Data security storage method and device based on solid state disk, equipment and medium

Abstract

The application relates to an artificial intelligence technology and discloses a data security storage method based on a solid state disk, which comprises the following steps: according to a data storage request, packing data to be stored into a storage data packet; obtaining a first user attribute of a target user and a second user attribute which has an association relationship with the first user attribute; performing parameter assignment on a preset first encryption algorithm, and storing the storage data packet into a preset solid state disk according to the first encryption algorithm; constructing a data mapping address of the storage data packet according to regional information of the storage data packet in the solid state disk and the association relationship; performing parameter assignment on a preset second encryption algorithm by using the second user attribute and the association relationship, and storing the mapping address into the solid state disk according to the second encryption algorithm. The application further discloses a data security storage device based on the solid state disk, an electronic device and a storage medium. The application can improve the data storage security.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of artificial intelligence, and in particular to a data security storage method and device based on a solid state disk, an electronic device, and a computer readable storage medium. BACKGROUND

[0002] Data security is the core of computer security issues, and for many units with high confidentiality requirements, data security storage is even more important. However, in order to allow users to store data with confidence and improve the security of data storage, data needs to be encrypted in a solid state disk for data storage.

[0003] Existing data security storage technologies are mostly incremental backups and full backups of important data in server operating systems and databases through advanced security backup software. However, in actual applications, a single security storage technology cannot cope with various security threats, which may lead to data leakage during data storage, thereby reducing the security of data storage for users. SUMMARY

[0004] The present application provides a data security storage method and device based on a solid state disk and a computer readable storage medium, which mainly aims to solve the problem of low security of data storage.

[0005] To achieve the above purpose, the present application provides a data security storage method based on a solid state disk, which comprises:

[0006] Obtaining a data storage request of a target user, and packing data to be stored into a storage data packet according to the data storage request;

[0007] Obtaining a first user attribute of the target user, and obtaining a second user attribute having an association relationship with the first user attribute;

[0008] Parameterizing a preset first encryption algorithm using the first user attribute and the association relationship, and encrypting and storing the storage data packet into a preset solid state disk using the parameterized first encryption algorithm;

[0009] Constructing a data mapping address of the storage data packet according to the region information of the storage data packet in the solid state disk and the association relationship;

[0010] Parameterizing a preset second encryption algorithm using the second user attribute and the association relationship, and encrypting and storing the mapping address into the solid state disk using the parameterized second encryption algorithm.

[0011] Optionally, the packing of data to be stored into a storage data packet according to the data storage request comprises:

[0012] extracting data to be stored according to the data storage request;

[0013] obtaining a data packaging request;

[0014] packaging the data to be stored according to the packaging request by using a preset packaging strategy to obtain a packaged data set;

[0015] aggregating the packaged data set into a storage data packet.

[0016] Optionally, the parameter assignment to the preset first encryption algorithm by using the first user attribute and the association relationship comprises:

[0017] encoding the first user attribute and the association relationship to obtain plaintext encoded data;

[0018] obtaining a preset encryption key by using a preset key management system;

[0019] parameter assignment to the first encryption algorithm according to the plaintext encoded data and the encryption key.

[0020] Optionally, the encrypted storage of the storage data packet into a preset solid state disk by using the assigned first encryption algorithm comprises:

[0021] encryption of the storage data packet according to the assigned first encryption algorithm and the encryption key by using the following algorithm to obtain an encrypted data packet:

[0022] C = M e mod n

[0023] wherein C is the encrypted data packet, M is plaintext information in the storage data packet, e is the encryption key, mod is a remainder function, and n is a key length of the encryption key;

[0024] obtaining a storage instruction of the encrypted data packet and storing the encrypted data packet into the solid state disk according to the storage instruction.

[0025] Optionally, the storage of the encrypted data packet into the solid state disk according to the storage instruction comprises:

[0026] obtaining storage information of the solid state disk;

[0027] calculating a storage load performance of the solid state disk by using a preset load performance algorithm:

[0028]

[0029] wherein e is the storage load performance, f is the preset load performance algorithm, and n is the key length of the encryption key.i Let be the i-th data block of the data packet stored in the solid-state drive, t be the number of times the solid-state drive is accessed, max be the maximum value function, o be a given value less than 1, r be the load time difference of the solid-state drive, and l be the maximum value function function. i Let d be the length of the i-th data block in the solid-state drive. i Let d be the time length for accessing the i-th data block in the solid-state drive, and d be the average time length for accessing data blocks in the solid-state drive region.

[0030] The storage location of the encrypted data packet is determined based on the storage load performance and the storage information;

[0031] The encrypted data packet is stored in the solid-state drive according to the storage instruction and the storage location.

