Information processing method and device, equipment, storage medium and product

Abstract

The application provides an information processing method, device, equipment, storage medium and product, belongs to the technical field of access control, and the method comprises the steps of receiving business information and a first signature sent by a publisher client, wherein the first signature is a signature obtained by the publisher client from a security center in advance; calling the security center to verify the first signature according to the business information; if the verification is passed, calling the security center to encrypt the business information to obtain encrypted business information; receiving an information acquisition request sent by a subscriber client, determining the encrypted business information subscribed by the subscriber client; sending the encrypted business information subscribed by the subscriber client to the subscriber client, and calling the security center to decrypt the subscribed encrypted business information to obtain the subscribed business information. According to the method, the security center is called to perform verification, encryption and decryption processing, message middleware processing is not needed, and the data security can be effectively improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of access control, and particularly relates to an information processing method and device, equipment, a storage medium and a product. BACKGROUND

[0002] Kafka is an open source stream processing platform developed by the Apache Software Foundation, which is written in Scala and Java. Kafka is an open source distributed event stream platform used by companies for high-performance data pipelines, stream analysis, data integration and relational task applications. Kafka is essentially a high-efficiency, high-throughput distributed publish / subscribe message queue system.

[0003] The security mechanism of Kafka includes three parts of encryption, authorization and authentication, wherein the encryption refers to that data or messages need to be encrypted by using SSL or TLS in the transmission process, so as to ensure the availability, integrity and confidentiality of the data / messages.

[0004] However, as an open source message queue middleware Kafka, the security mechanism provided is widely known, and if a security vulnerability occurs, it is vulnerable to attacks, and the configured key information is on the local machine, if a hacker obtains access permission of the machine room, the user's certificate is easily obtained, and the data of Kafka is obtained. SUMMARY

[0005] The present application provides an information processing method, device, equipment, storage medium and product, to solve the problem of low security of the existing message middleware and data leakage.

[0006] In a first aspect, the present application provides an information processing method, comprising:

[0007] receiving business information sent by a publisher client and a first signature corresponding to the business information, wherein the first signature is a signature pre-acquired by the publisher client from a security center;

[0008] calling the security center to verify the first signature according to the business information;

[0009] if it is determined that the first signature verification is passed, calling the security center to perform encryption processing on the business information to obtain encrypted business information;

[0010] receiving an information acquisition request sent by a subscriber client, and determining encrypted business information subscribed by the subscriber client;

[0011] The encrypted service information subscribed by the subscriber client is sent to the subscriber client, so that the subscriber client calls the security center to decrypt the encrypted service information of the subscription, and obtains the subscribed service information.

[0012] In a second aspect, the present application provides an information processing device, comprising:

[0013] The transceiver unit is configured to receive service information and a first signature corresponding to the service information sent by the publisher client, the first signature being a signature obtained by the publisher client from the security center in advance;

[0014] The processing unit is configured to call the security center to verify the first signature according to the service information;

[0015] The processing unit is further configured to, if it is determined that the first signature is verified, call the security center to encrypt the service information, and obtain encrypted service information;

[0016] The transceiver unit is further configured to receive an information acquisition request sent by the subscriber client;

[0017] The processing unit is further configured to determine encrypted service information subscribed by the subscriber client;

[0018] The transceiver unit is further configured to send the encrypted service information subscribed by the subscriber client to the subscriber client, so that the subscriber client calls the security center to decrypt the encrypted service information of the subscription, and obtains the subscribed service information.

[0019] In a third aspect, the present application provides an electronic device, comprising a processor, a memory and a transceiver;

[0020] The processor, the memory and the transceiver circuit are interconnected;

[0021] The memory stores computer execution instructions;

[0022] The transceiver is configured to transceive data;

[0023] The processor executes the computer execution instructions stored in the memory, so that the processor executes the method of the first aspect.

[0024] In a fourth aspect, the present application provides a computer readable storage medium, the computer readable storage medium stores computer execution instructions, and the computer execution instructions are executed by the processor to implement the method of the first aspect.

[0025] In a fifth aspect, the present application provides a computer program product, comprising a computer program, which is executed by the processor to implement the method of the first aspect.

