A data processing method

Abstract

The application discloses a data processing method, comprising: determining a situation value of a server history period according to security information of the server history period; determining a first server capable of performing cloud computing according to a first situation value of the server and an average situation value of all servers; distributing sub-tasks obtained by splitting a cloud computing task to the first server; sending a server identifier of the first server and a cloud computing task identifier of the cloud computing task to a block chain, so that the block chain determines an encryption key according to the server identifier and the cloud computing task identifier; encrypting sub-data by using the received encryption key to obtain encrypted data; and sending the encrypted data to a summary device, so that the summary device decrypts the encrypted data to obtain sub-data of each server, and obtains summary data by summarizing the sub-data. According to the embodiment of the application, the security of data transmission can be improved.

Description

Technical Field

[0001] This application belongs to the field of cloud computing technology, and in particular relates to a data processing method. Background Technology

[0002] Cloud computing is a type of distributed computing that refers to breaking down massive data processing programs into countless smaller programs via a network "cloud." These smaller programs are then processed and analyzed by a system composed of multiple servers to obtain results and return them to the user. In its early stages, cloud computing, simply put, was distributed computing that solved the problems of task distribution and merging computation results.

[0003] Current technologies employ key encryption during data merging processes, with servers distributed across the cloud using key-based encryption to ensure data transmission security.

[0004] However, secure data transmission depends not only on the encryption of the data itself, but also on the reliability and security of the server sending the data. Current technologies do not consider the security of the transmitting devices, resulting in low data transmission security. Summary of the Invention

[0005] This application provides a data processing method that can improve the security of data transmission.

[0006] On one hand, embodiments of this application provide a data processing method, characterized in that it includes:

[0007] Based on the security information of the server's historical periods, determine the status value of the server's historical periods;

[0008] Based on the first state value of the server and the average state value of all servers, the first server capable of performing cloud computing is determined; the first state value is the state value of the server in the first historical period most recent to the current time.

[0009] The subtasks derived from the cloud computing task are assigned to the first server, which then performs cloud computing processing on the subtasks to obtain sub-data.

[0010] The server identifier of the first server and the cloud computing task identifier of the cloud computing task are sent to the blockchain, so that the blockchain can determine the encryption key based on the server identifier and the cloud computing task identifier;

[0011] The received encryption key is used to encrypt the sub-data to obtain encrypted data;

[0012] By sending the encrypted data to the aggregation device, the aggregation device decrypts the encrypted data to obtain sub-data from each of the servers, and then performs aggregation processing based on the sub-data to obtain aggregated data.

[0013] In one possible implementation, determining the status value of the server for a historical period based on the server's historical security information includes:

[0014] Perform the following operations on any of the servers described:

[0015] Obtain the data packet information sent by the server within the historical period;

[0016] Based on the IP information in the data packet information, determine the associated server that has a data connection with the server;

[0017] Based on the server type of the associated server, the historical data value and network value of the server, the status value of the server for the historical period is determined.

[0018] In one possible implementation, the data packet information includes: the number of data packets sent and the number of data packets forwarded by the server in a historical period; the IP information includes: the destination IP of the data packets and the source IP of the forwarded data.

[0019] The step of determining the associated server with a data connection to the server based on the IP information in the data packet information includes:

[0020] Clustering is performed based on the destination IP and the source IP to determine the associated servers that have data connections with the server.

[0021] In one possible implementation, the data packet information further includes: currently available bandwidth and historical period bandwidth; before determining the server's historical period status value based on the server type of the associated server, the server's historical period data value, and network value, the method further includes:

[0022] Based on the server type of the associated server, determine the sub-data value between the server and the associated server;

[0023] The historical period data value of the server is determined based on the sub-data values ​​between the associated servers of the server, the number of data packets sent, and the number of data packets forwarded.

[0024] The network value for the server's historical period is determined based on the server's current available bandwidth and historical period bandwidth.

[0025] In one possible implementation, determining the sub-data value between the server and the associated server based on the server type of the associated server includes:

[0026] When the server type is a data input connection server, the sub-data value is determined based on the total number of data packets sent by the associated server to the server.

