Data processing method, device, system and storage medium

Abstract

The present disclosure relates to the field of data security technology, and provides a data processing method, device, system and storage medium, which are applied to a database server. The data processing method includes: in response to data being updated, generating a target check code based on the data and a one-way hash algorithm; determining whether the target check code matches an initial check code, the initial check code being a check code generated according to the data at the initialization time; in response to the target check code matching the initial check code, retaining the data in the database; or, in response to the target check code not matching the initial check code, deleting the data in the database. Through the present disclosure, the data security in the database can be effectively guaranteed.

Description

Technical Field

[0001] The present disclosure relates to the field of data security technology, and in particular to a data processing method, device, system and storage medium. Background Art

[0002] Data security refers to taking necessary measures to ensure that data is effectively protected and legally used, and has the ability to ensure continuous security. In the information age, data security is of vital importance, especially when it comes to industry data in the financial and other fields.

[0003] Currently, for data stored in a database, if the user passes the verification, the user is allowed to modify the data therein. This technology cannot prevent illegal tampering of data caused by illegal intrusion into the database. Summary of the invention

[0004] In order to solve the above problems, the present disclosure provides a data processing method, device, system and storage medium to ensure the security of data in the database and prevent the data from being illegally tampered with.

[0005] In a first aspect, the present disclosure provides a data processing method, applied to a database server, comprising:

[0006] In response to data being updated, generating a target check code based on the data and a one-way hash algorithm;

[0007] Determine whether the target check code matches the initial check code, where the initial check code is a check code generated at the initialization time based on the data;

[0008] In response to the target check code matching the initial check code, retaining the data in the database;

[0009] Alternatively, in response to the target verification code not matching the initial verification code, the data is deleted from the database.

[0010] In a possible implementation, generating a target verification code based on data and a one-way hash algorithm includes: obtaining a user identifier for updating data; and generating a target verification code based on the user identifier and the data using a one-way hash algorithm.

[0011] In one possible implementation, a target verification code is generated based on a user identifier and data using a one-way hash algorithm, including: in response to the user corresponding to the user identifier having the authority to modify the data, determining a key-value pair of the data, wherein the key in the key-value pair is used to reflect the data label of the data, and the value in the key-value pair is used to reflect the importance of the data; based on the key-value pair and update time of the data, a target verification code is generated using a one-way hash algorithm; in response to the user corresponding to the user identifier not having the authority to modify the data, determining that the target verification code is an empty or all-zero verification code.

[0012] In one possible implementation, determining whether the target verification code matches the initial verification code includes: in response to the target verification code and the initial verification code having the same key-value pair, determining that the initial verification code and the target verification code match; in response to the target verification code and the initial verification code having different key-value pairs, determining that the initial verification code and the target verification code do not match.

[0013] In a possible implementation, it also includes: in response to the data category of the data being at least one of user account, password, personal information, account funds, payment instructions, and transfer approval, determining that the key corresponding to the data is a data tag, and the value corresponding to the data is a first value; in response to the data category of the data being at least one of home page information, portal information, electronic receipt, broadcast message, and budget information, determining that the key corresponding to the data is a data tag, and the value corresponding to the data is a second value.

[0014] In a possible implementation, the method further includes: determining data in the database that has not been used and / or updated within a preset period of time; storing the data in a backup server, and deleting the data from the database.

[0015] In a second aspect, the present disclosure provides a data processing device, applied to a database server, comprising:

[0016] A generating module, for generating a target check code based on the data and a one-way hash algorithm in response to data being updated;

[0017] A determination module is used to determine whether the target check code matches the initial check code, where the initial check code is a check code generated at the initialization time according to the data;

[0018] The processing module is used for retaining the data in the database in response to the target verification code matching the initial verification code; or deleting the data in the database in response to the target verification code not matching the initial verification code.

[0019] In a possible implementation manner, the generation module is specifically used to: obtain a user identifier of the updated data; and generate a target verification code based on the user identifier and the data using a one-way hash algorithm.

[0020] In one possible implementation, the generation module is specifically used to: in response to the user corresponding to the user identifier having the authority to modify the data, determine the key-value pair of the data, the key in the key-value pair is used to reflect the data label of the data, and the value in the key-value pair is used to reflect the importance of the data; based on the key-value pair and update time of the data, use a one-way hash algorithm to generate a target check code; in response to the user corresponding to the user identifier not having the authority to modify the data, determine that the target check code is an empty or all-zero check code.

