Log Processing Method, Apparatus and Device

Abstract

An embodiment of the present application provides a log processing method, apparatus, and device. The method includes: obtaining account information of a terminal device; obtaining a log ciphertext of the terminal device, where the terminal device includes an integrated security element (ISE) chip, and the log ciphertext is a log generated by developing a program in the ISE chip; obtaining a log plaintext corresponding to the log ciphertext according to the account information; and sending the log plaintext to an external server of the chip, where the log plaintext is used to determine a fault information of a program in the terminal device, which can enable the ISE log to be used.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of information security technology, and in particular, to a log processing method, apparatus, and device. Background Art

[0002] An Integrated Secure Element (ISE) may be provided in an intelligent device. The ISE may be an ISE chip, and a program (system or application program) may be developed in the ISE chip.

[0003] During the process of developing a program in the ISE chip, ISE logs may be generated. In the related art, in order to prevent external personnel from attacking the ISE chip by analyzing the ISE logs, the ISE logs generated during the process of developing a program in the ISE chip are log ciphertexts, and the ISE logs cannot be directly decrypted in the ISE chip, thus resulting in the unusability of the ISE logs. Summary of the Invention

[0004] The embodiments of the present application provide a log processing method, apparatus, and device, so that the ISE logs can be used.

[0005] In a first aspect, the embodiments of the present application provide a log processing method, including:

[0006] Obtain the account information of the terminal device;

[0007] Obtain the log ciphertext of the terminal device, where the terminal device includes an integrated secure element ISE chip, and the log ciphertext is the log generated during the development of a program in the ISE chip;

[0008] Obtain the log plaintext corresponding to the log ciphertext according to the account information;

[0009] Send the log plaintext to an external server of the chip, and the log plaintext is used to determine the fault information of the program in the terminal device.

[0010] In a possible implementation manner, obtaining the log plaintext corresponding to the log ciphertext according to the account information includes:

[0011] Determine the key name corresponding to the account information according to the account information;

[0012] Obtain the log plaintext according to the key name.

[0013] In a possible implementation manner, obtaining the log plaintext according to the key name includes:

[0014] Send the key name and the log ciphertext to an encryption machine;

[0015] Receive the log plaintext sent by the encryption machine, where the encryption machine includes the key corresponding to the key name, and the log plaintext is obtained by the encryption machine decrypting the log ciphertext according to the key.

[0016] In a possible implementation manner, the method is applied to an in-chip server, and the in-chip server and the encryption machine are located in the same local area network;

[0017] Sending the key name and the log ciphertext to the encryption machine includes:

[0018] Send a decryption request to the encryption machine through the local area network, where the decryption request includes the key name and the log ciphertext;

[0019] Receiving the log plaintext sent by the encryption machine includes:

[0020] Receive the decryption response corresponding to the decryption request sent by the encryption machine through the local area network, where the decryption response includes the log plaintext.

[0021] In a possible implementation manner, before obtaining the account information of the terminal device, it further includes:

[0022] Receive a registration request sent by the terminal device, where the registration request includes the account information and the device information of the terminal device;

[0023] Send a registration response corresponding to the registration request to the terminal device, and the registration response is used to indicate success or failure of registration.

[0024] In a possible implementation manner, obtaining the log ciphertext of the terminal device includes:

[0025] Receive the log ciphertext from the external server of the chip corresponding to the terminal device, where the log ciphertext is sent by the terminal device to the external server of the chip.

[0026] In a second aspect, an embodiment of the present application provides a log processing method, which is applied to a terminal device. An ISE chip, a main chip, and a log interface are provided in the terminal device. The method includes:

[0027] During the process of generating a program in the ISE chip, generate a log ciphertext through the log interface;

[0028] Send the account information and the log ciphertext to the external server of the chip through the main chip;

[0029] Receive the log plaintext corresponding to the log ciphertext sent by the external server of the chip through the main chip, where the log plaintext is used to determine the fault information of the program.

[0030] In a possible implementation manner, during the process of generating a program in the ISE chip, generating a log ciphertext through the log interface includes:

[0031] During the process of generating the program in the ISE chip, generate the log plaintext;

[0032] Encrypt the log plaintext through the log interface to obtain the log ciphertext.

[0033] In a possible implementation manner, a key is provided in the ISE chip; encrypting the log plaintext through the log interface to obtain the log ciphertext includes:

[0034] Obtain the key in the ISE chip;

[0035] According to the key, encrypt the log plaintext through the log interface to obtain the log ciphertext.

[0036] In a possible implementation manner, the method further includes:

[0037] Send a registration request to the internal server of the chip, where the registration request includes the account information and the device information of the terminal device;

[0038] Receive the registration response corresponding to the registration request sent by the internal server of the chip, where the registration response is used to indicate success or failure of registration.

[0039] In a possible implementation manner, the method further includes:

[0040] Receive a development environment data packet sent by a chip server, where the development environment data packet is used for the terminal device to develop the program.

[0041] In a third aspect, an embodiment of the present application provides a log processing device, including: a first acquisition module, a second acquisition module, a third acquisition module, and a first sending module, where

[0042] The first acquisition module is configured to acquire the account information of the terminal device;

[0043] The second acquisition module is configured to acquire the log ciphertext of the terminal device, where the terminal device includes an integrated security element ISE chip, and the log ciphertext is the log generated during the development of the program in the ISE chip;

[0044] The third acquisition module is configured to acquire the log plaintext corresponding to the log ciphertext according to the account information;

[0045] The first sending module is configured to send the log plaintext to an external server of the chip, and the log plaintext is used to determine the fault information of the program in the terminal device.

[0046] In a possible implementation manner, the third acquisition module is specifically configured to:

[0047] Determine the key name corresponding to the account information according to the account information;

[0048] Acquire the log plaintext according to the key name.

[0049] In a possible implementation manner, the third acquisition module is specifically configured to:

[0050] Send the key name and the log ciphertext to an encryption machine;

[0051] Receive the log plaintext sent by the encryption machine, where the encryption machine includes the key corresponding to the key name, and the log plaintext is obtained by the encryption machine decrypting the log ciphertext according to the key.

