Data processing method and device, equipment, storage medium and computer program product

Abstract

The application discloses a data processing method, device, equipment, storage medium and computer program product, and related embodiments thereof can be applied to cloud technology, artificial intelligence, intelligent transportation, auxiliary driving and the like. The method comprises the following steps: obtaining an identity information acquisition request sent by a terminal device; the identity information acquisition request carries a target application identifier; based on the target application identifier, a target device hidden identifier is allocated to the terminal device; the target application identifier and the target device hidden identifier are subjected to an encryption operation to generate target identity information of the terminal device; the target identity information is used for authenticating the terminal device when the terminal device accesses the target application again; and the target identity information is sent to the terminal device. The method can allocate target identity information with high privacy and high security to the terminal device, which is used for authenticating the terminal device when the terminal device accesses the target application again.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to a data processing method, apparatus, device, storage medium, and computer program product. Background Technology

[0002] With the rapid development of computer technology, various applications have emerged. When a user accesses an application using their terminal device to use the corresponding services provided by the application, the server corresponding to the application usually authenticates the access based on the user's account information and the device information of the terminal device. Only when the authentication is successful will the server respond to the access. However, due to the fact that the device information of the terminal device is easily forged or tampered with, the existing authentication method may not be able to accurately identify malicious access initiated by malicious devices, and thus may also fail to respond to such malicious access. Summary of the Invention

[0003] This application provides a data processing method, apparatus, device, storage medium, and computer program product, which can allocate highly private and secure target identity information to a terminal device for authenticating the terminal device when it accesses the target application again.

[0004] On one hand, embodiments of this application provide a data processing method, including:

[0005] The system obtains an identity information retrieval request sent by the terminal device; the identity information retrieval request carries a target application identifier.

[0006] Based on the target application identifier, a target device hidden identifier is assigned to the terminal device; the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier;

[0007] The target application identifier and the target device hidden identifier are encrypted to generate the target identity information of the terminal device; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again.

[0008] The target identity information is sent to the terminal device.

[0009] On one hand, embodiments of this application provide a data processing apparatus, including:

[0010] The acquisition unit is used to acquire an identity information acquisition request sent by the terminal device; the identity information acquisition request carries a target application identifier;

[0011] The processing unit is configured to assign a target device hidden identifier to the terminal device based on the target application identifier; the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier;

[0012] The processing unit is further configured to encrypt the target application identifier and the target device hidden identifier to generate target identity information of the terminal device; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again.

[0013] The output unit is used to send the target identity information to the terminal device.

[0014] On one hand, embodiments of this application provide a data processing device, characterized in that the data processing device includes an input interface and an output interface, and further includes:

[0015] A processor, adapted to implement one or more instructions; and,

[0016] A computer storage medium storing one or more instructions adapted to be loaded by the processor and executed by the above-described data processing method.

[0017] On one hand, embodiments of this application provide a computer storage medium, characterized in that the computer storage medium stores computer program instructions, which, when executed by a processor, are used to perform the aforementioned data processing method.

[0018] On one hand, embodiments of this application provide a computer program product or a computer program, the computer program product including a computer program stored in a computer storage medium; the processor of the data processing device reads the computer program from the computer storage medium, the processor executes the computer program, causing the data processing device to perform the above-described data processing method.

[0019] In this embodiment, after receiving an identity information acquisition request carrying a target application identifier sent by a terminal device; a target device hidden identifier is assigned to the terminal device based on the target application identifier; the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier; then, the target application identifier and the target device hidden identifier can be encrypted to generate target identity information of the terminal device; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again; and the target identity information is sent to the terminal device. In other words, when a terminal device first accesses a target application, it can be assigned a unique hidden identifier for that access. The target identity information, generated by encrypting both the target application identifier and the hidden identifier, is then sent to the terminal device. This allows the terminal device to be authenticated upon subsequent accesses to the target application based on this target identity information. This target identity information, obtained by encrypting the assigned hidden identifier, offers high privacy and security, making it difficult to forge or tamper with. Therefore, it is a highly private and secure target identity information that can be assigned to a terminal device for authentication upon subsequent accesses to the target application. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 This is a schematic diagram of the structure of a data processing system provided in an embodiment of this application;

[0022] Figure 2 This is a flowchart illustrating a data processing method provided in an embodiment of this application;

[0023] Figure 3a This is a schematic diagram illustrating the allocation of target identity information to a terminal device accessing a target application, provided in an embodiment of this application.

[0024] Figure 3b This is a schematic diagram illustrating another method for allocating target identity information to a terminal device accessing a target application, as provided in an embodiment of this application.

[0025] Figure 4 This is a flowchart illustrating another data processing method provided in an embodiment of this application;

[0026] Figure 5a This is a schematic diagram illustrating a data processing device responding to a tag marking request initiated by a terminal device, as provided in an embodiment of this application.

[0027] Figure 5b This is a schematic diagram illustrating another data processing device responding to a tag marking request initiated by a terminal device, as provided in an embodiment of this application.

[0028] Figure 6 This is a schematic diagram of the structure of the data processing apparatus provided in the embodiments of this application;

[0029] Figure 7 This is a schematic diagram of the structure of the data processing device provided in the embodiments of this application. Detailed Implementation

[0030] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0031] This application provides a data processing scheme that, upon initial access to a target application by a terminal device, assigns a unique hidden identifier to the terminal device for that access. The scheme encrypts both the target application identifier and the hidden identifier to generate target identity information for the terminal device. This target identity information is then sent to the terminal device, enabling subsequent accesses to the target application to be authenticated based on this identity information. This provides highly private and secure target identity information for authentication when the terminal device re-accesses the target application. The target application identifier uniquely identifies the target application.

[0032] The above data processing scheme can be executed by a data processing device; wherein, the data processing device can be a server, such as a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms. Based on the above data processing scheme, this application embodiment provides a data processing system, see [link to relevant documentation]. Figure 1This is a schematic diagram of the structure of a data processing system provided in an embodiment of this application. Figure 1 The data processing system shown may include a data processing device 101 and a terminal device 102. The data processing device 101 may be a server; the terminal device 102 may be any one or more of the following, including but not limited to smartphones, tablets, laptops, desktop computers, smart voice interaction devices, smart home appliances, in-vehicle terminals, and smart wearable devices. The data processing device 101 and the terminal device 102 may communicate directly or indirectly via wired or wireless communication, and this application does not impose any limitations on this. The above data processing solution can be applied to various scenarios such as cloud technology, artificial intelligence, smart transportation, and assisted driving.

[0033] In one embodiment, terminal device 102 may have one or more applications installed that can provide any legitimate service, such as social networking applications, news applications, video playback applications, or game applications. Users can access any of these applications through their terminal device 102 to use the services they provide. For example, a user can access a news application to view real-time news pushed by the application and post comments; a user can access a game application to perform game operations, and so on. The target application can be any of the one or more applications installed on terminal device 102, and users can access the target application through their terminal device 102 to use the services it provides. The data processing device 101 can be a server corresponding to the target application and can provide service support for the target application. For example, if the target application is a news and information application, the data processing device 101 can be a server that provides service support for the news and information application. If the target application is a game application, the data processing device 101 can be a server that provides service support for the game application.