[0021] In one possible implementation, the determination module is specifically used to: in response to the target verification code and the initial verification code having the same key-value pair, determine that the initial verification code matches the target verification code; in response to the target verification code and the initial verification code having different key-value pairs, determine that the initial verification code does not match the target verification code.

[0022] In one possible implementation, the determination module is also used to: in response to the data category of the data being at least one of user account, password, personal information, account funds, payment instructions, and transfer approval, determine that the key corresponding to the data is a data tag, and the value corresponding to the data is a first value; in response to the data category of the data being at least one of home page information, portal information, electronic receipt, broadcast message, and budget information, determine that the key corresponding to the data is a data tag, and the value corresponding to the data is a second value.

[0023] In a possible implementation manner, the processing module is further used to: determine data in the database that has not been used and / or updated within a preset period of time; store the data in a backup server, and delete the data from the database.

[0024] In a third aspect, the present disclosure provides an electronic device, including:

[0025] Memory and processor;

[0026] The memory is used to store program instructions;

[0027] The processor is used to call the program instructions in the memory to execute the data processing method of the first aspect.

[0028] In a fourth aspect, the present invention discloses a computer-readable storage medium, in which computer program instructions are stored. When the computer program instructions are executed, the data processing method of the first aspect is implemented.

[0029] In a fifth aspect, the present disclosure provides a computer program product, including a computer program, which implements the data processing method of the first aspect when executed by a processor.

[0030] The present disclosure provides a data processing method, device, system and storage medium, which are applied to a database server. The data processing method includes: in response to data being updated, generating a target check code based on the data and a one-way hash algorithm; determining whether the target check code matches the initial check code, the initial check code being a check code generated at the initialization time according to the data; in response to the target check code matching the initial check code, retaining the data in the database; or, in response to the target check code not matching the initial check code, deleting the data in the database. In the present disclosure, when the database server detects data update, it generates a target check code for the data and determines whether the target check code matches the initial check code: if they match, the updated data is retained; if they do not match, the data is deleted in the database, thereby effectively ensuring the data security in the database. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0032] Figure 1 A schematic diagram of a system architecture provided for an embodiment of the present disclosure;

[0033] Figure 2 A flowchart of a data processing method provided by an embodiment of the present disclosure;

[0034] Figure 3 An architectural diagram of a data processing system provided for another embodiment of the present disclosure;

[0035] Figure 4 A schematic diagram of the structure of a data processing device provided by an embodiment of the present disclosure;

[0036] Figure 5 A schematic diagram of the structure of an electronic device provided in one embodiment of the present disclosure. DETAILED DESCRIPTION

[0037] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

[0038] At present, in order to ensure the security of data, cryptographic algorithms are mainly used to encrypt data in related technologies to actively protect data. However, if the encryption password or cryptographic algorithm is leaked, the security of the encrypted data cannot be guaranteed.

[0039] Based on the above problems, the embodiments of the present disclosure provide a data processing method, device, system and storage medium, which generate and store an initial check code associated with the data, and subsequently generate a target check code in real time when the data is updated, and determine whether the data has been tampered with by comparing the target check code with the initial check code; if the data has been tampered with, the data is deleted; if the data has not been tampered with, the data is retained. In this case, if a hacker illegally invades the database and successfully modifies the data, the database server will also respond to the data update and further compare the check codes of the data before and after the update to determine whether to store the data. Therefore, it can be considered that the present disclosure introduces a verification mechanism in the database server. Even if the hacker successfully obtains the encryption password and modifies the data, the modified data will be deleted by the database server because the check code does not match. The data processing method provided by the present disclosure can effectively ensure data security.

[0040] In some embodiments, at the system security level, for key data, such as customer payment instructions and other information, a one-way hash algorithm is used based on the user ID to generate a check code and store it in the data. When an unauthorized user changes the data, the newly generated target check code does not match the initial check code, which will cause the check to fail and the data to be tampered with; when an authorized user changes the data, the database server can determine that the check codes before and after the data change match and retain the changed data, that is, the data is legally modified, not tampered with.