[0032] Optionally, constructing the data mapping address of the storage data packet based on the region information of the storage data packet in the solid-state drive and the association relationship includes:

[0033] The logical address where the stored data packet is stored is obtained based on the region information;

[0034] Using a preset address mapping algorithm, the associated data and the stored data packet are written into a preset target physical block according to the logical address;

[0035] The preset address mapping algorithm is as follows:

[0036] S = T i mod g

[0037] Where S is the data mapping address, T i Let g be the logical address of the i-th stored data packet, g be the number of the target physical blocks in the solid-state drive, and mod be the modulo function;

[0038] The mapping relationship between the logical address and the physical address of the stored data packet is determined based on the target physical block;

[0039] The data mapping address of the stored data packet is obtained based on the mapping relationship.

[0040] Optionally, the step of encrypting and storing the mapped address to the solid-state drive using the assigned second encryption algorithm includes:

[0041] A random number is generated using a preset random number generator, and the random number is used to determine the address key of the mapped address;

[0042] The mapped address is symmetrically encrypted using the second encryption algorithm and the address key to obtain the encrypted mapped address:

[0043]

[0044] wherein w is the encrypted mapping address, p is any positive integer, mod is a remainder function, q is the address key, and k is the mapping address;

[0045] obtaining a storage instruction of the encrypted mapping address, and storing the encrypted mapping address to the solid state disk according to the storage instruction.

[0046] To solve the above problems, the application further provides a data security storage device based on a solid state disk, the device comprising:

[0047] a data packaging module configured to obtain a data storage request of a target user, and package data to be stored into a storage data packet according to the data storage request;

[0048] a user attribute obtaining module configured to obtain a first user attribute of the target user, and obtain a second user attribute having an association relationship with the first user attribute;

[0049] a data packet encryption storage module configured to perform parameter assignment on a preset first encryption algorithm by using the first user attribute and the association relationship, and encrypt and store the storage data packet to a preset solid state disk by using the first encryption algorithm after the parameter assignment;

[0050] a data mapping address construction module configured to construct a data mapping address of the storage data packet according to region information of the storage data packet in the solid state disk and the association relationship;

[0051] a mapping address encryption storage module configured to perform parameter assignment on a preset second encryption algorithm by using the second user attribute and the association relationship, and encrypt and store the mapping address to the solid state disk by using the second encryption algorithm after the parameter assignment.

[0052] To solve the above problems, the application further provides an electronic device, the electronic device comprising:

[0053] at least one processor; and

[0054] a memory in communication connection with the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to execute the data security storage method based on a solid state disk.

[0055] To solve the above problems, the application further provides a computer readable storage medium, wherein at least one computer program is stored in the computer readable storage medium, and the at least one computer program is executed by a processor in an electronic device to implement the data security storage method based on a solid state disk.

[0056] The embodiment of the application can encrypt the storage data packet according to the attributes of the user and the association relationship between the attributes, store the encrypted data into the solid state disk, construct a data mapping address of the storage data packet according to the region information of the storage data packet in the solid state disk, encrypt the data mapping address, store the encrypted mapping address into the solid state disk, realize the associated storage of the address and the entity data, and when the user needs to access the data, the identity authentication is performed through double decryption, so that the security storage of the data in the solid state disk is realized, and the security of the data storage for the user is improved. BRIEF DESCRIPTION OF DRAWINGS

[0057] Figure 1 The flowchart of the data security storage method based on a solid state disk provided by an embodiment of the application is shown in the figure.

[0058] Figure 2 The flowchart of the first encryption algorithm parameter assignment provided by an embodiment of the application is shown in the figure.

[0059] Figure 3 The flowchart of the construction of the data mapping address provided by an embodiment of the application is shown in the figure.

[0060] Figure 4 The function module diagram of the data security storage device based on a solid state disk provided by an embodiment of the application is shown in the figure.

[0061] Figure 5 The structure diagram of the electronic device for implementing the data security storage method based on a solid state disk provided by an embodiment of the application is shown in the figure.

[0062] The implementation, functional features and advantages of the application will be further described with reference to the embodiments and the accompanying drawings. DETAILED DESCRIPTION

[0063] It should be understood that the specific embodiments described herein are only used to explain the application, and are not used to limit the application.

[0064] The embodiment of the present application provides a data security storage method based on a solid state disk. The execution subject of the data security storage method based on the solid state disk includes but is not limited to at least one of electronic devices such as a server, a terminal and the like which can be configured to execute the method provided by the embodiment of the present application. In other words, the data security storage method based on the solid state disk can be executed by software or hardware installed in a terminal device or a server device, and the software can be a blockchain platform. The server includes but is not limited to a single server, a server cluster, a cloud server or a cloud server cluster and the like. The server can be a stand-alone server, or a cloud server providing cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDN), and basic cloud computing services such as big data and artificial intelligence platforms.