[0027] When the server type is a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server;

[0028] When the server type is a data input connection service and a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server and the total number of data packets sent by the associated server to the server.

[0029] In one possible implementation, determining the historical period data value of the server based on the sub-data values ​​between the associated servers, the number of data packets sent, and the number of data packets forwarded includes:

[0030] The mean of the sub-data values ​​is obtained by averaging the sub-data values ​​of all the associated servers.

[0031] If the server type of the associated server is a data input connection server, a reference value is determined based on the number of forwarded data packets and the average value of the sub-data; otherwise, a reference value is determined based on the number of sent data packets and the average value of the sub-data.

[0032] The data values ​​for the server's historical period are determined according to formula (1):

[0033]

[0034] Among them, D ij For data values, n ij (n) represents the number of forwarded data packets. ij (Total) represents the number of data packets sent, n ik For sub-data values, n ′ Here are reference values, k is the associated server, i is the server, and j is the historical period.

[0035] In one possible implementation, the historical period bandwidth includes: the minimum available bandwidth and the maximum available bandwidth of the server in the historical period; determining the network value of the server in the historical period based on the server's current available bandwidth and the historical period bandwidth includes:

[0036] The network value for the server's historical period is determined according to formula (2):

[0037]

[0038] Among them, W ij For network values, w i w represents the currently available bandwidth. ij (min) represents the minimum available bandwidth, w ij (max) represents the maximum available bandwidth, i represents the server, and j represents the historical period.

[0039] In one possible implementation, the status value of the server for a historical period is determined based on the server type of the associated server, the server's historical data values, and network values, including:

[0040] The status value of the server's historical period is determined according to formula (3):

[0041]

[0042] Among them, S ij Here, Δt represents the state value, and D represents the time length of the historical period. ij For data values, W ij Here, i represents the network value, i represents the server, and j represents the historical period.

[0043] In one possible implementation, determining the first server capable of performing cloud computing based on the first status value of the server and the average status value of all servers includes:

[0044] If the first state value of the server is greater than or equal to the average state value, the server is determined to be the first server capable of performing cloud computing.

[0045] On the other hand, embodiments of this application provide a data processing method applied to blockchain, including:

[0046] Obtain the status value of the first historical period, the average status value of the first historical period, the cloud computing task identifier, and the first server identifier of the first server; the first server is the first server to be assigned the cloud computing task.

[0047] The first data is determined based on the status value and average status value of the first server in the first historical period;

[0048] The symmetric key is determined based on the cloud computing task identifier and the first server identifier;

[0049] The first data is encrypted using the symmetric key to obtain the encryption key;

[0050] The encryption key is sent to the first server.

[0051] In one possible implementation, determining the symmetric key based on the cloud computing task identifier and the first server identifier includes:

[0052] The hash value of the cloud computing task identifier is calculated to obtain the first hash value;

[0053] Calculate the hash value of the first server identifier to obtain the second hash value;

[0054] The symmetric key is determined based on the XOR value of the first hash value and the second hash value;

[0055] The step of determining the first data based on the state value and average state value of the first server for a first historical period includes:

[0056] The first data is determined based on the quotient of the state value of the first historical period and the average state value of the first server;

[0057] After encrypting the first data using the symmetric key to obtain the encryption key, the method further includes:

[0058] Create new nodes in the blockchain after the existing blockchain to store the encryption key and the symmetric key.

[0059] In another aspect, embodiments of this application provide a data processing method applied to a data aggregation device, including:

[0060] Receive encrypted information sent by the first server; the first server is the first server to be assigned the cloud computing task;

[0061] Based on the first server identifier in the encrypted information, the cloud computing task identifier assigned to the first server, the status value of the first server in the first historical period, and the average status value are determined.

[0062] The first data is determined based on the status value and average status value of the first server in the first historical period;

[0063] The symmetric key is determined based on the cloud computing task identifier and the first server identifier;

[0064] The first data is encrypted using the symmetric key to obtain the encryption key;

[0065] The encrypted data in the encrypted information is decrypted using the encryption key to obtain sub-data.

