Data processing method, device, electronic device and storage medium

Abstract

The present invention provides a data processing method, device, electronic device and storage medium. The data processing method includes: generating security detection data of the target to be checked in the software; writing the security detection data into the installation package of the software; the security detection data is used to verify the security of the target to be checked when the software is used. In the embodiment of the present invention, from the perspective of the software itself, the security of the software itself is verified by performing security detection operations on the target to be checked in the software. Only when the security of the software itself is guaranteed can the security of the software's data processing be guaranteed, thereby achieving the purpose of ensuring the security of communication data.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a data processing method, device, electronic equipment and storage medium. Background Art

[0002] With the rapid development of network technology, communication services such as video conferencing and video teaching have become widely popular in users' lives, work, and study. Communication software is used extensively and the usage scenarios are becoming more and more complex.

[0003] Considering the security of communication services, it is extremely important for communication software to ensure the security of communication data. In the prior art, communication software usually uses data encryption to ensure the security of communication data. However, if there are malicious attacks or tampering with the communication software, the security of the communication software itself will be affected, and the security of the communication data cannot be guaranteed. Summary of the invention

[0004] In view of the above problems, embodiments of the present invention are proposed to provide a data processing method, device, electronic device and storage medium that overcome the above problems or at least partially solve the above problems.

[0005] In a first aspect, an embodiment of the present invention discloses a data processing method, the method comprising:

[0006] For the target to be checked in the software, generate security detection data of the target to be checked;

[0007] Writing the security detection data into the installation package of the software;

[0008] The security detection data is used to verify the security of the target to be checked when using the software.

[0009] Optionally, the target to be checked includes at least one of a key algorithm and a target component; generating security detection data of the target to be checked includes: when the target to be checked includes a key algorithm, executing the key algorithm on preset initial data to obtain a first result, and using the first result and the initial data as security detection data of the key algorithm; when the target to be checked includes a target component, executing the key algorithm in the software on the file of the target component to obtain a second result, and using the second result as the security detection data of the target component.

[0010] Optionally, executing the key algorithm on the preset initial data includes: executing the key algorithm on the preset initial data based on the key in the inserted cryptographic key; executing the key algorithm in the software on the files of the target component includes: executing the key algorithm in the software on the files of the target component based on the key in the inserted cryptographic key.

[0011] Optionally, generating security detection data of the target to be checked for the target in the software includes: obtaining a pre-generated wildcard installation package of the software, and generating security detection data of the target to be checked based on the wildcard installation package; writing the security detection data into the installation package of the software includes: packaging the wildcard installation package and the security detection data to obtain the installation package of the software.

[0012] In a second aspect, an embodiment of the present invention discloses a data processing method, the method comprising:

[0013] When using the software, for the target to be checked in the software, read the security detection data of the target to be checked from the installation package of the software;

[0014] Based on the security detection data, the security of the target to be checked is verified.

[0015] Optionally, the target to be checked includes at least one of a key algorithm and a target component; verifying the security of the target to be checked based on the security detection data includes: when the target to be checked includes a key algorithm, executing the key algorithm on the initial data or the first result in the security detection data to obtain a third result, and verifying the security of the key algorithm based on the third result; when the target to be checked includes a target component, executing the key algorithm in the software on the file of the target component to obtain a fourth result, and verifying the security of the target component based on the fourth result and the second result in the security detection data.

[0016] In a third aspect, an embodiment of the present invention discloses a data processing device, the device comprising:

[0017] A generating module, used for generating security detection data of a target to be checked in the software;

[0018] A writing module, used for writing the security detection data into the installation package of the software;

[0019] The security detection data is used to verify the security of the target to be checked when using the software.

[0020] Optionally, the target to be checked includes at least one of a key algorithm and a target component; the generation module includes: a first generation unit, used to execute the key algorithm on preset initial data to obtain a first result when the target to be checked includes the key algorithm, and use the first result and the initial data as security detection data of the key algorithm; a second generation unit, used to execute the key algorithm in the software on the file of the target component to obtain a second result when the target to be checked includes the target component, and use the second result as security detection data of the target component.