[0065] Referring to Figure 1 Fig. 1 is a flowchart of a data security storage method based on a solid state disk provided by an embodiment of the present application. In the embodiment, the data security storage method based on the solid state disk includes the following steps.

[0066] S1, obtaining a data storage request of a target user, and packing data to be stored into a storage data packet according to the data storage request;

[0067] In the embodiment of the present application, the data storage is through a data storage space, and a user can save data on a device. When a computer is powered off, the stored data can still be retained. A terminal is directly connected to a storage device or connected to the storage device through a network. A user instructs the computer to access data in the storage device and store the data into the storage device. The data storage device includes but is not limited to direct-attached storage (DAS), and the DAS includes a floppy disk, a compact disc (CD and DVD), a hard disk drive, a solid state drive (SDD) and the like.

[0068] In detail, a preset interceptor (such as an Interceptor interceptor) can be used to obtain the data storage request of the target user.

[0069] In the embodiment of the present application, the data packing operation is to send discontinuous data. Before sending, the data is packaged into a continuous buffer area for subsequent data processing.

[0070] In the embodiment of the present application, the packing of the data to be stored into the storage data packet according to the data storage request includes the following steps.

[0071] Extracting the data to be stored according to the data storage request;

[0072] Obtaining a data packing request;

[0073] packaging the data to be stored according to the packaging request by using a preset packaging strategy, to obtain a packaged data set;

[0074] aggregating the packaged data set as a storage data packet.

[0075] In detail, the data to be stored can be extracted according to the data storage request by using a Python statement with a data extraction function.

[0076] Specifically, the data storage request can be obtained by using a preset interceptor (such as an Interceptor interceptor).

[0077] Further, the packaging strategy includes a sub-packet strategy and a packet naming strategy, parameters with the same sub-packet strategy are used to distribute the data in the data set to be packaged into the same data packet, wherein a packet number needs to be created for each data packet, and the naming rule of the packet is mainly based on the requirement of the sending channel, which can be a file name, a serial number of a message, etc. The data is sub-packaged according to the packet number and the sub-packet strategy, to obtain a packaged data set under the same sub-packet strategy, and the packaged data sets are aggregated to obtain a storage data packet of the data.

[0078] S2, obtaining a first user attribute of the target user, and obtaining a second user attribute having an association relationship with the first user attribute;

[0079] In the embodiment of the application, the first user attribute can be an identity card number, a birthday, a household registration place, an age, a gender, etc. The second user attribute is a user attribute having an association relationship with the first user attribute, for example, the user's identity card information contains the user's birth date, that is, the user's identity card number information and the user's birth date have an overlapping part, if the user's identity card number is 110105199009013295, the user's birth date is September 1, 1990, that is, the overlapping part 19900901 of the user's identity card number and the user's birth date, that is, the association relationship between the overlapping part is the second user attribute.

[0080] In detail, the first user attribute of the target user stored in the predetermined storage area can be grabbed by using a computer statement (such as a java statement, a python statement, etc.) with a data grabbing function, and the solid state disk includes but is not limited to a database, a blockchain node, and a network cache.

[0081] In the embodiment of the application, the step of obtaining the second user attribute having an association relationship with the first user attribute is consistent with the step of obtaining the first user attribute of the target user, and will not be repeated here.

[0082] In one of the practical application scenarios of the present application, the birth year and month, the birth province of the user, and the gender of the user can be known according to the ID number of the user, the ID number is composed of 18 digits, the first six digits are administrative division codes, the seventh to fourteenth digits are birth date codes, the fifteenth to seventeenth digits are order codes, and the eighteenth digit is a check code, for example, the ID number of the user is 110105199009013295, wherein 110105 is the Beijing Chaoyang District, 19900901 is the birth date, and thus the association between the ID number and the birth date can be obtained.

[0083] S3, parameter assignment is performed on a preset first encryption algorithm by using the first user attribute and the association relationship, and the storage data packet is encrypted and stored into a preset solid state disk by using the first encryption algorithm after the parameter assignment;

[0084] In one of the practical application scenarios of the present application, the data encryption algorithm is to ensure the confidentiality and security in the transmission process of information. In the communication transmission process, the data encryption algorithm should be effectively used to ensure the safety and quality of data transmission, fully play the data protection function, and use the interception technology to timely intercept and report the user who maliciously steals information of others, and maximize the safety of personal, enterprise or national information resources.

[0085] In the embodiment of the present application, the basic process of data encryption is to process the original plaintext file or data according to the encryption algorithm, so that it becomes an unreadable code, which is usually called "ciphertext".