[0041] Figure 1 A schematic diagram of a system architecture provided by an embodiment of the present disclosure. Figure 1 As shown, the system architecture includes three subsystems, namely, the host service system 101, the robot designer 102 and the terminal control system 103, which respectively undertake the functions of robot service, design and execution control. Among them, the host service system 101 includes a service database, a service center, an external interface and a monitoring center; the terminal control system 103 includes a controller, a scene robot A, a scene robot B and a scene robot C. It should be noted that this application scenario takes three scene robots as an example, and this number does not constitute a limitation to the present disclosure. Specifically:

[0042] The service center is responsible for providing communication services to robots in various scenarios to transmit information such as parameters, logs, and native data, and formatting and converting native data.

[0043] The monitoring center is a web application that manages nodes, scenarios, and parameter information, and queries and displays log information.

[0044] The external interface provides interface services to the business system 104 and queries the standardized business data.

[0045] The service database (hereinafter referred to as "database") stores formatted business data (from the business system 104), such as bank account balances, bank details and other business data.

[0046] The scenario robot is responsible for executing the business scenario engineering script and crawling the information required by the business scenario from the web page to the local computer.

[0047] Controller, controls the scene robot.

[0048] Robot designer, developed and used to write Python engineering scripts for crawling pages.

[0049] For example, scene robot A performs a business system query operation, obtains business data in the business system 104 under the control of the controller, and transmits the business data to the service center, which is then formatted and converted by the service center and then transmitted to the database for storage.

[0050] Through this disclosure, it is possible to Figure 1 The business data stored in the database is protected. For example, when storing new business data, an initial verification code corresponding to the business data is also generated and stored in the database. When a user changes the business data in the database, a target verification code is generated in real time. By comparing the initial verification code and the target verification code before and after the business data is changed, if the two match, the change is retained. Otherwise, the changed business data is deleted and the business data before the change is restored, thereby ensuring the data security of the business data.

[0051] It should be noted that Figure 1 This is only a schematic diagram of a system architecture provided by the embodiment of the present disclosure. Figure 1 does not limit the equipment included in Figure 1 Furthermore, the database is not limited to storing business data, but can also store other types of data.

[0052] Next, a data processing method, device, system and storage medium are introduced through specific embodiments.

[0053] Figure 2 Flow chart of a data processing method provided by an embodiment of the present disclosure, the data processing method is applied to a database server, such as Figure 2As shown, the data processing method includes:

[0054] S201. In response to data being updated, a target check code is generated based on the data and a one-way hash algorithm.

[0055] In a database server, whenever data is changed, generated, or deleted, its internal data log will record the operation. For example, when the data stored in the database of a database server is changed, the data log will record the changed data label, the time when the data was updated, the object of the operation for changing the data, etc.

[0056] The database server monitors the data in the database to determine whether any data has been changed, and further determines whether the data change is permitted. For example, when a hacker maliciously tampers with the data, and the database server does not intercept the hacker's change request, the database server can determine the changed data by monitoring the data, thereby compensating for the above vulnerability.

[0057] For example, the present disclosure can use the MD5 algorithm in the one-way hash algorithm to generate the target check code of the update time of the corresponding data, and does not limit the specific algorithm. The function of the MD5 algorithm is to process a field of any length and output a 128-bit field, which is the target check code.

[0058] S202: Determine whether the target check code matches the initial check code, where the initial check code is a check code generated according to the data at an initialization time.

[0059] Optionally, the initialization time of the data is the time when the data is first stored in the database.

[0060] It should be understood that the target verification code is the verification code generated by the database server after the data is changed. Therefore, in order to determine whether the change of the data is legal, the target verification code needs to be matched with the initialization verification code.

[0061] The matching method may include: determining whether the target check code is consistent with the initial check code, or determining whether the corresponding fields of the target check code are consistent with the initial check code, and so on.

[0062] S203: In response to the target verification code matching the initial verification code, retaining the data in the database.

[0063] S204: In response to the target verification code not matching the initial verification code, the data is deleted from the database.

[0064] When the target check code matches the initial check code, the data change is considered legal, so the changed data is retained in the database; when the target check code does not match the initial check code, the data change is considered illegal, the changed data is deleted, and the data before the modification is restored in the database.