[0021] Optionally, the first generation unit is specifically used to execute the key algorithm on the preset initial data based on the key in the inserted cryptographic key; the second generation unit is specifically used to execute the key algorithm in the software on the file of the target component based on the key in the inserted cryptographic key.

[0022] Optionally, the generation module is specifically used to obtain a pre-generated wildcard installation package of the software, and generate security detection data of the target to be checked based on the wildcard installation package; the writing module is specifically used to package the wildcard installation package and the security detection data to obtain the installation package of the software.

[0023] In a fourth aspect, an embodiment of the present invention discloses a data processing device, the device comprising:

[0024] A reading module, used for reading the security detection data of the target to be checked from the installation package of the software when using the software;

[0025] A verification module is used to verify the security of the target to be checked based on the security detection data.

[0026] Optionally, the target to be checked includes at least one of a key algorithm and a target component; the verification module includes: a first verification unit, which is used to execute the key algorithm on the initial data or the first result in the security detection data to obtain a third result when the target to be checked includes the key algorithm, and verify the security of the target to be checked based on the third result; a second verification unit, which is used to execute the key algorithm in the software on the file of the target component to obtain a fourth result when the target to be checked includes the target component, and verify the security of the target to be checked based on the fourth result and the second result in the security detection data.

[0027] In a fifth aspect, an embodiment of the present invention discloses an electronic device, comprising: one or more processors; and one or more machine-readable media having instructions stored thereon; when the instructions are executed by the one or more processors, the processors execute the data processing method as described in any one of the above items.

[0028] In a sixth aspect, an embodiment of the present invention discloses a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the data processing method as described in any one of the above items.

[0029] In an embodiment of the present invention, for the software itself, security detection data of the target to be checked in the software is generated, and the security detection data is written into the installation package of the software. When the software is used after the installation package of the software is installed, the security detection data of the target to be checked in the software is read from the installation package of the software, and the security of the target to be checked is verified based on the security detection data. It can be seen that in an embodiment of the present invention, considering the software itself, the security of the software itself is verified by performing security detection operations on the target to be checked in the software. Only when the security of the software itself is guaranteed, the security of the data processing by the software can be guaranteed, thereby achieving the purpose of ensuring the security of communication data. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 This is a visual networking system architecture diagram of an embodiment of the present invention.

[0031] Figure 2 It is a schematic diagram of a visual networking protocol driver software according to an embodiment of the present invention.

[0032] Figure 3 It is a step flow chart of a data processing method according to an embodiment of the present invention.

[0033] Figure 4 It is a step flow chart of another data processing method according to an embodiment of the present invention.

[0034] Figure 5 It is a step flow chart of another data processing method according to an embodiment of the present invention.

[0035] Figure 6 It is a step flow chart of another data processing method according to an embodiment of the present invention.

[0036] Figure 7 It is an overall flow chart of a data processing method according to an embodiment of the present invention.

[0037] Figure 8 It is a structural block diagram of a data processing device according to an embodiment of the present invention.

[0038] Fig. 9 It is a structural block diagram of another data processing device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0039] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0040] In an embodiment of the present invention, when a user downloads a software installation package, security detection data of the target to be checked is generated for the target to be checked in the software, and the security detection data is written into the software installation package. When the user installs the software installation package and uses the software, the security detection data of the target to be checked is read from the software installation package, and the security of the target to be checked is verified based on the security detection data. Therefore, the security of the software itself is verified, and the security of the software's data processing is guaranteed on the premise that the security of the software itself is guaranteed.

[0041] The software in the embodiment of the present invention may be any software that needs to ensure the security of communication data. For example, the software may include but is not limited to: video conferencing software, video monitoring software, WeChat, QQ, etc.

[0042] Take the visual network as an example. In the visual network, the visual network protocol driver software (VVoE) is widely deployed. The visual network protocol driver software is a software product that transmits data through the visual network protocol (V2V). Through this product, the effect of replacing the IP (Internet Protocol) network can be achieved. Two visual network protocol drivers in the visual network can directly establish a visual network tunnel to achieve dedicated line-level business communication and realize the ability to carry IP data through the visual network.

