Data transmission method, device, electronic device, medium and program product

Abstract

This disclosure provides a data transmission method, apparatus, electronic device, medium, and program product. The method includes: receiving a data access request; determining that the requested data type is an important type based on a data identifier, and then determining whether the data requesting terminal is a legitimate user's legitimate terminal based on a terminal identifier and user information; if the data requesting terminal is determined to be a legitimate user's legitimate terminal, then obtaining the number of times the user has successfully obtained important type data using the data requesting terminal based on the terminal identifier and user information; encrypting the important data identified by the data identifier based on the number of successful transmissions, obtaining encrypted data, and sending the encrypted data to the data requesting terminal; and incrementing the number of times the user has successfully obtained important type data using the data requesting terminal by 1 upon receiving a successful decryption message of the encrypted data sent by the data requesting terminal. This technical solution can ensure the security of important data.

Description

Technical Field

[0001] The embodiments of the present disclosure relate to the field of data security technology, and in particular to a data transmission method, device, electronic device, medium, and program product. Background Art

[0002] Data access is the act of an application linking to a data source to access data. In most applications, data is often needed, and this data may come from many different types of sources, such as databases, network data sources, or local files. It enters the data source through a layer of intermediary code or middleware, and takes out the data and sends it to the application for processing. The accessed data includes important data. Once the important data is leaked, it will cause significant losses. Therefore, various data encryption algorithms are used in the existing technology to encrypt important data that needs to be kept confidential to ensure the security of important data during data access. Generally speaking, before using an encryption algorithm to encrypt important data, the sender and the receiver need to agree on and save the key. Once the key is lost, the risk of leakage of important data will increase. Summary of the invention

[0003] In order to solve the problems in the related art, the embodiments of the present disclosure provide a data transmission method, device, electronic device, medium and program product.

[0004] In a first aspect, a data transmission method is provided in an embodiment of the present disclosure.

[0005] Specifically, the data transmission method includes:

[0006] Receiving a data access request sent by a data requesting end, wherein the data access request carries a terminal identifier of the data requesting end, user information of a user, and a data identifier;

[0007] Determine the type of data requested by the data access request based on the data identifier;

[0008] If the data type is an important type, judging whether the data requesting end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information;

[0009] If it is determined that the data requesting end is a legitimate terminal of a legitimate user, the number of successful transmissions is obtained based on the terminal identifier and the user information, where the number of successful transmissions is the number of successful times the user uses the data requesting end to obtain important types of data;

[0010] Encrypting the important data identified by the data identifier based on the number of successful transmissions to obtain encrypted data, and sending the encrypted data to the data requesting end;

[0011] In response to receiving a decryption success message of the encrypted data sent by the data request end, the number of successful times that the user uses the data request end to obtain important types of data is increased by 1.

[0012] In a possible implementation, the method further includes:

[0013] If the data type is an important type, sending a dynamic code to the data request end, and receiving a verification code returned by the data request end;

[0014] Convert the verification code into a deformed code according to a preset rule;

[0015] Determining a verification result based on the deformation code and the dynamic code;

[0016] If it is determined that the data requesting end is a legitimate terminal of a legitimate user, obtaining the number of successful transmissions based on the terminal identifier and the user information includes:

[0017] If it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is that the verification is passed, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0018] In a possible implementation manner, the preset rule includes performing a preset mathematical operation with a preset value, or transforming the position of characters in the verification code according to a preset transformation rule.

[0019] In a possible implementation, the method further includes:

[0020] If it is determined that the data requesting terminal is a legitimate terminal of a legitimate user, determining the user authority of the user to obtain data using the data requesting terminal based on the terminal identifier and the user information;

[0021] Determining access rights to the data requested by the data access request based on the data identifier;

[0022] The acquiring the number of successful transmissions based on the terminal identifier and the user information includes:

[0023] If the user authority is greater than or equal to the access authority, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0024] In a second aspect, a data transmission method is provided in an embodiment of the present disclosure.

[0025] Specifically, the data transmission method includes:

[0026] Sending a data access request to a data service end, wherein the data access request carries a terminal identifier of the data request end, user information of the user, and a data identifier;

[0027] Receiving the encrypted data returned by the data server;

[0028] Decrypting the encrypted data based on the number of successful times that the user uses the data request end to obtain important types of data to obtain decrypted data;

[0029] When the decryption is successful, the number of successful times that the user uses the data request end to obtain important types of data is increased by 1, and a decryption success message of the encrypted data is sent to the server.

[0030] In a third aspect, a data transmission device is provided in an embodiment of the present disclosure.

[0031] Specifically, the data transmission device includes:

[0032] A first receiving module is configured to receive a data access request sent by a data request end, wherein the data access request carries a terminal identifier of the data request end, user information of a user, and a data identifier;

[0033] A first determination module is configured to determine the type of data requested to be accessed by the data access request based on the data identifier;

[0034] a judgment module configured to judge whether the data requesting end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information if the data type is an important type;

[0035] an acquisition module, configured to acquire the number of successful transmissions based on the terminal identifier and the user information if it is determined that the data request terminal is a legitimate terminal of a legitimate user, wherein the number of successful transmissions is the number of successful times the user uses the data request terminal to acquire important types of data;

[0036] an encryption sending module, configured to encrypt the important data identified by the data identifier based on the number of successful transmissions to obtain encrypted data, and send the encrypted data to the data requesting end;

[0037] The first updating module is configured to increase by 1 the number of successful times that the user uses the data requesting end to obtain important types of data in response to receiving a decryption success message of the encrypted data sent by the data requesting end.

[0038] In a possible implementation, the device further includes:

[0039] A dynamic code sending module is configured to send a dynamic code to a data request end if the data type is an important type, and receive a verification code returned by the data request end;

[0040] A conversion module, configured to convert the verification code into a deformation code according to a preset rule;

[0041] a verification module configured to determine a verification result based on the deformation code and the dynamic code;

[0042] The acquisition module is configured as follows:

[0043] If it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is that the verification is passed, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0044] In a possible implementation manner, the preset rule includes performing a preset mathematical operation with a preset value, or transforming the position of characters in the verification code according to a preset transformation rule.

