A data decryption method, device, equipment and medium

Abstract

The application relates to the technical field of information encryption and decryption, and discloses a data decryption method, device, equipment and medium, which comprises the following steps: a service layer acquires data returned from a back-end interface; if the data is encrypted data carrying path information, the encrypted data is decrypted based on the path information, and the decrypted data is sent to the service layer through an interface of the service layer; if the data is unencrypted data, the returned data is sent to the service layer through the interface of the service layer, so that the service layer is free of decryption logic compilation, the workload of a developer is reduced, and the applicability of the method is improved. In addition, in specific application, the scheme only needs to be accessed in a request layer, the workload of staff is reduced, the code is uniformly managed, the path information carried by the encrypted data only needs to be updated by the back end when the encrypted data is changed, and therefore the generality of the method is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information encryption and decryption, and in particular to a data decryption method and device, equipment and medium. BACKGROUND

[0002] Due to security requirements, when the front end and the back end communicate through an interface, some key data (such as an ID number and a mobile phone number) is often encrypted and transmitted. However, when the front end page is displayed, the user needs to view the plaintext data, and therefore the front end needs to decrypt the encrypted field.

[0003] The usual method is to decrypt the data on the page where the plaintext is displayed. However, this method has poor applicability. Whenever a field encrypted by the interface is added or removed, the corresponding business logic part needs to be processed, which makes the workload of the developer tedious and repetitive. SUMMARY

[0004] The present application provides a data decryption method, device, equipment and medium to solve the technical problem that the existing decryption method has poor applicability. Whenever a field encrypted by the interface is added or removed, the corresponding business logic part needs to be processed, which makes the workload of the developer tedious and repetitive.

[0005] In a first aspect, a data decryption method is provided, which is applied to a service layer and includes the following steps.

[0006] Obtaining data returned from a back-end interface;

[0007] If the data is encrypted data carrying path information, decrypting the encrypted data based on the path information, and sending the decrypted data to a business layer through an interface of the business layer;

[0008] If the data is unencrypted data, sending the returned data to the business layer through an interface of the business layer.

[0009] In a second aspect, a data decryption device is provided, which includes the following modules.

[0010] An obtaining module is configured to obtain data returned from a back-end interface;

[0011] A judging module is configured to, if the data is encrypted data carrying path information, decrypt the encrypted data based on the path information, and send the decrypted data to a business layer through an interface of the business layer;

[0012] If the data is unencrypted data, send the returned data to the business layer through an interface of the business layer.

[0013] In a third aspect, a computer device is provided, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the steps of the data decryption method when executing the computer program.

[0014] In a fourth aspect, a computer readable storage medium is provided, which stores a computer program, and the computer program implements the steps of the data decryption method when executed by a processor.

[0015] In the scheme implemented by the data decryption method, the device, the equipment and the medium, the service layer obtains the data returned from the backend interface; if the data is encrypted data carrying path information, the encrypted data is decrypted based on the path information, and the decrypted data is sent to the service layer through the interface of the service layer; if the data is unencrypted data, the returned data is sent to the service layer through the interface of the service layer. In this way, the data received by the service layer is all decrypted data, so that the service layer does not need to perform any decryption processing on the data, thereby saving the service layer from compiling decryption logic, reducing the workload of the developer, and improving the applicability of the method. In addition, in specific application, only the request layer needs to access the scheme, without the developer setting other configurations, thereby reducing the workload of the staff and facilitating the unified management of the code. Moreover, when the encrypted data is changed, only the path information carried by the encrypted data needs to be updated by the backend, thereby improving the universality of the method. BRIEF DESCRIPTION OF DRAWINGS

[0016] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the description of the embodiments of the present application. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0017] Figure 1 is a flowchart of a data decryption method in an embodiment of the present application;

[0018] Figure 2 is Figure 1 is a flowchart of a specific implementation of step S102 in the method;

[0019] Figure 3 is Figure 2 is a flowchart of a specific implementation of step S201 in the method;