[0066] In one possible implementation, determining the symmetric key based on the cloud computing task identifier and the first server identifier includes:

[0067] The hash value of the cloud computing task identifier is calculated to obtain the first hash value;

[0068] Calculate the hash value of the first server identifier to obtain the second hash value;

[0069] The symmetric key is determined based on the XOR value of the first hash value and the second hash value;

[0070] The step of determining the first data based on the state value and average state value of the first server for a first historical period includes:

[0071] The first data is determined based on the quotient of the state value of the first historical period and the average state value of the first server.

[0072] In another aspect, embodiments of this application provide a data processing apparatus, the apparatus comprising:

[0073] The first determining module is used to determine the status value of the server in the historical period based on the security information of the server in the historical period;

[0074] The second determining module is used to determine the first server capable of performing cloud computing based on the first status value of the server and the average status value of all servers; the first status value is the status value of the server in the first historical period closest to the current time;

[0075] The allocation module is used to allocate the subtasks after the cloud computing task is split to the first server, so that the first server can perform cloud computing processing on the subtasks to obtain sub-data.

[0076] The first sending module is used to send the server identifier of the first server and the cloud computing task identifier of the cloud computing task to the blockchain, so that the blockchain can determine the encryption key based on the server identifier and the cloud computing task identifier;

[0077] An encryption module is used to encrypt the sub-data using the received encryption key to obtain encrypted data;

[0078] The second sending module is used to send the encrypted data to the aggregation device, so that the aggregation device can decrypt the encrypted data to obtain sub-data from each of the servers, and perform aggregation processing based on the sub-data to obtain aggregated data.

[0079] Furthermore, embodiments of this application provide a data processing apparatus applied to blockchain, the apparatus comprising:

[0080] The acquisition module is used to acquire the status value of the first historical period, the average status value of the first historical period, the cloud computing task identifier, and the first server identifier of the first server; the first server is the first server to be assigned the cloud computing task.

[0081] The first determining module is used to determine the first data based on the state value and average state value of the first server in the first historical period.

[0082] The second determining module is used to determine the symmetric key based on the cloud computing task identifier and the first server identifier;

[0083] An encryption module is used to encrypt the first data according to the symmetric key to obtain an encryption key;

[0084] The sending module is used to send the encryption key to the first server.

[0085] In another aspect, embodiments of this application provide a data processing apparatus applied to a data aggregation device, the apparatus comprising:

[0086] The receiving module is used to receive encrypted information sent by the first server; the first server is the first server to be assigned the cloud computing task.

[0087] The first determining module is used to determine the cloud computing task identifier assigned to the first server, the status value of the first server in the first historical period, and the average status value based on the first server identifier in the encrypted information.

[0088] The second determining module is used to determine the first data based on the state value and average state value of the first server in the first historical period.

[0089] The third determining module is used to determine the symmetric key based on the cloud computing task identifier and the first server identifier;

[0090] An encryption module is used to encrypt the first data according to the symmetric key to obtain an encryption key;

[0091] The decryption module is used to decrypt the encrypted data in the encrypted information according to the encryption key to obtain sub-data.

[0092] In another aspect, embodiments of this application provide a data processing device, the device comprising: a processor and a memory storing computer program instructions;

[0093] When the processor executes the computer program instructions, it implements the data processing method as described in any of the above.

[0094] In another aspect, embodiments of this application provide a computer-readable storage medium storing computer program instructions, which, when executed by a processor, implement the data processing method described in any of the preceding claims.

[0095] In another aspect, embodiments of this application provide a computer program product, wherein the instructions in the computer program product, when executed by a processor of an electronic device, cause the electronic device to perform the data processing method as described in any of the preceding claims.