[0052] In a possible implementation manner, the method is applied to an internal server of the chip, and the internal server of the chip and the encryption machine are located in the same local area network;

[0053] Sending the key name and the log ciphertext to an encryption machine includes:

[0054] Sending a decryption request to the encryption machine through the local area network, where the decryption request includes the key name and the log ciphertext;

[0055] Receiving the log plaintext sent by the encryption machine includes:

[0056] Receiving, through the local area network, a decryption response corresponding to the decryption request sent by the encryption machine, where the decryption response includes the log plaintext.

[0057] In a possible implementation manner, the log processing device further includes a receiving module and a second sending module:

[0058] The receiving module is configured to receive a registration request sent by the terminal device, where the registration request includes the account information and the device information of the terminal device;

[0059] The second sending module is configured to send a registration response corresponding to the registration request to the terminal device, and the registration response is used to indicate success or failure of registration.

[0060] In a possible implementation, obtaining the log ciphertext of the terminal device includes:

[0061] Receiving the log ciphertext from the chip external server corresponding to the terminal device, where the log ciphertext is sent by the terminal device to the chip external server.

[0062] Fourthly, an embodiment of the present application provides a log processing device, including: a generation module, a first sending module, and a first receiving module, where

[0063] The generation module is configured to generate log ciphertext through the log interface during the process of generating a program in the ISE chip;

[0064] The first sending module is configured to send the account information and the log ciphertext to the chip external server through the main chip;

[0065] The first receiving module is configured to receive the log plaintext corresponding to the log ciphertext sent by the chip external server through the main chip, where the log plaintext is used to determine the fault information of the program.

[0066] In a possible implementation, the generation module is specifically configured to:

[0067] Generate the log plaintext during the process of generating the program in the ISE chip;

[0068] Perform encryption processing on the log plaintext through the log interface to obtain the log ciphertext.

[0069] In a possible implementation, a key is provided in the ISE chip, and the generation module is specifically configured to:

[0070] Obtain the key in the ISE chip;

[0071] According to the key, perform encryption processing on the log plaintext through the log interface to obtain the log ciphertext.

[0072] In a possible implementation, the log processing device further includes a second sending module and a second receiving module:

[0073] The second sending module is configured to send a registration request to the chip internal server, where the registration request includes the account information and the device information of the terminal device;

[0074] The second receiving module is configured to receive the registration response corresponding to the registration request sent by the chip internal server, where the registration response is used to indicate success or failure of registration.

[0075] In a possible implementation, the log processing device further includes a third receiving module:

[0076] The third receiving module is configured to receive a development environment data packet sent by a chip server, where the development environment data packet is used for the terminal device to develop the program.

[0077] In a fifth aspect, an embodiment of the present application provides an internal chip server, including: a memory and a processor;

[0078] The memory stores computer-executable instructions;

[0079] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the log processing method according to any one of the first aspect.

[0080] In a sixth aspect, an embodiment of the present application provides a terminal device, including: a memory and a processor;

[0081] The memory stores computer-executable instructions;

[0082] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the log processing method according to any one of the second aspect.

[0083] In a seventh aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer-executable instructions are stored, and when the computer-executable instructions are executed by a processor, they are used to implement the log processing method according to any one of the first aspect.

[0084] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer-executable instructions are stored, and when the computer-executable instructions are executed by a processor, they are used to implement the log processing method according to any one of the second aspect.

[0085] In a ninth aspect, an embodiment of the present application provides a computer program product, including a computer program, and when the computer program is executed by a processor, it implements the log processing method shown in any one of the first aspect.

[0086] In a tenth aspect, an embodiment of the present application provides a computer program product, including a computer program, and when the computer program is executed by a processor, it implements the log processing method shown in any one of the second aspect.

[0087] In an embodiment of the present application, the in-chip server can obtain the account information and log ciphertext of the terminal device, and determine the key name according to the account information. The in-chip server can send a decryption request to the encryption machine through the local area network, and receive the decryption response corresponding to the decryption request sent by the encryption machine. The decryption response includes the plaintext log. The in-chip server can send the plaintext log to the out-of-chip server so that the terminal device can obtain the plaintext log. Since the in-chip server can call the encryption machine to decrypt the log ciphertext to obtain the plaintext log, and can send the plaintext log to the out-of-chip server so that the terminal device can obtain the plaintext log, it avoids directly decrypting the ISE log in the ISE chip, thus enabling the ISE log to be used. Description of the Drawings

[0088] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the following-described drawings are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0089] Figure 1 Schematic diagram of an application scenario provided by an embodiment of the present application;

[0090] Figure 2 Schematic flow diagram of a log processing method provided by an embodiment of the present application;

[0091] Figure 3 Schematic flow diagram of another log processing method provided by an embodiment of the present application;

[0092] Figure 4 Schematic diagram of the account-key correspondence table provided by an embodiment of the present application;

[0093] Figure 5 Schematic diagram of the encryption machine provided by an embodiment of the present application;

[0094] Figure 6 Schematic flow diagram of yet another log processing method provided by an embodiment of the present application;

[0095] Figure 7 Schematic diagram of the process of the log processing method provided by an embodiment of the present application;

[0096] Figure 8 Schematic structural diagram of a log processing device provided by an exemplary embodiment of the present application;

[0097] Figure 9 Schematic structural diagram of another log processing device provided by an exemplary embodiment of the present application;

[0098] Figure 10 A schematic structural diagram of another log processing device provided for an exemplary embodiment of the present application;

[0099] Figure 11 A schematic structural diagram of yet another log processing device provided for an exemplary embodiment of the present application;

[0100] Figure 12 A schematic structural diagram of a chip internal server provided for an exemplary embodiment of the present application;

[0101] Figure 13 A schematic structural diagram of a terminal device provided for an exemplary embodiment of the present application. Detailed implementation manners

[0102] Next, the technical solutions in the embodiments of the present application will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

[0103] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned accompanying drawings are used to distinguish similar objects, and do not necessarily need to be used to describe a specific order or sequence. It should be understood that such used data can be interchanged under appropriate circumstances so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device including a series of steps or units does not necessarily have to be limited to those clearly listed steps or units, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0104] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application, please refer to Figure 1 , which includes a terminal device, an external chip server, and an internal chip server. Among them, the terminal device may include an ISE chip. Communication can be carried out between the terminal device and the external chip server, and communication can be carried out between the external chip server and the internal chip server. The external chip server and the internal chip server can be servers of the ISE chip manufacturer.