[0020] Figure 4 is Figure 2 is a flowchart of a specific implementation of step S202 in the method, in which the target sub-path information is filtered from the sub-path information;

[0021] Figure 5 is Figure 2 a specific embodiment flow chart of step S203 in the method;

[0022] Figure 6 is Figure 2 a specific embodiment flow chart of step S204 in the method;

[0023] Figure 7 is Figure 2 a specific embodiment flow chart of step S101 in the method;

[0024] Figure 8 is a structural schematic diagram of a decryption device of data in an embodiment of the present application;

[0025] Figure 9 is a structural schematic diagram of a computer device in an embodiment of the present application. DETAILED DESCRIPTION

[0026] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of the present application.

[0027] The embodiments of the present application provide a decryption method of data, which can be applied to a service layer of a server. The service layer can acquire data returned from a backend interface. If the data is encrypted data carrying path information, the encrypted data is decrypted based on the path information, and the decrypted data is sent to a business layer through an interface of the business layer. If the data is unencrypted data, the returned data is sent to the business layer through the interface of the business layer. In this way, the data received by the business layer is all decrypted data, so that the business layer does not need to perform any decryption processing on the data, and thus the business layer saves the compilation of decryption logic, reduces the workload of developers, and improves the applicability of the method. In addition, in specific application, only the request layer needs to access the scheme, and developers do not need to set other configurations, which reduces the workload of staff and is also conducive to the unified management of codes. Moreover, when the encrypted data is changed, only the path information carried by the encrypted data needs to be updated by the backend, thereby improving the universality of the method. The server can be implemented by an independent server or a server cluster composed of multiple servers. The present application will be described in detail through specific embodiments.

[0028] Please refer to Figure 1 , and Figure 1A flowchart of a decryption method of data provided by an embodiment of the present application is shown in the figure, the method is applied to a service layer, and specifically includes the following steps:

[0029] Step S101: Obtain data returned from a backend interface.

[0030] When the business layer needs to load data, the business layer sends a request to the service layer, the service layer receives the request sent by the business layer, establishes a communication connection with the background, and then receives data returned by the backend interface, so as to obtain the data returned from the backend interface. Thus, the entire decryption process is executed in the service layer, so that the business layer does not need to perform any decryption processing on the data, thereby saving the business layer from compiling decryption logic, reducing the workload of the developer, and improving the applicability of the method.

[0031] Among them, the data returned from the backend includes unencrypted data and encrypted data, and further, the encrypted data all carries corresponding path information. When the encrypted data is changed (new addition or removal of encrypted data), only the path information carried by the encrypted data needs to be updated by the backend, thereby improving the versatility of the method.

[0032] It can be understood that the encrypted data is usually key data, such as personal information (mobile phone number, ID number, etc.).

[0033] Step S102: If the data is encrypted data carrying path information, decrypt the encrypted data based on the path information, and send the decrypted data to the business layer through the interface of the business layer.

[0034] The service layer decrypts the encrypted data in the data, so that the data received by the business layer is all decrypted data, thereby eliminating the need for the business layer to perform any decryption processing on the data, thereby saving the business layer from compiling decryption logic, reducing the workload of the developer, and improving the applicability of the method.

[0035] Among them, the path information is set as the mbizgwAesKeys field.

[0036] Step S103: If the data is unencrypted data, return the data to the business layer through the interface of the business layer.

[0037] The unencrypted data does not need to be processed and can be directly sent to the business layer.

[0038] In the scheme of the decryption method of the data, the service layer obtains the data returned from the backend interface; if the data is encrypted data carrying path information, the encrypted data is decrypted based on the path information, and the decrypted data is sent to the service layer through the interface of the service layer; if the data is unencrypted data, the returned data is sent to the service layer through the interface of the service layer. In this way, the data received by the service layer is all decrypted data, so that the service layer does not need to perform any decryption processing on the data, thereby saving the service layer from compiling decryption logic, reducing the workload of the developer, and improving the applicability of the method. In addition, in specific application, only the request layer needs to access the scheme, without the developer setting other configurations, thereby reducing the workload of the staff and facilitating the unified management of the code. Moreover, when the encrypted data is changed, only the path information carried by the encrypted data needs to be updated by the backend, thereby improving the universality of the method.