[0086] In the embodiment of the present application, the first user attribute and the association relationship are encoded by using UTF.8 with encoding function. Figure 2 As shown in the figure, the parameter assignment is performed on the preset first encryption algorithm by using the first user attribute and the association relationship, including:

[0087] S21, the first user attribute and the association relationship are encoded to obtain plaintext encoded data;

[0088] S22, a preset encryption key is obtained by using a preset key management system.

[0089] S23, parameter assignment is performed on the first encryption algorithm according to the plaintext encoded data and the encryption key.

[0090] In detail, the first user attribute and the association relationship can be encoded by using UTF.8 with encoding function, wherein the UTF.8 is a coding system of Unicode, and can convert any character into a matching unique binary string.

[0091] Specifically, the encryption key is public, anyone can get the encryption key, the encryption key becomes a public key, the decryption key cannot be public, only self-use, called a private key, wherein, the encryption key can be obtained by using the key management system (KMS).

[0092] Further, the first encryption algorithm includes but is not limited to RSA (public key encryption algorithm), AES (advanced encryption standard algorithm).

[0093] The encrypted storage data packet is stored in the preset solid state disk by using the assigned first encryption algorithm, comprising:

[0094] The encrypted storage data packet is encrypted by using the following algorithm according to the assigned first encryption algorithm and the encryption key, and the encrypted data packet is obtained:

[0095] C=M e mod n

[0096] Wherein, C is the encrypted data packet, M is the plaintext information in the storage data packet, e is the encryption key, mod is the remainder function, and n is the key length of the encryption key;

[0097] Obtain the storage instruction of the encrypted data packet, and store the encrypted data packet into the solid state disk according to the storage instruction.

[0098] In detail, in data encryption, the plaintext and the key should be kept secret, the plaintext can be encrypted according to the key and the encryption algorithm, so that the plaintext is converted into ciphertext, wherein the key length of the encryption key is obtained by multiplying two prime numbers p and q, and the product result is the key length of the encryption key.

[0099] Specifically, the storage instruction of the encrypted data packet can be obtained by using a preset interceptor (such as Interceptor interceptor).

[0100] In the embodiment of the application, the encrypted data packet is stored into the solid state disk according to the storage instruction, comprising:

[0101] Obtain the storage information of the solid state disk;

[0102] The storage load performance of the solid state disk is calculated by using the following preset load performance algorithm:

[0103]

[0104] Wherein, e is the storage load performance, f iFor the i-th data block of the storage data packet in the solid state disk, t is the number of times the solid state disk is accessed, max is the maximum function, o is a given value less than 1, r is the load time difference of the solid state disk, l i For the length of the i-th data block in the solid state disk, d i For the length of time of accessing the i-th data block in the solid state disk, d is the average value of the length of time of accessing data blocks in the solid state disk region;

[0105] According to the storage load performance and the storage information, the storage position of the encrypted data packet is determined.

[0106] According to the storage instruction and the storage position, the encrypted data packet is stored to the solid state disk.

[0107] In detail, the computer statements (such as java statements, python statements, etc.) with data grabbing function can be used to grab the stored storage information from a predetermined storage region, wherein the storage information can include index information and time information. The index information is used to identify the absolute position of the encrypted data packet in the solid state disk, that is, the index information indicates the partition and the position in the solid state disk where the to-be-stored data packet needs to be stored, so that when the encrypted data packet is stored, data can be written from the position to store the encrypted data packet into the storage region; the time information can be the storage time corresponding to the data packet, for example, when the data in the encrypted data packet is video data, the time information can be the initial recording time and the recording duration of the video data.

[0108] Specifically, the storage load performance can determine the size and the number of the encrypted data packet that can be stored in the solid state disk, in data storage, data is usually stored in the form of data blocks, and similarly, the data packet is also stored in the form of data blocks in the solid state disk, and the storage information can obtain the index information of the data encryption packet in the solid state disk, the position of the encrypted data packet in the solid state disk can be obtained through the index information, according to the storage size, the storage quantity and the storage position of the encrypted data packet, the encrypted data packet can be stored into the solid state disk according to the storage instruction.

[0109] S4, according to the region information of the storage data packet in the solid state disk and the association relationship, a data mapping address of the storage data packet is constructed.

[0110] In the embodiment of the application, the data mapping address refers to that the storage information of the storage packet in the solid state disk can find the physical address of the storage data packet in the solid state disk.