[0105] ISE application developers or ISE system developers can develop programs on the ISE chip in the terminal device. When developing programs, the generated ISE logs are log ciphertexts. When it is necessary to read the log ciphertexts, the terminal device can send account information and log ciphertexts to the external server of the chip. After receiving the account information and log ciphertexts, the external server of the chip can forward the account information and log ciphertexts to the internal server of the chip. The internal server of the chip can obtain the log plaintext corresponding to the log ciphertext according to the account information, and send the log plaintext to the external server of the chip. The external server of the chip can send the log plaintext to the terminal device so that the terminal device can obtain the log plaintext, or the external server of the chip can save the log plaintext for the staff to view. The staff can analyze the fault information of the programs in the terminal device according to the log plaintext.

[0106] In the related art, in order to prevent external personnel from attacking the ISE chip by analyzing the ISE logs, the ISE logs generated during the process of developing programs in the ISE chip are log ciphertexts, and the ISE logs cannot be directly decrypted in the ISE chip, thus resulting in the inability to use the ISE logs.

[0107] In the embodiment of the present application, the internal server of the chip can obtain the account information and log ciphertexts sent by the terminal device, and obtain the log plaintext corresponding to the log ciphertext according to the account information. The internal server of the chip can send the log plaintext to the external server of the chip so that the terminal device can obtain the log plaintext. Since the log plaintext corresponding to the log ciphertext can be obtained through the internal server of the chip, the direct decryption of the ISE logs in the ISE chip is avoided, so that the ISE logs can be used.

[0108] Next, the technical solution shown in the present application will be described in detail through specific embodiments. It should be noted that the following several embodiments can exist independently or be combined with each other. For the same or similar content, it will not be repeated in different embodiments.

[0109] Figure 2 It is a schematic flowchart of a log processing method provided by an embodiment of the present application. Please refer to Figure 2 and the method may include:

[0110] S201. Obtain the account information of the terminal device.

[0111] The execution subject of the embodiment of the present application can be the internal server of the chip or a log processing device set in the internal server of the chip. The log processing device can be implemented by software or by a combination of software and hardware. The log processing device can be a processor in the internal server of the chip. For the convenience of understanding, in the following, the execution subject is taken as an example of the internal server of the chip for description.

[0112] The terminal device can be an electronic device installed with an ISE chip. For example, the terminal device can be a computer.

[0113] Programs can be developed in the terminal device based on the ISE chip. For example, ISE application developers can develop applications in the terminal device based on the ISE chip; ISE system developers can develop systems in the terminal device based on the ISE chip.

[0114] The terminal device can have a corresponding external chip server, and the terminal device can send account information to the corresponding external chip server. After receiving the account information, the external chip server can forward the account information to the internal chip server so that the internal chip server can obtain the account information of the terminal device.

[0115] It should be noted that for an ISE application developer, the account information set in the terminal device can be the same, which is the account information registered by the ISE application developer in the external chip server of the ISE chip manufacturer.

[0116] S202. Obtain the log ciphertext of the terminal device.

[0117] The log ciphertext is the ISE log generated during program development in the terminal device, which records all the behaviors of the terminal device.

[0118] The terminal device can send the log ciphertext to the external chip server. After receiving the log ciphertext, the external chip server can forward the log ciphertext to the internal chip server so that the internal chip server can obtain the log ciphertext of the terminal device.

[0119] S203. Obtain the log plaintext corresponding to the log ciphertext according to the account information.

[0120] In an optional embodiment, the internal chip server can determine the key name corresponding to the account information according to the account information; and obtain the log plaintext according to the key name.

[0121] For example, if the internal chip server obtains the account - A and the log ciphertext - 1 sent by the terminal device, the internal chip server can determine the corresponding key name as key name - 1 according to the account - A, and obtain the log plaintext corresponding to the log ciphertext - 1 according to the key name - 1.

[0122] The log plaintext can be obtained according to the key name in the following way: send the key name and the log ciphertext to the encryptor; receive the log plaintext sent by the encryptor. The log plaintext is obtained by the encryptor decrypting the log ciphertext.

[0123] For example, if the internal server of the chip determines that the corresponding key name is Key Name - 1 according to Account - A, the internal server of the chip may send Key Name - 1 and Log Ciphertext - 1 to the encryptor, so that the encryptor can decrypt Log Ciphertext - 1 according to Key Name - 1 to obtain Log Plaintext - 1. The internal server of the chip may receive Log Plaintext - 1 sent by the encryptor.

[0124] S204. Send the log plaintext to the external server of the chip.

[0125] The internal server of the chip may send the log plaintext to the external server of the chip, so that the external server of the chip can store the log plaintext. The staff can view the log plaintext on the external server of the chip.

[0126] Optionally, the external server of the chip may send the log plaintext to the terminal device, so that the terminal device can obtain the log plaintext. The log plaintext can be used to determine the fault information of the program in the terminal device.

[0127] In the embodiment of the present application, the internal server of the chip may obtain the account information and log ciphertext of the terminal device through the external server of the chip, and determine the key name according to the account information. The internal server of the chip may send the key name and log ciphertext to the encryptor, so that the encryptor can decrypt the log ciphertext according to the key name to obtain the corresponding log plaintext. The internal server of the chip may receive the log plaintext sent by the encryptor and send the log plaintext to the external server of the chip, so that the terminal device can obtain the log plaintext. Since the internal server of the chip obtains the log plaintext corresponding to the log ciphertext and sends the log plaintext to the external server of the chip, so that the terminal device can obtain the log plaintext, it avoids directly decrypting the ISE log in the ISE chip, so that the ISE log can be used.