[0039] Specifically, in the above embodiment, as shown in Figure 2 the step S102 of decrypting the encrypted data based on the path information includes:

[0040] Step S201: Split the path information based on the encrypted data to obtain a plurality of sub-path information.

[0041] Step S202: Filter the target sub-path information from the sub-path information, and combine the target sub-path information into a target sub-path information set.

[0042] Among them, the target sub-path information is information that can determine the position of the encrypted field in the encrypted data, that is, the encrypted field can be found through the target sub-path information, and the sub-path information corresponding to other parts of the encrypted data can be ignored.

[0043] Step S203: Find the encrypted field of the encrypted data by using the target sub-path information set.

[0044] In this step, the corresponding encrypted field is found through each target sub-path information in the target sub-path information set, so that the encrypted field can be quickly and accurately found.

[0045] Step S204: Decrypt the encrypted field to obtain decrypted data.

[0046] In this embodiment, the target sub-path information that can determine the position of the encrypted field in the encrypted data is obtained through the screening of the sub-path information, so that the encrypted field can be found through the target sub-path information, thereby ensuring that the encrypted field can be quickly and accurately found.

[0047] In the above embodiment, as shown in Figure 3 the step S201 specifically includes:

[0048] Step S301: traverse the path information.

[0049] The path information can be expressed in the following three ways or a combination of the three ways:

[0050] 1. data.aa[].dd indicates that the aa attribute under the data object is an array, each item of the aa array is an object, and the dd attribute of the object is encrypted.

[0051] 2. data.bb[] indicates that the bb attribute under the data object is an array, each item of the aa array is a basic data structure such as a string or a number, and is encrypted.

[0052] 3. data.cc indicates that the cc attribute under the data object is a basic data structure such as a string or a number, and is encrypted.

[0053] Through the combination of the above three basic modes, for example, data.aa.bb[].cc.dd[], all possible interface data structures can be satisfied.

[0054] Step S302: If the path identifier is found in the path information, determine the type of the target encrypted data corresponding to the path information to which the path identifier belongs.

[0055] For example, with the path information aa.bb[].cc.dd[] and the path identifier [], in the process of traversing the path information, the first path identifier [] is found. As known from step S301, the target encrypted data type corresponding to aa.bb[] is an array.

[0056] Step S303: If the target encrypted data type is an array, split the path information to which the path identifier belongs based on the data structure of the target encrypted data to obtain multiple sub-path information.

[0057] Traverse the target encrypted data to determine each data in the target encrypted data, thereby determining the structure of the confidential data, and split the path information to which the path identifier belongs based on the data structure of the target encrypted data to obtain multiple sub-path information.

[0058] For example, if the target encrypted data corresponding to aa.bb[] contains 3 data, aa.bb[] is split into aa.bb.1, aa.bb.2, and aa.bb.3 corresponding to the three data.

[0059] Step S304: Determine whether the path identifier is located at the end of the path information. If not, execute step S305.

[0060] Step S305: Remove the path identifier and repeat steps S301-S304 until the path identifier is at the end of the path information.

[0061] For example, continuing with the path information aa.bb[].cc.dd[], the first path identifier [] is not located at the end of the entire path information, so the first path identifier [] is removed, and then the path information is traversed again to find the second path identifier []. As can be seen from step S301, the target encrypted data type corresponding to dd[] is an array, and then dd[] is split according to the data structure of the target encrypted data to obtain sub-path information such as dd.1, dd.2, etc. The second path identifier [] is located at the end of the entire path information, so the loop process stops.

[0062] In this embodiment, by splitting the path information, the path information of each data in the array-type encrypted data, that is, the sub-path information, can be obtained, which makes it easier to determine the position of the encrypted field in the encrypted data in the future.

[0063] Furthermore, such as Figure 4 As shown, the process of filtering the target sub-path information from the sub-path information in step S202 above specifically includes:

[0064] Step S401: Determine whether the encrypted field in the encrypted data is found through each sub-path information. If so, proceed to step S402.