[0065] In an embodiment of the present disclosure, a data processing method is provided and applied to a database server, including: in response to data being updated, generating a target check code based on the data and a one-way hash algorithm; determining whether the target check code matches an initial check code, the initial check code being a check code generated at an initialization time based on the data; in response to the target check code matching the initial check code, retaining the data in the database; or, in response to the target check code not matching the initial check code, deleting the data in the database. In the present disclosure, when data update is monitored, a target check code for the data is generated, and it is determined whether the target check code matches the initial check code: if they match, the updated data is retained; if they do not match, the data is deleted from the database, so as to effectively ensure the security of the data in the database and avoid illegal tampering.

[0066] By way of example, generating the above-mentioned target verification code may include: obtaining a user identifier of the updated data; and generating the target verification code by using a one-way hash algorithm based on the user identifier and the data.

[0067] Specifically, the database server can determine the user identification of the user who changes the data this time from the data log, and the user identification includes the user's identity information, the user's authority, and the user's IP address, etc.

[0068] Therefore, it can be understood that the database server will generate a target verification code for the data after this change based on the user's identity information, the user's authority and the user's IP address.

[0069] Furthermore, in response to the user corresponding to the user identifier having the authority to modify the data, a key-value pair of the data is determined, wherein the key in the key-value pair is used to reflect the data label of the data, and the value in the key-value pair is used to reflect the importance of the data; based on the key-value pair and update time of the data, a one-way hash algorithm is used to generate a target check code; in response to the user corresponding to the user identifier not having the authority to modify the data, the target check code is determined to be an empty or all-zero check code.

[0070] The key-value pair is used to reflect the data label of the data and the importance of the data, where the key is used to reflect the data label, for example, the key includes the data label number (for example, 001), the data label letter (for example, A), etc., and the value is used to reflect the importance of the data, such as the value is "High" or "Low". For example, the importance can include critical data (corresponding value is "High"), ordinary data (corresponding value is "Low") and useless data, etc.

[0071] When a user has the permission to modify data, the database server will combine the key-value pair of the data and the update time of the data, and use a one-way hash algorithm to generate a target verification code. For example, taking the one-way hash algorithm as the MD5 algorithm, the update time of the data is represented by a timestamp accurate to milliseconds, and then the timestamp is combined with the key-value pair corresponding to the data, and then encrypted by the MD5 algorithm to generate the target verification code. For example, if the key of the key-value pair of a data is A001, the value of the key-value pair is: "High", and the timestamp is "2022030117500112", the database server will combine the key-value pair (A001-High) of the data with the timestamp (2022030117500112) based on the MD5 algorithm to generate a verification code. It can be understood that: for the same data, each modification will generate a check code, the key-value pairs between these check codes are the same, only the timestamps are different, taking the above data as an example, the check code corresponding to each modification of the data includes the field: (A001-High), which can be used for matching between subsequent check codes. This example is only a possible implementation of this embodiment, and this disclosure does not limit it.

[0072] When a user does not have permission to modify data (such as an ordinary employee in a company, etc.), or the user's identity information is illegal information (such as an outside visitor or a hacker, etc.), the database server needs to separate such users from the users with data modification permission mentioned above. For example, the checksum corresponding to the data changed by such users is an empty or all-zero checksum.

[0073] After the verification code is generated, in some possible implementations, the database server determines whether the target verification code matches the initial verification code, which may include: in response to the target verification code and the initial verification code having the same key-value pair, determining that the initial verification code matches the target verification code; in response to the target verification code and the initial verification code having different key-value pairs, determining that the initial verification code does not match the target verification code.

[0074] As described above: for the same data, each modification will generate a checksum, and the key-value pairs between these checksums are the same, only the timestamps are different. Therefore, if the key-value pairs of the target checksum and the initial checksum are the same, that is, the data label number and data label letter corresponding to the target checksum are the same as the label number and data label letter corresponding to the initial checksum, and the importance of the data corresponding to the target checksum is the same as the importance of the data corresponding to the initial checksum. At this time, it can be considered that the initial checksum matches the target checksum, and the only difference between the timestamps of the changes before and after is that the two are different.

[0075] On the contrary, if the key-value pairs of the two are different (corresponding to the case where the target check code is all zero), or the target check code does not exist (corresponding to the case where the target check code is empty), it can be considered that the initial check code does not match the target check code.