[0045] In a possible implementation, the device further includes:

[0046] A second determination module is configured to determine the user authority of the user to obtain data using the data requesting terminal based on the terminal identifier and the user information if it is determined that the data requesting terminal is a legitimate terminal of a legitimate user;

[0047] A third determination module is configured to determine the access rights of the data requested to be accessed by the data access request based on the data identifier;

[0048] The part of the acquisition module that acquires the number of successful transmissions based on the terminal identifier and the user information is configured as follows:

[0049] If the user authority is greater than or equal to the access authority, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0050] In a fourth aspect, a data transmission device is provided in an embodiment of the present disclosure.

[0051] Specifically, the data transmission device includes:

[0052] A first sending module is configured to send a data access request to a data service end, wherein the data access request carries a terminal identifier of the data request end, user information of the user, and a data identifier;

[0053] A second receiving module is configured to receive the encrypted data returned by the data server;

[0054] A decryption module, configured to decrypt the encrypted data based on the number of successful times that the user uses the data request end to obtain important types of data, to obtain decrypted data;

[0055] A second updating module is configured to increase the number of successful times of the user using the data requesting end to obtain important types of data by 1 when the decryption is successful;

[0056] The second sending module is configured to send a decryption success message of the encrypted data to the server.

[0057] In a fifth aspect, an embodiment of the present disclosure provides an electronic device, including a memory and a processor, wherein the memory is used to store one or more computer instructions that support a data transmission device to perform the above-mentioned data transmission method, and the processor is configured to execute the computer instructions stored in the memory. The data transmission device may also include a communication interface for the data transmission device to communicate with other devices or a communication network.

[0058] In a sixth aspect, an embodiment of the present disclosure provides a computer-readable storage medium for storing computer instructions used by a data transmission device, which includes computer instructions involved in the data transmission device for executing the above-mentioned data transmission method.

[0059] In a seventh aspect, an embodiment of the present disclosure provides a computer program product, including a computer program / instructions, wherein the computer program / instructions, when executed by a processor, implement the steps in the above-mentioned data transmission method.

[0060] According to the technical solution provided by the embodiment of the present disclosure, after receiving the data access request sent by the data request end, the data service end can determine the data type requested by the data access request based on the data identifier; if the data type is an important type, then determine whether the data request end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information; if it is determined that the data request end is a legitimate terminal of a legitimate user, then obtain the number of successful transmissions based on the terminal identifier and the user information, and the number of successful transmissions is the number of successful transmissions of the user using the data request end to obtain important type data; encrypt the important data identified by the data identifier based on the number of successful transmissions to obtain encrypted data, and send the encrypted data to the data request end; in response to receiving a decryption success message of the encrypted data sent by the data request end, add 1 to the number of successful transmissions of the user using the data request end to obtain important type data. Since the number of successful transmissions used for encryption is recorded by both the data service end and the data request end, and does not need to be transmitted between the two parties, there is no possibility of leakage. Even if a third party intercepts the encrypted data, it will not be decrypted to obtain the important data due to the lack of the corresponding number of successful acquisitions, thereby ensuring the security of the important data.

[0061] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the embodiments of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] Other features, purposes and advantages of the embodiments of the present disclosure will become more apparent through the following detailed description of non-limiting embodiments in conjunction with the accompanying drawings. In the accompanying drawings:

[0063] Figure 1A A flow chart showing a data transmission method according to an embodiment of the present disclosure;

[0064] Figure 1B A flow chart showing a data transmission method according to an embodiment of the present disclosure;

[0065] Figure 1C A flow chart showing a data transmission method according to an embodiment of the present disclosure;

[0066] Figure 2 A flow chart showing a data transmission method according to an embodiment of the present disclosure;

[0067] Figure 3 A schematic diagram showing an application scenario of a data transmission method according to an embodiment of the present disclosure is shown;

[0068] Figure 4 A structural block diagram of a data transmission device according to an embodiment of the present disclosure is shown;

[0069] Figure 5 A structural block diagram of a data transmission device according to an embodiment of the present disclosure is shown;

[0070] Figure 6 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown;

[0071] Figure 7 It is a structural diagram of a computer system suitable for implementing a data transmission method according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0072] Hereinafter, exemplary embodiments of the present disclosure will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily implement them. In addition, for the sake of clarity, parts not related to the description of the exemplary embodiments are omitted in the accompanying drawings.

[0073] In the present disclosure, it should be understood that terms such as "include" or "have" are intended to indicate the presence of features, numbers, steps, behaviors, components, parts, or a combination thereof disclosed in the present specification, and are not intended to exclude the possibility that one or more other features, numbers, steps, behaviors, components, parts, or a combination thereof exist or are added.

[0074] It should also be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present disclosure may be combined with each other. The present disclosure will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0075] In the present disclosure, the acquisition of user information or user data is an operation authorized and confirmed by the user, or actively selected by the user.

[0076] As mentioned above, data access is the behavior of an application linking to a data source to access data. In most applications, data is often needed, and this data may come from many different types of sources, such as databases, network data sources, or local files. It enters the data source through a layer of intermediary code or middleware, and takes out the data and sends it to the application for processing. The accessed data includes important data. Once the important data is leaked, it will cause significant losses. Therefore, various data encryption algorithms are used in the existing technology to encrypt important data that needs to be kept confidential to ensure the security of important data during data access. Generally speaking, before using an encryption algorithm to encrypt important data, the sender and the receiver need to agree on and save the key. Once the key is lost, the risk of leakage of important data will increase.

[0077] In view of the above problems, the present disclosure proposes a data transmission method, in which after receiving a data access request sent by a data request end, a data service end can determine the type of data requested by the data access request based on a data identifier; if the data type is an important type, then the data request end is determined to be a legitimate terminal of a legitimate user based on the terminal identifier and the user information; if the data request end is determined to be a legitimate terminal of a legitimate user, then the number of successful transmissions is obtained based on the terminal identifier and the user information, and the number of successful transmissions is the number of successful transmissions of the user using the data request end to obtain important type data; based on the number of successful transmissions, the important data identified by the data identifier is encrypted to obtain encrypted data, and the encrypted data is sent to the data request end; in response to receiving a decryption success message of the encrypted data sent by the data request end, the number of successful transmissions of the user using the data request end to obtain important type data is increased by 1. Since the number of successful transmissions used for encryption is recorded by both the data service end and the data request end, and does not need to be transmitted between the two parties, there is no possibility of leakage. Even if a third party intercepts the encrypted data, it will not be decrypted to obtain the important data due to the lack of the corresponding number of successful acquisitions, thereby ensuring the security of the important data.