[0026] The information processing method, device, equipment, storage medium and product provided by the present application receive the business information and the first signature corresponding to the business information sent by the publisher client, the first signature is the signature obtained by the publisher client from the security center in advance; call the security center to verify the first signature according to the business information; if it is determined that the first signature verification is passed, call the security center to encrypt the business information, obtain the encrypted business information; receive the information acquisition request sent by the subscriber client, determine the encrypted business information subscribed by the subscriber client; send the encrypted business information subscribed by the subscriber client to the subscriber client, so that the subscriber client calls the security center to decrypt the encrypted business information subscribed, obtains the subscribed business information, and through the verification, encryption and decryption processing of the security center, the message middleware is not required to perform verification, encryption and decryption processing locally, which can effectively improve the security of data and also ensure the security of message transmission. BRIEF DESCRIPTION OF DRAWINGS

[0027] The accompanying drawings, which are incorporated herein and constitute part of the specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0028] Figure 1 The network architecture schematic diagram of the information processing method provided by the present application;

[0029] Figure 2 The flowchart schematic diagram of the information processing method provided by the present application;

[0030] Figure 3 The flowchart schematic diagram of another information processing method provided by the present application;

[0031] Figure 4 The flowchart schematic diagram of another information processing method provided by the present application;

[0032] Figure 5 The structure schematic diagram of the information processing device provided by the present application;

[0033] Figure 6 The first block diagram of the electronic equipment for implementing the information processing method of the embodiments of the present application;

[0034] Figure 7 The second block diagram of the electronic equipment for implementing the information processing method of the embodiments of the present application.

[0035] The specific embodiments of the application have been shown and described in the above drawings and the following description. These drawings and description are not meant to limit the scope of the application in any way but are merely to illustrate the principles of the application to one of ordinary skill in the art. DETAILED DESCRIPTION

[0036] The exemplary embodiments will be described in detail herein with reference to the attached drawings. The description of the exemplary embodiments is intended to apply to various alternative embodiments as well. The following description is not meant to limit the scope of the application in any way but is merely to illustrate the principles of the application to one of ordinary skill in the art.

[0037] In the technical solution of the present application, the collection, storage, use, processing, transmission, provision and disclosure of information such as financial data and user data comply with relevant laws and regulations and do not violate public order and good customs.

[0038] In order to clearly understand the technical solution of the present application, the prior art solution will be described in detail.

[0039] The security mechanism of Kafka includes three parts: encryption, authorization and authentication. Encryption refers to the encryption of data or messages during transmission using SSL or TLS to ensure the availability, integrity and confidentiality of data / messages. Authentication refers to the authentication of publishers, consumers, servers or other tools at all times during data interaction, and the method used mostly relies on public and private keys and certificates. Authorization refers to the granting of permissions to users, which generally relies on completed authentication. Authorization and authentication usually occur together.

[0040] However, the security mechanism provided by Kafka, an open source message queue middleware, is widely known, and if a security vulnerability occurs, it is vulnerable to attack. Moreover, the key information configured is on the local machine, and if a hacker obtains access to the machine room, it is easy to obtain the user's certificate and obtain Kafka data.

[0041] Therefore, in order to solve the problem of low security and data leakage in the prior art based on the message middleware, the inventor finds that a security center is set up, the security center performs signature verification, encryption and decryption processing, receives business information sent by a publisher client and a first signature corresponding to the business information, the first signature is a signature obtained by the publisher client from the security center in advance, the security center is called to perform signature verification on the first signature according to the business information, if it is determined that the first signature is verified, the security center is called to perform encryption processing on the business information, encrypted business information is obtained, an information acquisition request sent by a subscriber client is received, encrypted business information of the subscriber client is determined, and the encrypted business information is sent to the subscriber client, the security center is called by the subscriber client to perform decryption processing on the subscribed encrypted business information, and the subscribed business information is obtained. By calling the security center to perform signature verification, encryption and decryption processing, the message middleware does not need to perform signature verification, encryption and decryption processing locally, the security of the data can be effectively improved, and the security of message transmission is also ensured.

[0042] Therefore, based on the above creative finding, the inventor proposes the technical scheme of the embodiments of the present application. The network architecture and application scenarios of the information processing method provided by the embodiments of the present application are introduced below.

[0043] As shown in Figure 1 The network architecture corresponding to the information processing method provided by the embodiments of the present application includes a publisher client 1, a Kafka server 2, a server 3 corresponding to a security center and a subscriber client 4. The Kafka server 2 receives business information sent by the publisher client 1 and a first signature corresponding to the business information, the first signature is a signature obtained by the publisher client 1 from the server 3 corresponding to the security center in advance, the server 3 corresponding to the security center is called to perform signature verification on the first signature according to the business information, if it is determined that the first signature is verified, the server 3 corresponding to the security center is called by the Kafka server 2 to perform encryption processing on the business information, and encrypted business information is obtained, the Kafka server 2 receives an information acquisition request sent by the subscriber client 4, determines encrypted business information subscribed by the subscriber client 4, sends the encrypted business information subscribed by the subscriber client 4 to the subscriber client 4, and the subscriber client 4 calls the server 3 corresponding to the security center to perform decryption processing on the subscribed encrypted business information, and obtains the subscribed business information. By calling the security center to perform signature verification, encryption and decryption processing, the message middleware does not need to perform signature verification, encryption and decryption processing locally, the security of the data can be effectively improved, and the security of message transmission is also ensured.