[0076] The value in the key-value pair reflects the importance of the data. Optionally, if the importance of the data is divided into key data and common data, then:

[0077] In response to the data category being at least one of user account, password, personal information, account funds, payment instructions, and transfer approval, the key corresponding to the data is determined to be a data tag, and the value corresponding to the data is a first value; in response to the data category being at least one of home page information, portal information, electronic receipt, broadcast message, and budget information, the key corresponding to the data is determined to be a data tag, and the value corresponding to the data is a second value.

[0078] For user private data such as user account, password, personal information and account funds, it is necessary to treat them as key data and determine the value in the key-value pair of the key data as the first value, specifically, the value can be "High"; for open information such as home page information, portal information, electronic receipts, etc., it can be determined as ordinary data, and determine the value in the key-value pair of ordinary data as the second value, specifically, it can be "Low".

[0079] The key in the key-value pair of data is used to set a data label for the data to distinguish different data. For example, the data label can be composed of letters and numbers as an identifier of the data in the database.

[0080] It should be clear that in any embodiment of the present disclosure, the basic data and traffic data of a user can only be obtained with the permission or authorization of the user; without the permission of the user, these data cannot be obtained.

[0081] In the database, data that has not been updated for a long time needs to be cleaned up and backed up regularly. For example, the database server can determine the data in the database that has not been used and / or updated within a preset period of time; store the data on the backup server and delete it from the database.

[0082] For example, the preset time period may be 3 months. In order to prevent data leakage, the database server will adopt a timed cleanup mechanism. Specifically, after determining the data that has not been used or updated within 3 months (accurate to milliseconds) from the database, these data are taken as data to be cleaned up, and are first stored separately in other servers as a backup, and then the data to be cleaned up is deleted from the database.

[0083] In addition, for users with data modification permissions, when users make changes to key data, the database server will automatically back up the key data. When users accidentally change or delete key data due to carelessness, the database server can restore the key data.

[0084] Optionally, when a user operates on the data in the database, the data log in the database will record the data update process based on the time series relationship. In addition, the database server will also record the user's operation behavior, which can be saved in the data log or in other files. The purpose of leaving traces of the user's operation behavior is to trace responsibility, and the user who performs the data change operation is tied to the data.

[0085] The above embodiments may be referenced to each other or used independently, and the present disclosure is not limited thereto.

[0086] The present disclosure also provides a data processing system that can integrate three capabilities, namely, system reinforcement, data encryption, and data leakage prevention, to form a system. The data processing system includes at least one database server, such as the database server described above. The database server is equipped with a load balancing system, a data encryption system, and a data cleaning system, wherein:

[0087] A load balancing system, used for balancing and adjusting data traffic of at least one database server based on the load condition of at least one database server;

[0088] A data encryption system is used to generate a data verification code based on a one-way hash algorithm and store the verification code in a database;

[0089] The data cleaning system is used to determine data that has not been used and / or updated within a preset period of time, back up the data, and delete it from the database.

[0090] The load balancing system is installed on at least one database server. The load balancing system will control the data flow into the database server based on the current load of the database server. For example, by installing a dual-machine mutual backup support system and a load balancing system on at least one database server, a high-reliability, continuous service application environment is built.

[0091] The data encryption system is used to encrypt data based on the checksum. In order to prevent illegal users from illegally tampering with the data, the key fields (key-value pairs, etc.) of the data in the database are encrypted to obtain the checksum and stored in the database. When someone changes the data in the database, if the checksum does not match correctly, the data processing system will regard it as invalid data.

[0092] In order to prevent data leakage, the data cleaning system will adopt a regular cleaning mechanism.

[0093] In addition, the data processing system may also include a fault reminder mechanism. For example, when it is found that data has not been successfully transmitted or stored, the data processing system may send a message to the console to remind the staff to deal with the fault problem in a timely manner.

[0094] You can refer to Figure 3 , intuitively showing the integration capabilities of the disclosed data processing system, Figure 3 It is an architecture diagram of a data processing system provided by an embodiment of the present disclosure.

[0095] Next, the data processing device provided by the present disclosure is introduced.

[0096] Figure 4 A structural diagram of a data processing device provided by an embodiment of the present disclosure is shown in FIG. Figure 4 As shown, the data processing device 400 includes:

[0097] A generating module 401, for generating a target check code based on the data and a one-way hash algorithm in response to data being updated;

[0098] A determination module 402 is used to determine whether the target check code matches the initial check code, where the initial check code is a check code generated at an initialization time based on the data;

[0099] The processing module 403 is used to retain the data in the database in response to the target verification code matching the initial verification code; or to delete the data in the database in response to the target verification code not matching the initial verification code.