[0078] Figure 1A A flow chart of a data transmission method according to an embodiment of the present disclosure is shown as follows: Figure 1A As shown, the data transmission method includes the following steps S101-S106:

[0079] In step S101, a data access request sent by a data requesting end is received, wherein the data access request carries a terminal identifier of the data requesting end, user information of a user, and a data identifier;

[0080] In step S102, the data type requested to be accessed by the data access request is determined based on the data identifier;

[0081] In step S103, if the data type is an important type, it is determined whether the data requesting end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information;

[0082] In step S104, if it is determined that the data requesting end is a legitimate terminal of a legitimate user, the number of successful transmissions is obtained based on the terminal identifier and the user information, where the number of successful transmissions is the number of successful times the user uses the data requesting end to obtain important types of data;

[0083] In step S105, the important data identified by the data identifier is encrypted based on the number of successful transmissions to obtain encrypted data, and the encrypted data is sent to the data requesting end;

[0084] In step S106, in response to receiving a decryption success message of the encrypted data sent by the data request end, the number of successful times that the user uses the data request end to obtain important types of data is increased by 1.

[0085] In one embodiment of the present disclosure, the data transmission method is applicable to a data service end capable of executing data transmission, which may be a computer, a computing device, an electronic device, a server, a server cluster, etc.

[0086] In one embodiment of the present disclosure, the data request end refers to a client that initiates data access. The data request end can send a data access request to a data service end based on data access instructions input by a user, such as a search instruction, a login instruction, a page access instruction, etc. The data access request carries a terminal identifier (ID) of the data request end, user information of the user, and a data identifier. The user information may be a user account, or the user information may be a user account and a user password. The data identifier refers to an identifier of the data that the user wants to access, which may be a data index such as a data address or a search term.

[0087] In one embodiment of the present disclosure, when the data service end obtains the data access request, it can determine the type of data requested to be accessed based on the data identifier carried in the data access request. If the data type is a non-important type, the data service end can directly send the data identified by the data identifier to the data request end; if the data type is an important type, in order to ensure the security of the important data, the data service end needs to determine that the user has the authority to obtain the important data, and will only send the important data to the service request end after encrypting it.

[0088] In one embodiment of the present disclosure, the data service end pre-stores user information of a legitimate user and a terminal identifier of a legitimate terminal corresponding to the legitimate user. Therefore, the data service end can determine whether the user information belongs to one of the pre-stored user information of the legitimate user based on the terminal identifier and the user information. If so, it is determined whether the terminal identifier belongs to the terminal identifier of the legitimate terminal corresponding to the user information. If so, it is determined that the data request end is a legitimate terminal of the legitimate user. In this way, it can be determined that the user of the data request end has the authority to obtain important data.

[0089] In one embodiment of the present disclosure, after determining that the user of the data request end has the authority to obtain important data, the data service end can use the terminal identification and the number of successful transmissions corresponding to the user information to encrypt the important data identified by the data identifier to obtain encrypted data; wherein the number of successful transmissions is the number of successful times the user uses the data request end to obtain important types of data; after the data service end sends the encrypted data to the data request end, the data request end can decrypt the encrypted data using the corresponding number of successful transmissions stored by it, and the important data can be obtained after the decryption is successful. At the same time, the data request end will increase the number of successful times the user uses the data request end to obtain important types of data by 1, and send a decryption success message of the encrypted data to the service end. In response to receiving the decryption success message of the encrypted data, the data service end will also increase the number of successful times the user uses the data request end to obtain important types of data by 1; in this way, each time the user successfully obtains important data using the data request end, the data service end and the data request end will increase the number of successful transmissions corresponding to the terminal identification and the user information by 1.

[0090] The number of successful transmissions used for encryption in this embodiment is recorded by both the data service end and the data request end, and does not need to be transmitted between the two parties, so there is no possibility of leakage. Even if a third party intercepts the encrypted data, since there is no corresponding number of successful acquisitions, the important data cannot be decrypted, thereby ensuring the security of the important data.

[0091] In one embodiment of the present disclosure, Figure 1BA flow chart of a data transmission method according to an embodiment of the present disclosure is shown as follows: Figure 1B As shown, the above data transmission method may further include the following steps:

[0092] In step S107, if the data type is an important type, a dynamic code is sent to the data request end, and a verification code returned by the data request end is received; the verification code is converted into a deformed code according to a preset rule; and a verification result is determined based on the deformed code and the dynamic code;

[0093] Step S104 in the above data transmission method, i.e., if it is determined that the data requesting end is a legitimate terminal of a legitimate user, obtaining the number of successful transmissions based on the terminal identifier and the user information, can be implemented as the following steps S1041:

[0094] In step S1041, if it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is that the verification is passed, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0095] In this implementation, in order to further ensure data security, dynamic code verification can also be performed. When the data type is determined to be an important type, the data service end can randomly generate a dynamic code and send the dynamic code to the data request end. After receiving the dynamic code, the data request end will display the dynamic code to the user. The user can deform the dynamic code according to the rules set by the user, convert it into a verification code and enter the value to the data request end. After receiving the verification code entered by the user, the data request end can reversely transform the verification code into a deformed code according to the rules set by the user. If the deformed code is consistent with the dynamic code, it indicates that the verification result is verification passed. If the deformed code is inconsistent with the dynamic code, it indicates that the verification result is verification failed.

[0096] In this implementation, if it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is verification passed, it means that the user has passed the double verification and has access rights to access important data.

[0097] In this embodiment, the verification code entered by the user is a deformed dynamic code. The deformation rule is set by the user himself. Even if other people see or intercept the dynamic code, they cannot enter the correct verification code, and thus cannot obtain access rights through dynamic code verification, further ensuring data security.

[0098] In one embodiment of the present disclosure, the preset rule may include performing a preset mathematical operation with a preset value, or transforming the position of characters in the verification code according to a preset transformation rule.