[0044] The embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0045] Figure 2A flowchart of an information processing method provided in the present application is shown in the figure. The method is applied to an electronic device. The electronic device can be a digital computer in various forms, such as a cellular phone, a smart phone, a laptop computer, a desktop computer, a workstation, a personal digital assistant, a server, a blade server, a mainframe computer, and other suitable computers. As shown in Figure 2 The method includes the following steps:

[0046] In step 201, the electronic device receives the business information sent by the publisher client and the first signature corresponding to the business information. The first signature is a signature obtained by the publisher client from the security center in advance.

[0047] In this embodiment, the electronic device can be a Kafka server. The Kafka server is connected to the security center and the publisher client, and the publisher client is connected to the security center. The Kafka server receives the business information sent by the publisher client and the first signature corresponding to the business information. The first signature is a signature obtained by the publisher client from the security center in advance. Specifically, the publisher client sends the business information and a security node identifier to the security center. Each publisher client, Kafka server, and subscriber client has a unique identifier. The security center signs the business information and security node identifier to obtain the first signature, and feeds back the first signature to the publisher client. The business information can be a prompt information of a bank card balance, or other customer information, maintenance information, etc.

[0048] In step 202, the security center verifies the first signature according to the business information.

[0049] In this embodiment, the Kafka server calls the security center to verify the first signature corresponding to the business information. The purpose of verification is to verify whether the business information has been tampered with during transmission. The Kafka server calls the security center to verify the first signature to determine whether the first signature is verified.

[0050] In step 203, if it is determined that the first signature is verified, the security center is called to encrypt the business information to obtain encrypted business information.

[0051] In this embodiment, if it is determined that the first signature is verified, it means that the business information has not been tampered with. In order to further prevent the leakage of business information, the security center is called to encrypt the business information to obtain encrypted business information, and the encrypted business information is stored locally.

[0052] In step 204, the information acquisition request sent by the subscriber client is received, and the encrypted business information subscribed by the subscriber client is determined.

[0053] In this embodiment, the Kafka server is also connected with the subscriber client, and the subscriber client is connected with the security center. An information acquisition request sent by the subscriber client is received, and encrypted business information subscribed by the subscriber client is determined. In fact, the subscriber subscribes to the business information, but the business information is encrypted, so determining the encrypted business information subscribed by the subscriber client is equivalent to determining the business information subscribed by the subscriber.

[0054] In step 205, the encrypted business information subscribed by the subscriber client is sent to the subscriber client, so that the subscriber client calls the security center to perform decryption processing on the subscribed encrypted business information, and obtains the subscribed business information.

[0055] In this embodiment, after the encrypted business information subscribed by the subscriber client is determined, the encrypted business information subscribed by the subscriber client is sent to the subscriber client, the subscriber client calls the security center to perform decryption processing on the subscribed encrypted business information, and obtains the subscribed business information. Specifically, the subscriber client sends the encrypted business information to the security center, the security center performs decryption processing on the encrypted business information to obtain the business information, and feeds back the business information to the subscriber client.

[0056] In this application, the business information and the first signature corresponding to the business information sent by the publisher client are received, the first signature is a signature pre-acquired by the publisher client from the security center, the security center is called to verify the first signature according to the business information, if it is determined that the first signature verification is passed, the security center is called to perform encryption processing on the business information to obtain encrypted business information, the information acquisition request sent by the subscriber client is received, the encrypted business information of the subscriber client is determined, and the encrypted business information is sent to the subscriber client. The subscriber client calls the security center to perform decryption processing on the subscribed encrypted business information, and obtains the subscribed business information. By calling the security center to perform signature verification, encryption and decryption processing, there is no need for the message middleware to perform signature verification, encryption and decryption processing locally, which can effectively improve the security of data and also ensure the security of message transmission.

[0057] Figure 3 Another flowchart of an information processing method provided by the present application is shown in the figure. The method is applied to an electronic device, such as Figure 3 The method comprises the following steps:

[0058] In step 301a, a connection request sent by a publisher client or a subscriber client is received, and the connection request is triggered based on a local server address.

[0059] In the embodiment, the publisher client obtains the address of the Kafka server from the service configuration center, connects with the Kafka server based on the address of the server, and receives the connection request sent by the publisher client or the subscriber client.

[0060] In step 301b, the connection is created according to the connection request and the publisher client or the subscriber client.

[0061] In the embodiment, the Kafka server creates the connection according to the connection request and the publisher client or the subscriber client, and the publisher sends the business information to the subscriber through the Kafka message middleware.

[0062] In step 301, the business information sent by the publisher client and the first signature corresponding to the business information are received, and the first signature is a signature obtained by the publisher client from the security center in advance.

