a server in a sensitive data protection system, wherein the sensitive data protection system includes a second terminal device, a third terminal device, a fourth terminal device, a database, and a server, wherein the second terminal device stores at least one decryption password, the third terminal device stores at least one decryption algorithm, and the database stores at least one encrypted data, and each encrypted data in the at least one encrypted data is obtained by Figure 1 The method for storing sensitive data shown in the figure is obtained after storage, and the data reading method includes:

[0098] In step S311, the server receives a data read request sent by the fourth terminal device, wherein the data read request is used to read target sensitive data from the database.

[0099] It should be understood that the fourth terminal device and the first terminal device may be the same terminal device or may not be the same terminal device, and the embodiment of the present application is not limited to this.

[0100] It should also be understood that the target sensitive data may refer to designated sensitive data or sensitive data related to a certain business.

[0101] To facilitate understanding of step S311, a specific embodiment is used to describe it below.

[0102] Specifically, in response to the user account input operation, the fourth terminal device sends the account and password information to be verified including the account and password to be verified to the server. Correspondingly, the server receives the account and password information to be verified sent by the fourth terminal device.

[0103] After receiving the account and password information to be verified, the server can search the database for the designated encrypted information corresponding to the authentic and correct account and password information. The server can then obtain the designated decryption key corresponding to the designated encrypted information from the second terminal device, and can also obtain the designated decryption algorithm corresponding to the designated encrypted information from the third terminal device. The server can then use the designated decryption key and the designated decryption algorithm to decrypt the designated encrypted information and obtain the authentic and correct account and password information.

[0104] The server can then compare the account and password information to be verified with the actual and correct account and password information to verify the identity of the account and password to be verified. If they are identical, a valid authentication ticket can be returned to the fourth terminal device. The fourth terminal device can then send a data read request containing the ticket to the server, and the server can verify whether the ticket in the data read request is still valid. If it is, step S312 is executed. If not, a response is returned to the fourth terminal device. If they are not identical, a verification failure result can be returned to the fourth terminal device.

[0105] It should be understood that the specific validity period corresponding to the authentication identification ticket can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0106] It should be noted here that those skilled in the art should understand that the above-mentioned process of generating an authentication identification ticket is also applicable to the method of storing sensitive data.

[0107] Step S312: The server searches the database for target encrypted data corresponding to the data read request.

[0108] It should be understood that the specific process of the server searching the database for the target encrypted data corresponding to the data reading request can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0109] Optionally, when the target sensitive data is designated sensitive data, the server may search the database for target encrypted data corresponding to the designated sensitive data.

[0110] Optionally, in a case where the target sensitive data is sensitive data related to a specified business, the server may search the database for target encrypted data corresponding to the sensitive data related to the specified business.

[0111] In step S313, the server sends a decryption key acquisition instruction to the second terminal device based on the target encrypted data. Correspondingly, the second terminal device receives the target encrypted data sent by the server. The decryption key acquisition instruction is used to instruct the second terminal device to feedback the target decryption key.

[0112] Step S314: The second terminal device obtains the target decryption key corresponding to the target encrypted data according to the decryption key acquisition instruction.

[0113] It should be understood that the specific key type of the target decryption key can also be set according to actual needs, and the embodiments of the present application are not limited to this.

[0114] It should also be understood that the target decryption key can be the same key as the target encryption key (that is, the two keys are the same key), that is, the method of the embodiment of the present application can be implemented by adopting a symmetric encryption algorithm, or it can be a key different from the target encryption key (that is, the two keys are not the same key), that is, the method of the embodiment of the present application can be implemented by adopting an asymmetric encryption algorithm.

[0115] It should be noted here that the process by which the second terminal device obtains the target decryption key corresponding to the target encrypted data according to the decryption key acquisition instruction is similar to the process by which the second terminal device obtains the target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction. For details, please refer to the relevant description of step S230.

[0116] For example, the second terminal device may search for a target decryption key corresponding to the business type of the target encrypted information from at least one decryption key according to the business type of the target encrypted information in the decryption key acquisition instruction.

[0117] In step S315, the second terminal device sends the target decryption key to the server. Correspondingly, the server receives the target decryption key sent by the second terminal device.

[0118] In step S316, the server sends a decryption algorithm acquisition instruction to the third terminal device based on the target encrypted data. Correspondingly, the third terminal device receives the decryption algorithm acquisition instruction sent by the server. The decryption algorithm acquisition instruction is used to instruct the third terminal device to feedback the target decryption algorithm.