[0096] The data processing method of this application embodiment determines a status value that reflects the security of the server's historical period based on the server's security information, thereby selecting a first server with high security that can perform cloud computing. Data transmission security is improved by enhancing the security of the data transmission device. Subtasks after the cloud computing task is split are assigned to the first server. Data transmission security is further improved by encrypting the calculation results of the cloud computing task of the first server. Attached Figure Description

[0097] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments of this application will be briefly introduced below. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0098] Figure 1 This is a schematic flowchart of a data processing method provided in one embodiment of this application;

[0099] Figure 2 This is a flowchart illustrating a data processing method provided in another embodiment of this application;

[0100] Figure 3 This is a flowchart illustrating a data processing method provided in another embodiment of this application;

[0101] Figure 4 This is a schematic diagram of the structure of a data processing apparatus provided in one embodiment of this application;

[0102] Figure 5 This is a schematic diagram of the structure of a data processing apparatus provided in another embodiment of this application;

[0103] Figure 6 This is a schematic diagram of the structure of a data processing apparatus provided in another embodiment of this application;

[0104] Figure 7 This is a schematic diagram of the structure of the data processing device provided in the embodiments of this application. Detailed Implementation

[0105] The features and exemplary embodiments of various aspects of this application will be described in detail below. To make the objectives, technical solutions, and advantages of this application clearer, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain this application and not to limit it. For those skilled in the art, this application can be implemented without some of these specific details. The following description of the embodiments is merely to provide a better understanding of this application by illustrating examples.

[0106] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0107] The related technologies are as described in the background technology above. Based on this, the inventor provides a data processing method that determines the security status value that reflects the security of the server's historical period based on the security information of the server, thereby selecting a first server with high security that can perform cloud computing. The method improves data transmission security by improving the security of the data transmission equipment, assigns the sub-tasks of the cloud computing task to the first server, and further improves data transmission security by encrypting the calculation results of the cloud computing task of the first server.

[0108] This application can be used in distributed computing scenarios, ensures data transmission security, and has good application prospects.

[0109] To address the problems of the prior art, embodiments of this application provide a data processing method. The data processing method provided by embodiments of this application is described below.

[0110] Figure 1 A flowchart illustrating a data processing method provided in one embodiment of this application is shown. Figure 1 As shown, the data processing method provided in this application embodiment includes the following steps: S101 to S106.

[0111] S101, Determine the status value of the server for the historical period based on the security information of the server's historical period;

[0112] As one possible implementation of S101, the status value of the server in the historical period is determined based on the security information of the data packets transmitted by the server in the historical period.

[0113] As one possible implementation of S101, the user server determines the status value of the server's historical period based on the security information of the server's historical period.

[0114] As one possible implementation of S101, the user terminal determines the status value of the server for a historical period based on the security information of the server for that period.

[0115] S102, Based on the server's first status value and the average status value of all servers, determine the first server capable of performing cloud computing;

[0116] As one possible implementation of S102, the first server capable of performing cloud computing is determined based on the server's first state value and the median state value of all servers.

[0117] In one example, the first situation value is the situation value of the server's most recent historical period;

[0118] S103: The subtasks after the cloud computing task is split are assigned to the first server, so that the first server can perform cloud computing processing on the subtasks to obtain sub-data.

[0119] As one possible implementation of S103, the subtasks of the cloud computing task are split according to the amount of computation and assigned to the first server, which then performs cloud computing processing on the subtasks to obtain sub-data.

[0120] As another possible implementation of S103, the subtasks of the cloud computing task are split according to the task category within the cloud computing task and assigned to the first server, so that the first server can perform cloud computing processing on the subtasks to obtain sub-data.

[0121] S104, send the server identifier of the first server and the cloud computing task identifier of the cloud computing task to the blockchain, so that the blockchain can determine the encryption key based on the server identifier and the cloud computing task identifier;

[0122] As one possible implementation of S104, the server identifier of the first server and the cloud computing task identifier of the cloud computing task are sent to the preset server, so that the preset server can determine the encryption key based on the server identifier and the cloud computing task identifier.

[0123] As another possible implementation of S104, the server identifier of the first server and the cloud computing task identifier of the cloud computing task are sent to the preset terminal so that the preset terminal can determine the encryption key based on the server identifier and the cloud computing task identifier.

[0124] S105, encrypt the sub-data using the received encryption key to obtain encrypted data;

[0125] As one possible implementation of S105, the sub-data is encrypted using a preset encryption key to obtain encrypted data.