[0034] In one embodiment, when a user first accesses a target application through their terminal device 102, the data processing device 101 (i.e., the server corresponding to the target application) can assign target identity information to the terminal device 102. This target identity information is used to authenticate the terminal device 102 when it accesses the target application again. In other words, when a user first accesses a target application through their terminal device 102, the data processing device 101 can assign target identity information to the terminal device 102 for authentication when it accesses the target application again. Specifically, when a user first accesses a target application through their terminal device 102, the data processing device 101 can assign a unique hidden identifier for the terminal device 102 when accessing the target application, and encrypt the target application identifier and the hidden identifier to generate target identity information for the terminal device 102, and then send this target identity information to the terminal device 102. Furthermore, when a user accesses the target application again through the terminal device 102, the request initiated by the terminal device 102 can carry the target identity information, so that the data processing device 101 can authenticate the terminal device 102 based on the target identity information after receiving the request; only when the authentication of the terminal device 102 is successful will the device 102 respond to the request initiated by this access. If multiple applications installed on the terminal device 102 are supported by the same server, that is, the servers corresponding to the multiple applications are all the same server, then when the user accesses the multiple applications for the first time through the terminal device 102, the same server (i.e., the same data processing device 101) will allocate target identity information to the terminal device 102 for authentication when the terminal device 102 accesses different applications among the multiple applications again.

[0035] For example, if terminal device 102 has application A and application B installed, when a user accesses application A for the first time through terminal device 102, the server corresponding to application A assigns target identity information "identity information A" to terminal device 102. When the user accesses application B for the first time through terminal device 102, the server corresponding to application B assigns target identity information "identity information B" to terminal device 102. Then, when the user accesses application A again through terminal device 102, the request initiated by terminal device 102 can carry "identity information A" so that the server corresponding to application A can receive the request. Subsequently, the terminal device 102 can be authenticated based on the "identity information A". Only when the authentication of the terminal device 102 is successful will the request initiated by the terminal device 102 for this access be responded to. When the user accesses application B again through the terminal device 102, the request initiated by the terminal device 102 can carry "identity information B" so that the server corresponding to application B can authenticate the terminal device 102 based on the "identity information B" after receiving the request. Only when the authentication of the terminal device 102 is successful will the request initiated by the terminal device 102 for this access be responded to. For example, in applications such as intelligent transportation, terminal device 102 can be an in-vehicle terminal, the target application is the application within the in-vehicle terminal, and data processing device 101 is the server corresponding to the application. This data processing solution can then be used to assign target identity information to the in-vehicle terminal when it accesses the target application. When a user accesses the target application again through the in-vehicle terminal, the server corresponding to the target application can authenticate the in-vehicle terminal based on the target identity information carried in the request for this access. If the authentication of the in-vehicle terminal is successful, the server will respond to the request initiated by the in-vehicle terminal for this access, thereby improving the user's driving experience.

[0036] It should be noted that in the specific implementation of this application, user-related data is involved. When the embodiments of this application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of related data must comply with local laws, regulations and standards.

[0037] Based on the above data processing scheme and system, this application provides a data processing method. See also... Figure 2 This is a flowchart illustrating a data processing method provided in an embodiment of this application. Figure 2 The data processing method shown can be executed by a data processing device. Figure 2 The data processing method shown may include the following steps:

[0038] S201, Obtain the identity information acquisition request sent by the terminal device.

[0039] In one embodiment, the identity information acquisition request may carry a target application identifier, which is used to uniquely identify the target application. For example, if the application identifier corresponding to application A is 1, the application identifier corresponding to application B is 2, and the application identifier corresponding to application C is 3, and the target application identifier carried in the identity information acquisition request is 1, then the target application corresponding to target application identifier 1 is application A. Optionally, the target application identifier used to uniquely identify the target application may be pre-assigned by the server corresponding to the target application, that is, the target application identifier used to uniquely identify the target application may be pre-assigned by the data processing device for the target application. The identity information acquisition request is a request sent to the data processing device when the terminal device first accesses the target application, used to obtain the target identity information assigned by the data processing device to the terminal device, which can be used to authenticate the terminal device when the terminal device accesses the target application again.

[0040] In one embodiment, the identity information acquisition request may also carry signature information, which may be obtained by the terminal device encrypting the target application identifier using a preset encryption algorithm. Further, the signature information may be obtained by the terminal device signing the information to be signed, including the target application identifier, using a preset encryption algorithm based on a first preset key; wherein, the preset encryption algorithm can be any encryption algorithm, such as the HMAC-SHA256 algorithm; the first preset key can be determined according to specific requirements; for example, if the preset encryption algorithm is the HMAC-SHA256 algorithm, and SecretKey represents the first preset key, then the signature information obtained by the terminal device signing the information to be signed, including the target application identifier, using the preset encryption algorithm based on the first preset key can be represented as: Sign = Base64(HMAC_SHA256(SecretKey, information to be signed)), where Sign represents the signature information. Optionally, the information to be signed may also include an identity information acquisition request and a timestamp. In this case, the information to be signed can be obtained by concatenating the target application identifier, the identity information acquisition request, and the timestamp. If AccessId represents the target application identifier, then the information to be signed can be specifically represented as: Information to be signed = ${TimeStamp} + ${AccessId} + ${Identity information acquisition request}. The timestamp can be used to uniquely identify a certain moment, specifically the moment when the timestamp was acquired. For example, if the timestamp is acquired when the terminal device first accesses the target application, then the timestamp can be used to uniquely identify the moment when the terminal device first accesses the target application; if the timestamp is acquired when the identity information acquisition request is generated, then the timestamp can be used to uniquely identify the moment when the identity information acquisition request is generated, and so on. Furthermore, the identity information acquisition request may also carry the timestamp.

[0041] S202, Based on the target application identifier, assign a target device hidden identifier to the terminal device.

[0042] In one embodiment, the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier. The data processing device assigns different target device hidden identifiers to different terminal devices accessing the same target application for the first time. The target device hidden identifier of the terminal device is not exposed to the outside. Optionally, the target device hidden identifier assigned by the data processing device to the terminal device can be a globally unique identifier (GUID), a numerical value, or any form of identifier that can uniquely identify the terminal device accessing the target application.

[0043] In one embodiment, the data processing device assigns a target device hidden identifier to a terminal device based on a target application identifier. This may include: querying a database based on the target application identifier to determine at least one historical device hidden identifier corresponding to the target application identifier in the database; wherein the database contains at least one historical device hidden identifier and an allocation time corresponding to each historical device hidden identifier; selecting historical device hidden identifiers whose allocation time meets preset conditions as target historical device hidden identifiers according to the allocation time corresponding to the historical device hidden identifiers; and generating a target device hidden identifier based on the target historical device hidden identifiers and the generation rules for device hidden identifiers.