[0063] In the embodiment, step 301 has the same technical features as step 201, and the specific description can be referred to step 201, which is not described here.

[0064] In step 302, the security center is called to verify the first signature according to the business information.

[0065] In a possible implementation, the security center is called to verify the first signature according to the business information, including:

[0066] In step 3021, the security node identifier corresponding to the publisher client is obtained.

[0067] In the embodiment, the security node identifier corresponding to the publisher client is obtained, and the security node identifier is a unique identifier, such as a security node number corresponding to each publisher client.

[0068] In step 3022, the security center is called to verify the first signature according to the security node identifier and the business information.

[0069] In the embodiment, the first signature is generated and sent to the publisher client by the server corresponding to the security center according to the security node identifier and the business information obtained by the publisher client. Specifically, when the publisher client has business messages to send to the subscriber client, the publisher client sends the security node identifier and the business information to the server corresponding to the security center, the server corresponding to the security center performs signing processing according to the business information and the security node identifier of the publisher client to obtain the first signature, and the server corresponding to the security center feeds back the first signature to the publisher client. The publisher client sends the first signature and the business information fed back by the server corresponding to the security center to the Kafka server. The Kafka server calls the security center to verify the first signature according to the security node identifier corresponding to the publisher client and the business information.

[0070] Optionally, the security center is invoked to verify the first signature according to the security node identifier and the service information, including:

[0071] The security node identifier, the service information and the first signature are sent to a server corresponding to the security center, so that the server corresponding to the security center performs signing processing on the security node identifier and the service information to obtain a second signature, and the security center compares the second signature with the first signature. If the first signature is consistent with the second signature, a prompt information of verification passed is fed back.

[0072] In this embodiment, the Kafka server sends the security node identifier corresponding to the publisher client, the service information and the first signature to the server corresponding to the security center. Specifically, the api interface of the security center is invoked for sending. The server corresponding to the security center performs signing processing on the security node identifier corresponding to the publisher client and the service information to obtain a second signature. The server corresponding to the security center compares the second signature with the first signature. If the second signature is consistent with the first signature, it indicates that the service information has not been tampered with in the transmission process, and further, a prompt information of verification passed is fed back. The Kafka server receives the prompt information of verification passed, determines that the first signature is verified, and further encrypts the service information.

[0073] Step 303, if it is determined that the first signature is verified, the security center is invoked to perform encryption processing on the service information to obtain encrypted service information.

[0074] In a possible implementation, the security center is invoked to perform encryption processing on the service information to obtain encrypted service information, including:

[0075] Step 3031, the local security node identifier and the service information are sent to the server corresponding to the security center, so that the server corresponding to the security center performs encryption processing on the service information by using the local security node identifier, and feedbacks the encrypted service information.

[0076] In this embodiment, the Kafka server sends the local security node identifier and the service information to the server corresponding to the security center. The server corresponding to the security center performs encryption processing on the service information by using the local security node identifier, and feeds back the encrypted service information to the Kafka server.

[0077] Step 3032, the encrypted service information sent by the server corresponding to the security center is received and stored locally.

[0078] In this embodiment, the Kafka server receives the encrypted service information sent by the server corresponding to the security center and stores it locally, so that the subscriber client can obtain the related service information.

[0079] In step 304, the information acquisition request sent by the subscriber client is received, and the encrypted service information to which the subscriber client subscribes is determined.

[0080] In a possible implementation, the encrypted service information to which the subscriber client subscribes is determined, including:

[0081] In step 3041, the subscriber identifier corresponding to each publisher is acquired according to the message header corresponding to each publisher, and the message header is obtained by analyzing the service information.

[0082] In this embodiment, the service information is composed of a message header and a message body, the message header and the message body are obtained by analyzing the received service information, the message header is set by the publisher client, and the message header is set based on routing information, message type information, message identifier information, and message source information. According to the message header corresponding to each publisher, the subscriber identifier corresponding to the publisher is acquired, and the subscriber refers to a user who subscribes to the service information.

[0083] In step 3042, the identifier of the subscriber client is matched with the subscriber identifier corresponding to the publisher, and the encrypted service information to which the subscriber client subscribes is determined according to the identifier matching result.

[0084] In this embodiment, the identifier of the subscriber client is matched with the subscriber identifier corresponding to the publisher, and the encrypted service information to which the subscriber client subscribes is further determined according to the identifier matching result.

[0085] Optionally, the encrypted service information corresponding to the subscriber client is determined according to the identifier matching result, including:

[0086] If the identifier of the subscriber client matches the subscriber identifier corresponding to the publisher, the encrypted service information of the publisher corresponding to the matched subscriber identifier is determined as the encrypted service information to which the subscriber client subscribes.

