Information processing method and device, electronic device, and computer-readable storage medium

Abstract

The present disclosure provides an information processing method and device, an electronic device, and a computer-readable storage medium, the method comprising: obtaining target encapsulation information corresponding to an intranet device; obtaining first external network information corresponding to the original external network information according to the target encapsulation information; sending a verification request to the intranet device according to the first external network information, the verification request is used to request the intranet device to verify whether the first external network information comes from the target encapsulation information obtained after being signed by the intranet device; in the case of receiving an authentication message corresponding to the verification request, determining that the first external network information has passed the verification, and providing the external network information of the intranet device to other devices according to the target encapsulation information. According to the embodiments of the present disclosure, it can be ensured that the external network information of the intranet device can be verified and traceable.

Description

Technical Field

[0001] The present disclosure relates to the field of computer technology, and in particular to an information processing method and device, an electronic device, and a computer-readable storage medium. Background Art

[0002] At present, device A in an internal network, i.e., an intranet, usually needs to pass through one or more levels of Network Address Translation (NAT) devices before it can reach an external network, i.e., an extranet. In order for other devices in the extranet, such as device B, to communicate with device A in the internal network, device A is generally required to first make a request to a server for NAT mapping to generate its own extranet information. After that, device A that obtains the extranet information from the server or the server provides the extranet information to device B, so that device B can communicate with device A through the extranet information. The extranet information generated by the server in response to the request of device A can be in the form of "external network IP address + port number + mapping protocol".

[0003] In the above method for providing device B with external network information of a device in the intranet, namely, device A, there may be a problem that neither party can verify the authenticity of the external network information provided by the other party, so that when one party, such as device B, holds the external network information of device A and communicates with device A, when normal communication is not possible or communication causes information leakage, the external network information cannot be effectively verified and its source cannot be traced. Summary of the invention

[0004] The present disclosure provides an information processing method and device, an electronic device, and a computer-readable storage medium.

[0005] In a first aspect, the present disclosure provides an information processing method, which is applied to a verification server. The information processing method includes:

[0006] Obtain target encapsulation information corresponding to the intranet device, wherein the target encapsulation information is obtained by the intranet device signing at least initial signature information, and the initial signature information is obtained by an information server signing at least original external network information of the intranet device, and the information server corresponds to the intranet device and stores the original external network information of the intranet device;

[0007] According to the target encapsulation information, obtaining first external network information corresponding to the original external network information;

[0008] Sending a verification request to the intranet device according to the first external network information, wherein the verification request is used to request the intranet device to verify whether the first external network information comes from the target encapsulation information obtained after being signed by the intranet device;

[0009] When the authentication message corresponding to the verification request is received, it is determined that the first external network information verification has passed, and the external network information of the internal network device is provided to other devices according to the target encapsulation information, wherein the other device is any device other than the verification server and the information server.

[0010] In a second aspect, the present disclosure provides another information processing method, which is applied to an intranet device, and the information processing method includes:

[0011] Receiving initial signature information, wherein the initial signature information is obtained by signing at least original external network information of the internal network device by an information server, the information server corresponds to the internal network device and stores the original external network information of the internal network device;

[0012] Performing signature processing on the initial signature information to obtain target encapsulation information, and providing the target encapsulation information to the information server; and

[0013] When receiving a verification request generated and sent by the verification server based on the first external network information, an authentication message is generated by verifying whether the first external network information comes from the target encapsulation information, and the authentication message is sent to the verification server.

[0014] In a third aspect, the present disclosure provides an information processing device, applied to a verification server, the information processing device comprising:

[0015] a target encapsulation information acquisition unit, configured to acquire target encapsulation information corresponding to an intranet device, wherein the target encapsulation information is obtained by the intranet device signing at least initial signature information, the initial signature information is obtained by an information server signing at least original external network information of the intranet device, the information server corresponds to the intranet device and stores the original external network information of the intranet device;

[0016] An external network information obtaining unit, configured to obtain first external network information corresponding to the original external network information according to the target encapsulation information;

[0017] A request unit, configured to send a verification request to the intranet device according to the first external network information, wherein the verification request is used to request the intranet device to verify whether the first external network information comes from the target encapsulation information obtained after being signed by the intranet device;

[0018] An authentication message receiving unit is used to determine that the first external network information has passed the verification when an authentication message corresponding to the verification request is received, and provide the external network information of the internal network device to other devices according to the target encapsulation information, wherein the other device is any device other than the verification server and the information server.

[0019] In a fourth aspect, the present disclosure provides another information processing device, which is applied to an intranet device, and the information processing device includes:

[0020] A receiving unit, configured to receive initial signature information, wherein the initial signature information is obtained by signing at least the original external network information of the internal network device by an information server, the information server corresponding to the internal network device and storing the original external network information of the internal network device;

[0021] a signing unit, configured to perform a signing process on the initial signature information, obtain target encapsulation information, and provide the target encapsulation information to the information server; and

[0022] The authentication unit is used to generate an authentication message by verifying whether the first external network information comes from the target encapsulation information when receiving a verification request generated and sent by the verification server based on the first external network information, and send the authentication message to the verification server.

[0023] In a fifth aspect, the present disclosure provides an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores one or more computer programs executable by the at least one processor, and one or more of the computer programs are executed by the at least one processor so that the at least one processor can execute the information processing method of the first aspect or the second aspect mentioned above.

[0024] In a fourth aspect, the present disclosure provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the information processing method of the first aspect or the second aspect.

[0025] In the embodiments provided by the present disclosure, the verification server obtains the target encapsulation information corresponding to the intranet device, obtains the first external network information of the original external network information corresponding to the intranet device according to the target encapsulation information, and sends a verification request to the intranet device according to the first external network information. If the authentication message corresponding to the verification request returned by the intranet device can be received, it can be determined that the first external network information has been verified, and then the verification server can provide the external network information of the intranet device to other devices according to the target encapsulation information.

[0026] In the embodiments provided by the present disclosure, a third party, namely, a verification server, is set up that is independent of the intranet device and the information server used to generate and store the original external network information of the intranet device. Since the target encapsulation information obtained by the verification server is obtained by first signing the original external network information of the intranet device by the information server, and then signing the initial signature information twice by the intranet device, that is, the target encapsulation information is the original external network information signed and anchored by the information server and the intranet device respectively; in this way, the verification server obtains the first external network information corresponding to the original external network information from the target encapsulation information, and based on the first external network information When a verification request is sent to an intranet device, if the authentication information provided by the intranet device can be received, it means that the intranet device recognizes the authentication information, that is, the intranet device recognizes that data communication with itself can be successfully carried out based on the first external network information; at the same time, during the verification process, the plain text information of the first external network information may not be provided to the intranet device to ensure that the first external network information is not leaked; after the verification server confirms that the intranet device recognizes the first external network information based on the authentication message, the verification server can provide the external network information of the intranet device to other devices according to the target encapsulation information, so that the provided external network information can be verified and its source can be traced.