[0111] In the embodiment of the present application, referring to Figure 3 The data mapping address of the storage data packet is constructed according to the region information of the storage data packet in the solid state disk and the association relationship, and the method comprises the following steps of:

[0112] S31, obtaining the logical address of the storage data packet according to the region information;

[0113] S32, writing the data of the association relationship and the storage data packet into a preset target physical block according to the logical address by using a preset address mapping algorithm;

[0114] The preset address mapping algorithm is as follows:

[0115] S = T i mod g

[0116] Wherein, S is the data mapping address, Ti is the logical address of the i-th storage data packet, g is the number of the target physical block in the solid state disk, and mod is a remainder function;

[0117] S33, determining the mapping relationship between the logical address and the physical address of the storage data packet according to the target physical block;

[0118] S34, obtaining the data mapping address of the storage data packet according to the mapping relationship.

[0119] In detail, the storage position of the storage data packet in the solid state disk can be obtained according to the region information of the storage data packet in the solid state disk. Generally, the storage data is stored in sequence in the data storage area. The logical address of the association relationship stored in the solid state disk can be determined according to the storage position, for example, the logical address of the storage data packet 1 is 1, the logical address of the storage data packet 2 is 2, and so on. Therefore, the logical address of the storage data packet n is n.

[0120] Specifically, the association relationship can be written into the target physical block according to the logical address by using the address mapping algorithm, for example, the storage data block in the data storage area is 10, the logical address corresponding to the storage data packet is 11, and the target physical block of the storage data packet can be obtained according to the address mapping algorithm, which is 1. Therefore, the mapping relationship between the physical address of the target physical block and the logical address can be determined, and the data mapping address of the storage data packet can be obtained according to the logical address according to the mapping relationship.

[0121] S5, using the second user attribute and the association relationship to perform parameter assignment on a preset second encryption algorithm, and using the second encryption algorithm after the parameter assignment to encrypt and store the mapping address to the solid state disk.

[0122] In the embodiment of the present application, the solid state disk can be divided into a data storage area and an address storage area, the data storage area stores encrypted data addresses, and the address storage area stores encrypted data mapping addresses, and the two are mapped, so that the encrypted data mapping addresses in the address storage area can be obtained according to the data addresses in the data storage area storing encrypted data by using the mapping relationship.

[0123] In the embodiment of the present application, the parameter assignment to the preset second encryption algorithm using the second user attribute and the association relationship is consistent with the parameter assignment to the preset first encryption algorithm using the first user attribute and the association relationship, and will not be described here.

[0124] In the embodiment of the present application, the encrypted mapping address is stored in the solid state disk by using the second encryption algorithm after assignment, comprising:

[0125] A random number is generated by using a preset random number generator, and the random number is determined as an address key of the mapping address;

[0126] The mapping address is symmetrically encrypted by using the second encryption algorithm and the address key to obtain an encrypted mapping address:

[0127]

[0128] Wherein, w is the encrypted mapping address, p is any positive integer, mod is a remainder function, q is the address key, and k is the mapping address.

[0129] A storage instruction of the encrypted mapping address is obtained, and the encrypted mapping address is stored in the solid state disk according to the storage instruction.

[0130] In detail, the random number is the basis of the cryptography algorithm, and almost all cryptography algorithms need to use the random number, wherein the random number generator is a device for generating a data stream, each bit of the data stream is unpredictable and accidental, and a random value can be generated, the random number is determined as the address key of the mapping address, and the address key is used for encrypting the mapping address.

[0131] Further, the step of storing the encrypted mapping address in the address storage area according to the storage instruction is consistent with the step of storing the encrypted data packet in the solid state disk according to the storage instruction, and will not be described here.

[0132] In the embodiment of the present application, the data to be stored is stored in the solid state disk by mapping through the association relationship, realizing the associated storage of address and entity data, and when the user needs to access the data, identity authentication is needed through double decryption, so as to improve the security of data storage.

[0133] The embodiment of the present application can encrypt the storage data packet according to the attributes of the user and the association relationship between the attributes, store the encrypted data in the solid state disk, construct the data mapping address of the storage data packet according to the area information of the storage data packet in the solid state disk, encrypt the data mapping address, store the encrypted mapping address in the solid state disk, realize the associated storage of address and entity data, and when the user needs to access the data, identity authentication is needed through double decryption, so as to realize the secure storage of data in the solid state disk and improve the security of data storage for the user. Therefore, the data security storage method based on the solid state disk can solve the low security of data storage for the user.

[0134] As shown in Figure 4 Fig. 1 is a functional module diagram of the data security storage device based on the solid state disk provided by an embodiment of the present application.

[0135] The data security storage device based on the solid state disk 100 can be installed in an electronic device. According to the realized functions, the data security storage device based on the solid state disk 100 can include a data packaging module 101, a user attribute acquisition module 102, a data packet encryption storage module 103, a data mapping address construction module 104, and a mapping address encryption storage module 105. The modules of the present application can also be referred to as units, which refer to a series of computer program segments that can be executed by an electronic device processor and can complete a fixed function, and are stored in the memory of the electronic device.