[0128] Next, based on Figure 2 the embodiment shown, in combination with Figure 3 , the above log processing method will be further described in detail. Figure 3 It is a schematic flowchart of another log processing method provided by the embodiment of the present application. Please refer to Figure 3 , this method may include:

[0129] S301. Receive a registration request sent by the terminal device.

[0130] The registration request is used for the terminal device to register an account in the internal server of the chip. The registration request may include account information and device information of the terminal device. Among them, the device information of the terminal device may include the address of the terminal device, the company to which the terminal device belongs, etc. For example, the registration request may include Account - A and "A Technology Co., Ltd.".

[0131] The terminal device can send a registration request to the external server of the chip. After receiving the registration request, the external server of the chip can forward the registration request to the internal server of the chip so that the internal server of the chip can obtain the registration request of the terminal device.

[0132] S302. Send a registration response corresponding to the registration request to the terminal device.

[0133] The registration response can be used to indicate success or failure of registration. For example, the registration response can be "Account - A registration successful".

[0134] After receiving the registration request, the internal server of the chip can generate a registration response according to the registration request and send the registration response to the external server of the chip. After receiving the registration response, the external server of the chip can send the registration response to the terminal device so that the terminal device can obtain the registration response and know whether the registration is successful.

[0135] For example, if the registration response generated by the internal server of the chip according to the registration request is "Account - A registration successful", the internal server of the chip can send the registration response to the external server of the chip, and then the external server of the chip can send the registration response to the terminal device. After obtaining the registration response, the terminal device can know that the registration is successful according to the registration response.

[0136] S303. Obtain the account information of the terminal device.

[0137] It should be noted that the execution process of S303 can refer to S201 and will not be elaborated here.

[0138] S304. Obtain the log ciphertext of the terminal device.

[0139] It should be noted that the execution process of S304 can refer to S202 and will not be elaborated here.

[0140] S305. Determine the key name corresponding to the account information according to the account information.

[0141] Optionally, the internal server of the chip can determine the key name corresponding to the account information in the account - key correspondence table. Among them, the account - key correspondence table can be pre - stored in the internal server of the chip by the staff.

[0142] Next, in combination with Figure 4 , the account - key correspondence table will be described.

[0143] Figure 4 This is a schematic diagram of the account - key correspondence table provided by the embodiment of the present application. As Figure 4 , the account - key correspondence table can include multiple accounts and multiple key names. Among them, the accounts and key names are in one - to - one correspondence.

[0144] For example, the account-key correspondence table may include account-A, account-B, account-C, …, account-N, and key name-1, key name-2, key name-3, …, key name-n. Among them, the key name corresponding to account-A is key name-1, the key name corresponding to account-B is key name-2, the key name corresponding to account-C is key name-3, …, and the key name corresponding to account-N is key name-n.

[0145] For example, the internal server of the chip can determine, according to account-A, that the key name corresponding to account-A in the account-key correspondence table is key name-1.

[0146] S306. Send a decryption request to the encryption machine.

[0147] To protect information security, the internal server of the chip and the encryption machine can be located in the same local area network. For example, the local area network can be the internal network of the chip manufacturer.

[0148] The internal server of the chip can send a decryption request to the encryption machine in the local area network in the following two ways:

[0149] Method 1: It can be through a wired network. For example, a data cable can be used to connect the hardware interfaces of the internal server of the chip and the encryption machine, so that the internal server of the chip can send a decryption request to the encryption machine in the local area network.

[0150] Method 2: It can be through a wireless network. The wireless network can be Bluetooth (BT), Wireless Fidelity (Wi-Fi), etc. The internal server of the chip can send a decryption request to the encryption machine in the local area network in a wireless manner.

[0151] The decryption request may include the key name and the log ciphertext. For example, the decryption request may include key name-1 and log ciphertext-1.

[0152] The internal server of the chip can send a decryption request to the encryption machine so that the encryption machine can decrypt the log ciphertext according to the decryption request.

[0153] Next, in combination with Figure 5 , the encryption machine will be described.

[0154] Figure 5 is a schematic diagram of the encryption machine provided by the embodiment of the present application. Please refer to Figure 5, multiple keys can be stored in the encryption machine, and each key has a corresponding key name. For example, the encryption machine may include key name - 1, key name - 2, key name - 3, ……, key name - n, as well as key - 1, key - 2, key - 3, ……, key - n. Among them, key name - 1 is used to determine key - 1, key name - 2 is used to determine key - 2, key name - 3 is used to determine key - 3, ……, key name - n is used to determine key - n. Among them, the key is a parameter that needs to be input in the algorithm for converting log ciphertext to log plaintext or converting log plaintext to log ciphertext. For example, the key can be "23059802826269955". The encryption machine can determine the key according to the key name, and then decrypt the log ciphertext according to the key through the algorithm.

[0155] For example, the internal server of the chip can send a decryption request to the encryption machine. The decryption request includes key name - 1 and log ciphertext - 1. Then the encryption machine can determine key - 1 according to key name - 1, and decrypt log ciphertext - 1 according to key - 1 through the algorithm.

[0156] S307. Receive the decryption response corresponding to the decryption request sent by the encryption machine.

[0157] The internal server of the chip can receive the decryption response corresponding to the decryption request sent by the encryption machine in the local area network in a wired or wireless manner. The decryption response may include the log plaintext, and the log plaintext is obtained by the encryption machine decrypting the log ciphertext according to the key.

[0158] For example, if the encryption machine obtains that the decryption request includes key name - 1 and log ciphertext - 1, the encryption machine can determine key - 1 according to key name - 1, and then decrypt log ciphertext - 1 according to key - 1 through the algorithm to obtain log plaintext - 1. The encryption machine can send a decryption response to the internal server of the chip in the local area network so that the internal server of the chip can receive the decryption response. The decryption response may include "Decryption completed" and log plaintext - 1.

[0159] S308. Send the log plaintext to the external server of the chip.

[0160] It should be noted that the execution process of S308 can refer to S204, which will not be elaborated here.