[0027] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present disclosure, nor is it intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The accompanying drawings are used to provide a further understanding of the present disclosure and constitute a part of the specification. Together with the embodiments of the present disclosure, they are used to explain the present disclosure and do not constitute a limitation of the present disclosure. The above and other features and advantages will become more apparent to those skilled in the art by describing detailed example embodiments with reference to the accompanying drawings. In the accompanying drawings:

[0029] Figure 1 A flowchart of an information processing method provided by an embodiment of the present disclosure;

[0030] Figure 2 A flowchart of obtaining first external network information provided by an embodiment of the present disclosure;

[0031] Figure 3 A flowchart of sending a verification request provided by an embodiment of the present disclosure;

[0032] Figure 4 A flowchart of the verification process provided by the embodiment of the present disclosure;

[0033] Figure 5 A flowchart of another information processing method provided by an embodiment of the present disclosure;

[0034] Figure 6 A block diagram of an information processing device provided by an embodiment of the present disclosure;

[0035] Figure 7 A block diagram of another information processing device provided by an embodiment of the present disclosure;

[0036] Figure 8 A block diagram of an electronic device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0037] In order to enable those skilled in the art to better understand the technical solutions of the present disclosure, the exemplary embodiments of the present disclosure are described below in conjunction with the accompanying drawings, including various details of the embodiments of the present disclosure to facilitate understanding, which should be considered as merely exemplary. Therefore, those of ordinary skill in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present disclosure. Similarly, for the sake of clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0038] In the absence of conflict, the various embodiments of the present disclosure and the various features therein may be combined with each other.

[0039] As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items.

[0040] The terms used herein are only used to describe specific embodiments and are not intended to limit the present disclosure. As used herein, the singular forms "a" and "the" are also intended to include plural forms, unless the context clearly indicates otherwise. It will also be understood that when the terms "including" and / or "made of" are used in this specification, the presence of the features, wholes, steps, operations, elements and / or components is specified, but the presence or addition of one or more other features, wholes, steps, operations, elements, components and / or groups thereof is not excluded. "Connected" or "connected" and similar words are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect.

[0041] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by those of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and the present disclosure, and will not be interpreted as having an idealized or overly formal meaning unless explicitly defined as such herein.

[0042] Network Address Translation (NAT) defined in RFC1631, RFC3022 and related RFCs (Request For Comments) is a method of mapping an IP address from one addressing domain to another. Its typical application is to map private IP addresses defined in RFC1918 to external IP addresses used by the Internet. Due to the limitation on the number of external IP addresses, in order to improve resource utilization, a further network address translation method is generally used during network address translation, namely, Network Address Port Translation (NAPT), which is also called "one-to-many" NAT. NAPT not only translates the source IP address, but also translates the source port number (port), so that multiple intranet devices can communicate with the external network using one or a small number of external IP addresses.

[0043] When a device on the external network initiates a connection to an internal network device, due to NAT / NAPT, neither the internal network device nor the external network device can predict the external network information of the internal network device, that is, the external network IP address and port mapped to the internal network device, and thus cannot directly initiate a connection to the internal network device.

[0044] In the related art, in order for an intranet device or an extranet device to obtain the extranet information of the intranet device, the intranet device generally initiates a specific protocol message to an information server in the extranet to inquire about its own mapped extranet information or requests the information server to store its own extranet information in case other extranet devices obtain the extranet information to communicate with themselves, wherein the extranet information of the intranet device at least includes the extranet IP and extranet port number after the intranet IP and the intranet port number are mapped by NAT or NAPT, and in some implementations, the extranet information of the intranet device may also include a mapping protocol.

[0045] In the above information processing method, the external network information of the intranet device is provided by the information server to the intranet device or to the external network device to be communicated with the intranet device. In this process, no party can verify the authenticity of the external network information provided by the information server. For example, even if the information server provides false external network information, resulting in the inability of the external network device to communicate with the intranet device, the external network device or the intranet device cannot confirm whether the two cannot communicate normally because the external network information is incorrect; similarly, even if the information server provides real external network information, if the intranet device or the external network device claims that the external network information is false, the information server cannot confirm that the external network information is indeed true.

[0046] To solve the above problems, the present disclosure provides an information processing method. Figure 1 , which is a flow chart of the information processing method provided by the embodiment of the present disclosure. The method is applied to a verification server, which can be any server other than an intranet device and an information server, and the number of the verification servers can be one or more; the verification server can be jointly designated by the intranet device and the information server, or can be randomly selected from multiple candidate verification servers jointly designated by the information server and the intranet device based on a random algorithm; the verification server can be a physical server or a virtual server, which is not specifically limited here.

[0047] In addition, the intranet device in the embodiment of the present disclosure can be any device in the internal network that requests NAT mapping or NAPT mapping to generate its own external network information. The internal and external devices can be terminal devices in the intranet or intranet servers, and there is no special limitation here; the information server can be any server in the external network that is used to perform NAT or NAPT mapping on the intranet address of the intranet device.

[0048] like Figure 1 As shown, the information processing method applied to the verification server provided by the embodiment of the present disclosure may include the following steps S101-S104, which are described in detail below.

[0049] Step S101, obtain the target encapsulation information corresponding to the intranet device, wherein the target encapsulation information is obtained after the intranet device signs at least the initial signature information, and the initial signature information is obtained after the information server signs at least the original external network information of the intranet device, and the information server corresponds to the intranet device and stores the original external network information of the intranet device.

[0050] The signing of the original external network information and the signing of the initial signature information described in the embodiments of the present disclosure refers to the use of digital signature technology to sign the original external network information and the initial signature information respectively; wherein, the digital signature technology is a digital string that can only be generated by the sender of the information and cannot be forged by others. This digital string is also a valid proof of the authenticity of the information sent by the sender of the information. The digital signature has the characteristics of preventing repudiation and preventing forgery.

[0051] It should be noted that the first digital signature technology used by the information server to sign the original external network information and the second digital signature technology used by the intranet device to sign the initial signature information in the disclosed embodiment can be the same digital signature technology agreed upon with the verification server, or can also be different digital signature technologies, which are not specifically limited here. For example, the digital signature technology used by the intranet device and the information server can both be elliptic curve digital signature technology (ECDSA, Elliptic Curve Digital Signature Algorithm).