[0087] In this embodiment, if the identifier of the subscriber client matches the subscriber identifier corresponding to the publisher, it indicates that the subscriber client subscribes to the service information of the publisher, the encrypted service information of the publisher corresponding to the matched subscriber identifier is determined as the encrypted service information to which the subscriber client subscribes, and the encrypted service information is further sent to the subscriber client. The subscriber client calls the security center to perform decryption processing on the subscribed encrypted service information, obtains the subscribed service information, specifically, the subscriber client sends the encrypted service information to the server corresponding to the security center, the server corresponding to the security center performs decryption processing on the encrypted service information, obtains the service information, and the server corresponding to the security center feeds back the service information to the subscriber client.

[0088] Step 305, the encrypted service information subscribed by the subscriber client is sent to the subscriber client, so that the subscriber client calls the security center to decrypt the encrypted service information subscribed by the subscriber client, and obtains the service information subscribed.

[0089] In the embodiment, after the encrypted service information subscribed by the subscriber client is determined, the encrypted service information subscribed by the subscriber client is sent to the subscriber client, the subscriber client calls the security center to decrypt the encrypted service information subscribed by the subscriber client, and obtains the service information subscribed. Specifically, the subscriber client sends the encrypted service information to the security center, the security center decrypts the encrypted service information to obtain the service information, and feeds back the service information to the subscriber client. By calling the security center to perform signature verification, encryption and decryption processing, the message middleware does not need to perform signature verification, encryption and decryption processing locally, which can effectively improve the security of data and also ensure the security of message transmission.

[0090] Figure 4 Another flowchart of an information processing method provided in the present application is provided, and the method is applied to an information processing system. As shown in the figure, the method comprises the following steps. Figure 4

[0091] Step 401, the service information sent by the client and the first signature corresponding to the service information are sent to the Kafka server.

[0092] In the embodiment, the service information sent by the client and the first signature corresponding to the service information are sent to the Kafka server. The first signature is a signature obtained by the publisher client from the security center in advance. Specifically, when the publisher client has service information to be sent to the subscriber client, the publisher client sends its own security node identifier and the service information to the server corresponding to the security center. The server corresponding to the security center performs signature verification on the service information and the security node identifier of the publisher client to obtain the first signature. The server corresponding to the security center feeds back the first signature to the publisher client. The publisher client sends the first signature and the service information fed back by the server corresponding to the security center to the Kafka server.

[0093] Step 402, the Kafka server receives the service information and the first signature corresponding to the service information sent by the publisher client, and sends the security node identifier corresponding to the publisher client, the service information and the first signature to the server corresponding to the security center.

[0094] ​In the embodiment, the Kafka server receives the business information and the first signature corresponding to the business information sent by the publisher client, and the Kafka server obtains the security node identifier corresponding to the publisher client, and sends the security node identifier corresponding to the publisher client, the business information and the first signature corresponding to the business information to the server corresponding to the security center, so that the server corresponding to the security center performs signature verification.

[0095] In step 403, the server corresponding to the security center performs signature processing on the security node identifier and the business information to obtain a second signature, and the security center compares the second signature with the first signature. If the first signature is consistent with the second signature, a prompt information of verification passed is fed back.

[0096] In the embodiment, the server corresponding to the security center performs signature processing on the security node identifier corresponding to the publisher client and the business information to obtain a second signature, and the server corresponding to the security center compares the second signature with the first signature. If the second signature is consistent with the first signature, it indicates that the business information has not been tampered with in the transmission process, and further feedback of the prompt information of verification passed. The Kafka server receives the prompt information of verification passed, determines that the first signature is verified, and further encrypts the business information.

[0097] In step 404, if it is determined that the first signature is verified, the Kafka server sends the local security node identifier and the business information to the server corresponding to the security center.

[0098] In the embodiment, if it is determined that the first signature is verified, the Kafka server sends the local security node identifier and the business information to the server corresponding to the security center, and the server corresponding to the security center encrypts the business information by using the local security node identifier and feeds back the encrypted business information to the Kafka server.

[0099] In step 405, the server corresponding to the security center encrypts the business information by using the local security node identifier and feeds back the encrypted business information.

[0100] In the embodiment, the server corresponding to the security center receives the local security node identifier and the business information of the Kafka server, encrypts the business information by using the local security node identifier, and feeds back the encrypted business information.

[0101] In step 406, the Kafka server receives the encrypted business information sent by the server corresponding to the security center and stores it locally.

[0102] In the embodiment, the Kafka server receives the encrypted business information sent by the server corresponding to the security center and stores it locally, so that the subscriber client obtains the related business information.

[0103] Step 407, the information acquisition request sent by the subscriber client to the Kafka server.

[0104] In this embodiment, the information acquisition request sent by the subscriber client to the Kafka server, and the relevant business information subscribed from the Kafka server.