[0136] In the embodiment, the functions of each module / unit are as follows:

[0137] The data packaging module 101 is used to acquire the data storage request of a target user, and package the data to be stored into a storage data packet according to the data storage request;

[0138] The user attribute acquisition module 102 is used to acquire a first user attribute of the target user, and acquire a second user attribute having an association relationship with the first user attribute;

[0139] The data packet encryption storage module 103 is used to perform parameter assignment on a preset first encryption algorithm by using the first user attribute and the association relationship, and encrypt and store the storage data packet in a preset solid state disk by using the first encryption algorithm after the parameter assignment;

[0140] The data mapping address construction module 104 is configured to construct a data mapping address of the storage data packet according to the area information of the storage data packet in the solid state disk and the association relationship.

[0141] The mapping address encryption storage module 105 is configured to perform parameter assignment on a preset second encryption algorithm by using the second user attribute and the association relationship, and encrypt the mapping address by using the second encryption algorithm after the parameter assignment and store the encrypted mapping address to the solid state disk.

[0142] In detail, each module in the data security storage device 100 based on the solid state disk in the embodiment of the present application adopts the same technical means as the data security storage method based on the solid state disk in the above Figures 1 to 3 and can produce the same technical effects, which will not be described here.

[0143] As shown in Figure 5 , it is a structural schematic diagram of an electronic device for implementing the data security storage method based on the solid state disk according to an embodiment of the present application.

[0144] The electronic device can include a processor 10, a memory 11, a communication bus 12 and a communication interface 13, and can further include a computer program stored in the memory 11 and executable on the processor 10, such as a data security storage program based on the solid state disk.

[0145] In some embodiments, the processor 10 can be composed of an integrated circuit, for example, can be composed of a single packaged integrated circuit, or can be composed of multiple packaged integrated circuits with the same function or different functions, including one or more combinations of central processing units (CPU), microprocessors, digital processing chips, graphics processors and various control chips. The processor 10 is the control core of the electronic device, which connects all components of the electronic device through various interfaces and lines, executes programs or modules stored in the memory 11 (such as executing the data security storage program based on the solid state disk), and calls data stored in the memory 11 to perform various functions of the electronic device and process data.

[0146] The memory 11 includes at least one type of readable storage medium, including flash memory, mobile hard disk, multimedia card, card-type memory (such as SD or DX memory, etc.), magnetic memory, disk, optical disk, etc. In some embodiments, the memory 11 can be an internal storage unit of the electronic device, such as the mobile hard disk of the electronic device.

[0147] The memory 11 can also be an external storage device of the electronic device in other embodiments, such as a plug-in mobile hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the electronic device. Further, the memory 11 can include both an internal storage unit of the electronic device and an external storage device. The memory 11 can be used not only to store application software and various data installed on the electronic device, such as the code of a data security storage program based on a solid state disk, but also to temporarily store data that has been output or will be output.

[0148] The communication bus 12 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. The bus is configured to enable connection and communication between the memory 11 and at least one processor 10, etc.

[0149] The communication interface 13 is used for communication between the above-mentioned electronic device and other devices, including a network interface and a user interface. Optionally, the network interface can include a wired interface and / or a wireless interface (such as a WI.FI interface, a Bluetooth interface, etc.), which is usually used to establish a communication connection between the electronic device and other electronic devices. The user interface can be a display (Display), an input unit (such as a keyboard (Keyboard)), and optionally, the user interface can also be a standard wired interface, a wireless interface. Optionally, in some embodiments, the display can be an LED display, a liquid crystal display, a touch liquid crystal display, and an OLED (Organic Light Emitting Diode) touch, etc. Among them, the display can also be appropriately called a display screen or a display unit, which is used to display information processed in the electronic device and to display a visualized user interface.

[0150] Only an electronic device with components is shown in the figure, and those skilled in the art can understand that the structure shown in the figure does not constitute a limitation on the electronic device, and can include fewer or more components than the figure, or combine certain components, or different component arrangements.

[0151] For example, although not shown, the electronic device can further include a power supply (such as a battery) for powering the various components, and preferably the power supply can be logically connected to the at least one processor 10 through a power management device, so that the power management device can implement functions such as charge management, discharge management, and power consumption management. The power supply can also include one or more DC or AC power sources, recharging devices, power failure detection circuits, power converters or inverters, power status indicators, and any other components. The electronic device can also include various sensors, Bluetooth modules, Wi.Fi modules, and the like, which will not be described here.

[0152] It should be understood that the embodiments are only for illustration and are not limited in the scope of the patent application by the structure.