[0052] That is, in the disclosed embodiment, in order to ensure the verifiability and traceability of the extranet information of the intranet device, after the information server performs NAT mapping or NAPT mapping on the intranet information of the intranet device to obtain the extranet information of the intranet device, that is, the original extranet information, firstly, the information server uses the digital signature technology to sign the original extranet information to obtain the initial signature information, so as to anchor, that is, calibrate, the original extranet information; secondly, the information server sends the initial signature information to the intranet device, and after the intranet device receives the initial signature information, although it cannot obtain the original extranet information from the initial signature information, it cannot determine whether the original extranet information is authentic. The external network information connected to itself, but the initial signature information can also be signed first, that is, anchored, for subsequent verification, that is, after the intranet device signs the initial signature information, the target encapsulation information is obtained; finally, in order to verify that the original external network information in the target encapsulation information obtained after being signed by the information server and the intranet device respectively is valid, the embodiment of the present disclosure introduces a third party, that is, obtains the target encapsulation information through a verification server independent of the intranet device and the information server, and based on the target encapsulation information, it can verify whether the external network information therein is valid without providing its plaintext original external network information to the intranet device.

[0053] It should be noted that, in the embodiments of the present disclosure, the intranet information of the intranet device can be in the form of "intranet IP address + intranet port number + mapping protocol", and the extranet information of the intranet device can be in the form of "extranet IP address + extranet port number + mapping protocol", and the mapping protocol refers to a message protocol, such as UDP, TCP, etc.; in addition, there can be one or more verification servers, and in order to avoid collusion between the verification server and any party in the intranet device or the information server, the verification server can be jointly designated by the intranet device and the information server, or it can also be selected from the candidate verification servers based on a random algorithm, wherein the candidate verification server can be any server that has not been determined to be an untrusted device.

[0054] In the embodiment of the present disclosure, the acquisition of target encapsulation information corresponding to the intranet device in the above step S101 may include at least one of the following A1-A3:

[0055] A1: Obtain target encapsulation information from the intranet device.

[0056] That is, in some embodiments, after the intranet device obtains the initial signature information sent by the information server and signs the initial signature information to obtain the target encapsulation information, the target encapsulation information can be directly sent to the verification server for verification by the verification server.

[0057] A2: Obtain target encapsulation information from an information server, wherein the target encapsulation information in the information server is provided by an intranet device, or obtained by the information server from a blockchain network; the blockchain network corresponds to the intranet device, the information server and the verification server.

[0058] That is, in some embodiments, the verification server may also obtain the target encapsulation information from the information server. The target encapsulation information in the information server may be sent by the intranet device to the information server, or the intranet device may publish the target encapsulation information to the blockchain network after generating the target encapsulation information. After detecting the target encapsulation information, the information server obtains the target encapsulation information from the blockchain network and provides the target encapsulation information to the verification server.

[0059] A3: Obtain target encapsulation information from the blockchain network, wherein the target encapsulation information in the blockchain network is provided by the intranet device or the information server that obtains the target encapsulation information in advance.

[0060] That is, in some embodiments, after the intranet device or information server publishes the generated target encapsulation information to the blockchain network, the verification server obtains the target encapsulation information from the blockchain network.

[0061] Based on the characteristics of the blockchain network such as decentralization and data immutability, preferably, the target encapsulation information can be obtained by the verification server from the blockchain network corresponding to the intranet device, the information server and the verification server. For example, it can be obtained from the smart contract corresponding to the three parties in the blockchain network.

[0062] Step S102: obtaining first external network information corresponding to the original external network information according to the target encapsulation information.

[0063] The first external network information is information obtained by the verification server according to the target encapsulation information and corresponding to the original external network information.

[0064] That is, after the above step S102, after the verification server obtains the above target encapsulation information from any one of the intranet server, the information server and the corresponding blockchain network, it can perform signature verification on the target encapsulation information to verify the integrity of the target encapsulation information and ensure that the target encapsulation information has not been tampered with during the transmission process; thereafter, the verification server can obtain the first external network information from the information obtained after the signature verification process.

[0065] It should be noted that the signature verification process may be to verify the received signature information using a public key, wherein the public key corresponds to the private key used by the corresponding device when signing the information.

[0066] For example, when the digital signature technology used by the intranet device and the information server is the elliptic curve digital signature technology, the signature verification process for the target encapsulated information can be that the verification server first uses the public key corresponding to the intranet device to verify the target encapsulated information; then, the public key corresponding to the information server is used to verify the initial signature information in the target encapsulated information; of course, when the digital signature technology used by the intranet device and the information server is a signature technology based on symmetric encryption or asymmetric encryption, the signature verification process can also be to first use the corresponding key or the corresponding public key to decrypt the target encapsulated information, and its detailed description will not be repeated here.

[0067] Step S103: Send a verification request to the intranet device according to the first external network information, wherein the verification request is used to request the intranet device to verify whether the first external network information comes from the target encapsulation information obtained after being signed by the intranet device.

[0068] After the verification server obtains the first external network information through the above step S102, since the internal network device cannot verify whether the external network information in the initial signature information is valid when signing the initial signature information provided by the information server, but only signs the initial signature information, that is, performs a calibration. Therefore, if other devices can obtain the external network information from the target encapsulation information obtained by calibrating the initial signature information and establish a connection with it, it can be said that the external network information in the target encapsulation information is valid.

[0069] After step S103, step S104 is executed. When an authentication message corresponding to the verification request is received, it is determined that the first external network information verification has passed, and the external network information of the internal network device is provided to other devices according to the target encapsulation information, wherein the other devices are any devices other than the verification server and the information server.

[0070] That is, in the embodiment of the present disclosure, after obtaining the first external network information, the verification server can establish a communication connection with the internal network device based on the first external network information to send a verification request to the internal network device. If the internal network device can receive the verification request and the verification server can also receive the authentication message for the verification request, it can be said that the first external network information obtained from the target encapsulation information is valid. Therefore, the verification server can provide the external network information of the internal network device to other devices based on the target encapsulation information.

[0071] According to the information processing method of the embodiment of the present disclosure, by setting a third party other than the intranet device and the information server, that is, the verification server, since the target encapsulation information obtained by the verification server is obtained by first signing the original external network information of the stored intranet device by the information server, and then the initial signature information obtained after the first signature is signed by the intranet device twice, that is, the target encapsulation information is the original external network information signed and anchored by the information server and the intranet device respectively; in this way, the verification server obtains the first external network information corresponding to the original external network information from the target encapsulation information, and sends the first external network information to the intranet device based on the first external network information. When the device sends a verification request, if it can receive the authentication information provided by the intranet device, it can be said that the intranet device recognizes the authentication information, that is, the intranet device recognizes that it can successfully communicate with itself based on the first external network information; at the same time, during the verification process, the plain text information of the first external network information may not be provided to the intranet device to ensure that the first external network information is not leaked; after the verification server confirms that the intranet device recognizes the first external network information based on the authentication message, the verification server can provide the external network information of the intranet device to other devices according to the target encapsulation information, so that the provided external network information can be verified and its source can be traced.