[0044] In this context, a historical device hidden identifier corresponding to the target application identifier in the database refers to the target device hidden identifier assigned by the data processing device to a terminal device accessing the target application for the first time within a historical time period. This historical time period refers to the period before the data processing device queries the database based on the target application identifier. In other words, after assigning a target device hidden identifier to a terminal device accessing the target application for the first time within a historical time period, the data processing device can store the assigned target device hidden identifier in the database and maintain it based on the target application identifier. Furthermore, the data processing device can also store the allocation time of the target device hidden identifier assigned to the terminal device accessing the target application for the first time within the historical time period in the database, that is, store the allocation time corresponding to the assigned target device hidden identifier in the database. Therefore, the data processing device can, based on the allocation time corresponding to the historical device hidden identifier, use historical device hidden identifiers whose allocation time meets preset conditions as target historical device hidden identifiers, and generate the target device hidden identifier based on the target historical device hidden identifier and the generation rules of device hidden identifiers.

[0045] In one optional implementation, the preset condition can indicate the latest allocation time; that is, the historical device hidden identifier with the latest allocation time among at least one historical device hidden identifier corresponding to the target application identifier in the database is used as the target historical device hidden identifier. In another optional implementation, the at least one historical device hidden identifier corresponding to the target application identifier in the database can be arranged sequentially according to the allocation time of each historical device hidden identifier. Therefore, when the preset condition indicates the latest allocation time, the last historical device hidden identifier among the at least one historical device hidden identifier corresponding to the target application identifier arranged sequentially according to allocation time can be used as the target historical device hidden identifier.

[0046] In one embodiment, the rule for generating the device hidden identifier can be a rule set according to specific needs. For example, if the rule for generating the device hidden identifier indicates that: starting with a first value as the initial value, each historical device hidden identifier is generated sequentially according to a preset value, that is, the target device hidden identifier assigned by the data processing device to the first terminal device accessing the target application for the first time is the first value, the target device hidden identifier assigned to the second terminal device accessing the target application for the first time is the first value + the preset value, and so on; each historical device hidden identifier is the first value, the second value (the first value + the preset value), and the third value (the second value + the preset value), and the allocation time corresponding to the first value is earlier than the allocation time corresponding to the second value, the allocation time corresponding to the second value is earlier than the allocation time corresponding to the third value, and so on. Then, based on the target historical device hidden identifier and the rule for generating the device hidden identifier, the data processing device generates the target device hidden identifier for the terminal device accessing the target application this time as the target historical device hidden identifier + the preset value. Assuming the first value is 0 and the preset value is 1, if the target historical device hidden identifier determined by the data processing device is 65538, then the target device hidden identifier assigned to the terminal device accessing the target application this time is 65539.

[0047] In one embodiment, the data processing device assigns a target device hidden identifier to a terminal device based on a target application identifier. This may further include: querying a database based on the target application identifier to determine at least one historical device hidden identifier corresponding to the target application identifier in the database; and generating a target device hidden identifier that is different from all at least one historical device hidden identifier corresponding to the target application identifier. This application does not limit the specific execution method of assigning a target device hidden identifier to a terminal device accessing the target application. Any execution method that can assign a target device hidden identifier different from all historical device hidden identifiers to the terminal device accessing the target application, i.e., that can assign different target device hidden identifiers to different terminal devices accessing the target application, is within the protection scope of this application. For example, the data processing device can randomly generate a target device hidden identifier that is different from all historical device hidden identifiers for the terminal device accessing the target application.

[0048] In one embodiment, before the data processing device assigns a hidden target device identifier to the terminal device based on the target application identifier, the data processing device can also authenticate the request initiated by the terminal device. The data processing device encrypts the target application identifier using a preset encryption algorithm to obtain encrypted information. If the encrypted information is the same as the signature information, it triggers the assignment of the hidden target device identifier to the terminal device based on the target application identifier. If the encrypted information is different from the signature information, the data processing device can discard the obtained identity information acquisition request and not respond to it. Further, the encrypted information can be obtained by the data processing device signing the authentication information including the target application identifier using a preset encryption algorithm and a second preset key. The second preset key can be a key corresponding to the first preset key, used to verify the information encrypted with the first preset key. If the preset encryption algorithm is a symmetric encryption algorithm, the first preset key and the second preset key are the same. The authentication information can be obtained by concatenating the identity information acquisition request with the information carried in the identity information acquisition request.

[0049] S203, encrypt the target application identifier and the target device hidden identifier to generate the target identity information of the terminal device.

[0050] The target identity information is used to authenticate the terminal device when it accesses the target application again.

[0051] In one embodiment, the data processing device encrypts the target application identifier and the target device hidden identifier to generate target identity information for the terminal device. This may include: generating a target key for the terminal device to access the target application; and encrypting the target application identifier, the target device hidden identifier, and the target key using a target encryption function to generate target identity information. The target encryption function can be determined according to specific requirements; for example, it can be an AES CBC mode encryption function. The target key can be generated by the data processing device according to the key generation rules corresponding to the target encryption function. For example, when the target encryption function is an AES CBC mode encryption function, the target key generated by the data processing device includes 32 characters. Alternatively, the target key can be generated by the data processing device according to a preset key generation rule, which is determined according to specific requirements. For example, if the target encryption function is an AES CBC mode encryption function, the preset key generation rule instructs the data processing device to generate 16 characters and generate a 32-character target key based on these 16 characters and a preset fixed vector of 16 characters. The fixed vector can be specifically set according to specific requirements.

[0052] In specific implementation, the data processing device uses a target encryption function to encrypt the target application identifier, the target device hidden identifier, and the target key. When generating target identity information, the target application identifier and the target device hidden identifier are used as plaintext. This plaintext and the target key are input as parameters into the target encryption function to generate the ciphertext corresponding to the plaintext, i.e., the target identity information. Generating target identity information based on the target encryption function can be represented as: C = E(K, P), where E represents the target encryption function, K represents the target key, P represents the plaintext, and C represents the ciphertext, i.e., the target identity information. If the target encryption function is an AES CBC mode encryption function, the plaintext can include the binary data of the target application identifier and the target device hidden identifier. The target identity information can be a token, occupying 16 bytes, which, when converted to character representation, includes 32 characters.

[0053] In one embodiment, the data processing device uses a target encryption function to encrypt the target application identifier, the target device hidden identifier, and the target key to generate target identity information. This may further include: using the target encryption function to encrypt the target application identifier, the target device hidden identifier, and the target key to generate initial identity information for the terminal device; the initial identity information includes M characters, where M is a positive integer; selecting N characters from the initial identity information, and encrypting the version information of the target application based on the N characters to obtain encrypted version information of the target application; where N is a positive integer less than or equal to M; and generating target identity information based on the initial identity information and the encrypted version information. The data processing device uses a target encryption function to encrypt the target application identifier, the target device hidden identifier, and the target key to generate the initial identity information of the terminal device. This can include: generating a target key for the terminal device to access the target application; encrypting the target application identifier, the target device hidden identifier, and the target key using a target encryption function to generate the initial identity information; the process is consistent with the process described above, which involves the data processing device generating the target key for the terminal device to access the target application and encrypting the target application identifier, the target device hidden identifier, and the target key using a target encryption function to generate the target identity information, and will not be elaborated further here.