[0119] Step S317: The third terminal device obtains the target decryption algorithm corresponding to the target encrypted data according to the decryption algorithm acquisition instruction.

[0120] It should be understood that the specific algorithm corresponding to the target decryption algorithm can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0121] It should also be understood that the target decryption algorithm may be the same algorithm as the target encryption algorithm.

[0122] It should be noted here that the specific process of the server obtaining instructions based on the decryption algorithm and obtaining the target decryption algorithm corresponding to the target encrypted data is similar to the process of the server obtaining instructions based on the encryption algorithm and obtaining the target encryption algorithm corresponding to the sensitive data. For details, please refer to the relevant description of step S260.

[0123] In step S318, the third terminal device sends the target decryption algorithm to the server. Correspondingly, the server receives the target decryption algorithm sent by the third terminal device.

[0124] In step S319, the server decrypts the target encrypted data using the target decryption key and the target decryption algorithm to obtain the target sensitive data.

[0125] Specifically, the server can determine whether the current fourth terminal device is in an approved state. If it is determined that the fourth terminal device is in an approved state, the target encrypted data is decrypted using the target decryption key and target decryption algorithm to obtain the target sensitive data; if it is determined that the fourth terminal device is not in an approved state, the next approval process is executed.

[0126] Step S320: The server sends the target sensitive data to the fourth terminal device.

[0127] It should be understood that after obtaining the target sensitive data, the specific process of the server sending the target sensitive data to the fourth terminal device can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0128] Optionally, the server adds a watermark to the document recording the target sensitive data (or the server may perform watermark processing on the document), obtains a target document containing the target sensitive data and the watermark, and sends the target document to the fourth terminal device.

[0129] It should also be understood that the specific type of the document can also be set according to actual needs, and the embodiments of the present application are not limited to this.

[0130] For example, the document may be a document in EXCEL format.

[0131] It should also be understood that the specific process of the server adding a watermark to a document recording target sensitive data can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0132] For example, the server can obtain the user information of the currently logged-in account of the fourth terminal device and use the user information as a watermark, so that the user who leaked the sensitive data can be identified based on the user information (even if the user takes a screenshot, the watermark can be used to identify the user who leaked the sensitive data). The user information can include the user's name, etc.

[0133] For another example, the server adds a watermark to a document containing target sensitive data, obtains an intermediate document, and encrypts the intermediate document using a preset encryption password to obtain the target document. The target document subsequently obtained by the fourth terminal is an encrypted document, which requires the password to be entered before it can be read, thereby improving security. The specific password of the preset encryption password can be set according to actual needs, and the embodiments of the present application are not limited to this.

[0134] Therefore, the embodiment of the present application can decrypt the target encrypted data, and the decryption key and decryption algorithm used for decryption are stored in different terminal devices respectively, and a single terminal device cannot independently read sensitive data, thereby preventing the leakage of sensitive data.

[0135] Furthermore, the embodiments of the present application can record the reading process of sensitive data, thereby enabling the recording of usage traces.

[0136] It should be understood that the above data reading method is only exemplary, and those skilled in the art may make various modifications based on the above method, and the modified or deformed content is also within the scope of protection of this application.

[0137] For example, although the method for storing sensitive data is described according to the process from step S311 to step S320, those skilled in the art should understand that it is not a limitation on the execution steps.

[0138] See Figure 4 , Figure 4 The structure diagram of a device 400 for storing sensitive data provided by an embodiment of the present application is shown. It should be understood that the device 400 is similar to the above-mentioned Figure 2 The method embodiment shown corresponds to the above Figure 2 For each step of the method embodiment shown, the specific functions of the device 400 can be found in the description above. To avoid repetition, detailed descriptions are appropriately omitted here. The device 400 includes at least one software function module that can be stored in a memory in the form of software or firmware or solidified in the operating system (OS) of the device 400. Specifically, the device 400 is applied to a server in a sensitive data protection system, and the sensitive data protection system includes a first terminal device, a second terminal device, a third terminal device, a database and the server, and the second terminal device stores at least one encryption key, and the third terminal device stores at least one encryption algorithm. The device 400 includes:

[0139] A first receiving module 410 is configured to receive a data write request carrying sensitive data sent by a first terminal device;

[0140] A first sending module 420 is configured to send an encryption key acquisition instruction to the second terminal device according to the data write request, so that the second terminal device acquires a target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction and sends the target encryption key to the server;

[0141] The second receiving module 430 is configured to receive a target encryption key sent by a second terminal device;

[0142] The second sending module 440 is configured to send an encryption algorithm acquisition instruction to the third terminal device according to the data write request, so that the third terminal device can obtain a target encryption algorithm corresponding to the sensitive data according to the encryption algorithm acquisition instruction and send the target encryption algorithm to the server;

[0143] The third receiving module 450 is used to receive the target encryption algorithm sent by the third terminal device;

[0144] The encryption module 460 is used to encrypt the sensitive data using the target encryption key and the target encryption algorithm to obtain encrypted data;

[0145] The storage module 470 is configured to store the encrypted data in a database.