[0065] Step S402: Determine the sub-path information as the target sub-path information.

[0066] For example, suppose the target encrypted data corresponding to aa.bb[] contains 3 data, namely [aa1, aa2, aa3]. Then, corresponding to these three data, aa.bb[] can be split into aa.bb.1, aa.bb.2, and aa.bb.3. If the encrypted field is only aa2, then aa.bb.2 is the target sub-path information, while aa.bb.1 and aa.bb.3 are not the target sub-path information.

[0067] In this embodiment, target sub-path information is obtained by filtering sub-path information, thereby enabling more accurate retrieval of confidential fields through each target sub-path information, thus improving search efficiency and accuracy.

[0068] Furthermore, in the above embodiments, such as Figure 5 As shown, step S203 specifically includes:

[0069] Step S501: Traverse the target sub-path information set.

[0070] Step S502: find the corresponding encrypted field through each target sub-path information.

[0071] In the embodiment, all encrypted fields in the encrypted data are found through each target sub-path information in the target sub-path information set, so that the comprehensiveness of decryption of the encrypted data in the subsequent steps is ensured, thereby avoiding the situation that some encrypted fields are left and cause decryption failure.

[0072] Further, in the above embodiment, as shown in Figure 6 Step S204 specifically includes:

[0073] Step S601: decrypt the encrypted field to obtain a decrypted field.

[0074] The specific decryption method can adopt the decryption method in the prior art, and the decryption process is not strictly limited in the embodiment.

[0075] Step S602: replace the encrypted field with the decrypted field to obtain decrypted data.

[0076] Only the encrypted field is decrypted, and other parts of the encrypted data are not processed, which can improve the operation amount and efficiency of decryption.

[0077] Further, in the above embodiment, as shown in Figure 7 Step S101 specifically includes:

[0078] Step S701: receive the request sent by the service layer.

[0079] Step S702: in response to the request, establish a communication connection with the backend.

[0080] Step S703: receive the data returned from the backend interface.

[0081] Specifically, when the service layer needs to load data, the service layer sends a request to the service layer, the service layer receives the request sent by the service layer, establishes a communication connection with the background, and then receives the data returned by the backend interface, so as to obtain the data returned by the backend interface. The entire decryption process is executed in the service layer, so that the service layer does not need to perform any decryption processing on the data, thereby saving the compilation of decryption logic of the service layer, reducing the workload of the developer, and improving the applicability of the method.

[0082] It should be understood that the size of the serial number of each step in the above embodiment does not mean the order of execution, and the execution order of each process should be determined according to its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

[0083] In an embodiment, a data decryption device is provided, which corresponds to the data decryption method based on artificial intelligence in the above embodiment. As shown in the figure, the intelligent question and answer processing device includes an acquisition module 801 and a judgment module 802. The functions of each module are described in detail as follows: Figure 8

[0084] The acquisition module 801 is configured to acquire data returned from a backend interface.

[0085] The judgment module 802 is configured to, if the data is encrypted data carrying path information, decrypt the encrypted data based on the path information, and send the decrypted data to a business layer through an interface of the business layer.

[0086] If the data is unencrypted data, the returned data is sent to the business layer through the interface of the business layer.

[0087] In an embodiment, the judgment module 802 is specifically configured to:

[0088] Split the path information based on the encrypted data to obtain a plurality of sub-path information;

[0089] Filter target sub-path information from the sub-path information, and combine the target sub-path information into a target sub-path information set;

[0090] Find the encrypted field of the encrypted data by using the target sub-path information set;

[0091] Decrypt the encrypted field to obtain decrypted data.

[0092] In an embodiment, the judgment module 802 is specifically configured to:

[0093] Iterate the path information;

[0094] If the path identifier is found in the path information, determine the type of the target encrypted data corresponding to the path information to which the path identifier belongs, and if the type of the target encrypted data is an array, split the path information to which the path identifier belongs based on the data structure of the target encrypted data to obtain a plurality of sub-path information;

[0095] Determine whether the path identifier is located at the end of the path information, and if not, remove the path identifier and repeat the above steps until the path identifier is located at the end of the path information.