[0072] In some embodiments, considering that the information server's behavior of performing NAT mapping or NAPT mapping has commercial value, after obtaining the original external network information of the internal network device, in order to ensure that the original external network information will not be obtained by the internal network device before the verification by the verification server is completed, the information server may not directly sign the original external network information when generating the initial signature information, but may sign the original ciphertext corresponding to the original external network information. The original ciphertext can be obtained by the information server using a preset encryption algorithm to encrypt the original external network information. The preset encryption algorithm can be any encryption algorithm, for example, a symmetric encryption algorithm, an asymmetric encryption algorithm, etc., which is not specifically limited here. That is, in some embodiments, the initial signature information is at least obtained by the information server signing the original ciphertext of the original external network information, and the original ciphertext is obtained by the information server encrypting the original external network information using a preset encryption algorithm. Please refer to Figure 2, which is a flow chart of obtaining the first external network information provided by the embodiment of the present disclosure. Figure 2 As shown, in this embodiment of the present disclosure, the step S102 described above sending a verification request to the intranet device according to the first external network information includes:

[0073] Step S201, performing corresponding signature verification processing on the target encapsulated information to obtain initial signature information; and, step S202, performing corresponding signature verification processing on the initial signature information to obtain original ciphertext.

[0074] Step S203: Obtain a target decryption key provided by the information server, and use the target decryption key to decrypt the original ciphertext to obtain the first external network information.

[0075] The target decryption key may be obtained by the verification server by sending a key acquisition request to the information server before or after obtaining the target encapsulation information, or may be actively provided to the verification server by the information server, or may be obtained in advance by the verification server from the corresponding blockchain network. The embodiments of the present disclosure do not specifically limit the method for obtaining the target decryption key.

[0076] In this implementation, the original external network information of the intranet device is encrypted, and the original ciphertext obtained by encrypting the original external network information is signed by the information server to provide it to the intranet device to generate the target encapsulation information. This ensures that the intranet device cannot obtain the original external network information when obtaining the initial signature information and signing the initial signature information, that is, the original external network information is invisible to the intranet device, thereby ensuring the confidential transmission of the original external network information.

[0077] In addition, to ensure the integrity and correctness of the target decryption key obtained, the initial signature information can also be obtained by the information server signing the original ciphertext and the key verification value corresponding to the original ciphertext. The key verification value can be the hash value of the target decryption key calculated using a preset hash algorithm. The preset hash algorithm can be, for example, an MD5 algorithm. In this embodiment, after obtaining the target decryption key, the method also includes: calculating the current verification value of the obtained target decryption key based on the preset hash algorithm; when it is determined that the current verification value and the key verification value are consistent, executing the above step S203 to decrypt the original ciphertext using the target decryption key to obtain the first external network information step.

[0078] That is, in the embodiment of the present disclosure, the initial signature information can be obtained by the information server signing the original ciphertext and the key verification value used to verify the original ciphertext at the same time. In this way, after the verification server obtains the target encapsulated information and verifies the signature, it can also use the preset hash algorithm to obtain the current verification value of the original ciphertext obtained by the verification process, and compare the current verification value with the key verification value obtained after the verification process to see if they are consistent, so as to ensure the security of the data.

[0079] In addition, in order to prevent the verification server from doing evil, that is, after the verification server obtains the target encapsulation information, although it obtains the correct first external network information based on the target encapsulation information, when providing the external network information of the internal network device to the internal network device or other external network devices based on the target encapsulation information, the wrong target encapsulation information is used, that is, the target encapsulation information obtained by the verification server is mapping1, but when the plaintext external network information msg1 of the internal network device is provided to the internal network device, it is provided based on the wrong mapping2 which is different from mapping1. At this time, even if the external network information obtained by the internal network device is valid, its source cannot be verified, that is, although it is correct, the source is unreliable.

[0080] To solve this technical problem, in some embodiments, the initial signature information can be at least obtained by the information server signing the original ciphertext, the verification function information and the original verification value, and the original verification value is the verification value obtained by the information server after calculating and processing the original external network information according to the verification function indicated by the verification function information; before executing the step of sending a verification request to the internal network device according to the first external network information as described in the above step S103, the method also includes: using the verification function indicated by the verification function information to calculate and process the first external network information to obtain a target verification value; when the original verification value and the target verification value are consistent, executing the step of sending a verification request to the internal network device according to the first external network information as described in the above step S103.

[0081] The verification function information is used to indicate the verification function used to verify the original external network information; the original verification value can be the verification value obtained by the information server after calculating and processing the original external text information based on the verification function; after obtaining the original ciphertext, the information server can obtain the initial signature information by signing the original ciphertext, the verification function information and the original verification value. After the verification server obtains the target encapsulated information and performs signature verification to obtain the above information, it can calculate and process the first external network information obtained by decrypting the original ciphertext using the target decryption key based on the verification function information to obtain the target verification value, and further ensure the correctness of the first external network information obtained by decrypting by comparing the target verification value with the original verification value. If the consistency is confirmed, a verification request is sent to the internal network device based on the first external network information.

[0082] In some embodiments, the target encapsulation information corresponding to the intranet device is obtained by signing the initial signature information and the information identifier by the intranet device, and the information identifier is used to identify the target encapsulation information; in this implementation manner, Figure 3 As shown, the step S103 described above, sending a verification request to the intranet device according to the first external network information, includes:

[0083] Step S301: Establish a communication connection with an intranet device according to first external network information.

[0084] Step S302: Generate a verification request according to the target encapsulation information and / or information identifier.

[0085] Step S303, based on the communication connection, sending a verification request to the intranet device, wherein the target encapsulation information and / or information identifier in the verification request is used for the intranet device to compare with the target encapsulation information and / or information identifier stored in itself to verify whether the first external network information comes from the target encapsulation information.

[0086] That is, considering that even if the first external network information can successfully establish a communication connection with the intranet device, the first external network information may not come from the target encapsulation information. Therefore, in the embodiment of the present disclosure, when the verification server sends a verification request to the intranet device, the verification request may include the target encapsulation information or an information identifier used to identify the target encapsulation information, so that after the intranet device receives the verification request, on the one hand, it can determine that the first external network information is valid, and on the other hand, it can also compare the target encapsulation information and / or information identifier in the verification request with the target encapsulation information and information identifier generated and locally stored by itself to see if they are consistent. If they are consistent, it can be determined to a certain extent that the first external network information comes from the target encapsulation information obtained by its own signature. At this time, an authentication message indicating that the verification is passed can be generated and the authentication message can be returned to the verification server.

[0087] Taking into account that the authentication message sent by the intranet device to the verification server may be tampered with during transmission, or the authentication message received by the verification server may be forged by other devices, in order to improve the security of the method provided in the embodiments of the present disclosure; in some embodiments, the authentication message may be generated after being signed by the intranet device; in this implementation, when the authentication message corresponding to the verification request is received in the above step S104, determining that the first external network information verification has passed may include: performing signature verification processing on the authentication message, and when it is determined that the authentication message comes from the intranet device based on the signature verification processing, determining that the first external network information verification has passed.