[0099] In this implementation, for example, assuming that the dynamic code received by the data request end is 156852, the preset rule may be that each bit of the verification code is increased by 1, and the user needs to perform an inverse operation according to the preset rule, that is, each bit of the dynamic code is decreased by 1 to obtain the verification code, and the input verification code is 045741. After the data service end obtains the verification code 045741, it adds 1 to each bit of the verification code according to the preset rule to obtain a deformed code of 156852, which is consistent with the dynamic code, indicating that the verification result is verification passed. Alternatively, the preset rule may be that the character position sequence in the verification code is shifted forward by 1 bit, and the user needs to perform an inverse operation according to the preset rule, that is, the dynamic code sequence is shifted backward by 1 bit to obtain the verification code, and the input verification code is 215685. After the data service end obtains the verification code 215685, it shifts the character position sequence in the verification code forward by 1 bit according to the preset rule to obtain a deformed code of 156852, which is consistent with the dynamic code, indicating that the verification result is verification passed.

[0100] In this implementation manner, the user needs to simply transform the dynamic code before inputting the verification code, which ensures the security of the input verification code, facilitates the user's calculation, and reduces the user's learning cost.

[0101] In one embodiment of the present disclosure, Figure 1C A flow chart of a data transmission method according to an embodiment of the present disclosure is shown as follows: Figure 1C As shown, the above data transmission method may further include the following steps:

[0102] In step S108, if it is determined that the data requesting terminal is a legitimate terminal of a legitimate user, the user authority of the user to obtain data using the data requesting terminal is determined based on the terminal identifier and the user information;

[0103] In step S109, the access rights to the data requested by the data access request are determined based on the data identifier;

[0104] Step S104 in the above data transmission method, i.e., if it is determined that the data requesting end is a legitimate terminal of a legitimate user, obtaining the number of successful transmissions based on the terminal identifier and the user information, can be implemented as the following steps S1042:

[0105] In step S1042, if the user authority is greater than or equal to the access authority, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0106] In this implementation, the confidentiality scope of various important types of data is different, and different confidentiality scopes correspond to different access rights; user rights of different users are also different, such as some users have high user rights, some users have low user rights, or users have high user rights on specific terminals, and low user rights on other terminals such as private mobile phones, etc. Therefore, it is necessary to determine whether the user rights are greater than the access rights. Only when the user rights are greater than the access rights can the user use the data request terminal to obtain the corresponding important data.

[0107] In this implementation, the data service end has pre-stored user rights for each user to use each terminal to obtain data, so the data service end can determine the user rights for the user to use the data request end to obtain data based on the terminal identification and the user information. At the same time, the data service end can also determine the access rights for the data requested by the data access request based on the data identification; if the user rights are greater than or equal to the access rights, it indicates that the user has the right to access the corresponding data. At this time, the data service end can obtain the number of successful transmissions based on the terminal identification and the user information, and then encrypt the corresponding data and send it to the data request end accordingly.

[0108] This implementation can perform fine division of important data, so that different users can access important data of different levels using different terminals, and perform more fine management of important data.

[0109] Figure 2 A flow chart of a data transmission method according to an embodiment of the present disclosure is shown as follows: Figure 2 As shown, the data transmission method includes the following steps S201-S204:

[0110] In step S201, a data access request is sent to a data service end, wherein the data access request carries a terminal identifier of the data request end, user information of the user, and a data identifier;

[0111] In step S202, receiving the encrypted data returned by the data server;

[0112] In step S203, the encrypted data is decrypted based on the number of successful times that the user uses the data request end to obtain important types of data to obtain decrypted data;

[0113] In step S204, when the decryption is successful, the number of successful times that the user uses the data request end to obtain important types of data is increased by 1, and a decryption success message of the encrypted data is sent to the server.

[0114] In one embodiment of the present disclosure, the data transmission method is applicable to a data request end capable of executing data transmission. In practical applications, the data request end may be a desktop computer, a tablet computer, a laptop computer, a smart phone, a digital assistant, a smart wearable device, etc. Of course, the data request end is not limited to the above-mentioned electronic device with a certain entity, but may also be a logical body formed by a program language running in the above-mentioned electronic device. For example, the data request end may be an application (APP) running on the electronic device.

[0115] In one embodiment of the present disclosure, the data request end refers to a client that initiates data access. The data request end can send a data access request to a data service end based on data access instructions input by a user, such as a search instruction, a login instruction, a page access instruction, etc. The data access request carries a terminal identifier (ID) of the data request end, user information of the user, and a data identifier. The user information may be a user account, or the user information may be a user account and a user password. The data identifier refers to an identifier of the data that the user wants to access, which may be a data index such as a data address or a search term.

[0116] In one embodiment of the present disclosure, when the data service end obtains the data access request, it can determine the type of data requested to be accessed based on the data identifier carried in the data access request. If the data type is a non-important type, the data service end can directly send the data identified by the data identifier to the data request end; if the data type is an important type, in order to ensure the security of the important data, the data service end needs to determine that the user has the authority to obtain the important data, and will only send the important data to the service request end after encrypting it.

[0117] In one embodiment of the present disclosure, the data service end pre-stores user information of a legitimate user and a terminal identifier of a legitimate terminal corresponding to the legitimate user. Therefore, the data service end can determine whether the user information belongs to one of the pre-stored user information of the legitimate user based on the terminal identifier and the user information. If so, it is determined whether the terminal identifier belongs to the terminal identifier of the legitimate terminal corresponding to the user information. If so, it is determined that the data request end is a legitimate terminal of the legitimate user. In this way, it can be determined that the user of the data request end has the authority to obtain important data.

[0118] In one embodiment of the present disclosure, after determining that the user of the data request end has the authority to obtain important data, the data service end can use the terminal identification and the number of successful transmissions corresponding to the user information to encrypt the important data identified by the data identifier to obtain encrypted data; wherein the number of successful transmissions is the number of successful times the user uses the data request end to obtain important types of data; after the data service end sends the encrypted data to the data request end, the data request end can decrypt the encrypted data using the corresponding number of successful transmissions stored by it, and the important data can be obtained after the decryption is successful. At the same time, the data request end will increase the number of successful times the user uses the data request end to obtain important types of data by 1, and send a decryption success message of the encrypted data to the service end. In response to receiving the decryption success message of the encrypted data, the data service end will also increase the number of successful times the user uses the data request end to obtain important types of data by 1; in this way, each time the user successfully obtains important data using the data request end, the data service end and the data request end will increase the number of successful transmissions corresponding to the terminal identification and the user information by 1.