[0153] The solid state disk-based data security storage program stored in the memory 11 of the electronic device is a combination of a plurality of instructions, which, when executed in the processor 10, can implement:

[0154] Obtaining a data storage request of a target user, and packing data to be stored as a storage data packet according to the data storage request;

[0155] Obtaining a first user attribute of the target user, and obtaining a second user attribute having an association relationship with the first user attribute;

[0156] Parameterizing a first encryption algorithm preset by using the first user attribute and the association relationship, and encrypting and storing the storage data packet to a preset solid state disk by using the parameterized first encryption algorithm;

[0157] Constructing a data mapping address of the storage data packet according to region information of the storage data packet in the solid state disk and the association relationship;

[0158] Parameterizing a second encryption algorithm preset by using the second user attribute and the association relationship, and encrypting and storing the mapping address to the solid state disk by using the parameterized second encryption algorithm.

[0159] Specifically, the specific implementation method of the processor 10 on the above instructions can refer to the description of the related steps in the corresponding embodiments of the accompanying drawings, which will not be described here.

[0160] Further, the modules / units integrated in the electronic device, if realized in the form of software function units and sold or used as independent products, can be stored in a computer readable storage medium. The computer readable storage medium can be volatile or non-volatile. For example, the computer readable medium can include any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM).

[0161] The application further provides a computer readable storage medium, which stores a computer program, and the computer program can realize the following when executed by a processor of an electronic device:

[0162] obtaining a data storage request of a target user, and packing data to be stored into a storage data packet according to the data storage request;

[0163] obtaining a first user attribute of the target user, and obtaining a second user attribute having an association relationship with the first user attribute;

[0164] performing parameter assignment on a preset first encryption algorithm by using the first user attribute and the association relationship, and performing encrypted storage of the storage data packet to a preset solid state disk by using the first encryption algorithm after the parameter assignment;

[0165] constructing a data mapping address of the storage data packet according to region information of the storage data packet in the solid state disk and the association relationship;

[0166] performing parameter assignment on a preset second encryption algorithm by using the second user attribute and the association relationship, and performing encrypted storage of the mapping address to the solid state disk by using the second encryption algorithm after the parameter assignment.

[0167] In several embodiments provided in the application, it should be understood that the disclosed devices, apparatuses and methods can be implemented in other manners. For example, the above described device embodiments are merely illustrative, and the division of the modules can be different from the above. For example, the division of the modules can be merely a logical function division, and there can be another division manner in actual implementation.

[0168] The modules illustrated as separate components can or can not be physically separate, and the components illustrated as modules can or can not be physical units, i.e., can be located in one place, or can be distributed on multiple network units. Part or all of the modules can be selected according to actual needs to achieve the purpose of the embodiments.

[0169] In addition, each functional module in each embodiment of the present application can be integrated in one processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The integrated unit can be realized in the form of hardware, or in the form of hardware plus software function module.

[0170] It is obvious for those skilled in the art that the present application is not limited to the details of the above exemplary embodiments, and the present application can be realized in other specific forms without departing from the spirit or essential characteristics of the present application.

[0171] Therefore, from any point of view, the embodiments should be regarded as exemplary and non-limiting, the scope of the present application is defined by the appended claims rather than the above description, and therefore all changes falling within the meaning and scope of the equivalent elements of the claims are intended to be included in the present application. Any additional reference signs in the claims should not be considered as limiting the claims involved.

[0172] The blockchain referred to in the present application is a new application mode of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm. Blockchain, in essence, is a decentralized database, which is a series of data blocks associated using cryptographic methods, each data block containing information of a batch of network transactions, for verifying the validity (anti-fake) of the information and generating the next block. The blockchain can include a blockchain underlying platform, a platform product service layer, and an application service layer, etc.

[0173] The embodiments of the present application can acquire and process related data based on artificial intelligence technology. Artificial intelligence (AI) is the use of digital computers or computer-controlled machines to simulate, extend, and expand human intelligence, perceive the environment, acquire knowledge, and use knowledge to obtain the best results.

[0174] In addition, it is obvious that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. The plurality of units or devices stated in the system claims can also be realized by one unit or device through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any particular order.

[0175] Finally, it should be pointed out that the above embodiments are only used to illustrate the technical solutions of the present application and are not limiting. Although the present application has been described in detail with reference to the preferred embodiments, it should be understood by those skilled in the art that the technical solutions of the present application can be modified or replaced equivalently without departing from the spirit and scope of the technical solutions of the present application.