[0054] In a specific implementation, the data processing device selects N characters from the initial identity information and encrypts the version information of the target application based on these N characters. When obtaining the encrypted version information of the target application, a preset version information encryption rule can be used for encryption. This preset version information encryption rule can be set based on specific needs. Any implementation process that can encrypt the version information of the target application is within the protection scope of this application's embodiments. In one feasible implementation, the data processing device can select N characters from the initial identity information and convert these N characters into a decimal representation of a value to be processed. This value is then divided by a preset value, rounded, and added to the version information of the target application to obtain an intermediate encryption result. This intermediate encryption result is then converted into N+1 characters to obtain the encrypted version information of the target application. Furthermore, when generating target identity information based on the initial identity information and the encrypted version information, the data processing device can concatenate the initial identity information and the encrypted version information to obtain the target identity information. For example, if the initial identity information includes 32 characters, when the data processing device selects N characters from the initial identity information, it selects the last 3 characters. If the last 3 characters of the initial identity information are 2C3 in hexadecimal, then the 3 characters selected by the data processing device from the initial identity information are 2C3, and the 3 characters are converted to the decimal value to be processed, which is 707. If the version information of the target application is 7, that is, the version number of the target application is 7, and the preset value is 2, then the intermediate encryption result of the version information is 360 (i.e., 707 / 2+7=353+7=360), which includes 3 characters. When the intermediate encryption result includes N characters, 0 is added before the intermediate encryption result to convert it to N+1 characters, that is, 0 is added before 360 ​​to convert it to 0360, then the encrypted version information of the target application is 0360. Optionally, when generating target identity information based on initial identity information and encrypted version information, the data processing device can concatenate the encrypted version information before the initial identity information to obtain the target identity information. The target identity information obtained can be: 0360……2C3, a total of 36 characters (the characters between 0360 and 2C3 are omitted here, representing 29 characters).

[0055] Optionally, the data processing device selects N characters from the initial identity information and encrypts the version information of the target application based on the N characters. When obtaining the encrypted version information of the target application, the cluster information corresponding to the target application can also be added during the encryption process. In one feasible implementation, the data processing device can select N characters from the initial identity information and convert the N characters into a decimal value to be processed; divide the value to be processed by a preset value and round it down, then add it to the joint information corresponding to the target application to obtain an intermediate encryption result of the version information; convert the intermediate encryption result into N+1 characters to obtain the encrypted version information of the target application; wherein, the joint information corresponding to the target application is obtained by processing the version information of the target application and the cluster information corresponding to the target application using a preset joint information generation rule, and the preset joint information generation rule can be set according to specific needs. For example, if the initial identity information includes 32 characters, when the data processing device selects N characters from the initial identity information, it selects the last 3 characters from the initial identity information; if the last 3 characters of the initial identity information are 2C3 in hexadecimal representation, then the 3 characters selected by the data processing device from the initial identity information are 2C3, and the value to be processed in decimal representation of these 3 characters is 707. If the target application's version information is 7 (i.e., the target application's version number is 7) and the target application's corresponding cluster information is 4 (i.e., the target application's corresponding cluster identifier is 4), the target application's version information and corresponding cluster information are processed using a preset joint information generation rule to obtain the target application's joint information as follows: The binary representation of the target application's corresponding cluster information is shifted left by 8 bits to obtain the shifted cluster information. This shifted cluster information is then added to the binary representation of the target application's version information, and the result is converted to a decimal value to obtain the target application's joint information. Specifically, when the target application's corresponding cluster information is 4, the binary representation of the target application's corresponding cluster information is 0000 0000 0000 0100, and the shifted cluster information is 000 01000000 0000. When the target application's version information is 7, the binary representation of the target application's version information is 0000 0000 0000 0111. Therefore, adding the shifted cluster information to the binary representation of the target application's version information yields 0000. 0100 0000 0111, converted to decimal, is 71, which is the joint information 71 corresponding to the target application.

[0056] Furthermore, if the preset value is 2, the intermediate encryption result of the obtained version information is 424 (i.e., 707 / 2+71=353+71=424), which includes 3 characters. When the intermediate encryption result includes N characters, 0 is added before the intermediate encryption result to convert it to N+1 characters, that is, 0 is added before 424 to convert it to 0424, so the encrypted version information of the target application is 0424. Optionally, when the data processing device generates target identity information based on the initial identity information and the encrypted version information, the encrypted version information can be concatenated before the initial identity information to obtain the target identity information. The target identity information obtained based on this can be: 0424……2C3, a total of 36 characters (here, 0424 and 2C3 are omitted to represent 29 characters).

[0057] S204, send the target identity information to the terminal device.

[0058] See Figure 3a This diagram illustrates how a terminal device can allocate target identity information to access a target application, according to an embodiment of this application. The terminal device sends an identity information retrieval request to a data processing device, the request carrying a target application identifier. The data processing device can receive the identity information retrieval request from the terminal device through its API module (Application Program Interface) and forward it to the identity information allocation module. The identity information allocation module can allocate a hidden identifier for the terminal device based on the target application identifier, encrypt the target application identifier and the hidden identifier, generate target identity information for the terminal device, and send the target identity information to the API module. The API module then sends the target identity information to the terminal device. See also... Figure 3bThis illustration shows another method for allocating target identity information to a terminal device accessing a target application, provided by an embodiment of this application. The terminal device sends an identity information acquisition request to a data processing device. This identity information acquisition request carries a target application identifier and signature information. The data processing device can receive the identity information acquisition request sent by the terminal device through its API module and authenticate the identity information acquisition request based on the signature information. If the authentication of the identity information acquisition request is successful, the identity information acquisition request is sent to the identity information allocation module. The identity information allocation module can allocate a target device hidden identifier to the terminal device based on the target application identifier, encrypt the target application identifier and the target device hidden identifier, generate the target identity information of the terminal device, and send the target identity information to the API module. The API module sends the target identity information to the terminal device. Specifically, the API module of the data processing device authenticates the identity information acquisition request based on the signature information. That is, the API module of the data processing device encrypts the target application identifier using a preset encryption algorithm to obtain encrypted information and determines whether the encrypted information is the same as the signature information. Successful authentication of the identity information acquisition request means that the encrypted information is the same as the signature information.

[0059] In this embodiment, after receiving an identity information acquisition request carrying a target application identifier sent by a terminal device; a target device hidden identifier is assigned to the terminal device based on the target application identifier; the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier; then, the target application identifier and the target device hidden identifier can be encrypted to generate target identity information of the terminal device; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again; and the target identity information is sent to the terminal device. In other words, when a terminal device first accesses a target application, it can be assigned a unique hidden identifier for that access. The target identity information, generated by encrypting both the target application identifier and the hidden identifier, is then sent to the terminal device. This allows the terminal device to be authenticated upon subsequent accesses to the target application based on this target identity information. This target identity information, obtained by encrypting the assigned hidden identifier, offers high privacy and security, making it difficult to forge or tamper with. Therefore, it is a highly private and secure target identity information that can be assigned to a terminal device for authentication upon subsequent accesses to the target application.