[0088] That is, the intranet device can agree in advance with the verification server that the authentication message is signed by the intranet device using a private key and then sent to the verification server. In this way, after receiving the authentication message, if the verification server uses the corresponding public key to verify the authentication message, if the verification fails, it can be said that the authentication message may have been tampered with or forged. At this time, the authentication message can be directly discarded and it can be determined that the first external network information has not passed the verification.

[0089] In order to further improve the security of the method, in some embodiments, the target encapsulated information can be obtained by at least signing the initial signature information, the information identifier, the verification question uniquely corresponding to the information identifier, and the time limit for solving the question by the intranet device; in this implementation mode, Figure 4 As shown, in the above step S104, when an authentication message corresponding to the verification request is received, determining that the first external network information verification passes includes:

[0090] Step S401, obtaining a verification answer provided by the intranet device from the authentication message.

[0091] Step S402, when the verification answer solves the verification question, based on the sending time of the verification request and the receiving time of the authentication message, the obtaining time limit corresponding to the verification answer is obtained.

[0092] Step S403, when the acquisition time limit is less than or equal to the problem-solving time limit, determine that the first external network information verification has passed.

[0093] That is, in order to further improve the verification effect and ensure the verifiability and traceability of the external network information of the intranet device, the intranet device can also put the verification question corresponding to the target encapsulation information in the signature block when signing the initial signature information to generate the target encapsulation information, and can also include a problem-solving time limit for limiting the verification time to avoid brute force cracking, that is, the validity period of the target encapsulation information; in this way, after the verification server sends a verification request to the intranet device, the intranet device can determine the validity of the first external network information on the one hand, and on the other hand, it can also obtain the verification answer to the verification question generated when generating the target encapsulation information based on the target encapsulation information or the information identifier, and generate an authentication message based on the verification answer and return it to the verification server; after receiving the authentication message, the verification server confirms whether the verification answer can solve the verification question in the target encapsulation information, and determines that the first external network information is the original external network information from the target encapsulation information and that both the intranet device and the information server recognize the result.

[0094] In this embodiment, the verification server can determine that the first external network information verification has passed when it determines that the verification answer can solve the verification problem and the acquisition is less than or equal to the problem-solving time limit. At this time, the verification server can provide the external network information of the internal network device to other devices based on the target encapsulation information. In this embodiment, after the verification is passed, the verification server can publish the verification answer and the target encapsulation information, for example, to the corresponding blockchain network, and other devices can obtain the verification answer and the target encapsulation information from the blockchain network, and when it is confirmed that the verification answer can solve the verification problem in the target encapsulation information, it is determined that the external network information of the internal network device held by the verification server is anchored and valid via the internal network device and the information server, that is, the external network information can be verified and the source can be traced. At this time, other devices can purchase the external network information from the verification server; it should be noted that in this embodiment, in order to further improve the security of information, after the verification server passes the verification, the verification server can also provide the external network information of the internal network device, such as the first external network information, to the smart contract of the corresponding blockchain network, and other devices can obtain the external network information from the smart contract in the form of blockchain transactions.

[0095] Of course, in actual implementation, the above embodiments can also be used in combination, that is, after the intranet device generates an authentication message based on the verification answer, it can also sign the authentication message containing the verification answer; after receiving the authentication message, the verification server can first verify the signature of the received authentication message signed by the intranet device before executing the above step S401, and when it is determined that the authentication message comes from the intranet device, execute the above step S401, that is, obtain the verification answer from the authentication message, and determine whether the verification answer can solve the verification problem in the target encapsulated information, so as to further improve the security of the method.

[0096] In the embodiment of the present disclosure, the provision of the external network information of the internal network device to other devices according to the target encapsulation information in the above step S104 includes at least one of the following B1-B3:

[0097] B1: directly provide the first external network information to other devices.

[0098] B2: Use the public key of the other device to encrypt the first external network information, and provide the encrypted first external network information to the other device, so that the other device can obtain the first external network information based on the corresponding private key through the encrypted first external network information.

[0099] B3: Use the public key of other devices to encrypt the target decryption key, and provide the encrypted target decryption key to other devices, so that other devices can obtain the target decryption key based on the corresponding private key through the encrypted target decryption key, and obtain the first external network information from the target encapsulation information according to the target decryption key.

[0100] In addition, considering that even if the verification server can successfully communicate with the intranet device based on the first external network information, the intranet device may not be able to determine that the first external network information is indeed obtained by the verification server from its target encapsulated information. For example, in the case of conspiracy between the verification server and the information server, the information server can put erroneous external network information in the initial signature information, but when the verification server communicates with the intranet device, it can send a verification request to the intranet device based on the correct external network information obtained by tampering with the information server. In this way, although the intranet device can determine that the verification server can communicate with it, that is, the first external network information is valid, the first external network information is not actually the external network information in the target encapsulated information that has been jointly signed by the information server and the intranet device itself.

[0101] To solve this technical problem, in some embodiments, the number of the verification servers can be multiple. In the case where there are multiple verification servers, the determination that the first external network information verification has passed when an authentication message corresponding to the verification request is received in the above step S104 can be: when multiple verification servers all receive the authentication message, or when the ratio of the first number to the second number is greater than or equal to a preset threshold, the determination that the first external network information verification has passed.

[0102] That is, in the case of conspiracy between the verification server and the information server, considering that it is impossible for the information server to conspire with all or randomly selected verification servers, it can be determined that the verification has not passed as long as one verification server fails the verification. Alternatively, considering that some verification servers may not be able to receive the authentication message due to downtime or network anomalies, in order to improve the accuracy, it can also be determined that the verification has passed when most of the verification servers have passed the verification. The preset threshold can be set according to the actual implementation situation and is not specially limited here.

[0103] Corresponding to the above-mentioned information processing method applied to the information server, the embodiment of the present disclosure also provides another information processing method, which can be applied to the intranet device, please refer to Figure 5 , which is a flow chart of another information processing method provided by an embodiment of the present disclosure. Figure 5 As shown, the information processing method includes the following steps S501-S503:

[0104] Step S501, receiving initial signature information, wherein the initial signature information is obtained by signing at least the original external network information of the internal network device by an information server, and the information server corresponds to the internal network device and stores the original external network information of the internal network device.

[0105] Step S502: perform signature processing on the initial signature information to obtain target encapsulation information, and provide the target encapsulation information to the information server.

[0106] Step S503, upon receiving a verification request generated and sent by the verification server based on the first external network information, generate an authentication message by verifying whether the first external network information comes from the target encapsulation information, and send the authentication message to the verification server.