[0043] Reference Figure 1 , shows a visual networking system architecture diagram of an embodiment of the present invention. Figure 1 As shown, in the visual network, the visual network protocol driver software is installed on a PC (Personal Computer), the PC is connected to the switch through the visual network link, the switch is connected to the visual network core switching server and the network management system through the visual network link, the visual network core switching server is connected to the network management system through the visual network link, and the network management system is connected to the visual network cryptographic service system through the IP network link. Among them, a PCIE (Peripheral Component Interconnect Express, a high-speed serial computer expansion bus standard) password card is set in the network management system, and the PC where the visual network protocol driver software is located inserts a password key (UK). The visual network protocol driver software can transmit IP data in the visual network, and the security of the transmitted data needs to be guaranteed. Under normal circumstances, the visual network protocol driver software uses the internal key algorithm to encrypt the IP data using the key in the password key inserted on the PC.

[0044] As the visual networking protocol driver software is deployed on a large scale, there will be more and more users in the future, and the usage scenarios will become more and more complex, so it is extremely important to ensure security. Although the security of communication data has been ensured by cryptographic key encryption, corresponding problems such as malicious attacks and tampering may still occur. Therefore, the data processing method of the embodiment of the present invention can be used for the visual networking protocol driver software to protect the integrity and credibility of the visual networking protocol driver software itself. Under the premise that the visual networking protocol driver software itself is complete and credible, the encryption results generated and calculated by it are guaranteed.

[0045] Reference Figure 2 , shows a schematic diagram of a visual networking protocol driver software according to an embodiment of the present invention. Figure 2 As shown, the visual network protocol driver software includes a user interface (UI), a service (Server), a cryptographic middleware, a control center (Control Center) and an agent (Fast Agent). Among them, the UI is mainly responsible for user interaction and the display of information and status; the Server is mainly responsible for initiating network access; the Control Center serves as the control center of the Fast Agent; the FastAgent serves as the core data processing module; the cryptographic middleware is mainly responsible for encapsulating the standard SKF (Smart Key Function) interface for algorithm checking, integrity checking, network authentication and encryption and decryption API (Application Program Interface) calls. Therefore, for the visual network protocol driver software, the data processing method of the embodiment of the present invention can be executed through the above-mentioned cryptographic middleware.

[0046] The data processing method of the present invention is described in detail below through the following embodiments.

[0047] Reference Figure 3 , showing a step flow chart of a data processing method according to an embodiment of the present invention. Figure 3 The data processing method shown corresponds to the process of generating a software installation package.

[0048] like Figure 3 As shown, the data processing method may include the following steps:

[0049] Step 301, generating security detection data of a target to be checked in the software.

[0050] According to the actual situation of the software, the targets in the software that need to ensure security and avoid being attacked or tampered with are set as targets to be checked.

[0051] Exemplarily, the target to be checked may include, but is not limited to, at least one of the following: a key algorithm, a target component.

[0052] The key algorithm is used to encrypt and decrypt communication data. Only when the security of the key algorithm is guaranteed can the security of the key algorithm for encrypting communication data be guaranteed. Therefore, taking the key algorithm as the target to be checked can ensure the security of the software itself. Exemplarily, the key algorithm may include but is not limited to at least one of the following: the national secret algorithm SM2 algorithm, the national secret algorithm SM3 algorithm, the national secret algorithm SM4 algorithm, and so on.

[0053] The target component is used to provide key-related services. Only when the target component is complete and reliable can the key-related services be complete and reliable. Therefore, using the target component as the target to be checked can ensure the security of the software itself. Exemplarily, the target component may include but is not limited to at least one of the following: a basic executable program, a library for designing a cryptographic module, a configuration file, and the like.

[0054] Before a user downloads the software, security detection data of the target to be checked can be generated for the target to be checked in the software.