[0100] In a possible implementation, the generation module 401 is specifically used to: obtain a user identifier who updates data at an update time; and generate a target check code based on the user identifier and the data using a one-way hash algorithm.

[0101] In one possible implementation, the generation module 401 is specifically used to: in response to the user corresponding to the user identifier having the authority to modify the data, determine the key-value pair of the data, the key in the key-value pair is used to reflect the data label of the data, and the value in the key-value pair is used to reflect the importance of the data; based on the key-value pair and update time of the data, use a one-way hash algorithm to generate a target check code; in response to the user corresponding to the user identifier not having the authority to modify the data, determine that the target check code is an empty or all-zero check code.

[0102] In one possible implementation, the determination module 402 is specifically used to: in response to the target verification code and the initial verification code having the same key-value pair, determine that the initial verification code matches the target verification code; in response to the target verification code and the initial verification code having different key-value pairs, determine that the initial verification code does not match the target verification code.

[0103] In one possible implementation, the determination module 402 is also used to: in response to the data category of the data being at least one of user account, password, personal information, account funds, payment instructions, and transfer approval, determine that the key corresponding to the data is a data tag, and the value corresponding to the data is a first value; in response to the data category of the data being at least one of home page information, portal information, electronic receipt, broadcast message, and budget information, determine that the key corresponding to the data is a data tag, and the value corresponding to the data is a second value.

[0104] In a possible implementation manner, the processing module 403 is further used to: determine data in the database that has not been used and / or updated within a preset period of time; store the data in a backup server, and delete the data from the database.

[0105] The device provided in the embodiments of the present disclosure may be used to execute the method of the embodiments described above, and its implementation principle and technical effect are similar and will not be described in detail here.

[0106] It should be noted that it should be understood that the division of the various modules of the above device is only a division of logical functions. In actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. And these modules can all be implemented in the form of software called by processing elements; they can also be all implemented in the form of hardware; some modules can also be implemented in the form of software called by processing elements, and some modules can be implemented in the form of hardware. For example, the processing module can be a separately established processing element, or it can be integrated in a chip of the above device. In addition, it can also be stored in the memory of the above device in the form of program code, and called and executed by a processing element of the above device. The implementation of other modules is similar. In addition, these modules can be fully or partially integrated together, or they can be implemented independently. The processing element described here can be an integrated circuit with signal processing capabilities. In the implementation process, each step of the above method or each module above can be completed by an integrated logic circuit of hardware in the processor element or instructions in the form of software.

[0107] For example, the above modules may be one or more integrated circuits configured to implement the above methods, such as one or more application specific integrated circuits (ASIC), or one or more microprocessors (digital signal processors, DSP), or one or more field programmable gate arrays (FPGA), etc. For another example, when a module above is implemented in the form of a processing element scheduling program code, the processing element may be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call program code. For another example, these modules may be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0108] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present disclosure is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid state disk (SSD)), etc.

[0109] Figure 5 A schematic diagram of the structure of an electronic device provided by an embodiment of the present disclosure. For example, the electronic device may be provided as a computer. Figure 5 , the electronic device 500 includes a processing component 501, which further includes one or more processors, and a memory resource represented by a memory 502, for storing instructions that can be executed by the processing component 501, such as an application. The application stored in the memory 502 may include one or more modules, each corresponding to a set of instructions. In addition, the processing component 501 is configured to execute instructions to perform any of the above method embodiments.

[0110] The electronic device 500 may further include a power supply component 503 configured to perform power management of the electronic device 500, a wired or wireless network interface 504 configured to connect the electronic device 500 to a network, and an input / output (I / O) interface 505. The electronic device 500 may operate based on an operating system stored in the memory 502, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™ or the like.

[0111] The present disclosure also provides a computer-readable storage medium, in which computer-executable instructions are stored. When a processor executes the computer-executable instructions, the above data processing method is implemented.

[0112] The present disclosure also provides a computer program product, including a computer program, which implements the above data processing method when executed by a processor.

[0113] The computer-readable storage medium mentioned above can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special-purpose computer.