[0126] S106: By sending encrypted data to the aggregation device, the aggregation device decrypts the encrypted data to obtain sub-data from each server, and performs aggregation processing based on the sub-data to obtain aggregated data.

[0127] As one possible implementation of S106, encrypted data is sent to a aggregation device. The aggregation device receives all the encrypted data, decrypts it to obtain sub-data from each server, and then performs aggregation processing based on the sub-data to obtain aggregated data.

[0128] As one possible implementation of S106, encrypted data is sent to a aggregation device. Upon receiving the encrypted data, the aggregation device immediately decrypts it to obtain sub-data from each server. The sub-data is then aggregated to obtain aggregated data.

[0129] The data processing method of this application embodiment determines a security status value that reflects the security of the server's historical period based on the security information of the server, thereby selecting a first server with high security that can perform cloud computing. Data transmission security is improved by enhancing the security of the data transmission device. Subtasks after the cloud computing task is split are assigned to the first server. Data transmission security is further improved by encrypting the calculation results of the cloud computing task of the first server.

[0130] In one possible implementation, to determine the security of the server, S101 may include:

[0131] Perform the following operations on any server:

[0132] Retrieve data packet information sent by the server within a historical period;

[0133] One possible implementation is to obtain a list of servers and, based on the server IDs in the list, retrieve the data packets sent by the servers within a historical period.

[0134] In one example, the historical period could be an hour, a week, a month, etc.

[0135] In one example, the data packets sent by the server are of two types: one is data generated by the server itself, and the other is data forwarded by the server from related servers.

[0136] Based on the IP information in the data packet, identify the associated server that has a data connection with the server;

[0137] One possible implementation is to locate the server corresponding to the IP information in the data packet information and identify the associated server with the data connection.

[0138] Based on the server type, historical data values, and network values ​​of the associated server, determine the status value of the server for the historical period.

[0139] As one possible implementation, the server's historical status value is determined based on the server type of the associated server, the server's historical data and network values, and the server's historical status value.

[0140] As one possible implementation, for data sent by the server itself, the destination IP of each data point is determined, and for forwarded data, the source IP and destination IP of each data point are determined.

[0141] Therefore, based on the data packets sent by the server within a historical period, the server's security is represented by specific status values.

[0142] In one possible implementation, to determine the security of the server, the data packet information includes: the number of data packets sent and the number of data packets forwarded in the server's historical period; the IP information includes: the destination IP of the data packets and the source IP of the forwarded data.

[0143] Among them, the number of data packets sent by the server in the historical period is the total number of data packets generated by the server itself and the number of forwarded data packets, and the number of forwarded data packets is the total number of data packets forwarded from the associated server.

[0144] Based on the IP information in the data packet, identify the associated servers with which the server has a data connection, including:

[0145] Clustering is performed based on the destination IP and source IP to identify associated servers that have data connections with the server.

[0146] As one possible implementation, clustering is performed based on the destination IP and source IP, and all clustered servers are identified as associated servers with data connections to the server.

[0147] As another possible implementation, clustering is performed based on the destination IP and source IP. Servers in clusters with fewer than the preset number of servers are removed, and the remaining servers are identified as associated servers with data connections to the server.

[0148] Therefore, by analyzing the number of data packets sent, forwarded, and the IP addresses of incoming and outgoing data packets in the server's historical data cycles, the associated servers with data transmission can be identified.

[0149] In one possible implementation, to determine server security, the packet information further includes: currently available bandwidth and historical period bandwidth; before determining the server's historical status value based on the associated server's server type, historical data values, and network values, the method may also include:

[0150] Determine the sub-data values ​​between the server and the associated server based on the server type of the associated server;

[0151] As one possible implementation, the sub-data values ​​between the server and the associated server are determined based on the number and weight of each server type in the associated server.

[0152] The server's historical period data values ​​are determined based on the sub-data values ​​between associated servers, the number of data packets sent, and the number of data packets forwarded.

[0153] As one possible implementation, the server's historical period data values ​​are determined based on the sub-data values ​​between the server's associated servers, the number of data packets sent, and the number of data packets forwarded, as well as the weights of the sub-data values, the number of data packets sent, and the number of data packets forwarded, respectively.