[0055] In an optional implementation, for a key algorithm, the process of generating security detection data of the key algorithm may include: executing the key algorithm on preset initial data to obtain a first result, using the first result and the initial data as the security detection data of the key algorithm

[0056] For the key algorithm, set the initial data corresponding to the key algorithm. The initial data can be any applicable data, such as a character string. It is understandable that the initial data corresponding to different key algorithms can be the same or different. Execute the key algorithm on the initial data corresponding to the key algorithm to obtain a first result, and use the first result and the initial data as security detection data for the key algorithm, so that the first result and the initial data can be used to verify whether the key algorithm is secure when the software is used later. The above-mentioned method of setting the initial data and executing the key algorithm on the initial data does not require encryption and other measures to be performed on the key algorithm itself, and the processing process is simpler.

[0057] When the key algorithm is the SM2 algorithm, the SM2 algorithm can be used to sign the initial data corresponding to the SM2 algorithm to obtain the SM2 algorithm signature result (that is, the first result). The initial data corresponding to the SM2 algorithm and the SM2 algorithm signature result can be used as security detection data for the SM2 algorithm.

[0058] When the key algorithm is the SM3 algorithm, the SM3 algorithm can be used to summarize the initial data corresponding to the SM3 algorithm to obtain the SM3 algorithm summary result (that is, the first result), and the initial data corresponding to the SM3 algorithm and the SM3 algorithm summary result can be used as security detection data for the SM3 algorithm.

[0059] When the key algorithm is the SM4 algorithm, the SM4 algorithm can be used to encrypt the initial data corresponding to the SM4 algorithm to obtain the SM4 algorithm encryption result (that is, the first result), and the initial data corresponding to the SM4 algorithm and the SM4 algorithm encryption result can be used as security detection data of the SM4 algorithm.

[0060] In an optional implementation, the process of generating security detection data of a target component may include: executing a key algorithm in the software on a file of the target component to obtain a second result, and using the second result as the security detection data of the target component.

[0061] For the target component, obtain the file of the target component, execute the key algorithm in the software on the file of the target component to obtain the second result, and use the second result as the security detection data of the target component, so that the second result can be used to verify whether the target component is safe when the software is used later. It can be understood that one or more key algorithms can be executed on the target component. When multiple key algorithms are executed, multiple detections of the target component can be achieved, thereby improving the accuracy of the detection.

[0062] When the key algorithm is the SM2 algorithm, the SM2 algorithm can be used to sign the file of the target component to obtain a file signature result (ie, the second result), and the file signature result is used as security detection data for the target component.

[0063] When the key algorithm is SM3 algorithm, the SM3 algorithm can be used to perform SM3 algorithm digest on the target component's file to obtain the file summary result (ie, the second result), and the file summary result is used as the security detection data of the target component.

[0064] When the key algorithm is SM4 algorithm, the SM4 algorithm can be used to encrypt the file of the target component to obtain the file encryption result (ie, the second result), and the file encryption result is used as the security detection data of the target component.

[0065] Step 302: write the security detection data into the installation package of the software.

[0066] The security detection data of the target to be checked in the software is written into the installation package of the software, so that subsequent users can download the installation package carrying the security detection data of the target to be checked, and then when using the software, the security of the target to be checked can be verified based on the security detection data of the target to be checked. The specific verification process will be described in detail in the subsequent embodiments.

[0067] Reference Figure 4 , shows a step flow chart of another data processing method according to an embodiment of the present invention. Figure 4 The data processing method shown corresponds to a process using software.

[0068] like Figure 4 As shown, the data processing method may include the following steps:

[0069] Step 401, when using software, for a target to be checked in the software, read security detection data of the target to be checked from the installation package of the software.

[0070] After the user downloads the software installation package containing the security detection data of the target to be checked, the user installs the installation package on his own device and can use the software after installation.

[0071] Exemplarily, each time the software is started, the security detection data of the target to be checked in the software can be read from the installation package of the software.

[0072] Step 402: verify the security of the target to be checked based on the security detection data.