[0107] In some embodiments, the initial signature information is signed to obtain the target encapsulated information, including: obtaining an information identifier for identifying the target encapsulated information, and obtaining a verification question and a time limit for solving the question that uniquely correspond to the information identifier; the initial signature information, the information identifier, the verification question and the time limit for solving the question are signed to obtain the target encapsulated information, and a verification answer corresponding to the information identifier is stored, wherein the verification answer corresponds to the verification question; an authentication message is generated by verifying whether the first external network information comes from the target encapsulated information, including: obtaining the information identifier of the target encapsulated information from the verification request, and obtaining the verification answer based on the information identifier; and generating an authentication message based on the verification answer.

[0108] In some embodiments, sending the authentication message to the verification server may include: signing the authentication message, and sending the signed authentication message to the verification server.

[0109] It can be understood that the above-mentioned various method embodiments mentioned in the present disclosure can be combined with each other to form a combined embodiment without violating the principle logic. Due to space limitations, the present disclosure will not repeat them. It can be understood by those skilled in the art that in the above-mentioned method of the specific implementation method, the specific execution order of each step should be determined according to its function and possible internal logic.

[0110] In addition, the present disclosure also provides an information processing device, an electronic device, and a computer-readable storage medium, all of which can be used to implement the information processing method provided by the present disclosure. The corresponding technical solutions and descriptions are referred to the corresponding records in the method part and will not be repeated here.

[0111] Figure 6 A block diagram of an information processing device provided in an embodiment of the present disclosure.

[0112] Reference Figure 6 The embodiment of the present disclosure provides an information processing device 600, which is applied to a verification server. The information processing device 600 includes: a target encapsulation information acquisition unit 601, an external network information acquisition unit 602, a request unit 603 and an authentication message receiving unit 604.

[0113] The target encapsulation information acquisition unit 601 is used to obtain the target encapsulation information corresponding to the intranet device, wherein the target encapsulation information is obtained after the intranet device signs at least the initial signature information, and the initial signature information is obtained after the information server signs at least the original external network information of the intranet device, and the information server corresponds to the intranet device and stores the original external network information of the intranet device.

[0114] The external network information obtaining unit 602 is used to obtain first external network information corresponding to the original external network information according to the target encapsulation information.

[0115] The request unit 603 is used to send a verification request to the intranet device according to the first external network information, wherein the verification request is used to request the intranet device to verify whether the first external network information comes from the target encapsulation information obtained after being signed by the intranet device.

[0116] The authentication message receiving unit 604 is used to determine that the first external network information verification has passed when receiving the authentication message corresponding to the verification request, and provide the external network information of the internal network device to other devices according to the target encapsulation information, wherein the other device is any device other than the verification server and the information server.

[0117] In some embodiments, the initial signature information is at least obtained by signing the original ciphertext of the original external network information by the information server, and the original ciphertext is obtained by encrypting the original external network information by the information server through a preset encryption algorithm; when the external network information obtaining unit 602 obtains the first external network information corresponding to the original external network information according to the target encapsulation information, it can be used to: perform corresponding signature verification processing on the target encapsulation information to obtain the initial signature information; and, perform corresponding signature verification processing on the initial signature information to obtain the original ciphertext; obtain the target decryption key provided by the information server, and use the target decryption key to decrypt the original ciphertext to obtain the first external network information.

[0118] In some embodiments, the initial signature information is at least obtained by signing the original ciphertext and the key verification value by the information server, and the key verification value is the hash value of the target decryption key calculated using a preset hash algorithm; the device 600 also includes a first verification unit, which is used to: after obtaining the target decryption key, calculate the current verification value of the obtained target decryption key based on the preset hash algorithm; when it is determined that the current verification value and the key verification value are consistent, execute the decryption processing of the original ciphertext using the target decryption key to obtain the first external network information step.

[0119] In some embodiments, the initial signature information is at least obtained by signing the original ciphertext, the verification function information and the original verification value by the information server, and the original verification value is the verification value obtained by the information server after calculating and processing the original external network information according to the verification function indicated by the verification function information; the device 600 also includes a second verification unit, which is used to: use the verification function indicated by the verification function information to calculate and process the first external network information to obtain a target verification value; when the original verification value and the target verification value are consistent, execute the step of sending a verification request to the internal network device according to the first external network information.

[0120] In some embodiments, the target encapsulation information is at least obtained by signing the initial signature information and the information identifier by the intranet device, and the information identifier is used to identify the target encapsulation information; when the request unit 603 sends a verification request to the intranet device according to the first external network information, it can be used to: establish a communication connection with the intranet device according to the first external network information; generate a verification request according to the target encapsulation information and / or the information identifier; based on the communication connection, send a verification request to the intranet device, wherein the target encapsulation information and / or the information identifier in the verification request is used for the intranet device to compare with the target encapsulation information and / or the information identifier stored in itself, so as to verify whether the first external network information comes from the target encapsulation information.

[0121] In some embodiments, the target encapsulated information is at least obtained by signing the initial signature information, the information identifier, the verification question uniquely corresponding to the information identifier, and the problem-solving time limit by the intranet device; the authentication message is generated after being signed by the intranet device; the authentication message receiving unit 604 determines that the first external network information verification has passed when receiving the authentication message corresponding to the verification request, and can be used to: verify the authentication message; when it is determined that the authentication message comes from the intranet device based on the signature verification, obtain the verification answer provided by the intranet device from the authentication message after the signature verification; when the verification answer solves the verification problem, obtain the acquisition time limit corresponding to the verification answer based on the sending time of the verification request and the receiving time of the authentication message; and, when the acquisition time limit is less than or equal to the problem-solving time limit, determine that the first external network information verification has passed.

[0122] Figure 7 A block diagram of another information processing device provided by an embodiment of the present disclosure.

[0123] Reference Figure 7 The embodiment of the present disclosure provides another information processing device 700, which is applied to an intranet device. The information processing device 700 includes: a receiving unit 701, a signature unit 702 and an authentication unit 703.

[0124] The receiving unit 701 is used to receive initial signature information, wherein the initial signature information is obtained by signing the original external network information of at least the internal network device by the information server, and the information server corresponds to the internal network device and stores the original external network information of the internal network device.

[0125] The signing unit 702 is used to perform a signing process on the initial signature information, obtain target encapsulation information, and provide the target encapsulation information to the information server.

[0126] The authentication unit 703 is used to generate an authentication message by verifying whether the first external network information comes from the target encapsulation information when receiving a verification request generated and sent by the verification server based on the first external network information, and send the authentication message to the verification server.