[0060] Based on the above embodiments and the data processing system, this application provides another data processing method. See also Figure 4 This is a flowchart illustrating another data processing method provided in an embodiment of this application. Figure 4 The data processing method shown can be executed by a data processing device. Figure 4 The data processing method shown may include the following steps:

[0061] S401, Obtain the identity information retrieval request sent by the terminal device.

[0062] S402, based on the target application identifier, assigns a target device hidden identifier to the terminal device.

[0063] S403, encrypts the target application identifier and the target device hidden identifier to generate the target identity information of the terminal device.

[0064] S404, send the target identity information to the terminal device.

[0065] S405, Obtain the tag marking request sent by the terminal device.

[0066] The tag marking request carries the identity information to be processed and the tag to be processed. The tag to be processed is used to mark the terminal device. The identity information to be processed is obtained by the data processing device. That is, when the terminal device accesses the target application again to make the data processing device mark the terminal device, it sends a tag marking request to the data processing device. The tag marking request carries the target identity information. If the data sent by the terminal device to the data processing device this time has not been tampered with, the identity information to be processed received by the data processing device is the target identity information assigned to the terminal device by the data processing device when the terminal device first accesses the target application.

[0067] S406, decrypt the identity information to be processed to obtain the hidden identifier of the device to be processed and the identifier of the application to be processed.

[0068] In one embodiment, the data processing device can decrypt the identity information to be processed based on a decryption method that matches the target encryption function. For example, if the target encryption function is an AES CBC mode encryption function, then a decryption function that matches the AES CBC mode encryption function can be used to decrypt the identity information to be processed.

[0069] In one embodiment, before the data processing device decrypts the identity information to be processed to obtain the hidden identifier of the device to be processed and the identifier of the application to be processed, the data processing device may also authenticate the tagging request initiated by the terminal device. If the authentication of the tagging request initiated by the terminal device is successful, the data processing device will then trigger the decryption operation of the identity information to be processed to obtain the hidden identifier of the device to be processed and the identifier of the application to be processed. If the authentication of the tagging request initiated by the terminal device fails, the data processing device may discard the obtained tagging request and will not respond to it. The process of authenticating the tagging request initiated by the terminal device is similar to the process of authenticating the identity information acquisition request initiated by the terminal device, and will not be described again here.

[0070] S407, when the application identifier to be processed is the target application identifier, if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, then the authentication of the terminal device is determined to be successful.

[0071] In one embodiment, when the application identifier to be processed is the target application identifier, if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, then the authentication of the terminal device is determined to be successful; if the hidden identifier of the device to be processed is different from the hidden identifier of the target device assigned to the terminal device, then the authentication of the terminal device is determined to be unsuccessful, and the tagging request is not responded to; if the application identifier to be processed is not the target application identifier, then the authentication of the terminal device is determined to be unsuccessful, and the tagging request is not responded to. Furthermore, when the data processing device performs a decryption operation on the identity information to be processed and obtains the version information to be processed, then when the application identifier to be processed is the target application identifier, if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, and the version information to be processed is the same as the version information of the target application, then the authentication of the terminal device is determined to be successful. Optionally, the data processing device may first determine whether the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device; if the hidden identifier of the device to be processed is different from the hidden identifier of the target device assigned to the terminal device, the authentication of the terminal device is determined to fail and the tag marking request is not responded to; if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, the device may then determine whether the version information to be processed is the same as the version information of the target application; if the version information to be processed is different from the version information of the target application, the authentication of the terminal device is determined to fail and the tag marking request is not responded to; if the version information to be processed is the same as the version information of the target application, the authentication of the terminal device is determined to pass.

[0072] S408, Based on the target device hidden identifier, determine the tag mark position of the terminal device in the target bitmap corresponding to the tag to be processed.

[0073] In one embodiment, a target bitmap is used to mark each terminal device carrying the tag to be processed that re-accesses the target application. One tag corresponds to one bitmap for marking the terminal device carrying that tag that re-accesses the target application. For example, if the tag is a region tag, and there are regions A, B, and C, then region A corresponds to one bitmap, region B to one bitmap, and region C to one bitmap. If the tag to be processed is region A, then the target bitmap is the bitmap corresponding to region A. If the terminal device is marked in the bitmap corresponding to region A—that is, a preset marker is added to the tag marking position of the terminal device in the bitmap corresponding to region A—then the terminal device can be determined to be a device in region A based on the bitmap corresponding to region A. Furthermore, the number of terminal devices in region A among the terminal devices accessing the target application can be determined by judging the number of preset markers included in the bitmap corresponding to region A. Furthermore, the tag marking position matches the target device's hidden identifier. For example, if the target device's hidden identifier is 65539, the first bit of the target bitmap represents 0, the second bit represents 1, and so on; then the tag marking position can be the 65510th bit in the target bitmap. Optionally, if the tagging of each terminal device carrying the tag to be processed is performed on a fragment basis based on the target bitmap, then when the data processing device determines the tag marking position of the terminal device in the target bitmap corresponding to the tag to be processed based on the target device's hidden identifier, it can first determine the target fragment of the terminal device in the target bitmap based on the target device's hidden identifier and the fragment size; and then further determine the tag marking position of the terminal device in the target fragment. For example, if the fragment size is 65536 bits, the first fragment is [0, 65535], which includes 0, 1, 2, 3, up to 65535; the second fragment is [65536, 131071], and so on. If the target device hidden identifier is 65539, then based on the target device hidden identifier and the fragment size, the target fragment is determined to be the second fragment, which is the result of dividing the target device hidden identifier by the fragment size, rounded down, and then 1 is added. The tag mark position of the terminal device in the target fragment is further determined to be the 4th position in the target fragment, which is the result of dividing the target device hidden identifier by the fragment size, rounded down, and then 1 is added.

[0074] S409, Add a preset marker at the label marker position.

[0075] The preset marker is used to indicate that a terminal device is marked. For example, the preset marker can be set to 1. Then, when it is necessary to determine whether a terminal device accessing the target application belongs to region A, it can be determined whether the tag position corresponding to the target device hidden identifier of the terminal device in the bitmap corresponding to region A is 1. Furthermore, the number of terminal devices in region A among the terminal devices accessing the target application can be determined by judging the number of preset markers 1 in the bitmap corresponding to region A. It can be seen that since the target device hidden identifier of the terminal device corresponds one-to-one with the position in the bitmap, the storage, calculation, and statistics of relevant data of the terminal device implemented based on the bitmap are more efficient.