[0146] In a possible embodiment, the encryption module 460 is specifically used to: determine whether the first terminal device is in an approved state; if it is determined that the first terminal device is in an approved state, encrypt the sensitive data using the target encryption key and the target encryption algorithm.

[0147] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working process of the device described above can refer to the corresponding process in the aforementioned method, and will not be described in detail here.

[0148] See Figure 5 , Figure 5 The structure diagram of a data reading device 500 provided in an embodiment of the present application is shown. It should be understood that the data reading device 500 is similar to the above-mentioned Figure 3 The method embodiment shown corresponds to the above Figure 3 For each step of the method embodiment shown, the specific functions of the data reading device 500 can be found in the description above. To avoid repetition, detailed description is omitted here. The data reading device 500 includes at least one software function module that can be stored in a memory in the form of software or firmware or solidified in the operating system (OS) of the data reading device 500. Specifically, the data reading device 500 is applied to a server in a sensitive data protection system, and the sensitive data protection system includes a second terminal device, a third terminal device, a fourth terminal device, a database and a server, and the second terminal device stores at least one decryption password, and the third terminal device stores at least one decryption algorithm, and the database stores at least one encrypted data, and each encrypted data in the at least one encrypted data is obtained through Figure 3 The data reading device 500 is obtained after storing the sensitive data in the method shown in FIG. 5 , and includes:

[0149] A fourth receiving module 510 is configured to receive a data read request sent by a fourth terminal device;

[0150] A search module 520 is configured to search a database for target encrypted data corresponding to a data read request;

[0151] A third sending module 530 is configured to send a decryption key acquisition instruction to the second terminal device based on the target encrypted data, so that the second terminal device acquires a target decryption key corresponding to the target encrypted data according to the decryption key acquisition instruction and sends the target decryption key to the server;

[0152] A fifth receiving module 540 is configured to receive a target decryption key sent by the second terminal device;

[0153] a fourth sending module 550 configured to send a decryption algorithm acquisition instruction to a third terminal device based on the target encrypted data, so that the third terminal device acquires a target decryption algorithm corresponding to the target encrypted data based on the decryption algorithm acquisition instruction, and sends the target decryption algorithm to the server;

[0154] A sixth receiving module 560 is configured to receive a target decryption algorithm sent by a third terminal device;

[0155] The encryption module 570 is used to decrypt the target encrypted data using the target decryption key and the target decryption algorithm to obtain the target sensitive data;

[0156] The fifth sending module 580 is used to send target sensitive data to the fourth terminal device.

[0157] In a possible embodiment, the fifth sending module 580 is specifically configured to: add a watermark to a document recording target sensitive data to obtain a target document; and send the target document to a fourth terminal device.

[0158] In a possible embodiment, the fifth sending module 580 is specifically configured to: add a watermark to a document recording target sensitive data to obtain an intermediate document; and encrypt the intermediate document using a preset encryption password to obtain a target document.

[0159] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working process of the device described above can refer to the corresponding process in the aforementioned method, and will not be described in detail here.

[0160] See Figure 6 , Figure 6The following is a block diagram of the structure of an electronic device 600 provided in an embodiment of the present application. The electronic device 600 may include a processor 610, a communication interface 620, a memory 630, and at least one communication bus 640. The communication bus 640 is used to realize direct connection and communication between these components. The communication interface 620 in the embodiment of the present application is used to communicate signaling or data with other devices. The processor 610 can be an integrated circuit chip with signal processing capabilities. The above-mentioned processor 610 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component. The various methods, steps, and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor 610 can also be any conventional processor.

[0161] The memory 630 may be, but is not limited to, a random access memory (RAM), a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), etc. The memory 630 stores computer-readable instructions. When the processor 610 executes the computer-readable instructions, the electronic device 600 may perform the steps in the above method embodiment.

[0162] The electronic device 600 may further include a memory controller, an input / output unit, an audio unit, and a display unit.