Claims

1. A data security storage method based on a solid state disk, characterized by, The method comprises: acquiring a data storage request of a target user, and packing data to be stored into a storage data packet according to the data storage request; acquiring a first user attribute of the target user, and acquiring a second user attribute having an association relationship with the first user attribute; parameterizing a preset first encryption algorithm using the first user attribute and the association relationship, and storing the storage data packet in an encrypted manner into a preset solid state disk using the parameterized first encryption algorithm; constructing a data mapping address of the storage data packet according to region information of the storage data packet in the solid state disk and the association relationship; parameterizing a preset second encryption algorithm using the second user attribute and the association relationship, and storing the mapping address in an encrypted manner into the solid state disk using the parameterized second encryption algorithm. 2.The solid state drive based data security storage method of claim 1, wherein, The method comprises: extracting data to be stored according to the data storage request; acquiring a data packing request; packing the data to be stored according to the packing request using a preset packing strategy to obtain a packed data set; aggregating the packed data set into a storage data packet. 3.The solid state drive-based data security storage method of claim 1, wherein, The method comprises: encoding the first user attribute and the association relationship to obtain plaintext encoded data; acquiring a preset encryption key using a preset key management system; parameterizing the first encryption algorithm according to the plaintext encoded data and the encryption key. 4.The solid state drive-based data security storage method of claim 3, wherein, The method comprises: encrypting the storage data packet according to the parameterized first encryption algorithm and the encryption key using the following algorithm to obtain an encrypted data packet: C = M e mod n wherein C is the encrypted data packet, M is plaintext information in the storage data packet, e is the encryption key, mod is a remainder function, and n is a key length of the encryption key; acquiring a storage instruction of the encrypted data packet, and storing the encrypted data packet into the solid state disk according to the storage instruction. 5.The solid state drive-based data security storage method of claim 4, wherein, The method comprises: acquiring storage information of the solid state disk; calculating a storage load performance of the solid state disk using a preset load performance algorithm: determining a storage location of the encrypted data packet according to the storage load performance and the storage information; wherein e is the storage load performance, f i is the i-th data block of the storage data packet in the solid state disk, t is the number of times the solid state disk is accessed, max is the maximum function, o is a given value less than 1, r is the load time difference of the solid state disk, l i is the length of the i-th data block in the solid state disk, d i is the length of time of accessing the i-th data block in the solid state disk, d is the average value of the length of time of data block access in the solid state disk region; storing the encrypted data packet into the solid state disk according to the storage instruction and the storage location. The method comprises:

6. The solid state drive-based data security storage method of any one of claims 1 to 5, wherein, acquiring a logical address of the storage data packet according to the region information; writing data of the association relationship and the storage data packet into a preset target physical block according to the logical address using a preset address mapping algorithm; the preset address mapping algorithm is as follows: ​ S = T i mod g Wherein, S is the data mapping address, T i is the logical address of the i-th storage data packet, g is the number of blocks of the target physical block in the solid state disk, and mod is the modulo function. determine a mapping relationship between the logical address and a physical address of the storage data packet according to the target physical block; obtain a data mapping address of the storage data packet according to the mapping relationship. 7.The solid state drive-based data security storage method of claim 1, wherein, the second encryption algorithm after the parameter assignment encrypting the mapping address to the solid state disk, including: generating a random number by using a preset random number generator, and determining the random number as an address key of the mapping address; symmetrically encrypting the mapping address by using the second encryption algorithm and the address key, to obtain an encrypted mapping address: wherein w is the encrypted mapping address, p is any positive integer, mod is a remainder function, q is the address key, and k is the mapping address; obtaining a storage instruction of the encrypted mapping address, and storing the encrypted mapping address to the solid state disk according to the storage instruction.

8. A data security storage device based on a solid state drive, characterized by, The device comprises: a data packaging module configured to obtain a data storage request of a target user, and package data to be stored as a storage data packet according to the data storage request; a user attribute obtaining module configured to obtain a first user attribute of the target user, and obtain a second user attribute having an association relationship with the first user attribute; a data packet encryption storage module configured to assign parameters to a preset first encryption algorithm by using the first user attribute and the association relationship, and encrypt and store the storage data packet to a preset solid state disk by using the first encryption algorithm after the parameter assignment; a data mapping address construction module configured to construct a data mapping address of the storage data packet according to region information of the storage data packet in the solid state disk and the association relationship; a mapping address encryption storage module configured to assign parameters to a preset second encryption algorithm by using the second user attribute and the association relationship, and encrypt and store the mapping address to the solid state disk by using the second encryption algorithm after the parameter assignment.

9. An electronic device, comprising: The electronic device comprises: at least one processor; and a memory connected with the at least one processor in communication; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to execute the solid state disk-based data security storage method according to any one of claims 1 to 7.

10. A computer readable storage medium storing a computer program, characterized in that, The computer program is executed by the processor to implement the solid state disk-based data security storage method according to any one of claims 1 to 7.

Images