[0076] See Figure 5a This diagram illustrates a data processing device responding to a tag marking request initiated by a terminal device, as provided in an embodiment of this application. The terminal device sends a tag marking request to the data processing device, carrying identity information to be processed and a tag to be processed. The data processing device can receive the tag marking request sent by the terminal device through its API module and forward it to the tag management module. The tag management module can decrypt the identity information to be processed to obtain a hidden identifier for the device to be processed and an identifier for the application to be processed. When the identifier for the application to be processed is the target application identifier, if the hidden identifier for the device to be processed is the same as the hidden identifier for the target device assigned to the terminal device, then the authentication of the terminal device is confirmed to be successful. Based on the hidden identifier for the target device, the tag marking position of the terminal device in the target bitmap corresponding to the tag to be processed is determined, and a preset marker is added to the tag marking position; thus, the terminal device is marked. See also... Figure 5b This diagram illustrates another data processing device responding to a tag marking request initiated by a terminal device, as provided in this application embodiment. The terminal device sends a tag marking request to the data processing device, which carries the identity information to be processed, the tag to be processed, and signature information. The data processing device can receive the tag marking request sent by the terminal device through its API module and authenticate the tag marking request based on the signature information. If the authentication of the tag marking request is successful, the tag marking request is forwarded to the tag management module. The tag management module can decrypt the identity information to be processed to obtain the hidden identifier of the device to be processed and the identifier of the application to be processed. When the identifier of the application to be processed is the target application identifier, if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, the authentication of the terminal device is determined to be successful. Based on the hidden identifier of the target device, the tag marking position of the terminal device in the target bitmap corresponding to the tag to be processed is determined, and a preset marker is added to the tag marking position; thus, the terminal device is marked.

[0077] In this embodiment, a tag marking request sent by a terminal device can be obtained; the tag marking request carries the identity information to be processed and the tag to be processed; the identity information to be processed is decrypted to obtain the hidden identifier of the device to be processed and the identifier of the application to be processed; when the identifier of the application to be processed is the identifier of the target application, if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, it is determined that the authentication of the terminal device is successful; based on the hidden identifier of the target device, the tag marking position of the terminal device in the target bitmap corresponding to the tag to be processed is determined; the tag marking position matches the hidden identifier of the target device; when the terminal device accesses the target application again, it can be authenticated based on the target identity information assigned to the terminal device when the terminal device first accesses the target application, and only when the authentication of the terminal device is successful will the request initiated by the terminal device be responded to; furthermore, when the terminal device initiates a tag marking request for tagging the terminal device, the terminal device can be marked based on the target bitmap corresponding to the tag to be processed, and the storage, calculation, and statistics of the relevant data of the terminal device implemented based on the bitmap are more efficient.

[0078] Based on the embodiments related to the above data processing methods, this application provides a data processing apparatus. See also... Figure 6 This is a schematic diagram of the structure of a data processing device provided in an embodiment of this application. The data processing device may include an acquisition unit 601, a processing unit 602, and an output unit 603. Figure 6 The data processing device shown can operate the following units:

[0079] The acquisition unit 601 is used to acquire an identity information acquisition request sent by the terminal device; the identity information acquisition request carries a target application identifier;

[0080] Processing unit 602 is configured to assign a target device hidden identifier to the terminal device based on the target application identifier; the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier;

[0081] The processing unit 602 is further configured to encrypt the target application identifier and the target device hidden identifier to generate target identity information of the terminal device; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again.

[0082] The output unit 603 is used to send the target identity information to the terminal device.

[0083] In one embodiment, when the processing unit 602 assigns a target device hidden identifier to the terminal device based on the target application identifier, it specifically performs the following operations:

[0084] Based on the target application identifier, a database is queried to determine at least one historical device hidden identifier corresponding to the target application identifier in the database; wherein, the database contains at least one historical device hidden identifier and an allocation time corresponding to each historical device hidden identifier;

[0085] Based on the allocation time corresponding to the historical device hiding identifier, the historical device hiding identifier whose allocation time meets the preset conditions is taken as the target historical device hiding identifier;

[0086] Based on the target historical device hidden identifier and the generation rules of the device hidden identifier, the target device hidden identifier is generated.

[0087] In one embodiment, when the processing unit 602 assigns a target device hidden identifier to the terminal device based on the target application identifier, it specifically performs the following operations:

[0088] Based on the target application identifier, query the database to determine at least one historical device hidden identifier corresponding to the target application identifier in the database;

[0089] Generate a target device hidden identifier that is different from at least one historical device hidden identifier corresponding to the target application identifier.

[0090] In one embodiment, when the processing unit 602 encrypts the target application identifier and the target device hidden identifier to generate the target identity information of the terminal device, it specifically performs the following operations:

[0091] Generate a target key for the terminal device to access the target application;

[0092] The target application identifier, the target device hidden identifier, and the target key are encrypted using a target encryption function to generate the target identity information.

[0093] In one embodiment, when the processing unit 602 encrypts the target application identifier, the target device hidden identifier, and the target key using a target encryption function to generate the target identity information, it specifically performs the following operations:

[0094] The target application identifier, the target device hidden identifier, and the target key are encrypted using the target encryption function to generate the initial identity information of the terminal device; the initial identity information includes M characters, where M is a positive integer.

[0095] N characters are selected from the initial identity information, and the version information of the target application is encrypted based on the N characters to obtain the encrypted version information of the target application; N is a positive integer less than or equal to M.

[0096] The target identity information is generated based on the initial identity information and the encrypted version information.

[0097] In one embodiment, the acquisition unit 601 is further configured to acquire a tag marking request sent by the terminal device; the tag marking request carries identity information to be processed and a tag to be processed;

[0098] The processing unit 602 is also used to decrypt the identity information to be processed to obtain the hidden identifier of the device to be processed and the identifier of the application to be processed.

[0099] The processing unit 602 is further configured to, when the application identifier to be processed is the target application identifier, determine that the authentication of the terminal device is successful if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device;

[0100] The processing unit 602 is further configured to determine, based on the target device hidden identifier, the tag mark position of the terminal device in the target bitmap corresponding to the tag to be processed; the tag mark position matches the target device hidden identifier;

[0101] The processing unit 602 is further configured to add a preset marker at the label marking position; the preset marker is used to indicate that the label of the terminal device is the label to be processed.

[0102] In one embodiment, the decryption operation on the identity information to be processed also yields version information to be processed;

[0103] If the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, and the processing unit 602 determines that the authentication of the terminal device has passed, the specific operation is as follows:

[0104] If the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, and the version information to be processed is the same as the version information of the target application, then the authentication of the terminal device is determined to be successful.

[0105] In one embodiment, the identity information acquisition request also carries signature information, which is obtained by the terminal device encrypting the target application identifier using a preset encryption algorithm;

[0106] The processing unit 602 is further configured to encrypt the target application identifier using the preset encryption algorithm to obtain encrypted information;

[0107] If the encrypted information is the same as the signature information, then the process of assigning a target device hidden identifier to the terminal device based on the target application identifier is triggered.

[0108] According to one embodiment of this application, Figure 2 as well as Figure 4 The data processing method shown can involve various steps that are... Figure 6 This is performed by each unit in the data processing apparatus shown. For example, Figure 2 The step S201 shown can be performed by Figure 6 The acquisition unit 601 in the data processing device shown performs the operation. Figure 2 Steps S202 to S203 shown can be derived from... Figure 6 The data processing unit 602 in the shown data processing device executes the operation. Figure 2 The step S204 shown can be performed by Figure 6 The output unit 603 in the data processing device shown is used to execute this. For example, Figure 4 Steps S401 and S405 shown can be derived from... Figure 6 The acquisition unit 601 in the data processing device shown performs the operation. Figure 4 Steps S402 to S403 and steps S406 to S409 shown can be derived from... Figure 6 The data processing unit 602 in the shown data processing device executes the operation. Figure 4 The step S404 shown can be performed by Figure 6 The output unit 603 in the data processing device shown is used to perform this operation.