[0161] In the embodiment of the present application, the in-chip server can obtain the registration request of the terminal device through the out-of-chip server and send a registration response to the terminal device. After successful registration, if it is necessary to decrypt the log ciphertext, the in-chip server can obtain the account information and the log ciphertext of the terminal device through the out-of-chip server, and determine the key name according to the account information. The in-chip server can send a decryption request to the encryptor and receive the decryption response corresponding to the decryption request sent by the encryptor. The decryption response includes the plaintext log. The in-chip server can send the plaintext log to the out-of-chip server so that the terminal device can obtain the plaintext log. Since the in-chip server can call the encryptor to decrypt the log ciphertext to obtain the plaintext log and can send the plaintext log to the out-of-chip server so that the terminal device can obtain the plaintext log, it avoids directly decrypting the ISE log in the ISE chip, so that the ISE log can be used.

[0162] The log processing method described in any of the above embodiments can be applied to an in-chip server. Next, in combination with Figure 6 , the log processing method will be further described in detail. This log processing method can be applied to a terminal device.

[0163] Figure 6 It is a schematic flowchart of another log processing method provided by the embodiment of the present application. Please refer to Figure 6 , this method may include:

[0164] S601. Receive the development environment data packet sent by the chip server.

[0165] The development environment data packet can be used to assist in program development. For example, if the ISE system developer develops a system based on the ISE chip in the terminal device, the development environment data packet may include a Software Development Kit (SDK); if the ISE application developer develops an application based on the ISE chip in the terminal device, the development environment data packet may include an SDK package, ISE system-related documents, etc. The ISE application developer can use the development environment data packet for development based on the ISE system.

[0166] The chip server can be the server of the chip manufacturer.

[0167] The terminal device can receive the development environment data packet sent by the chip server so that the staff can perform program development on the terminal device based on the development environment data packet.

[0168] S602. Send a registration request to the in-chip server.

[0169] A registration request can be used for a terminal device to register an account with the internal server of the chip. The registration request may include account information and device information of the terminal device. Among them, the device information of the terminal device may include the address of the device, the company to which the device belongs, etc. For example, the registration request may include Account-A and "A Technology Co., Ltd.".

[0170] The terminal device can send a registration request to an external server of the chip. After receiving the registration request, the external server of the chip can forward the registration request to the internal server of the chip.

[0171] S603. Receive the registration response corresponding to the registration request sent by the internal server of the chip.

[0172] The registration response can be used to indicate success or failure of registration. For example, the registration response can be "Account-A registration successful".

[0173] After receiving the registration request, the internal server of the chip can generate a registration response according to the registration request and send the registration response to the external server of the chip. After receiving the registration response, the external server of the chip can send the registration response to the terminal device so that the terminal device can obtain the registration response corresponding to the registration request and know whether the registration is successful.

[0174] S604. Generate a log ciphertext through the log interface.

[0175] An ISE chip and a main chip can be set in the terminal device. A key and a log interface are set in the ISE chip. Among them, the ISE chip is a security element, and the log interface can be used to record the logs generated based on the ISE chip.

[0176] During the process of developing a program in the ISE chip, the terminal device can generate a log plaintext based on the ISE chip. The terminal device can obtain the key in the ISE chip and automatically encrypt the log plaintext through the log interface according to the key to obtain a log ciphertext.

[0177] For example, if the key is "23059802826269955", the program processor can input the key into the algorithm and encrypt the log plaintext-1 through the log interface to obtain the corresponding log ciphertext-1.

[0178] S605. Send the account information and the log ciphertext to the external server of the chip through the main chip.

[0179] After the terminal device generates the log ciphertext in the ISE chip, it can send the log ciphertext to the main chip through the log interface. The terminal device can send the log ciphertext and the account information of the terminal device to the external server of the chip through the main chip, so that the external server of the chip can obtain the log ciphertext and the account information. The external server of the chip can forward the log ciphertext and the account information to the internal server of the chip.

[0180] S606. Receive the log plaintext corresponding to the log ciphertext sent by the external server of the chip through the main chip.

[0181] The execution process of generating the log plaintext corresponding to the log ciphertext can refer to Figure 2 S203 in Figure 3 or S305 - S307 in

[0182] The external server of the chip can obtain the log plaintext sent by the internal server of the chip and can send the log plaintext to the terminal device. The terminal device can receive the log plaintext sent by the external server of the chip through the main chip, and the log plaintext can be used to determine the fault information of the program in the terminal device.

[0183] Optionally, after the log ciphertext is generated on the terminal device, the staff of the ISE system developer can export the log ciphertext to the server of the ISE system developer. The server of the ISE system developer can send the account information and the log ciphertext to the external server of the chip and receive the log plaintext sent by the external server of the chip.

[0184] In the embodiments of the present application, the terminal device can obtain the development environment data packet sent by the chip server and perform program development based on the development environment data packet. The terminal device can send a registration request to the internal server of the chip through the external server of the chip and receive the registration response corresponding to the registration request sent by the internal server of the chip. The terminal device can generate the log ciphertext through the log interface in the ISE chip and send the log ciphertext to the main chip. The terminal device can send the log ciphertext and the account information to the external server of the chip through the main chip and receive the log plaintext sent by the external server of the chip. Since the terminal device can send the log ciphertext to the internal server of the chip through the external server of the chip and obtain the log plaintext corresponding to the log ciphertext, it avoids directly decrypting the ISE log in the ISE chip, so that the ISE log can be used.

[0185] Based on any of the above embodiments, below, in combination with Figure 7 , the above log processing method will be further described in detail through specific examples.

[0186] Figure 7 is a schematic diagram of the process of the log processing method provided by the embodiments of the present application. Please refer toFigure 7 , including an external chip server, an internal chip server, an encryption machine, a terminal device, and a chip server.

[0187] Among them, the external chip server, the internal chip server, the encryption machine, and the chip server can be owned by the chip manufacturer, and the internal chip server, the encryption machine, and the chip server can be within the local area network of the chip manufacturer.