[0105] Step 408, the Kafka server receives the information acquisition request sent by the subscriber client, determines the encrypted business information subscribed by the subscriber client, and sends the encrypted business information subscribed by the subscriber client to the subscriber client.

[0106] In this embodiment, the business information is composed of a message header and a message body, and the message header and the message body are obtained by parsing the received business information. The message header is set by the publisher client, and is set based on routing information, message type information, message identification information, message source information, etc. According to the message header corresponding to each publisher, the subscriber identification corresponding to the publisher is obtained, which refers to the user who subscribes to the business information. The identification of the subscriber client is matched with the subscriber identification corresponding to the publisher, and the encrypted business information subscribed by the subscriber client is further determined according to the identification matching result. Specifically, if the identification of the subscriber client matches the subscriber identification corresponding to the publisher, it means that the subscriber client subscribes to the business information of the publisher, and the encrypted business information of the publisher corresponding to the matched subscriber identification is determined as the encrypted business information subscribed by the subscriber client, and the encrypted business information is further sent to the subscriber client.

[0107]

[0108]

[0109] Step 409, the subscriber client sends the encrypted business information to the server corresponding to the security center.

[0110] In this embodiment, the subscriber client calls the security center to perform decryption processing on the encrypted business information subscribed, and specifically, the subscriber client sends the encrypted business information to the server corresponding to the security center.

[0111] Step 4010, the service corresponding to the security center performs decryption processing on the encrypted business information subscribed, and feeds back the business information to the subscriber client.

[0112] In this embodiment, the service corresponding to the security center performs decryption processing on the encrypted business information subscribed, and obtains the business information, and sends the business information to the subscriber client.

[0113] ​​The application can effectively improve the data security and ensure the message transmission security by calling the security center to perform the signature verification, encryption and decryption processing without the message middleware performing the signature verification, encryption and decryption processing locally.

[0114] Figure 5 A structural schematic diagram of an information processing device provided by the application is shown in FIG. 1. Figure 5 As shown in the figure, the information processing device 500 provided by the embodiment includes a transceiver unit 501 and a processing unit 502.

[0115] The transceiver unit 501 is configured to receive the service information and the first signature corresponding to the service information sent by the publisher client, and the first signature is a signature obtained by the publisher client from the security center in advance. The processing unit 502 is configured to call the security center to perform the signature verification on the first signature according to the service information.

[0116] The processing unit 502 is further configured to call the security center to perform the encryption processing on the service information to obtain the encrypted service information if it is determined that the first signature verification is passed. The transceiver unit 501 is further configured to receive the information acquisition request sent by the subscriber client.

[0117] The processing unit 502 is further configured to determine the encrypted service information subscribed by the subscriber client. The transceiver unit 501 is further configured to send the encrypted service information subscribed by the subscriber client to the subscriber client, so that the subscriber client calls the security center to perform the decryption processing on the subscribed encrypted service information to obtain the subscribed service information.

[0118] Optionally, the processing unit is further configured to obtain the security node identifier corresponding to the publisher client; and call the security center to perform the signature verification on the first signature according to the security node identifier and the service information.

[0119] Optionally, the processing unit is further configured to send the security node identifier, the service information and the first signature to the server corresponding to the security center, so that the server corresponding to the security center performs the signing processing on the security node identifier and the service information to obtain the second signature, the security center compares the first signature with the second signature, and feeds back the prompt information of the verification passed if the first signature is consistent with the second signature.

[0120] Optionally, the processing unit is further configured to send the local security node identifier and the service information to the server corresponding to the security center, so that the server corresponding to the security center performs the encryption processing on the service information by using the local security node identifier, feeds back the encrypted service information, receives the encrypted service information sent by the server corresponding to the security center and stores the encrypted service information locally.

[0121] Optionally, the processing unit is also configured to obtain the subscriber identifier corresponding to the publisher based on the message header corresponding to each publisher, wherein the message header is obtained by parsing business information; match the subscriber client's identifier with the subscriber identifier corresponding to the publisher, and determine the encrypted business information subscribed to by the subscriber client based on the identifier matching result.

[0122] Optionally, the processing unit is further configured to determine the encrypted business information of the publisher corresponding to the matching subscriber identifier as the encrypted business information subscribed to by the subscriber client if the subscriber client's identifier matches the subscriber identifier corresponding to the publisher.

[0123] Optionally, the transceiver unit is further configured to receive connection requests sent by publisher clients or subscriber clients, the connection requests being triggered based on the local server address. The processing unit is further configured to create a connection with the publisher client or subscriber client based on the connection request.

[0124] Figure 6 This is a first block diagram of an electronic device used to implement the information processing method of the embodiments of this application, such as... Figure 6 As shown, the electronic device 600 includes: a memory 601, a processor 602, and a transceiver 603.