[0119] The number of successful transmissions used for encryption in this embodiment is recorded by both the data service end and the data request end, and does not need to be transmitted between the two parties, so there is no possibility of leakage. Even if a third party intercepts the encrypted data, since there is no corresponding number of successful acquisitions, the important data cannot be decrypted, thereby ensuring the security of the important data.

[0120] Figure 3 A schematic diagram of an application scenario of a data transmission method according to an embodiment of the present disclosure is shown. Figure 3 As shown, the data service end 301 may include a server, a server cluster, a cloud, etc. The data request end 302 may include an electronic device such as a desktop computer, a tablet computer, a laptop computer, a smart phone, a digital assistant, a smart wearable device, or a logical body formed by a programming language and running in the above electronic device, for example, Figure 3 The data request end 302 shown may be an APP running on a mobile phone.

[0121] The data request end 302 is configured to send a data access request to the data service end 301, wherein the data access request carries the terminal identification of the data request end, the user information of the user and the data identification; the data service end 301 is configured to receive the data access request sent by the data request end 302, wherein the data access request carries the terminal identification of the data request end, the user information of the user and the data identification; based on the data identification, determine the type of data requested by the data access request; if the data type is an important type, determine whether the data request end is a legitimate terminal of a legitimate user based on the terminal identification and the user information; if it is determined that the data request end is a legitimate terminal of a legitimate user, determine whether the data request end is a legitimate terminal of a legitimate user based on the terminal identification and the user information; if it is determined that the data request end is a legitimate terminal of a legitimate user, determine whether the data request end is a legitimate terminal of a legitimate user based on the terminal identification and the user information; The number of successful transmissions of the user information is the number of successful transmissions of the user using the data request terminal to obtain important data of the type; based on the number of successful transmissions, the important data identified by the data identifier is encrypted to obtain encrypted data, and the encrypted data is sent to the data request terminal 302; the data request terminal 302 is configured to receive the encrypted data returned by the data service terminal 301; based on the number of successful transmissions of the user using the data request terminal to obtain important data of the type, the encrypted data is decrypted to obtain decrypted data; when the decryption is successful, the number of successful transmissions of the user using the data request terminal to obtain important data of the type is increased by 1, and a decryption success message of the encrypted data is sent to the data service terminal 301. The data service terminal 301 is configured to increase the number of successful transmissions of the user using the data request terminal to obtain important data of the type by 1 in response to receiving the decryption success message of the encrypted data sent by the data request terminal.

[0122] The technical terms and technical features mentioned in the implementation manner of this system are the same as or similar to the technical terms and technical features mentioned in the implementation manner of the above method. For the explanation and description of the technical terms and technical features involved in this system, please refer to the explanation and description of the implementation manner of the above method, which will not be repeated here.

[0123] The following are embodiments of the apparatus of the present disclosure, which can be used to execute embodiments of the method of the present disclosure.

[0124] Figure 4 FIG. 1 shows a structural block diagram of a data transmission device according to an embodiment of the present disclosure. The device can be implemented as part or all of an electronic device through software, hardware, or a combination of both. Figure 4 As shown, the data transmission device 400 includes:

[0125] The first receiving module 401 is configured to receive a data access request sent by a data request end, wherein the data access request carries a terminal identifier of the data request end, user information of a user, and a data identifier;

[0126] A first determination module 402 is configured to determine the type of data requested to be accessed by the data access request based on the data identifier;

[0127] The judgment module 403 is configured to judge whether the data requesting end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information if the data type is an important type;

[0128] The acquisition module 404 is configured to acquire the number of successful transmissions based on the terminal identifier and the user information if it is determined that the data request terminal is a legitimate terminal of a legitimate user, wherein the number of successful transmissions is the number of successful transmissions by the user using the data request terminal to acquire important types of data;

[0129] The encryption sending module 405 is configured to encrypt the important data identified by the data identifier based on the number of successful transmissions to obtain encrypted data, and send the encrypted data to the data requesting end;

[0130] The first updating module 406 is configured to increase by 1 the number of successful times of the user using the data requesting end to obtain important types of data in response to receiving a decryption success message of the encrypted data sent by the data requesting end.

[0131] In one embodiment of the present disclosure, the data transmission device is applicable to a data service end capable of executing data transmission, and the data service end may be a computer, a computing device, an electronic device, a server, a server cluster, etc.

[0132] In one embodiment of the present disclosure, the data request end refers to a client that initiates data access. The data request end can send a data access request to a data service end based on data access instructions input by a user, such as a search instruction, a login instruction, a page access instruction, etc. The data access request carries a terminal identifier (ID) of the data request end, user information of the user, and a data identifier. The user information may be a user account, or the user information may be a user account and a user password. The data identifier refers to an identifier of the data that the user wants to access, which may be a data index such as a data address or a search term.

[0133] In one embodiment of the present disclosure, when the data service end obtains the data access request, it can determine the type of data requested to be accessed based on the data identifier carried in the data access request. If the data type is a non-important type, the data service end can directly send the data identified by the data identifier to the data request end; if the data type is an important type, in order to ensure the security of the important data, the data service end needs to determine that the user has the authority to obtain the important data, and will only send the important data to the service request end after encrypting it.

[0134] In one embodiment of the present disclosure, the data service end pre-stores user information of a legitimate user and a terminal identifier of a legitimate terminal corresponding to the legitimate user. Therefore, the data service end can determine whether the user information belongs to one of the pre-stored user information of the legitimate user based on the terminal identifier and the user information. If so, it is determined whether the terminal identifier belongs to the terminal identifier of the legitimate terminal corresponding to the user information. If so, it is determined that the data request end is a legitimate terminal of the legitimate user. In this way, it can be determined that the user of the data request end has the authority to obtain important data.