[0109] According to another embodiment of this application, Figure 6 The data processing apparatus shown can be constructed by combining each unit individually or entirely into one or more other units, or one or more of the units can be further divided into multiple functionally smaller units. This achieves the same operation without affecting the technical effects of the embodiments of this application. The above-mentioned units are based on logical function division. In practical applications, the function of one unit can be implemented by multiple units, or the function of multiple units can be implemented by one unit. In other embodiments of this application, the data processing apparatus based on logical function division may also include other units. In practical applications, these functions can also be implemented with the assistance of other units, and can be implemented collaboratively by multiple units.

[0110] According to another embodiment of this application, the following can be achieved by running on a general-purpose computing device, such as a computer, which includes processing elements and storage elements such as a central processing unit (CPU), random access memory (RAM), and read-only memory (ROM), a device capable of performing operations such as... Figure 2 as well as Figure 4 The computer program (including program code) for each step involved in the corresponding method shown, to construct such... Figure 6 The data processing apparatus shown herein, and the data processing method for implementing the embodiments of this application, are described. The computer program may be recorded on, for example, a computer-readable storage medium, loaded onto the aforementioned computing device via the computer-readable storage medium, and run therein.

[0111] In this embodiment, after receiving an identity information acquisition request carrying a target application identifier sent by a terminal device; a target device hidden identifier is assigned to the terminal device based on the target application identifier; the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier; then, the target application identifier and the target device hidden identifier can be encrypted to generate target identity information of the terminal device; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again; and the target identity information is sent to the terminal device. In other words, when a terminal device first accesses a target application, it can be assigned a unique hidden identifier for that access. The target identity information, generated by encrypting both the target application identifier and the hidden identifier, is then sent to the terminal device. This allows the terminal device to be authenticated upon subsequent accesses to the target application based on this target identity information. This target identity information, obtained by encrypting the assigned hidden identifier, offers high privacy and security, making it difficult to forge or tamper with. Therefore, it is a highly private and secure target identity information that can be assigned to a terminal device for authentication upon subsequent accesses to the target application.

[0112] Based on the aforementioned embodiments of the data processing method and the data processing apparatus, this application also provides a data processing device. See also... Figure 7 This is a schematic diagram of the structure of a data processing device provided in an embodiment of this application. Figure 7 The data processing device shown may include at least a processor 701, an input interface 702, an output interface 703, and a computer storage medium 704. The processor 701, input interface 702, output interface 703, and computer storage medium 704 may be connected via a bus or other means.

[0113] The computer storage medium 704 can be stored in the memory of the data processing device. The computer storage medium 704 is used to store computer programs, which include program instructions. The processor 701 is used to execute the program instructions stored in the computer storage medium 704. The processor 701 (or CPU (Central Processing Unit)) is the computing and control core of the data processing device. It is suitable for implementing one or more instructions, specifically for loading and executing one or more instructions to realize the above-mentioned data processing method flow or corresponding functions.

[0114] This application embodiment also provides a computer storage medium (Memory), which is a memory device in a data processing device used to store programs and data. It is understood that the computer storage medium here can include the built-in storage medium in a terminal, or it can include an extended storage medium supported by the terminal. The computer storage medium provides storage space, which stores the terminal's operating system. Furthermore, this storage space also stores one or more instructions suitable for loading and execution by the processor 701. These instructions can be one or more computer programs (including program code). It should be noted that the computer storage medium here can be a high-speed random access memory (RAM), or it can be non-volatile memory, such as at least one disk storage device; optionally, it can also be at least one computer storage medium located remotely from the aforementioned processor.

[0115] In one embodiment, the processor 701, input interface 702, and output interface 703 may load and execute one or more instructions stored in the computer storage medium to achieve the aforementioned related... Figure 2 as well as Figure 4 In the corresponding steps of the data processing method embodiment, in a specific implementation, one or more instructions in the computer storage medium are loaded and executed by the processor 701, input interface 702, and output interface 703 as follows:

[0116] Input interface 702 is used to obtain an identity information acquisition request sent by the terminal device; the identity information acquisition request carries a target application identifier;

[0117] Processor 701 is configured to assign a target device hidden identifier to the terminal device based on the target application identifier; the target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier;

[0118] The processor 701 is further configured to encrypt the target application identifier and the target device hidden identifier to generate target identity information of the terminal device; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again.

[0119] Output interface 703 is used to send the target identity information to the terminal device.

[0120] In one embodiment, when the processor 701 assigns a target device hidden identifier to the terminal device based on the target application identifier, it specifically performs the following operations:

[0121] Based on the target application identifier, a database is queried to determine at least one historical device hidden identifier corresponding to the target application identifier in the database; wherein, the database contains at least one historical device hidden identifier and an allocation time corresponding to each historical device hidden identifier;

[0122] Based on the allocation time corresponding to the historical device hiding identifier, the historical device hiding identifier whose allocation time meets the preset conditions is taken as the target historical device hiding identifier;

[0123] Based on the target historical device hidden identifier and the generation rules of the device hidden identifier, the target device hidden identifier is generated.

[0124] In one embodiment, when the processor 701 assigns a target device hidden identifier to the terminal device based on the target application identifier, it specifically performs the following operations:

[0125] Based on the target application identifier, query the database to determine at least one historical device hidden identifier corresponding to the target application identifier in the database;

[0126] Generate a target device hidden identifier that is different from at least one historical device hidden identifier corresponding to the target application identifier.

[0127] In one embodiment, when the processor 701 encrypts the target application identifier and the target device hidden identifier to generate the target identity information of the terminal device, it specifically performs the following operations:

[0128] Generate a target key for the terminal device to access the target application;

[0129] The target application identifier, the target device hidden identifier, and the target key are encrypted using a target encryption function to generate the target identity information.

[0130] In one embodiment, when the processor 701 encrypts the target application identifier, the target device hidden identifier, and the target key using a target encryption function to generate the target identity information, it specifically performs the following operations:

[0131] The target application identifier, the target device hidden identifier, and the target key are encrypted using the target encryption function to generate the initial identity information of the terminal device; the initial identity information includes M characters, where M is a positive integer.

[0132] N characters are selected from the initial identity information, and the version information of the target application is encrypted based on the N characters to obtain the encrypted version information of the target application; N is a positive integer less than or equal to M.

[0133] The target identity information is generated based on the initial identity information and the encrypted version information.

[0134] In one embodiment, the input interface 702 is further configured to acquire a tag marking request sent by the terminal device; the tag marking request carries identity information to be processed and a tag to be processed;

[0135] The processor 701 is also used to decrypt the identity information to be processed to obtain the hidden identifier of the device to be processed and the identifier of the application to be processed.

[0136] The processor 701 is further configured to, when the application identifier to be processed is the target application identifier, determine that the authentication of the terminal device is successful if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device.

[0137] The processor 701 is further configured to determine, based on the target device hidden identifier, the tag mark position of the terminal device in the target bitmap corresponding to the tag to be processed; the tag mark position matches the target device hidden identifier;

[0138] The processor 701 is further configured to add a preset marker at the label marking position; the preset marker is used to indicate that the label of the terminal device is the label to be processed.