[0188] An ISE chip and a main chip can be set in the terminal device. A log interface and a key can be provided in the ISE chip. Among them, the key in the ISE chip can be pre-set in the ISE chip by the encryption machine before the ISE chip leaves the factory. The keys in the ISE chip can be processed differently according to different ISE system developers or ISE application developers, so that the terminal devices of different ISE system developers or ISE application developers use different keys. For example, the keys in the ISE chip of the terminal device of ISE system developer -1 can all be key -1.

[0189] The chip server can send a development environment data packet to the terminal device. The development environment data packet can include an SDK package and / or ISE system-related documents, etc. The development environment data packet can be used to assist the staff in program development on the terminal device.

[0190] During the process of developing a program on the terminal device, the terminal device can generate a log plaintext based on the ISE chip. The terminal device can obtain the key in the ISE chip and automatically encrypt the log plaintext through the log interface according to the key to obtain a log ciphertext. Further, the terminal device can send the log ciphertext to the main chip through the log interface.

[0191] If it is necessary to decrypt the log ciphertext, the terminal device can send the account information and the log ciphertext to the external chip server through the main chip. After receiving the account information and the log ciphertext, the external chip server can forward the account information and the log ciphertext to the internal chip server. For Figure 7 , the terminal device can send account -B and the log ciphertext to the external chip server, and the external chip server can forward account -B and the log ciphertext to the internal chip server.

[0192] An account-key correspondence table is stored in the internal chip server. After receiving the account information and the log ciphertext, the internal chip server can determine the key name corresponding to the account information in the account-key correspondence table according to the account information, and send the key name and the log ciphertext to the encryption machine through the local area network. For Figure 7 , after the internal chip server receives account -B and the log ciphertext, it can determine key name -2 according to account -B in the account-key correspondence table, and send key name -2 and the log ciphertext to the encryption machine.

[0193] After receiving the key name and the log ciphertext, the encryption machine can determine the key according to the key name, and then, based on the key, decrypt the log ciphertext through an algorithm to obtain the log plaintext corresponding to the log ciphertext, and send the log plaintext to the internal server of the chip through the local area network. For example Figure 7 , the encryption machine can determine Key-2 according to Key Name-2, decrypt the log ciphertext according to Key-2, obtain the log plaintext, and send the log plaintext to the internal server of the chip.

[0194] After the internal server of the chip obtains the log plaintext, it can send the log plaintext to the external server of the chip. The external server of the chip can save the log plaintext and send the log plaintext to the terminal device.

[0195] Optionally, the staff can also view the plaintext on the external server of the chip.

[0196] It should be noted that both the external server of the chip and the internal server of the chip can be equipped with an account system and a logging function. Different ISE system developers and ISE application developers can apply for and register different accounts on the account systems of the external server of the chip and the internal server of the chip. The account systems of the external server of the chip and the internal server of the chip can be the same.

[0197] The external server of the chip can, through the logging function, record the situations of different terminal devices sending account information and log ciphertexts, receiving and sending log plaintexts; the internal server of the chip, through the logging function, records the situations of different terminal devices sending account information and log ciphertexts, invoking the encryption machine for decryption, and receiving log plaintexts.

[0198] Optionally, the chip manufacturer, the ISE system developer, and the ISE application developer can be the same entity; or, the ISE application developer can be the terminal developer. For example, the ISE application developer can be a computer developer.

[0199] In an embodiment of the present application, the terminal device can obtain the development environment data packet sent by the chip server and perform program development based on the development environment data packet. The terminal device can generate a log ciphertext through the log interface in the ISE chip and send the log ciphertext to the main chip. The terminal device can send the account information and the log ciphertext to the internal chip server through an external chip server. The internal chip server can determine the key name corresponding to the account information according to the account information, and then send the key name and the log ciphertext to the encryption machine, so that the encryption machine can determine the key according to the key name and decrypt the log ciphertext according to the key to obtain the log plaintext corresponding to the log ciphertext. The internal chip server can send the log plaintext to the external chip server, and then the external chip server can send the log plaintext to the terminal device, so that the terminal device can obtain the log plaintext. Since the terminal device can send the log ciphertext to the internal chip server, the internal chip server can call the encryption machine to decrypt the log ciphertext to obtain the log plaintext corresponding to the log ciphertext, avoiding directly decrypting the ISE log in the ISE chip, so that the ISE log can be used.

[0200] Figure 8 FIG. is a schematic structural diagram of a log processing device provided by an exemplary embodiment of the present application. The log processing device can be a chip or a chip module. Please refer to Figure 8 As shown in, the log processing device 10 includes a first acquisition module 11, a second acquisition module 12, a third acquisition module 13, and a first sending module 14, where

[0201] The first acquisition module 11 is configured to acquire the account information of the terminal device;

[0202] The second acquisition module 12 is configured to acquire the log ciphertext of the terminal device. The terminal device includes an integrated security element (ISE) chip, and the log ciphertext is the log generated during program development in the ISE chip;

[0203] The third acquisition module 13 is configured to acquire the log plaintext corresponding to the log ciphertext according to the account information;

[0204] The first sending module 14 is configured to send the log plaintext to an external chip server, and the log plaintext is used to determine the fault information of the program in the terminal device.

[0205] The log processing device provided by the embodiment of the present application can execute the technical solutions shown in the above method embodiments, and the implementation principles and beneficial effects are similar, which will not be elaborated here.

[0206] In a possible implementation manner, the third acquisition module 13 is specifically configured to:

[0207] Determine the key name corresponding to the account information according to the account information;

[0208] Obtain the plaintext log according to the key name.

[0209] In a possible implementation manner, the third obtaining module 13 is specifically configured to:

[0210] Send the key name and the ciphertext log to the encryption machine;

[0211] Receive the plaintext log sent by the encryption machine, where the encryption machine includes the key corresponding to the key name, and the plaintext log is obtained by the encryption machine decrypting the ciphertext log according to the key.

[0212] In a possible implementation manner, the method is applied to an internal server of a chip, and the internal server of the chip and the encryption machine are located in the same local area network;

[0213] Sending the key name and the ciphertext log to the encryption machine includes:

[0214] Send a decryption request to the encryption machine through the local area network, where the decryption request includes the key name and the ciphertext log;

[0215] Receiving the plaintext log sent by the encryption machine includes:

[0216] Receive the decryption response corresponding to the decryption request sent by the encryption machine through the local area network, where the decryption response includes the plaintext log.