[0114] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (Application Specific Integrated Circuits, referred to as ASIC). Of course, the processor and the readable storage medium can also exist in a data processing device as discrete components.

[0115] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0116] Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present disclosure, rather than to limit it; although the present disclosure has been described in detail with reference to the above embodiments,

[0117] Those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some or all of the technical features therein; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present disclosure.

Claims

1. A data processing method, characterized in that: Applied to a database server, the data processing method includes: In response to data being updated, obtaining a user identifier that updates the data; In response to the user corresponding to the user identifier having the modification authority of the data, determining a key-value pair of the data, wherein the key in the key-value pair is used to reflect the data label of the data, and the value in the key-value pair is used to reflect the importance of the data; based on the key-value pair and the update time of the data, using a one-way hash algorithm, generating a target check code; In response to the user corresponding to the user identifier not having the authority to modify the data, determining that the target check code is a blank or all-zero check code; Determining whether the target check code matches an initial check code, the initial check code being a check code generated at an initialization time based on the data; In response to the target verification code matching the initial verification code, retaining the data in a database; Alternatively, in response to the target verification code not matching the initial verification code, the data is deleted from the database.

2. The data processing method according to claim 1, characterized in that: The determining whether the target check code matches the initial check code comprises: In response to the target check code and the initial check code having the same key-value pair, determining that the initial check code matches the target check code; In response to the key-value pairs of the target verification code and the initial verification code being different, it is determined that the initial verification code does not match the target verification code.

3. The data processing method according to claim 1, characterized in that: Also includes: In response to the data category of the data being at least one of a user account, a password, personal information, account funds, a payment instruction, and a transfer approval, determining that a key corresponding to the data is a data tag, and a value corresponding to the data is a first value; In response to the data category of the data being at least one of home page information, portal information, electronic receipt, broadcast message, and budget information, it is determined that the key corresponding to the data is a data tag, and the value corresponding to the data is a second value.

4. The data processing method according to claim 1, characterized in that: Also includes: Determining data in the database that has not been used and / or updated within a preset period of time; The data is stored in a backup server and deleted from the database.

5. A data processing system, characterized in that: It includes at least one database server, which is equipped with a load balancing system, a data encryption system and a data cleaning system, wherein: A load balancing system, configured to balance and adjust data traffic of the at least one database server based on the load condition of the at least one database server; A data encryption system, used to generate a verification code of data based on a one-way hash algorithm, and store the verification code in a database; the verification code of data generated based on the one-way hash algorithm includes obtaining a user identifier for updating the data; In response to the user corresponding to the user identifier having the modification authority of the data, determining a key-value pair of the data, wherein the key in the key-value pair is used to reflect the data label of the data, and the value in the key-value pair is used to reflect the importance of the data; based on the key-value pair and the update time of the data, using the one-way hash algorithm, generating a target check code; In response to the user corresponding to the user identifier not having the authority to modify the data, determining that the target check code is a blank or all-zero check code; The data cleaning system is used to determine data that has not been used and / or updated within a preset period of time, back up the data, and delete it from the database.

6. A data processing device, applied to a database server, the data processing device comprising: A generating module, for generating a target check code based on the data and a one-way hash algorithm in response to data being updated; A determination module, used to determine whether the target check code matches an initial check code, wherein the initial check code is a check code generated at an initialization time according to the data; a processing module, configured to retain the data in a database in response to the target verification code matching the initial verification code; or, in response to the target verification code not matching the initial verification code, delete the data in the database; The generating module is specifically used to obtain a user identifier who updates the data at the update time; in response to the user corresponding to the user identifier having the modification authority of the data, determine a key-value pair of the data, wherein the key in the key-value pair is used to reflect the data label of the data, and the value in the key-value pair is used to reflect the importance of the data; Based on the key-value pair and update time of the data, the target check code is generated by using the one-way hash algorithm; In response to the user corresponding to the user identifier not having the authority to modify the data, determining that the target check code is a null or all-zero check code.

7. An electronic device comprising: Memory and processing; wherein: The memory is used to store program instructions; The processor is used to call the program instructions in the memory to execute the data processing method according to any one of claims 1 to 4.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed, the data processing method according to any one of claims 1 to 4 is implemented.

9. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the data processing method according to any one of claims 1 to 4 is implemented.

Images