[0135] In one embodiment of the present disclosure, after determining that the user of the data request end has the authority to obtain important data, the data service end can use the terminal identification and the number of successful transmissions corresponding to the user information to encrypt the important data identified by the data identifier to obtain encrypted data; wherein the number of successful transmissions is the number of successful times the user uses the data request end to obtain important types of data; after the data service end sends the encrypted data to the data request end, the data request end can decrypt the encrypted data using the corresponding number of successful transmissions stored by it, and the important data can be obtained after the decryption is successful. At the same time, the data request end will increase the number of successful times the user uses the data request end to obtain important types of data by 1, and send a decryption success message of the encrypted data to the service end. In response to receiving the decryption success message of the encrypted data, the data service end will also increase the number of successful times the user uses the data request end to obtain important types of data by 1; in this way, each time the user successfully obtains important data using the data request end, the data service end and the data request end will increase the number of successful transmissions corresponding to the terminal identification and the user information by 1.

[0136] The number of successful transmissions used for encryption in this embodiment is recorded by both the data service end and the data request end, and does not need to be transmitted between the two parties, so there is no possibility of leakage. Even if a third party intercepts the encrypted data, since there is no corresponding number of successful acquisitions, the important data cannot be decrypted, thereby ensuring the security of the important data.

[0137] In a possible implementation, the device further includes:

[0138] A dynamic code sending module is configured to send a dynamic code to a data request end if the data type is an important type, and receive a verification code returned by the data request end;

[0139] A conversion module, configured to convert the verification code into a deformation code according to a preset rule;

[0140] a verification module configured to determine a verification result based on the deformation code and the dynamic code;

[0141] The acquisition module is configured as follows:

[0142] If it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is that the verification is passed, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0143] In this implementation, in order to further ensure data security, dynamic code verification can also be performed. When the data type is determined to be an important type, the data service end can randomly generate a dynamic code and send the dynamic code to the data request end. After receiving the dynamic code, the data request end will display the dynamic code to the user. The user can deform the dynamic code according to the rules set by the user, convert it into a verification code and enter the value to the data request end. After receiving the verification code entered by the user, the data request end can reversely transform the verification code into a deformed code according to the rules set by the user. If the deformed code is consistent with the dynamic code, it indicates that the verification result is verification passed. If the deformed code is inconsistent with the dynamic code, it indicates that the verification result is verification failed.

[0144] In this implementation, if it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is verification passed, it means that the user has passed the double verification and has access rights to access important data.

[0145] In this embodiment, the verification code entered by the user is a deformed dynamic code. The deformation rule is set by the user himself. Even if other people see or intercept the dynamic code, they cannot enter the correct verification code, and thus cannot obtain access rights through dynamic code verification, further ensuring data security.

[0146] In a possible implementation manner, the preset rule includes performing a preset mathematical operation with a preset value, or transforming the position of characters in the verification code according to a preset transformation rule.

[0147] In this implementation, for example, assuming that the dynamic code received by the data request end is 156852, the preset rule may be that each bit of the verification code is increased by 1, and the user needs to perform an inverse operation according to the preset rule, that is, each bit of the dynamic code is decreased by 1 to obtain the verification code, and the input verification code is 045741. After the data service end obtains the verification code 045741, it adds 1 to each bit of the verification code according to the preset rule to obtain a deformed code of 156852, which is consistent with the dynamic code, indicating that the verification result is verification passed. Alternatively, the preset rule may be that the character position sequence in the verification code is shifted forward by 1 bit, and the user needs to perform an inverse operation according to the preset rule, that is, the dynamic code sequence is shifted backward by 1 bit to obtain the verification code, and the input verification code is 215685. After the data service end obtains the verification code 215685, it shifts the character position sequence in the verification code forward by 1 bit according to the preset rule to obtain a deformed code of 156852, which is consistent with the dynamic code, indicating that the verification result is verification passed.

[0148] In a possible implementation, the device further includes:

[0149] A second determination module is configured to determine the user authority of the user to obtain data using the data requesting terminal based on the terminal identifier and the user information if it is determined that the data requesting terminal is a legitimate terminal of a legitimate user;

[0150] A third determination module is configured to determine the access rights of the data requested to be accessed by the data access request based on the data identifier;

[0151] The part of the acquisition module that acquires the number of successful transmissions based on the terminal identifier and the user information is configured as follows:

[0152] If the user authority is greater than or equal to the access authority, the number of successful transmissions is obtained based on the terminal identifier and the user information.

[0153] In this implementation, the confidentiality scope of various important types of data is different, and different confidentiality scopes correspond to different access rights; user rights of different users are also different, such as some users have high user rights and some users have low user rights, or users have high user rights on specific terminals and low user rights on other terminals such as private mobile phones, etc. Therefore, it is necessary to determine whether the user rights are greater than the access rights. Only when the user rights are greater than the access rights can the user use the data request terminal to obtain the corresponding important data.

[0154] In this implementation, the data service end has pre-stored user rights for each user to use each terminal to obtain data, so the data service end can determine the user rights for the user to use the data request end to obtain data based on the terminal identification and the user information. At the same time, the data service end can also determine the access rights for the data requested by the data access request based on the data identification; if the user rights are greater than or equal to the access rights, it indicates that the user has the right to access the corresponding data. At this time, the data service end can obtain the number of successful transmissions based on the terminal identification and the user information, and then encrypt the corresponding data and send it to the data request end accordingly.

[0155] Figure 5 FIG. 1 shows a structural block diagram of a data transmission device according to an embodiment of the present disclosure. The device can be implemented as part or all of an electronic device through software, hardware, or a combination of both. Figure 5 As shown, the data transmission device 500 includes:

[0156] The first sending module 501 is configured to send a data access request to a data service end, wherein the data access request carries a terminal identifier of the data request end, user information of the user, and a data identifier;

[0157] The second receiving module 502 is configured to receive the encrypted data returned by the data server;

[0158] The decryption module 503 is configured to decrypt the encrypted data based on the number of successful times that the user uses the data request end to obtain important types of data, thereby obtaining decrypted data;

[0159] The second updating module 504 is configured to increase the number of successful times of the user using the data requesting end to obtain important types of data by 1 when the decryption is successful;

[0160] The second sending module 505 is configured to send a decryption success message of the encrypted data to the server.