[0096] In an embodiment, the judgment module 802 is specifically configured to:

[0097] Determine whether the encrypted field in the encrypted data is found through each sub-path information, and if so, determine the sub-path information as the target sub-path information. ​

[0098] In an embodiment, the judging module 802 is specifically configured to:

[0099] traverse the target sub-path information set;

[0100] find the corresponding encrypted field through each target sub-path information.

[0101] In an embodiment, the judging module 802 is specifically configured to:

[0102] decrypt the encrypted field to obtain a decrypted field;

[0103] replace the encrypted field with the decrypted field to obtain decrypted data.

[0104] In an embodiment, the obtaining module 801 is specifically configured to:

[0105] receive a request sent by a service layer;

[0106] establish a communication connection with a backend in response to the request;

[0107] receive data returned from a backend interface.

[0108] The application provides a data decryption device, the service layer obtains data returned from a backend interface; if the data is encrypted data carrying path information, the encrypted data is decrypted based on the path information, and the decrypted data is sent to the service layer through an interface of the service layer; if the data is unencrypted data, the returned data is sent to the service layer through an interface of the service layer, so that the data received by the service layer is all decrypted data, so that the service layer does not need to perform any decryption processing on the data, so that the service layer saves the compilation of decryption logic, reduces the workload of the developer, and improves the applicability of the method. In addition, in specific application, only the request layer needs to access the scheme, without the need for the developer to set other configurations, reducing the workload of the staff, and being conducive to the unified management of the code. Moreover, when the encrypted data is changed, only the path information carried by the encrypted data needs to be updated by the backend, thereby improving the universality of the method.

[0109] The specific limitations of the data decryption device can be referred to the limitations of the data decryption method in the above, which will not be repeated here. The various modules in the above intelligent question and answer processing device can be realized by software, hardware and combinations thereof in whole or in part. The above various modules can be embedded in or independent of the processor in the computer device in hardware form, or can be stored in the memory in the computer device in software form, so as to be called and executed by the processor to perform the operations corresponding to the above various modules.

[0110] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 7 As shown, the computer device includes a processor, memory, network interface, and database connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile and / or volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and database. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The network interface is used to communicate with external clients via a network connection. When executed by the processor, the computer program implements a data decryption method, server-side functions, or steps.

[0111] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to perform the following steps:

[0112] Receive user questions, and perform question recall processing from a preset standard question library based on the user questions to obtain multiple candidate questions;

[0113] Based on the semantic matching degree between the user question and the candidate questions, the candidate questions are sorted to obtain a first sorting result for the candidate questions;

[0114] Determine the entity alignment between the user question and each of the candidate questions;

[0115] According to the entity alignment, the first sorting result is adjusted to obtain the second sorting result of the candidate questions. In the second sorting result, the candidate questions with misaligned entities are ranked after the candidate questions with aligned entities, and the candidate questions with aligned entities remain unchanged according to the sorting result of the first sorting result.

[0116] In the sequence of the second sorting results, a preset number of candidate questions are extracted from the first position as matching questions;

[0117] The matching answer corresponding to the matching question is selected to respond to the user's question.

[0118] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, the computer program performing the following steps when executed by a processor:

[0119] Retrieve data returned from the backend interface;

[0120] If the data is encrypted data carrying path information, the encrypted data is decrypted based on the path information, and the decrypted data is sent to the service layer through the interface of the service layer;

[0121] If the data is unencrypted data, the returned data is sent to the service layer through the interface of the service layer.

[0122] It should be noted that the functions or steps that the computer readable storage medium or the computer device can achieve correspond to the foregoing method embodiments, and the related descriptions of the server side are not repeated here.