[0163] The memory 630, storage controller, processor 610, peripheral interface, input / output unit, audio unit, and display unit are electrically connected to each other directly or indirectly to enable data transmission or interaction. For example, these components can be electrically connected to each other via one or more communication buses 640.

[0164] The input and output unit is used to provide input data to the user to realize the interaction between the user and the server (or local terminal). The input and output unit can be, but is not limited to, a mouse and a keyboard.

[0165] The audio unit provides an audio interface to the user and may include one or more microphones, one or more speakers, and audio circuitry.

[0166] The display unit provides an interactive interface (e.g., a user operation interface) between the electronic device and the user or is used to display image data for the user's reference. In this embodiment, the display unit can be a liquid crystal display or a touch display. If it is a touch display, it can be a capacitive touch screen or a resistive touch screen that supports single-point and multi-touch operations. Supporting single-point and multi-touch operations means that the touch display can sense touch operations generated simultaneously from one or more positions on the touch display, and the sensed touch operations are handed over to the processor for calculation and processing.

[0167] I understand. Figure 6 The structure shown is for illustration only. The electronic device 600 may also include Figure 6 More or fewer components than shown, or with Figure 6 Different configurations shown. Figure 6 Each component shown in the figure can be implemented by hardware, software or a combination thereof.

[0168] The present application also provides a storage medium having a computer program stored thereon. The computer program is executed by a processor to execute the method described in the method embodiment.

[0169] The present application also provides a computer program product, which, when running on a computer, enables the computer to execute the method described in the method embodiment.

[0170] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working process of the system described above can refer to the corresponding process in the aforementioned method, and will not be elaborated here.

[0171] It should be noted that the various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. Similarities between the various embodiments can be referred to in conjunction with each other. For device embodiments, since they are generally similar to method embodiments, their description is relatively simple, and for relevant details, reference can be made to the description of the method embodiments.

[0172] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architectures, functions, and operations of the devices, methods, and computer program products according to the multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment, or a portion of code, and the module, program segment, or a portion of code contains one or more executable instructions for implementing the specified logical functions. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart, can be implemented using a dedicated hardware-based system that performs the specified function or action, or can be implemented using a combination of dedicated hardware and computer instructions.

[0173] In addition, the functional modules in each embodiment of the present application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0174] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk. It should be noted that, in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0175] The foregoing description is merely a preferred embodiment of the present application and is not intended to limit the present application. Various modifications and variations are possible for those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included within the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following figures. Therefore, once an item is defined in one figure, it does not need to be further defined or explained in subsequent figures.

[0176] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present application should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.

Claims

1. A method for storing sensitive data, characterized in that: The method is applied to a server in a sensitive data protection system, the sensitive data protection system includes a first terminal device, a second terminal device, a third terminal device, a database and the server, the second terminal device stores at least one encryption key, and the third terminal device stores at least one encryption algorithm, the method includes: receiving a data writing request carrying the sensitive data sent by the first terminal device; sending an encryption key acquisition instruction to the second terminal device according to the data write request, so that the second terminal device acquires a target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction, and sends the target encryption key to the server; receiving a target encryption key sent by the second terminal device; According to the data write request, sending an encryption algorithm acquisition instruction to the third terminal device, so that the third terminal device acquires a target encryption algorithm corresponding to the sensitive data according to the encryption algorithm acquisition instruction, and sends the target encryption algorithm to the server; Receiving a target encryption algorithm sent by the third terminal device; Encrypting the sensitive data using the target encryption key and the target encryption algorithm to obtain encrypted data; The encrypted data is stored in a database.

2. The method according to claim 1, characterized in that The method further comprises: encrypting the sensitive data using the target encryption key and the target encryption algorithm; Determining whether the first terminal device is in an approved state; If it is determined that the first terminal device is in an approved state, the sensitive data is encrypted using the target encryption key and the target encryption algorithm.