[0217] In a possible implementation manner, obtaining the ciphertext log of the terminal device includes:

[0218] Receive the ciphertext log from the external server of the chip corresponding to the terminal device, where the ciphertext log is sent by the terminal device to the external server of the chip.

[0219] The log processing device provided in the embodiments of the present application may execute the technical solutions shown in the above method embodiments, and its implementation principles and beneficial effects are similar, and will not be elaborated here.

[0220] Figure 9 This is a schematic structural diagram of another log processing device provided for an exemplary embodiment of the present application. The log processing device may be a chip or a chip module. In Figure 8 On the basis of the shown embodiment, please refer to Figure 9 , the log processing device 10 further includes a receiving module 15 and a second sending module 16, where,

[0221] The receiving module 15 is configured to receive the registration request sent by the terminal device, where the registration request includes the account information and the device information of the terminal device;

[0222] The second sending module 16 is configured to send a registration response corresponding to the registration request to the terminal device, where the registration response is used to indicate success or failure of the registration.

[0223] The log processing device provided in the embodiments of the present application can execute the technical solutions shown in the above method embodiments, and its implementation principle and beneficial effects are similar, and will not be elaborated here.

[0224] Figure 10 It is a schematic structural diagram of another log processing device provided for an exemplary embodiment of the present application. The log processing device can be a chip or a chip module. Please refer to Figure 10 The log processing device 20 includes: a generating module 21, a first sending module 22, and a first receiving module 23, where

[0225] The generating module 21 is configured to generate a log ciphertext through the log interface during the process of generating a program in the ISE chip;

[0226] The first sending module 22 is configured to send the account information and the log ciphertext to an external server of the chip through the main chip;

[0227] The first receiving module 23 is configured to receive, through the main chip, the log plaintext corresponding to the log ciphertext sent by the external server of the chip, where the log plaintext is used to determine the fault information of the program.

[0228] The log processing device provided in the embodiments of the present application can execute the technical solutions shown in the above method embodiments, and its implementation principle and beneficial effects are similar, and will not be elaborated here.

[0229] In a possible implementation manner, the generating module 21 is specifically configured to:

[0230] Generate the log plaintext during the process of generating the program in the ISE chip;

[0231] Perform an encryption process on the log plaintext through the log interface to obtain the log ciphertext.

[0232] In a possible implementation manner, a key is provided in the ISE chip, and the generating module 21 is specifically configured to:

[0233] Obtain the key in the ISE chip;

[0234] Encrypt the plaintext log according to the key through the log interface to obtain the ciphertext log.

[0235] The log processing device provided by the embodiment of the present application can execute the technical solution shown in the above method embodiment, and its implementation principle and beneficial effects are similar, which will not be elaborated here.

[0236] Figure 11 It is a schematic structural diagram of another log processing device provided by an exemplary embodiment of the present application. The log processing device can be a chip or a chip module. Figure 10 On the basis of the shown embodiment, please refer to Figure 11 , the log processing device further includes a second sending module 24 and a second receiving module 25:

[0237] The second sending module 24 is configured to send a registration request to the internal chip server, and the registration request includes the account information and the device information of the terminal device;

[0238] The second receiving module 25 is configured to receive the registration response corresponding to the registration request sent by the internal chip server, and the registration response is used to indicate success or failure of registration.

[0239] In a possible implementation manner, the log processing device further includes a third receiving module 26:

[0240] The third receiving module 26 is configured to receive a development environment data packet sent by the chip server, and the development environment data packet is used for the terminal device to develop the program.

[0241] The log processing device provided by the embodiment of the present application can execute the technical solution shown in the above method embodiment, and its implementation principle and beneficial effects are similar, which will not be elaborated here.

[0242] An exemplary embodiment of the present application provides a schematic structural diagram of an internal chip server. Please refer to Figure 12 , the internal chip server 30 may include a processor 31 and a memory 32. Exemplarily, the processor 31 and the memory 32 are interconnected with each other through a bus 33.

[0243] The memory 32 stores computer execution instructions;

[0244] The processor 31 executes the computer execution instructions stored in the memory 32, so that the processor 31 executes the log processing method shown in the above method embodiment.

[0245] An exemplary embodiment of the present application provides a schematic structural diagram of a terminal device. Please refer to Figure 13, the terminal device 40 may include a processor 41 and a memory 42. Exemplarily, the processor 41, the memory 42, and each part are interconnected through a bus 43.

[0246] The memory 42 stores computer-executable instructions;

[0247] The processor 41 executes the computer-executable instructions stored in the memory 42, so that the processor 41 executes the log processing method as shown in the above method embodiments.

[0248] All or part of the steps of implementing the above method embodiments can be completed by hardware related to program instructions. The foregoing program can be stored in a readable memory. When the program is executed, it executes the steps including the above method embodiments; and the foregoing memory (storage medium) includes: read-only memory (abbreviation: ROM), RAM, flash memory, hard disk, solid state drive, magnetic tape, floppy disk, optical disc, and any combination thereof.

[0249] Correspondingly, an embodiment of the present application provides a computer-readable storage medium, in which computer-executable instructions are stored, and when the computer-executable instructions are executed by a processor, they are used to implement the log processing method described in the above method embodiments.

[0250] Correspondingly, an embodiment of the present application can also provide a computer program product, including a computer program, which when executed by a processor, can implement the log processing method shown in the above method embodiments.

[0251] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured article including an instruction device, and the instruction device implements in the process Figure 1 one process or multiple processes and / or boxes Figure 1 the functions specified in one box or multiple boxes.

[0252] These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to generate a computer-implemented process, so that the instructions executed on the computer or other programmable device provide for implementing in the process Figure 1 one process or multiple processes and / or boxes Figure 1 the steps of the functions specified in one box or multiple boxes.

[0253] Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the embodiments of the present application fall within the scope of the claims of the present application and their equivalent technologies, the present application also intends to include these changes and modifications.