[0161] In one embodiment of the present disclosure, the data transmission method is applicable to a data request end capable of executing data transmission. In practical applications, the data request end may be a desktop computer, a tablet computer, a laptop computer, a smart phone, a digital assistant, a smart wearable device, etc. Of course, the data request end is not limited to the above-mentioned electronic device with a certain entity, but may also be a logical body formed by a program language running in the above-mentioned electronic device. For example, the data request end may be an application (APP) running on the electronic device.

[0162] In one embodiment of the present disclosure, the data request end refers to a client that initiates data access. The data request end can send a data access request to a data service end based on data access instructions input by a user, such as a search instruction, a login instruction, a page access instruction, etc. The data access request carries a terminal identifier (ID) of the data request end, user information of the user, and a data identifier. The user information may be a user account, or the user information may be a user account and a user password. The data identifier refers to an identifier of the data that the user wants to access, which may be a data index such as a data address or a search term.

[0163] In one embodiment of the present disclosure, when the data service end obtains the data access request, it can determine the type of data requested to be accessed based on the data identifier carried in the data access request. If the data type is a non-important type, the data service end can directly send the data identified by the data identifier to the data request end; if the data type is an important type, in order to ensure the security of the important data, the data service end needs to determine that the user has the authority to obtain the important data, and will only send the important data to the service request end after encrypting it.

[0164] In one embodiment of the present disclosure, the data service end pre-stores user information of a legitimate user and a terminal identifier of a legitimate terminal corresponding to the legitimate user. Therefore, the data service end can determine whether the user information belongs to one of the pre-stored user information of the legitimate user based on the terminal identifier and the user information. If so, it is determined whether the terminal identifier belongs to the terminal identifier of the legitimate terminal corresponding to the user information. If so, it is determined that the data request end is a legitimate terminal of the legitimate user. In this way, it can be determined that the user of the data request end has the authority to obtain important data.

[0165] In one embodiment of the present disclosure, after determining that the user of the data request end has the authority to obtain important data, the data service end can use the terminal identification and the number of successful transmissions corresponding to the user information to encrypt the important data identified by the data identifier to obtain encrypted data; wherein the number of successful transmissions is the number of successful times the user uses the data request end to obtain important types of data; after the data service end sends the encrypted data to the data request end, the data request end can decrypt the encrypted data using the corresponding number of successful transmissions stored by it, and the important data can be obtained after the decryption is successful. At the same time, the data request end will increase the number of successful times the user uses the data request end to obtain important types of data by 1, and send a decryption success message of the encrypted data to the service end. In response to receiving the decryption success message of the encrypted data, the data service end will also increase the number of successful times the user uses the data request end to obtain important types of data by 1; in this way, each time the user successfully obtains important data using the data request end, the data service end and the data request end will increase the number of successful transmissions corresponding to the terminal identification and the user information by 1.

[0166] The number of successful transmissions used for encryption in this embodiment is recorded by both the data service end and the data request end, and does not need to be transmitted between the two parties, so there is no possibility of leakage. Even if a third party intercepts the encrypted data, since there is no corresponding number of successful acquisitions, the important data cannot be decrypted, thereby ensuring the security of the important data.

[0167] The present disclosure also discloses an electronic device, Figure 6 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown.

[0168] like Figure 6 As shown, the electronic device 600 includes a memory 601 and a processor 602; wherein the memory 601 is used to store one or more computer instructions, wherein the one or more computer instructions are executed by the processor 602 to implement the above method steps.

[0169] Figure 7It is a structural diagram of a computer system suitable for implementing a data transmission method according to an embodiment of the present disclosure.

[0170] like Figure 7 As shown, the computer system 700 includes a processing unit 701, which can perform various processes in the above-mentioned embodiments according to a program stored in a read-only memory (ROM) 702 or a program loaded from a storage part 708 into a random access memory (RAM) 703. In the RAM 703, various programs and data required for the operation of the system 700 are also stored. The processing unit 701, the ROM 702, and the RAM 703 are connected to each other via a bus 704. An input / output (I / O) interface 705 is also connected to the bus 704.

[0171] The following components are connected to the I / O interface 705: an input section 706 including a keyboard, a mouse, etc.; an output section 707 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker; a storage section 708 including a hard disk, etc.; and a communication section 709 including a network interface card such as a LAN card, a modem, etc. The communication section 709 performs communication processing via a network such as the Internet. A drive 710 is also connected to the I / O interface 705 as needed. A removable medium 711, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 710 as needed, so that a computer program read therefrom is installed into the storage section 708 as needed. Among them, the processing unit 701 can be implemented as a processing unit such as a CPU, a GPU, a TPU, an FPGA, an NPU, etc.

[0172] In particular, according to an embodiment of the present disclosure, the method described above can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program tangibly contained on a readable medium thereof, and the computer program includes a program code for executing the data transmission method. In such an embodiment, the computer program can be downloaded and installed from a network through the communication part 709, and / or installed from a removable medium 711.

[0173] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, functions and operations of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the road map or block diagram can represent a part of a module, program segment or code, and the part of the module, program segment or code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a different order from the order marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0174] The units or modules involved in the embodiments described in the present disclosure may be implemented by software or hardware. The units or modules described may also be set in a processor, and the names of these units or modules do not constitute limitations on the units or modules themselves in some cases.

[0175] As another aspect, the embodiments of the present disclosure further provide a computer-readable storage medium, which may be a computer-readable storage medium included in the device described in the above-mentioned embodiment; or a computer-readable storage medium that exists independently and is not assembled into the device. The computer-readable storage medium stores one or more programs, and the programs are used by one or more processors to execute the methods described in the embodiments of the present disclosure.

[0176] The above description is only a preferred embodiment of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the embodiments of the present disclosure is not limited to the technical solutions formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the inventive concept. For example, the above features are replaced with (but not limited to) technical features with similar functions disclosed in the embodiments of the present disclosure.