[0073] In an optional implementation, for a key algorithm, the security detection data of the key algorithm includes initial data and a first result obtained by executing the key algorithm on the initial data. Therefore, based on the security detection data of the key algorithm, a process of verifying whether the key algorithm is secure may include: executing the key algorithm on the initial data or the first result in the security detection data to obtain a third result, and verifying the security of the key algorithm based on the third result.

[0074] In the case where the key algorithm is the SM2 algorithm, the security detection data corresponding to the SM2 algorithm includes the initial data corresponding to the SM2 algorithm and the SM2 algorithm signature result. Therefore, during verification, the initial data in the security detection data is signed using the current SM2 algorithm in the software to obtain the SM2 algorithm verification signature result (i.e., the third result), and the SM2 algorithm verification signature result is compared with the SM2 algorithm signature result in the security detection data. If the two are the same, the signature verification of the SM2 algorithm with the random number as the initial data is repeated multiple times. A successful result indicates that the signature algorithm and verification algorithm of the SM2 algorithm are safe, that is, the SM2 algorithm is safe.

[0075] When the key algorithm is the SM3 algorithm, the security detection data corresponding to the SM3 algorithm includes the initial data corresponding to the SM3 algorithm and the summary result of the SM3 algorithm. Therefore, during verification, the initial data in the security detection data is summarized using the current SM3 algorithm in the software to obtain the SM3 algorithm verification summary result (i.e., the third result), and the SM3 algorithm verification summary result is compared with the SM3 algorithm summary result in the security detection data. If the two are the same, it means that the SM3 algorithm is secure.

[0076] In the case where the key algorithm is the SM4 algorithm, the security detection data corresponding to the SM4 algorithm includes the initial data corresponding to the SM4 algorithm and the encryption result of the SM4 algorithm. Therefore, during verification, the encryption result of the SM4 algorithm in the security detection data is decrypted using the current SM4 algorithm in the software to obtain the decryption result of the SM4 algorithm (i.e., the third result), and the decryption result of the SM4 algorithm is compared with the initial data corresponding to the SM4 algorithm. If the two are the same, the encryption and decryption of the SM4 algorithm with the random number as the initial data are repeated multiple times. If the result is successful, it means that the encryption algorithm and decryption algorithm of the SM4 algorithm are safe, that is, the SM4 algorithm is safe.

[0077] In an optional embodiment, for the target component, the security detection data of the target component includes a second result obtained by executing a key algorithm in the software on the file of the target component. Therefore, based on the security detection data of the target component, the process of verifying whether the target component is secure may include: executing the key algorithm in the software on the file of the target component to obtain a fourth result, and verifying the security of the target component based on the fourth result and the second result in the security detection data.

[0078] When the key algorithm is the SM2 algorithm, the security detection data of the target component includes the file signature result obtained by signing the file of the target component with the SM2 algorithm. Therefore, during verification, the file of the target component is signed with the SM2 algorithm to obtain the verification file signature result (that is, the fourth result). The verification file signature result is compared with the file signature result in the security detection data. If the two are the same, it indicates that the target component is safe.

[0079] When the key algorithm is the SM3 algorithm, the security detection data of the target component includes the file summary result obtained by performing the SM3 algorithm summary on the file of the target component. Therefore, during verification, the SM3 algorithm is used to perform the SM3 algorithm summary on the file of the target component to obtain the verification file summary result (that is, the fourth result), and the verification file summary result is compared with the file summary result in the security detection data. If the two are the same, it indicates that the target component is secure.

[0080] When the key algorithm is the SM4 algorithm, the security detection data of the target component includes the file encryption result obtained by encrypting the file of the target component with the SM4 algorithm. Therefore, during verification, the file of the target component is encrypted with the SM4 algorithm to obtain the verification file encryption result (that is, the fourth result). The verification file encryption result is compared with the file encryption result in the security detection data. If the two are the same, it indicates that the target component is safe.

[0081] In the embodiment of the present invention, from the perspective of the software itself, the security of the software itself is verified by performing security detection operations on the targets to be checked in the software. Only when the security of the software itself is guaranteed can the security of the software's data processing be guaranteed, thereby achieving the purpose of ensuring the security of communication data.