[0254] In the present application, the term "including" and its variations may refer to non-limiting inclusion; the term "or" and its variations may refer to "and / or". In the present application, terms such as "first", "second", etc. are used to distinguish similar objects and do not necessarily have to be used to describe a specific order or sequence. In the present application, "a plurality of" means two or more. "And / or" describes the relationship between related objects and indicates that three relationships may exist. For example, A and / or B may mean: A exists alone, A and B exist simultaneously, and B exists alone. The character " / " generally indicates that the related objects before and after are in an "or" relationship.

Claims

1. A log processing method, characterized in that, The method is applied to an internal server of a chip and includes: Obtain the account information of the terminal device; Obtain the log ciphertext of the terminal device, where the terminal device includes an integrated security element (ISE) chip, and the log ciphertext is the log generated by developing a program in the ISE chip; Determine the key name corresponding to the account information according to the account information; Send the key name and the log ciphertext to the encryption machine; Receive the log plaintext corresponding to the log ciphertext sent by the encryption machine. The encryption machine includes the key corresponding to the key name, and the log plaintext is obtained by the encryption machine decrypting the log ciphertext according to the key; Send the log plaintext to an external server of the chip, and the log plaintext is used to determine the fault information of the program in the terminal device.

2. The method according to claim 1, characterized in that The internal server of the chip and the encryption machine are located in the same local area network; Sending the key name and the log ciphertext to the encryption machine includes: Send a decryption request to the encryption machine through the local area network. The decryption request includes the key name and the log ciphertext; Receiving the log plaintext sent by the encryption machine includes: Receive the decryption response corresponding to the decryption request sent by the encryption machine through the local area network. The decryption response includes the log plaintext.

3. The method according to claim 1, characterized in that Before obtaining the account information of the terminal device, it further includes: Receive a registration request sent by the terminal device. The registration request includes the account information and the device information of the terminal device; Send a registration response corresponding to the registration request to the terminal device, and the registration response is used to indicate whether the registration is successful or failed.

4. The method according to any one of claims 1-3, characterized in that Obtaining the log ciphertext of the terminal device includes: Receive the log ciphertext from an external server of the chip corresponding to the terminal device, and the log ciphertext is sent by the terminal device to the external server of the chip.

5. A log processing method, characterized in that, Applied to a terminal device, where the terminal device is provided with an ISE chip, a main chip, and a log interface. The method includes: During the process of generating a program in the ISE chip, generate a log ciphertext through the log interface; Send the account information and the log ciphertext to an external server of the chip through the main chip; Receive the log plaintext corresponding to the log ciphertext sent by the external server of the chip through the main chip. The log plaintext is used to determine the fault information of the program, and the log plaintext is obtained based on the log processing method according to any one of claims 1-4 above.

6. The method according to claim 5, wherein During the process of generating a program in the ISE chip, generating a log ciphertext through the log interface includes: During the process of generating the program in the ISE chip, generate the log plaintext; Encrypt the log plaintext through the log interface to obtain the log ciphertext.

7. The method according to claim 6, characterized in that, A key is provided in the ISE chip; encrypting the log plaintext through the log interface to obtain the log ciphertext includes: Obtain the key in the ISE chip; According to the key, encrypt the log plaintext through the log interface to obtain the log ciphertext.

8. The method according to any one of claims 5 to 7, characterized in that The method further includes: Send a registration request to the internal chip server, where the registration request includes the account information and the device information of the terminal device; Receive the registration response corresponding to the registration request sent by the internal chip server, where the registration response is used to indicate whether the registration is successful or failed.

9. The method according to claim 8, wherein The method further includes: Receive a development environment data packet sent by the chip server, where the development environment data packet is used for the terminal device to develop the program.

10. A log processing device, applied to an internal server of a chip, characterized in that Includes: A first acquisition module, a second acquisition module, a third acquisition module, and a first sending module, where The first acquisition module is configured to acquire the account information of the terminal device; The second acquisition module is configured to acquire the log ciphertext of the terminal device, where the terminal device includes an integrated security element ISE chip, and the log ciphertext is the log generated during the development of the program in the ISE chip; The third acquisition module is configured to acquire the log plaintext corresponding to the log ciphertext according to the account information; The first sending module is configured to send the log plaintext to an external chip server, where the log plaintext is used to determine the fault information of the program in the terminal device; Specifically, the third acquisition module is configured to determine the key name corresponding to the account information according to the account information; send the key name and the log ciphertext to an encryption machine; receive the log plaintext corresponding to the log ciphertext sent by the encryption machine, where the encryption machine includes the key corresponding to the key name, and the log plaintext is obtained by the encryption machine decrypting the log ciphertext according to the key.

11. A log processing device, characterized in that, Applied to a terminal device, where the terminal device is provided with an ISE chip, a main chip, and a log interface, and includes: a generation module, a first sending module, and a first receiving module, where The generation module is configured to generate a log ciphertext through the log interface during the process of generating a program in the ISE chip; The first sending module is configured to send the account information and the log ciphertext to an external chip server through the main chip; The first receiving module is configured to receive, through the main chip, the log plaintext corresponding to the log ciphertext sent by the external chip server, where the log plaintext is used to determine the fault information of the program, and the log plaintext is obtained based on the log processing method according to any one of claims 1-4 above.

12. An in-chip server, characterized in that, Includes: A memory and a processor; The memory stores computer execution instructions; The processor executes the computer execution instructions stored in the memory, so that the processor executes the log processing method according to any one of claims 1 to 4.

13. A terminal device, characterized in that, Includes: A memory and a processor; The memory stores computer execution instructions; The processor executes the computer execution instructions stored in the memory, so that the processor executes the log processing method according to any one of claims 5 to 9.

14. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer execution instructions, which are used to implement the log processing method according to any one of claims 1 to 4, or the log processing method according to any one of claims 5 to 9 when the computer execution instructions are executed by a processor.

15. A computer program product comprising a computer program which, when executed by a processor, implements the log processing method according to any one of claims 1 to 4, or the log processing method according to any one of claims 5 to 9.

Images