[0127] In some embodiments, when the signature unit 702 performs a signature process on the initial signature information and obtains the target encapsulated information, it can be used to: obtain an information identifier used to identify the target encapsulated information, and obtain a verification question and a time limit for solving the question that uniquely corresponds to the information identifier; perform a signature process on the initial signature information, the information identifier, the verification question and the time limit for solving the question to obtain the target encapsulated information, and store a verification answer corresponding to the information identifier, wherein the verification answer corresponds to the verification question; generate an authentication message by verifying whether the first external network information comes from the target encapsulated information, including: obtaining the information identifier of the target encapsulated information from the verification request, and obtaining the verification answer based on the information identifier; and generating an authentication message based on the verification answer.

[0128] Figure 8 A block diagram of an electronic device provided in an embodiment of the present disclosure.

[0129] Reference Figure 8 An embodiment of the present disclosure provides an electronic device, which includes: at least one processor 801; at least one memory 802, and one or more I / O interfaces 803, connected between the processor 801 and the memory 802; wherein the memory 802 stores one or more computer programs that can be executed by the at least one processor 801, and the one or more computer programs are executed by the at least one processor 801, so that the at least one processor 801 can execute the information processing method of any of the above-mentioned embodiments.

[0130] The present disclosure also provides a computer-readable storage medium on which a computer program is stored, wherein the computer program implements the information processing method of any of the above embodiments when executed by a processor. The computer-readable storage medium may be a volatile or non-volatile computer-readable storage medium.

[0131] The embodiments of the present disclosure also provide a computer program product, including a computer-readable code, or a non-volatile computer-readable storage medium carrying the computer-readable code. When the computer-readable code runs in a processor of an electronic device, the processor in the electronic device executes the information processing method of any one of the above embodiments.

[0132] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In a hardware implementation, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or may be implemented as hardware, or may be implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable storage medium, which may include a computer storage medium (or a non-transitory medium) and a communication medium (or a temporary medium).

[0133] As is known to those of ordinary skill in the art, the term computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable program instructions, data structures, program modules or other data). Computer storage media include, but are not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), static random access memory (SRAM), flash memory or other memory technology, portable compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer. In addition, it is known to those of ordinary skill in the art that communication media typically contain computer-readable program instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transmission mechanism, and may include any information delivery medium.

[0134] The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network can include copper transmission cables, optical fiber transmissions, wireless transmissions, routers, firewalls, switches, gateway computers, and / or edge servers. The network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in the computer-readable storage medium in each computing / processing device.

[0135] The computer program instructions for performing the operation of the present disclosure may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages, such as Smalltalk, C++, etc., and conventional procedural programming languages, such as "C" language or similar programming languages. Computer-readable program instructions may be executed completely on a user's computer, partially on a user's computer, as an independent software package, partially on a user's computer, partially on a remote computer, or completely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect via the Internet). In some embodiments, an electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA), may be customized by utilizing the state information of the computer-readable program instructions, and the electronic circuit may execute the computer-readable program instructions, thereby realizing various aspects of the present disclosure.

[0136] The computer program product described herein may be implemented in hardware, software, or a combination thereof. In one optional embodiment, the computer program product is embodied as a computer storage medium, and in another optional embodiment, the computer program product is embodied as a software product, such as a software development kit (SDK), etc.

[0137] Various aspects of the present disclosure are described herein with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to the embodiments of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer-readable program instructions.

[0138] These computer-readable program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so as to produce a machine, so that when these instructions are executed by the processor of the computer or other programmable data processing device, a device for implementing the functions / actions specified in one or more boxes in the flowchart and / or block diagram is generated. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions make the computer, programmable data processing device, and / or other equipment work in a specific manner, so that the computer-readable medium storing the instructions includes a manufactured product, which includes instructions for implementing various aspects of the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0139] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operating steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to implement the functions / actions specified in one or more boxes in the flowchart and / or block diagram.

[0140] The flow chart and block diagram in the accompanying drawings show the possible architecture, function and operation of the system, method and computer program product according to multiple embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a part of a module, program segment or instruction, and a part of the module, program segment or instruction includes one or more executable instructions for realizing the specified logical function. In some alternative implementations, the function marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two continuous square boxes can actually be executed substantially in parallel, and they can sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs the specified function or action, or can be implemented with a combination of special hardware and computer instructions.

[0141] Example embodiments have been disclosed herein, and although specific terms are employed, they are used and should be interpreted only in a general illustrative sense and not for limiting purposes. In some instances, it will be apparent to those skilled in the art that, unless otherwise expressly noted, features, characteristics, and / or elements described in conjunction with a particular embodiment may be used alone or in combination with features, characteristics, and / or elements described in conjunction with other embodiments. Therefore, those skilled in the art will appreciate that various changes in form and detail may be made without departing from the scope of the present disclosure as set forth in the appended claims.

Claims

1. An information processing method, characterized in that: Applied to a verification server, the method comprises: Obtain target encapsulation information corresponding to the intranet device, wherein the target encapsulation information is obtained by the intranet device signing at least initial signature information, the initial signature information is obtained by at least signing the original ciphertext of the original external network information of the intranet device by the information server, the original ciphertext is obtained by the information server encrypting the original external network information by a preset encryption algorithm, the information server corresponds to the intranet device and stores the original external network information of the intranet device; According to the target encapsulation information, obtaining first external network information corresponding to the original external network information; Sending a verification request to the intranet device according to the first external network information, wherein the verification request is used to request the intranet device to verify whether the first external network information comes from the target encapsulation information obtained after being signed by the intranet device; Upon receiving the authentication message corresponding to the verification request, determining that the first external network information verification has passed, and providing the external network information of the internal network device to other devices according to the target encapsulation information, wherein the other device is any device other than the verification server and the information server; The obtaining, according to the target encapsulation information, first external network information corresponding to the original external network information includes: Performing corresponding signature verification processing on the target encapsulation information to obtain the initial signature information; and, Performing corresponding signature verification processing on the initial signature information to obtain the original ciphertext; A target decryption key provided by the information server is obtained, and the original ciphertext is decrypted using the target decryption key to obtain the first external network information.

2. The method according to claim 1, characterized in that The initial signature information is at least obtained by the information server signing the original ciphertext and a key check value, where the key check value is a hash value of the target decryption key calculated using a preset hash algorithm; After obtaining the target decryption key, the method further includes: Calculating the current check value of the target decryption key obtained based on the preset hash algorithm; When it is determined that the current check value is consistent with the key check value, the step of decrypting the original ciphertext using the target decryption key to obtain the first external network information is performed.

3. The method according to claim 1, characterized in that The initial signature information is at least obtained by the information server signing the original ciphertext, the verification function information and the original verification value, and the original verification value is a verification value obtained by the information server calculating and processing the original external network information according to the verification function indicated by the verification function information; Before the step of sending a verification request to the intranet device according to the first external network information, the method further includes: Using the verification function indicated by the verification function information to perform calculation processing on the first external network information, to obtain a target verification value; When the original verification value is consistent with the target verification value, the step of sending a verification request to the intranet device according to the first external network information is executed.