[0082] Reference Figure 5 , shows a step flow chart of another data processing method according to an embodiment of the present invention. Figure 5 The data processing method shown corresponds to the process of generating a software installation package.

[0083] like Figure 5 As shown, the data processing method may include the following steps:

[0084] Step 501, generate a universal installation package for the software.

[0085] The wildcard installation package of the software contains the program files in the software, but does not contain the security detection data of the target to be checked. The wildcard installation package of the software is saved in the automated production tool to facilitate subsequent users to download the software installation package. The security detection data of the target to be checked can be generated based on the wildcard installation package and written into the security detection data, thereby preventing the repeated generation of program files and simplifying the processing process.

[0086] Step 502, check whether there is a password key. If yes, go to step 503; if no, end.

[0087] In an embodiment of the present invention, a unique UK (cryptographic key) is set for each user's device. When the user downloads the software installation package, the user needs to insert his or her own UK. Based on the key in the UK, security detection data is generated, thereby achieving one machine, one address, one machine, one UK, and one machine, one installation package, further ensuring the security of the software.

[0088] Step 503: Generate security detection data for the key algorithm and write it into a security detection file.

[0089] On the premise of inserting UK, based on the key in the inserted UK, the key algorithm in the software is executed on the preset initial data to generate security detection data of the key algorithm. The specific process can refer to the relevant description of step 301 in the above embodiment.

[0090] Step 504, generate security detection data of the target component and write it into a security detection file.

[0091] On the premise of inserting UK, based on the key in the inserted UK, the key algorithm in the software is executed on the file of the target component in the software to generate the security detection data of the target component. The specific process can refer to the relevant description of step 301 in the above embodiment.

[0092] Step 505: Pack the wildcard installation package and the security detection file to obtain the software installation package.

[0093] In the embodiment of the present invention, by generating security detection data for two targets to be checked, namely, the key algorithm and the target component, security detection of the two targets to be checked, namely, the key algorithm and the target component, can be implemented, thereby more accurately detecting the security of the software.

[0094] Reference Figure 6 , shows a step flow chart of another data processing method according to an embodiment of the present invention. Figure 6 The data processing method shown corresponds to a process using software.

[0095] like Figure 6 As shown, the data processing method may include the following steps:

[0096] Step 601, check whether there is a password key. If yes, execute step 602; if no, end and exit the software service.

[0097] When using the software, make sure UK is always plugged in. If UK is unplugged or not plugged in, the service will stop.

[0098] Step 602, read the security detection data of the key algorithm to verify whether the key algorithm is secure. If yes, execute step 603; if not, end and exit the software service.

[0099] The specific process may refer to the relevant description of step 402 in the above embodiment, and this embodiment will not be discussed in detail here.

[0100] Step 603, read the security detection data of the target component to verify whether the target component is safe. If yes, execute step 604; if no, end and exit the software service.

[0101] The specific process may refer to the relevant description of step 402 in the above embodiment, and this embodiment will not be discussed in detail here.

[0102] Step 604, check whether the configuration file in the software has been modified. If yes, execute step 605; if no, continue to execute step 604.

[0103] Step 605: Update the security detection data of the configuration file.

[0104] In the case where the target to be checked includes a configuration file, since the user may modify the configuration file in the software during the operation of the software, it is possible to detect whether the configuration file in the software has been modified. After detecting that the configuration file has been modified, the security detection data of the configuration file is updated so that the next time the software is started, the configuration file can be security checked based on the updated security detection data to avoid errors in the verification.

[0105] For the process of updating the security detection data of the configuration file, reference may be made to the above description of the process of generating the security detection data of the target component, which will not be discussed in detail in the embodiment of the present invention.

[0106] Reference Figure 7 , shows an overall flow chart of a data processing method according to an embodiment of the present invention.