3. A data reading method, characterized in that: The data reading method is applied to a server in a sensitive data protection system, the sensitive data protection system comprises a second terminal device, a third terminal device, a fourth terminal device, a database and the server, the second terminal device stores at least one decryption password, the third terminal device stores at least one decryption algorithm, the database stores at least one encrypted data, and each encrypted data in the at least one encrypted data is obtained by storing the sensitive data according to any one of claims 1 to 2, the data reading method comprises: receiving a data reading request sent by the fourth terminal device; Searching the database for target encrypted data corresponding to the data read request; According to the target encrypted data, sending a decryption key acquisition instruction to the second terminal device, so that the second terminal device acquires a target decryption key corresponding to the target encrypted data according to the decryption key acquisition instruction, and sends the target decryption key to the server; Receiving a target decryption key sent by the second terminal device; According to the target encrypted data, sending a decryption algorithm acquisition instruction to the third terminal device, so that the third terminal device acquires a target decryption algorithm corresponding to the target encrypted data according to the decryption algorithm acquisition instruction, and sends the target decryption algorithm to the server; Receiving a target decryption algorithm sent by the third terminal device; Decrypting the target encrypted data using the target decryption key and the target decryption algorithm to obtain target sensitive data; Send the target sensitive data to the fourth terminal device.

4. The data reading method according to claim 3, characterized in that: Sending the target sensitive data to the fourth terminal device includes: Adding a watermark to a document recording the target sensitive data to obtain a target document; The target document is sent to the fourth terminal device.

5. The data reading method according to claim 4, characterized in that: The step of adding a watermark to a document recording the target sensitive data to obtain the target document comprises: Adding a watermark to a document recording the target sensitive data to obtain an intermediate document; The intermediate document is encrypted using a preset encryption password to obtain the target document.

6. A device for storing sensitive data, characterized in that: The device is applied to a server in a sensitive data protection system, the sensitive data protection system includes a first terminal device, a second terminal device, a third terminal device, a database and the server, the second terminal device stores at least one encryption key, and the third terminal device stores at least one encryption algorithm, the device includes: A first receiving module, configured to receive a data writing request carrying the sensitive data sent by the first terminal device; a first sending module, configured to send an encryption key acquisition instruction to the second terminal device according to the data write request, so that the second terminal device acquires a target encryption key corresponding to the sensitive data according to the encryption key acquisition instruction, and sends the target encryption key to the server; A second receiving module, used to receive a target encryption key sent by the second terminal device; a second sending module, configured to send an encryption algorithm acquisition instruction to the third terminal device according to the data write request, so that the third terminal device acquires a target encryption algorithm corresponding to the sensitive data according to the encryption algorithm acquisition instruction, and sends the target encryption algorithm to the server; A third receiving module, used to receive a target encryption algorithm sent by the third terminal device; An encryption module, used to encrypt the sensitive data using the target encryption key and the target encryption algorithm to obtain encrypted data; The storage module is used to store the encrypted data in a database.

7. The device according to claim 6, characterized in that The encryption module is specifically used to: determine whether the first terminal device is in an approved state; if it is determined that the first terminal device is in an approved state, encrypt the sensitive data using the target encryption key and the target encryption algorithm.

8. A data reading device, characterized in that: The data reading device is applied to a server in a sensitive data protection system, the sensitive data protection system comprises a second terminal device, a third terminal device, a fourth terminal device, a database and the server, the second terminal device stores at least one decryption password, the third terminal device stores at least one decryption algorithm, the database stores at least one encrypted data, and each encrypted data in the at least one encrypted data is obtained by storing the sensitive data according to any one of claims 1 to 2, the data reading device comprises: A fourth receiving module, used to receive a data reading request sent by the fourth terminal device; A search module, used for searching the database for target encrypted data corresponding to the data reading request; a third sending module, configured to send a decryption key acquisition instruction to the second terminal device according to the target encrypted data, so that the second terminal device acquires a target decryption key corresponding to the target encrypted data according to the decryption key acquisition instruction, and sends the target decryption key to the server; A fifth receiving module, used to receive the target decryption key sent by the second terminal device; a fourth sending module, configured to send a decryption algorithm acquisition instruction to the third terminal device according to the target encrypted data, so that the third terminal device acquires a target decryption algorithm corresponding to the target encrypted data according to the decryption algorithm acquisition instruction, and sends the target decryption algorithm to the server; A sixth receiving module, used to receive a target decryption algorithm sent by the third terminal device; An encryption module, used to decrypt the target encrypted data using the target decryption key and the target decryption algorithm to obtain target sensitive data; The fifth sending module is used to send the target sensitive data to the fourth terminal device.

9. The data reading device according to claim 8, characterized in that: The fifth sending module is specifically used to: add a watermark to a document recording the target sensitive data to obtain a target document; and send the target document to the fourth terminal device.

10. The data reading device according to claim 9, characterized in that: The fifth sending module is specifically used to: add a watermark to the document recording the target sensitive data to obtain an intermediate document; and encrypt the intermediate document using a preset encryption password to obtain the target document.

Images