4. The method according to claim 1, characterized in that: The target encapsulation information is at least obtained by the intranet device signing the initial signature information and the information identifier, and the information identifier is used to identify the target encapsulation information; The sending a verification request to the intranet device according to the first external network information includes: Establishing a communication connection with the intranet device according to the first external network information; Generate the verification request according to the target encapsulation information and / or the information identifier; Based on the communication connection, the verification request is sent to the intranet device, wherein the target encapsulation information and / or the information identifier in the verification request is used for the intranet device to compare with the target encapsulation information and / or information identifier stored in itself, so as to verify whether the first external network information comes from the target encapsulation information.

5. The method according to claim 4, characterized in that The target encapsulated information is at least obtained by the intranet device signing the initial signature information, the information identifier, the verification question uniquely corresponding to the information identifier, and the time limit for solving the question; The determining that the first external network information verification passes when the authentication message corresponding to the verification request is received includes: Obtaining a verification answer provided by the intranet device from the authentication message; In the case where the verification answer solves the verification question, based on the sending time of the verification request and the receiving time of the authentication message, obtaining a time limit corresponding to the verification answer; and, When the acquisition time limit is less than or equal to the problem-solving time limit, it is determined that the first external network information verification has passed.

6. The method according to claim 1, characterized in that The authentication message is generated after being signed by the intranet device; The determining that the first external network information verification passes when the authentication message corresponding to the verification request is received includes: Performing signature verification on the authentication message; When it is determined according to the signature verification process that the authentication message comes from the intranet device, it is determined that the first external network information verification has passed.

7. The method according to claim 1, characterized in that Providing the external network information of the internal network device to other devices according to the target encapsulation information includes at least one of the following: directly providing the first external network information to the other device; Encrypting the first external network information using the public key of the other device, and providing the encrypted first external network information to the other device, so that the other device obtains the first external network information based on the corresponding private key through the encrypted first external network information; The target decryption key is encrypted using the public key of the other device, and the encrypted target decryption key is provided to the other device, so that the other device obtains the target decryption key based on the corresponding private key through the encrypted target decryption key, and obtains the first external network information from the target encapsulation information according to the target decryption key.

8. The method according to claim 1, characterized in that The obtaining of target encapsulation information corresponding to the intranet device includes at least one of the following: Obtaining the target encapsulation information from the intranet device; Obtaining the target encapsulation information from the information server, wherein the target encapsulation information in the information server is provided by the intranet device, or obtained by the information server from a blockchain network; the blockchain network corresponds to the intranet device, the information server, and the verification server; The target encapsulation information is obtained from the blockchain network, wherein the target encapsulation information in the blockchain network is provided by the intranet device or the information server that pre-obtains the target encapsulation information.

9. The method according to claim 1, characterized in that: The number of the verification servers is multiple; and when receiving the authentication message corresponding to the verification request, determining that the first external network information verification has passed includes: In the case that the plurality of verification servers all receive the authentication message, it is determined that the first external network information verification has passed; or, When the ratio of the first number to the second number is greater than or equal to a preset threshold, it is determined that the first external network information verification has passed, wherein the first number is the number of verification servers that have received the authentication message, and the second number is the total number of multiple verification servers.

10. The method according to claim 1, characterized in that The verification server is jointly designated by the information server and the intranet device, or is randomly selected and determined based on a random algorithm from a plurality of candidate verification servers jointly designated by the information server and the intranet device.

11. An information processing method, characterized in that: Applied to an intranet device, the method comprises: Receive initial signature information, wherein the initial signature information is at least obtained by signing the original ciphertext of the original external network information of the internal network device by an information server, and the information server corresponds to the internal network device and stores the original external network information of the internal network device; Performing signature processing on the initial signature information to obtain target encapsulation information, and providing the target encapsulation information to the information server; and Upon receiving a verification request generated and sent by the verification server based on the first external network information, generating an authentication message by verifying whether the first external network information comes from the target encapsulation information, and sending the authentication message to the verification server; The step of performing signature processing on the initial signature information to obtain target encapsulation information includes: Obtaining an information identifier for identifying the target package information, and obtaining a verification question and a time limit for solving the question that uniquely corresponds to the information identifier; Performing signature processing on the initial signature information, the information identifier, the verification question and the problem-solving time limit to obtain the target encapsulated information, and storing a verification answer corresponding to the information identifier, wherein the verification answer corresponds to the verification question; The first external network information is obtained by the verification server decrypting the original ciphertext using the target decryption key. The target decryption key is provided by the information server to the verification server. The original ciphertext is obtained by the verification server performing corresponding signature verification on the initial signature information.

12. The method according to claim 11, characterized in that The generating of the authentication message by verifying whether the first external network information comes from the target encapsulation information includes: Obtaining the information identifier of the target encapsulation information from the verification request, and obtaining the verification answer according to the information identifier; The authentication message is generated according to the verification answer.

13. An information processing device, characterized in that: Applied to a verification server, the device comprises: a target encapsulation information acquisition unit, configured to acquire target encapsulation information corresponding to an intranet device, wherein the target encapsulation information is obtained by the intranet device signing at least initial signature information, the initial signature information is obtained by at least an information server signing an original ciphertext of original external network information of the intranet device, the original ciphertext is obtained by the information server encrypting the original external network information by a preset encryption algorithm, the information server corresponds to the intranet device and stores the original external network information of the intranet device; An external network information obtaining unit, configured to obtain first external network information corresponding to the original external network information according to the target encapsulation information; A request unit, configured to send a verification request to the intranet device according to the first external network information, wherein the verification request is used to request the intranet device to verify whether the first external network information comes from the target encapsulation information obtained after being signed by the intranet device; an authentication message receiving unit, configured to determine that the first external network information has been verified upon receiving an authentication message corresponding to the verification request, and provide the external network information of the internal network device to other devices according to the target encapsulation information, wherein the other device is any device other than the verification server and the information server; When the external network information obtaining unit obtains the first external network information corresponding to the original external network information according to the target encapsulation information, it can be used to: Performing corresponding signature verification processing on the target encapsulation information to obtain the initial signature information; and, Performing corresponding signature verification processing on the initial signature information to obtain the original ciphertext; A target decryption key provided by the information server is obtained, and the original ciphertext is decrypted using the target decryption key to obtain the first external network information.

14. An electronic device, characterized in that: include: at least one processor; as well as a memory communicatively connected to the at least one processor; wherein, The memory stores one or more computer programs executable by the at least one processor, and the one or more computer programs are executed by the at least one processor to enable the at least one processor to perform the information processing method according to any one of claims 1 to 12.

15. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the computer program implements the information processing method according to any one of claims 1 to 12.

Images