[0123] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by a computer program instructing related hardware, and the computer program can be stored in a non-volatile computer readable storage medium. When the computer program is executed, it can include the processes of the above-mentioned embodiments. Any reference to memory, storage, database or other medium used in the embodiments provided by the present application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration but not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0124] Those skilled in the art can clearly understand that, for the convenience and brevity of description, only the division of the above-mentioned functional units and modules is exemplified, and in actual application, the above-mentioned functions can be completed by different functional units and modules according to needs, that is, the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above.

[0125] The above-described embodiments are only used to illustrate the technical solutions of the present application, and are not intended to limit the present application; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for part of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application.

Claims

1. A data decryption method, applied to the service layer, characterized in that, include: Retrieve data returned from the backend interface; If the returned data is encrypted data carrying path information, then the encrypted data is decrypted based on the path information, and the decrypted data is sent to the business layer through the business layer interface; If the returned data is unencrypted, then the returned data will be sent to the business layer through the business layer's interface; The step of decrypting the encrypted data based on the path information includes: splitting the path information based on the encrypted data to obtain multiple sub-path information; filtering out target sub-path information from the sub-path information and combining the target sub-path information into a target sub-path information set; using the target sub-path information set to find the encrypted field of the encrypted data; and decrypting the encrypted field to obtain decrypted data. The step of splitting the path information based on the encrypted data to obtain multiple sub-path information includes: traversing the path information; if a path identifier is found in the path information, determining the type of target encrypted data corresponding to the path information to which the path identifier belongs; if the type of target encrypted data is an array, splitting the path information to which the path identifier belongs based on the data structure of the target encrypted data to obtain multiple sub-path information; determining whether the path identifier is located at the end of the path information; if not, removing the path identifier and repeating the step of traversing the path information until determining whether the path identifier is located at the end of the path information, until the path identifier is located at the end of the path information; The step of filtering out target sub-path information from the sub-path information includes: determining whether the encrypted field in the encrypted data is found through each sub-path information; if so, the sub-path information is determined as the target sub-path information.

2. The method as described in claim 1, characterized in that, The step of finding the encrypted field of the encrypted data using the target sub-path information set includes: Traverse the target sub-path information set; The corresponding encrypted field is found by examining the information of each target sub-path.

3. The method as described in claim 1, characterized in that, The process of decrypting the encrypted field to obtain decrypted data includes: The encrypted field is decrypted to obtain the decrypted field; Replace the encrypted field with the decrypted field to obtain the decrypted data.

4. The method as described in claim 1, characterized in that, The process of obtaining data returned from the backend interface includes: Receive requests sent by the business layer; In response to the request, a communication connection with the backend is established; Receive data returned from the backend interface.

5. A data decryption device, characterized in that, include: The retrieval module is used to retrieve data returned from the backend interface; The judgment module is used to decrypt the encrypted data based on the path information if the returned data is encrypted data carrying path information, and send the decrypted data to the business layer through the business layer interface. If the returned data is unencrypted, then the returned data will be sent to the business layer through the business layer's interface; The step of decrypting the encrypted data based on the path information includes: splitting the path information based on the encrypted data to obtain multiple sub-path information; filtering out target sub-path information from the sub-path information and combining the target sub-path information into a target sub-path information set; using the target sub-path information set to find the encrypted field of the encrypted data; and decrypting the encrypted field to obtain decrypted data. The step of splitting the path information based on the encrypted data to obtain multiple sub-path information includes: traversing the path information; if a path identifier is found in the path information, determining the type of target encrypted data corresponding to the path information to which the path identifier belongs; if the type of target encrypted data is an array, splitting the path information to which the path identifier belongs based on the data structure of the target encrypted data to obtain multiple sub-path information; determining whether the path identifier is located at the end of the path information; if not, removing the path identifier and repeating the step of traversing the path information until determining whether the path identifier is located at the end of the path information, until the path identifier is located at the end of the path information; The step of filtering out target sub-path information from the sub-path information includes: determining whether the encrypted field in the encrypted data is found through each sub-path information; if so, the sub-path information is determined as the target sub-path information.

6. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the data decryption method as described in any one of claims 1 to 4.

7. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the data decryption method as described in any one of claims 1 to 4.

Images