[0107] like Figure 7 As shown, the data processing method may include the following steps: (1) the automated production tool generates key algorithm security detection data and target component security detection data, and writes them into a security detection file; (2) the software service reads the key algorithm security detection data and target component security detection data from the security detection file, and performs security verification on the key algorithm and the target component; (3) after the software service detects that the configuration file has been modified, it updates the security detection data of the configuration file and writes it into the security detection file. The specific process can be referred to the relevant description of the above embodiment.

[0108] The embodiments of the present invention can make software products more secure and reliable, prevent malicious attacks, and protect the integrity and credibility of key algorithms and target components during software runtime.

[0109] Reference Figure 8 , shows a structural block diagram of a data processing device according to an embodiment of the present invention.

[0110] like Figure 8 As shown, the data processing device may include the following modules:

[0111] A generating module 801 is used to generate security detection data of a target to be checked in the software;

[0112] A writing module 802, used to write the security detection data into the installation package of the software;

[0113] The security detection data is used to verify the security of the target to be checked when using the software.

[0114] Optionally, the target to be checked includes at least one of a key algorithm and a target component; the generation module 801 includes: a first generation unit, used to execute the key algorithm on preset initial data to obtain a first result when the target to be checked includes a key algorithm, and use the first result and the initial data as security detection data of the key algorithm; a second generation unit, used to execute the key algorithm in the software on the file of the target component to obtain a second result when the target to be checked includes a target component, and use the second result as security detection data of the target component.

[0115] Optionally, the first generation unit is specifically used to execute the key algorithm on the preset initial data based on the key in the inserted cryptographic key; the second generation unit is specifically used to execute the key algorithm in the software on the file of the target component based on the key in the inserted cryptographic key.

[0116] Optionally, the generation module 801 is specifically used to obtain a pre-generated wildcard installation package of the software, and generate security detection data of the target to be checked based on the wildcard installation package; the writing module 802 is specifically used to package the wildcard installation package and the security detection data to obtain the installation package of the software.

[0117] Reference Fig. 9 , shows a structural block diagram of another data processing device according to an embodiment of the present invention.

[0118] like Fig. 9 As shown, the data processing device may include the following modules:

[0119] The reading module 901 is used to read the security detection data of the target to be checked from the installation package of the software when using the software;

[0120] The verification module 902 is used to verify the security of the target to be checked based on the security detection data.

[0121] Optionally, the target to be checked includes at least one of a key algorithm and a target component; the verification module 902 includes: a first verification unit, which is used to execute the key algorithm on the initial data or the first result in the security detection data to obtain a third result when the target to be checked includes the key algorithm, and verify the security of the target to be checked based on the third result; a second verification unit, which is used to execute the key algorithm in the software on the file of the target component to obtain a fourth result when the target to be checked includes the target component, and verify the security of the target to be checked based on the fourth result and the second result in the security detection data.

[0122] In the embodiment of the present invention, from the perspective of the software itself, the security of the software itself is verified by performing security detection operations on the targets to be checked in the software. Only when the security of the software itself is guaranteed can the security of the software's data processing be guaranteed, thereby achieving the purpose of ensuring the security of communication data.

[0123] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0124] In an embodiment of the present invention, an electronic device is also provided. The electronic device may include one or more processors, and one or more machine-readable media storing instructions thereon, the instructions being, for example, application programs. When the instructions are executed by the one or more processors, the processors execute the above-mentioned data processing method.

[0125] In an embodiment of the present invention, a non-transitory computer-readable storage medium is also provided, on which a computer program is stored, and the program can be executed by a processor of an electronic device to complete the above-mentioned data processing method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0126] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0127] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0128] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0129] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0130] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0131] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0132] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0133] The data processing method, device, electronic device and storage medium provided by the present invention are introduced in detail above. The principle and implementation mode of the present invention are explained in detail using specific examples. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation mode and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A data processing method, characterized in that: The method comprises: For a target to be checked in the software, generate security detection data of the target to be checked, wherein the target to be checked includes at least one of the following: a key algorithm, a target component; Writing the security detection data into the installation package of the software; Wherein, the security detection data is used to verify the security of the target to be checked when using the software; The step of generating security detection data of a target to be checked in the software includes: obtaining a pre-generated wildcard installation package of the software, and generating security detection data of the target to be checked based on the wildcard installation package, wherein the wildcard installation package includes program files in the software; Writing the security detection data into the installation package of the software comprises: packaging the wildcard installation package and the security detection data to obtain the installation package of the software; Generate security detection data of the target to be checked, including: In the case where the target to be checked includes a key algorithm, the key algorithm is executed on preset initial data to obtain a first result, and the first result and the initial data are used as security detection data for the key algorithm.