Claims

1. A data transmission method, characterized in that: include: Receiving a data access request sent by a data requesting end, wherein the data access request carries a terminal identifier of the data requesting end, user information of a user, and a data identifier; Determine the type of data requested by the data access request based on the data identifier; If the data type is an important type, judging whether the data requesting end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information; If it is determined that the data requesting end is a legitimate terminal of a legitimate user, the number of successful transmissions is obtained based on the terminal identifier and the user information, where the number of successful transmissions is the number of successful times the user uses the data requesting end to obtain important types of data; Encrypting the important type of data identified by the data identifier based on the number of successful transmissions to obtain encrypted data, and sending the encrypted data to the data requesting end; In response to receiving a decryption success message of the encrypted data sent by the data request end, adding 1 to the number of successful times that the user uses the data request end to obtain important types of data; If the data type is an important type, sending a dynamic code to the data request end, and receiving a verification code returned by the data request end; Convert the verification code into a deformed code according to a preset rule; Determining a verification result based on the deformation code and the dynamic code; If it is determined that the data requesting end is a legitimate terminal of a legitimate user, obtaining the number of successful transmissions based on the terminal identifier and the user information includes: If it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is that the verification is passed, the number of successful transmissions is obtained based on the terminal identifier and the user information.

2. The method according to claim 1, characterized in that The preset rules include performing preset mathematical operations with preset values, or changing the positions of characters in the verification code according to preset transformation rules.

3. The method according to claim 1, characterized in that The method further comprises: If it is determined that the data requesting terminal is a legitimate terminal of a legitimate user, determining the user authority of the user to obtain data using the data requesting terminal based on the terminal identifier and the user information; Determining access rights to the data requested by the data access request based on the data identifier; The acquiring the number of successful transmissions based on the terminal identifier and the user information includes: If the user authority is greater than or equal to the access authority, the number of successful transmissions is obtained based on the terminal identifier and the user information.

4. A data transmission method, characterized in that: include: Sending a data access request to a data service end, wherein the data access request carries a terminal identifier of the data request end, user information of the user, and a data identifier, so that the data service end determines the type of data requested by the data access request based on the data identifier, and when the data type is an important type, determines whether the data request end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information; receiving a dynamic code sent by a data service end when the data type is an important type, and returning a verification code to the data service end, so that the data service end converts the verification code into a deformed code according to a preset rule, and determines a verification result based on the deformed code and the dynamic code, and when it is determined that the data request end is a legitimate terminal of a legitimate user and the verification result is verification passed, sending encrypted data to the data request end; Receive encrypted data returned by the data service end, the encrypted data is obtained by the data service end by encrypting the important type of data identified by the data identifier based on the number of successful transmissions, the number of successful transmissions is obtained by the data service end based on the terminal identifier and the user information when it is determined that the data request end is a legitimate terminal of a legitimate user and the verification result is verification passed, the number of successful transmissions is the number of successful times the user uses the data request end to obtain important type of data; Decrypting the encrypted data based on the number of successful times that the user uses the data request end to obtain important types of data to obtain decrypted data; When the decryption is successful, the number of successful times that the user uses the data request end to obtain important types of data is increased by 1, and a decryption success message of the encrypted data is sent to the server.

5. A data transmission device, characterized in that: include: A first receiving module is configured to receive a data access request sent by a data request end, wherein the data access request carries a terminal identifier of the data request end, user information of a user, and a data identifier; A first determination module is configured to determine the type of data requested to be accessed by the data access request based on the data identifier; a judgment module configured to judge whether the data requesting end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information if the data type is an important type; an acquisition module, configured to acquire the number of successful transmissions based on the terminal identifier and the user information if it is determined that the data request terminal is a legitimate terminal of a legitimate user, wherein the number of successful transmissions is the number of successful times that the user uses the data request terminal to acquire important types of data; an encryption sending module, configured to encrypt the important type of data identified by the data identifier based on the number of successful transmissions, obtain encrypted data, and send the encrypted data to the data requesting end; A first updating module is configured to, in response to receiving a decryption success message of the encrypted data sent by the data requesting end, increase the number of successful times of the user using the data requesting end to obtain important types of data by 1; A dynamic code sending module is configured to send a dynamic code to a data request end if the data type is an important type, and receive a verification code returned by the data request end; A conversion module, configured to convert the verification code into a deformation code according to a preset rule; a verification module configured to determine a verification result based on the deformation code and the dynamic code; The acquisition module is configured as follows: If it is determined that the data requesting end is a legitimate terminal of a legitimate user and the verification result is that the verification is passed, the number of successful transmissions is obtained based on the terminal identifier and the user information.

6. A data transmission device, characterized in that: include: A first sending module is configured to send a data access request to a data service end, wherein the data access request carries a terminal identifier of the data request end, user information of the user, and a data identifier, so that the data service end determines the type of data requested by the data access request based on the data identifier, and when the data type is an important type, determines whether the data request end is a legitimate terminal of a legitimate user based on the terminal identifier and the user information; A second receiving module is configured to receive a dynamic code sent by a data service end when the data type is an important type, and return a verification code to the data service end, so that the data service end converts the verification code into a deformed code according to a preset rule, and determines a verification result based on the deformed code and the dynamic code, and sends encrypted data to the data request end when it is determined that the data request end is a legitimate terminal of a legitimate user and the verification result is a passed verification; receive the encrypted data returned by the data service end, the encrypted data is obtained by the data service end by encrypting the important type of data identified by the data identifier based on the number of successful transmissions, the number of successful transmissions is obtained by the data service end based on the terminal identifier and the user information when it is determined that the data request end is a legitimate terminal of a legitimate user and the verification result is a passed verification, and the number of successful transmissions is the number of successful times the user uses the data request end to obtain important type data; A decryption module, configured to decrypt the encrypted data based on the number of successful times that the user uses the data request end to obtain important types of data, to obtain decrypted data; A second updating module is configured to increase the number of successful times of the user using the data requesting end to obtain important types of data by 1 when the decryption is successful; The second sending module is configured to send a decryption success message of the encrypted data to the server.

7. An electronic device comprising a memory and at least one processor; characterized in that: The memory is used to store one or more computer instructions, wherein the one or more computer instructions are executed by the at least one processor to implement the method according to any one of claims 1 to 4.

8. A computer-readable storage medium, characterized in that: Computer instructions are stored thereon, and when the computer instructions are executed by a processor, the method described in any one of claims 1 to 4 is implemented.

9. A computer program product, characterized in that The method comprises a computer program or an instruction, and when the computer program or the instruction is executed by a processor, the method according to any one of claims 1 to 4 is implemented.

Images