[0125] The processor 602, memory 601, and transceiver 603 are interconnected;

[0126] Transceiver 603 is used for sending and receiving data;

[0127] Memory 601 stores computer-executed instructions;

[0128] The processor 602 executes computer execution instructions stored in the memory 601, causing the processor 602 to perform the method provided in any of the above embodiments.

[0129] Figure 7 This is a second block diagram of an electronic device used to implement the information processing method of the embodiments of this application, such as... Figure 7 As shown, the electronic device can be a computer, digital broadcasting terminal, messaging device, tablet device, personal digital assistant, server, server cluster, etc.

[0130] Electronic device 800 may include one or more of the following components: processing component 802, memory 804, power supply component 806, multimedia component 808, audio component 810, input / output (I / O) interface 812, sensor component 814, and communication component 816.

[0131] The processing component 802 generally controls the overall operations of the electronic device 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 can include one or more processors 820 to execute instructions and to complete the steps of the methods described above, in whole or in part. Further, the processing component 802 can include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 can include a multimedia module to facilitate the interaction between the multimedia component 808 and the processing component 802.

[0132] The memory 804 is configured to store various types of data to support the operations of the electronic device 800. Examples of these data include instructions for any application or method operating on the electronic device 800, contact data, phonebook data, messages, pictures, videos, and so on. The memory 804 can be realized by any type of volatile or non-volatile memory devices or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disc, or optical disc.

[0133] The power component 806 provides power to the various components of the electronic device 800. The power component 806 can include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the electronic device 800.

[0134] The multimedia component 808 includes a screen providing an output interface between the electronic device 800 and a user. In some embodiments, the screen can include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes the touch panel, the screen can be implemented as a touch screen to receive an input signal from a user. The touch panel includes one or more touch sensors to sense a touch, a slide, and a gesture on the touch panel. The touch sensor can not only sense a boundary of a touching or a sliding action, but also detect duration and pressure related to the touching or sliding action. In some embodiments, the multimedia component 808 includes a front camera and / or a back camera. The front camera and / or the back camera can receive external multimedia data when the electronic device 800 is in an operating mode, such as a shooting mode or a video mode. Each of the front camera and the back camera can be a fixed optical lens system or have a focal length and optical zoom capability.

[0135] The audio component 810 is configured to output and / or input audio signals. For example, the audio component 810 includes a microphone (MIC) that is configured to receive an external audio signal when the electronic device 800 is in an operation mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signal can be further stored in the memory 804 or transmitted via the communication component 816. In some embodiments, the audio component 810 also includes a speaker for outputting audio signals.

[0136] The I / O interface 812 provides an interface between the processing component 802 and peripheral interface modules, which can include a keypad, a click wheel, buttons, and so on. The buttons can include, but are not limited to, a home button, a volume button, a start button, and a lock button.

[0137] The sensor component 814 includes one or more sensors for providing status assessments of various aspects of the electronic device 800. For example, the sensor component 814 can detect an open / closed position of the electronic device 800, relative positioning of components, such as a display and a keypad of the electronic device 800, a change of position of the electronic device 800 or a component of the electronic device 800, presence or absence of user contact with the electronic device 800, orientation or acceleration / deceleration of the electronic device 800, and temperature changes of the electronic device 800. The sensor component 814 can include an orientation sensor, an acceleration sensor, a proximity sensor, a gesture sensor, a gravity sensor, a biometric sensor, a temperature / humidity sensor, a light sensor, and an ultraviolet (UV) sensor, an electromagnetic sensor, and so on. The sensor component 814 can also include an electronic nose sensor and / or an electronic tongue sensor.

[0138] The communication component 816 is configured to facilitate wired or wireless communication between the electronic device 800 and other devices. The electronic device 800 can access a wireless network based on a communication standard, such as WiFi, 2G, or 3G, or a combination thereof. In an example embodiment, the communication component 816 receives a broadcast signal or broadcast-related information from an external broadcasting management system via a broadcast channel. In an example embodiment, the communication component 816 also includes a near-field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technology.

[0139] In an exemplary embodiment, the electronic device 800 can be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, micro-controllers, microprocessors, or other electronic elements, for performing the above-described methods.

[0140] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions, such as the memory 804 including instructions, is also provided, which can be executed by the processor 820 of the electronic device 800 to complete the above-described methods. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, and an optical data storage device, etc.

[0141] In an exemplary embodiment, a computer-readable storage medium in which computer-executable instructions are stored is also provided, which are executed by a processor to perform the method in any one of the above-described embodiments.

[0142] In an exemplary embodiment, a computer program product including a computer program is also provided, which is executed by a processor to perform the method in any one of the above-described embodiments.

[0143] Other embodiments of the present application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. It is intended that the present application cover any and all variations of the application that come within the scope of the claims and a concept of the application. It is intended that the specification and examples be considered exemplary only, with the true scope and spirit of the application being indicated by the following claims.