2. The method according to claim 1, characterized in that Generating the security detection data of the target to be checked also includes: In the case that the target to be checked includes a target component, the key algorithm in the software is executed on the file of the target component to obtain a second result, and the second result is used as security detection data of the target component.

3. The method according to claim 2, characterized in that The executing the key algorithm on the preset initial data comprises: executing the key algorithm on the preset initial data based on the key in the inserted cryptographic key; The executing the key algorithm in the software on the file of the target component includes: executing the key algorithm in the software on the file of the target component based on the key in the inserted cryptographic key.

4. A data processing method, characterized in that: The method comprises: When using software, for a target to be checked in the software, security detection data of the target to be checked is read from the installation package of the software, wherein the target to be checked includes at least one of the following: a key algorithm and a target component; the security detection data of the target to be checked is generated by: obtaining a pre-generated wildcard installation package of the software, and generating security detection data of the target to be checked based on the wildcard installation package; based on the security detection data, verifying the security of the target to be checked, wherein the wildcard installation package contains program files in the software; The verifying the security of the target to be checked based on the security detection data includes: In the case where the target to be checked includes a key algorithm, the key algorithm is executed on the initial data or the first result in the security detection data to obtain a third result, and the security of the key algorithm is verified based on the third result.

5. The method according to claim 4, characterized in that The step of verifying the security of the target to be checked based on the security detection data further includes: In the case where the target to be checked includes a target component, the key algorithm in the software is executed on the file of the target component to obtain a fourth result, and the security of the target component is verified based on the fourth result and the second result in the security detection data.

6. A data processing device, characterized in that: The device comprises: A generating module, for generating security detection data of a target to be checked in the software, wherein the target to be checked includes at least one of the following: a key algorithm and a target component; A writing module, used for writing the security detection data into the installation package of the software; Wherein, the security detection data is used to verify the security of the target to be checked when using the software; The generating module is specifically used to obtain a pre-generated wildcard installation package of the software, and generate the security detection data of the target to be checked based on the wildcard installation package; the writing module is specifically used to package the wildcard installation package and the security detection data to obtain the installation package of the software, wherein the wildcard installation package includes the program files in the software; The generation module includes: a first generation unit, which is used to execute the key algorithm on preset initial data to obtain a first result when the target to be checked includes the key algorithm, and use the first result and the initial data as security detection data of the key algorithm.

7. A data processing device, characterized in that: The device comprises: A reading module, used for reading security detection data of a target to be checked in the software from an installation package of the software when using the software, wherein the target to be checked includes at least one of the following: a key algorithm and a target component; the security detection data of the target to be checked is generated by: obtaining a pre-generated wildcard installation package of the software, and generating the security detection data of the target to be checked based on the wildcard installation package, wherein the wildcard installation package includes program files in the software; A verification module, used to verify the security of the target to be checked based on the security detection data; The verification module includes: a first verification unit, which is used to execute the key algorithm on the initial data or the first result in the security detection data to obtain a third result when the target to be checked includes a key algorithm, and verify the security of the target to be checked based on the third result.

8. An electronic device, characterized in that: include: one or more processors; and one or more machine-readable media having instructions stored thereon; When the instructions are executed by the one or more processors, the processors execute the data processing method according to any one of claims 1 to 3, or the data processing method according to any one of claims 4 to 5.

9. A computer-readable storage medium, characterized in that: A computer program is stored thereon, and when the program is executed by a processor, the data processing method according to any one of claims 1 to 3 is implemented, or the data processing method according to any one of claims 4 to 5 is implemented.

Images