[0139] In one embodiment, the decryption operation on the identity information to be processed also yields version information to be processed;

[0140] If the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, and the processor 701 determines that the authentication of the terminal device has passed, the processor 701 performs the following operations:

[0141] If the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, and the version information to be processed is the same as the version information of the target application, then the authentication of the terminal device is determined to be successful.

[0142] In one embodiment, the identity information acquisition request also carries signature information, which is obtained by the terminal device encrypting the target application identifier using a preset encryption algorithm;

[0143] The processor 701 is further configured to encrypt the target application identifier using the preset encryption algorithm to obtain encrypted information;

[0144] If the encrypted information is the same as the signature information, then the process of assigning a target device hidden identifier to the terminal device based on the target application identifier is triggered.

[0145] This application provides a computer program product or computer program, the computer program product including a computer program stored in a computer storage medium; a processor of a data processing device reads the computer program from the computer storage medium, and the processor executes the computer program, causing the data processing device to perform the above-described actions. Figure 2 as well as Figure 4 The method embodiment shown. The computer-readable storage medium may be a magnetic disk, optical disk, read-only memory (ROM), or random access memory (RAM), etc.

[0146] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A data processing method, characterized in that, include: The system obtains an identity information retrieval request sent by the terminal device; the identity information retrieval request carries a target application identifier. Based on the target application identifier, a target device hidden identifier is assigned to the terminal device; The target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier; wherein, the device hidden identifiers assigned to different terminal devices accessing the same application are different, and the device hidden identifiers assigned to the same terminal devices accessing different applications are also different; Based on the key generation rules corresponding to the symmetric encryption function, generate the target key for the terminal device to access the target application; The target application identifier, the target device hidden identifier, and the target key are encrypted using the symmetric encryption function to generate the initial identity information of the terminal device. N characters are selected from the initial identity information, and the version information of the target application is encrypted based on the N characters to obtain the encrypted version information of the target application; Based on the initial identity information and the encrypted version information, target identity information is generated; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again. Send the target identity information to the terminal device; Obtain the tag marking request sent by the terminal device; the tag marking request carries the identity information to be processed and the tag to be processed; The identity information to be processed is decrypted based on the decryption function that matches the symmetric encryption function to obtain the hidden identifier of the device to be processed, the identifier of the application to be processed, and the version information to be processed. When the application to be processed is the target application identifier, if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, and the version information to be processed is the same as the version information of the target application, then it is determined that the authentication of the terminal device is successful. Based on the target device hidden identifier, the label mark position of the terminal device in the target bitmap corresponding to the label to be processed is determined; the label mark position matches the target device hidden identifier; the generation rule of the device hidden identifier corresponding to the target application is indicated as follows: with a first value as the initial value, each device hidden identifier is generated sequentially according to the order in which the terminal device accesses the target application and according to the preset value increment; one label corresponds to one bitmap; A preset marker is added to the label marking position; the preset marker is used to indicate that the label on the terminal device is the label to be processed.

2. The method as described in claim 1, characterized in that, The step of assigning a target device hidden identifier to the terminal device based on the target application identifier includes: Based on the target application identifier, a database is queried to determine at least one historical device hidden identifier corresponding to the target application identifier in the database; wherein, the database contains at least one historical device hidden identifier and an allocation time corresponding to each historical device hidden identifier; Based on the allocation time corresponding to the historical device hiding identifier, the historical device hiding identifier whose allocation time meets the preset conditions is taken as the target historical device hiding identifier; Based on the target historical device hidden identifier and the generation rules of the device hidden identifier, the target device hidden identifier is generated.

3. The method as described in claim 1, characterized in that, The step of assigning a target device hidden identifier to the terminal device based on the target application identifier includes: Based on the target application identifier, query the database to determine at least one historical device hidden identifier corresponding to the target application identifier in the database; Generate a target device hidden identifier that is different from at least one historical device hidden identifier corresponding to the target application identifier.

4. The method as described in claim 1, characterized in that, The identity information acquisition request also carries signature information, which is obtained by the terminal device encrypting the target application identifier using a preset encryption algorithm; The method further includes: The target application identifier is encrypted using the preset encryption algorithm to obtain encrypted information; If the encrypted information is the same as the signature information, then the process of assigning a target device hidden identifier to the terminal device based on the target application identifier is triggered.

5. A data processing apparatus, characterized in that, include: The acquisition unit is used to acquire an identity information acquisition request sent by the terminal device; the identity information acquisition request carries a target application identifier; The processing unit is configured to assign a target device hidden identifier to the terminal device based on the target application identifier; The target device hidden identifier is used to indicate the terminal device accessing the target application corresponding to the target application identifier; wherein, different device hidden identifiers are assigned to different terminal devices accessing the same application, and different device hidden identifiers are assigned to the same terminal devices accessing different applications; the generation rule of the device hidden identifier corresponding to the target application indicates that: with a first value as the initial value, each device hidden identifier is generated sequentially based on the order in which the terminal devices access the target application and according to the preset value increment. The processing unit is further configured to: generate a target key for the terminal device to access the target application according to the key generation rules corresponding to the symmetric encryption function; encrypt the target application identifier, the target device hidden identifier, and the target key using the symmetric encryption function to generate initial identity information of the terminal device; select N characters from the initial identity information and encrypt the version information of the target application based on the N characters to obtain encrypted version information of the target application; generate target identity information based on the initial identity information and the encrypted version information; the target identity information is used to authenticate the terminal device when the terminal device accesses the target application again. An output unit is used to send the target identity information to the terminal device; The processing unit is further configured to acquire a tag marking request sent by the terminal device; the tag marking request carries identity information to be processed and a tag to be processed; the identity information to be processed is decrypted based on a decryption function that matches the symmetric encryption function to obtain a hidden identifier of the device to be processed, an application identifier to be processed, and version information to be processed; when the application identifier to be processed is the target application identifier, if the hidden identifier of the device to be processed is the same as the hidden identifier of the target device assigned to the terminal device, and the version information to be processed is the same as the version information of the target application, then it is determined that the authentication of the terminal device is successful. The processing unit is further configured to determine the tag mark position of the terminal device in the target bitmap corresponding to the tag to be processed based on the target device hidden identifier; the tag mark position matches the target device hidden identifier; a preset marker is added to the tag mark position; the preset marker is used to indicate that the tag of the terminal device is the tag to be processed; one tag corresponds to one bitmap.

6. A data processing device, characterized in that, The data processing device includes an input interface and an output interface, and further includes: A processor, adapted to implement one or more instructions; and, A computer storage medium storing one or more instructions adapted to be loaded by the processor and executed as described in any one of claims 1-4.

7. A computer storage medium, characterized in that, The computer storage medium stores computer program instructions, which, when executed by a processor, are used to perform the data processing method as described in any one of claims 1-4.

8. A computer program product, characterized in that, The computer program product includes a computer program that, when executed by a processor, is used to load and execute the data processing method as described in any one of claims 1-4.

Images