[0144] It is to be understood that the application is not limited to the precise construction described and as shown in the attached figures, and that various modifications and changes can be made by those skilled in the art without departing from the scope of the application. The scope of the application is to be determined by the claims appended hereto.

Claims

1. An information processing method, characterized in that, Applied to a Kafka server, the Kafka server is connected to a security center, a publisher client, and a subscriber client, respectively. The publisher client and the subscriber client are each connected to the security center. The method includes: The Kafka server receives business information and a first signature corresponding to the business information sent by the publisher client. The first signature is a signature that the publisher client has obtained from the security center in advance. The Kafka server sends the security node identifier corresponding to the publisher client, the business information, and the first signature to the server corresponding to the security center, so that the server corresponding to the security center can perform signature processing on the security node identifier and the business information to obtain a second signature. The security center compares the second signature with the first signature. If the first signature and the second signature are consistent, a verification success message is returned. If the Kafka server receives a verification success message, it determines that the first signature verification is successful, and sends the local security node identifier and the business information to the server corresponding to the security center, so that the server corresponding to the security center can use the local security node identifier to encrypt the business information and return the encrypted business information. The Kafka server receives encrypted business information sent by the server corresponding to the security center and stores it locally; The Kafka server receives an information retrieval request sent by a subscriber client and determines the encrypted business information subscribed to by the subscriber client. The Kafka server sends the encrypted business information subscribed to by the subscriber client to the subscriber client. The subscriber client then sends the encrypted business information to the server corresponding to the security center, so that the server corresponding to the security center can decrypt the encrypted business information, obtain the subscribed business information, and feed it back to the subscriber client.

2. The method according to claim 1, characterized in that, The first signature is a signature pre-generated by the server corresponding to the security center based on the security node identifier and business information obtained from the publisher client and sent to the publisher client; The method further includes: Obtain the security node identifier corresponding to the publisher client.

3. The method according to claim 1, characterized in that, The determination of the encrypted business information subscribed to by the subscriber client includes: Based on the message headers corresponding to each publisher, obtain the subscriber identifiers corresponding to the publishers. The message headers are obtained by parsing the business information. The identifier of the subscriber client is matched with the subscriber identifier corresponding to the publisher, and the encrypted business information subscribed to by the subscriber client is determined based on the identifier matching result.

4. The method according to claim 3, characterized in that, The step of determining the encrypted business information corresponding to the subscriber client based on the identifier matching result includes: If the subscriber client's identifier matches the subscriber identifier corresponding to the publisher, then the encrypted business information of the publisher corresponding to the matching subscriber identifier is determined as the encrypted business information subscribed to by the subscriber client.

5. The method according to claim 1, characterized in that, The method further includes: Receive connection requests sent by the publisher client or subscriber client, the connection requests being triggered based on the local server address; A connection is established with the publisher client or subscriber client based on the connection request.

6. An information processing device, characterized in that, An apparatus applied to a Kafka server, wherein the Kafka server is connected to a security center, a publisher client, and a subscriber client, and the publisher client and the subscriber client are respectively connected to the security center, the apparatus comprising: The transceiver unit is used to receive business information and a first signature corresponding to the business information sent by the publisher client. The first signature is a signature that the publisher client has obtained from the security center in advance. The processing unit is used to send the security node identifier corresponding to the publisher client, the business information, and the first signature to the server corresponding to the security center, so that the server corresponding to the security center can perform signature processing on the security node identifier and the business information to obtain a second signature. The security center compares the second signature with the first signature. If the first signature and the second signature are consistent, a verification success message is returned. The processing unit is further configured to, if a verification success notification is received, determine that the first signature verification has passed, and send the local security node identifier and the business information to the server corresponding to the security center, so that the server corresponding to the security center can use the local security node identifier to encrypt the business information and return the encrypted business information. Receive encrypted business information sent by the server corresponding to the security center and store it locally; The transceiver unit is also used to receive information retrieval requests sent by subscriber clients; The processing unit is also configured to determine the encrypted business information subscribed to by the subscriber client; The transceiver unit is further configured to send the encrypted service information subscribed to by the subscriber client to the subscriber client, and the subscriber client is configured to send the encrypted service information to the server corresponding to the security center, so that the server corresponding to the security center can decrypt the encrypted service information, obtain the subscribed service information, and feed back the subscribed service information to the subscriber client.

7. An electronic device, comprising: Processor, memory, and transceiver; Interconnection of processor, memory, and transceiver circuits; A transceiver is used to send and receive data. The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory, causing the processor to perform the method as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method as described in any one of claims 1 to 5.

9. A computer program product comprising a computer program that, when executed by a processor, implements the method of any one of claims 1 to 5.

Images