[0154] Determine the server's network value for the historical period based on the server's current available bandwidth and historical period bandwidth.

[0155] As one possible implementation, the weights of the current available bandwidth and the historical period bandwidth are determined based on the time of the server's current available bandwidth and the time of the historical period bandwidth; the network value of the server's historical period is determined based on the weights of the current available bandwidth and the historical period bandwidth.

[0156] Therefore, based on the data transmitted between the server and its associated servers, and the server's bandwidth, the data values ​​and network values ​​that reflect the server's security are determined, which facilitates the subsequent determination of the status value that reflects the server's security based on the server's data values ​​and network values.

[0157] In one possible implementation, to determine the security of the server, the sub-data values ​​between the server and the associated server are determined based on the server type of the associated server, which may include:

[0158] When the server type is a data input connection server, the sub-data value is determined based on the total number of data packets sent from the associated server to the server.

[0159] When the server type is a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server.

[0160] When the server type is a data input connection service and a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server and the total number of data packets sent by the associated server to the server.

[0161] In one example, for associated server k, if it is a data input connection server, the sub-data value is the sum of all data packets sent by server k to server i. If it is a data output connection server, the sub-data value is the sum of all data packets sent by server i to server k. If it is both a data input server and a data output connection server, the sub-data value is the sum of all data sent by server k to server i and all data packets sent by server i to server k.

[0162] Therefore, determining the server's sub-data values ​​based on the server type facilitates the subsequent determination of the server's status value based on these sub-data values.

[0163] In one possible implementation, to determine the security of a server, the server's historical periodic data values ​​are determined based on the sub-data values ​​between the server's associated servers, the number of data packets sent, and the number of data packets forwarded. These values ​​may include:

[0164] The mean of the sub-data values ​​is obtained by averaging the sub-data values ​​across all associated servers.

[0165] If the associated server type is a data input connection server, the reference value is determined based on the number of forwarded data packets and the average value of sub-data. Otherwise, the reference value n is determined based on the number of sent data packets and the average value of sub-data. ′ ;

[0166] Determine the data values ​​for the server's historical period according to formula (1):

[0167]

[0168] Among them, D ij For data values, n ij (n) represents the number of forwarded data packets.ij (Total) represents the number of data packets sent, n ik For sub-data values, n ′ Here are reference values, k is the associated server, i is the server, and j is the historical period.

[0169] Therefore, based on the sub-data values ​​between the associated servers, the number of data packets sent, and the number of data packets forwarded, the data values ​​for the server's historical periods are determined.

[0170] In one possible implementation, to determine server security, the historical period bandwidth includes: the minimum available bandwidth and the maximum available bandwidth of the server's historical period; based on the server's current available bandwidth and the historical period bandwidth, determining the network value of the server's historical period may include:

[0171] Determine the network value for the server's historical period according to formula (2):

[0172]

[0173] Among them, W ij For network values, w i w represents the currently available bandwidth. ij (min) represents the minimum available bandwidth, w ij (max) represents the maximum available bandwidth, i represents the server, and j represents the historical period.

[0174] In one possible implementation, to determine the security of a server, a status value for the server's historical period is determined based on the server type of the associated server, the server's historical data values, and network values. This status value includes:

[0175] The status value of the server for the historical period is determined according to formula (3):

[0176]

[0177] Among them, S ij Here, Δt represents the state value, and D represents the time length of the historical period. ij For data values, W ij Here, i represents the network value, i represents the server, and j represents the historical period.

[0178] Therefore, based on the server's current available bandwidth and historical period bandwidth, the network value for the server's historical period is determined.

[0179] In one possible implementation, to determine the security of a server, a first server capable of performing cloud computing is determined based on the server's initial state value and the average state value of all servers, including:

[0180] If the server's first state value is greater than or equal to the average state value, the server is determined to be the first server capable of performing cloud computing.

[0181] Therefore, based on the server's initial state value and the average state value of all servers, the first server capable of performing cloud computing is determined.

[0182] Figure 2 A flowchart illustrating a data processing method provided in another embodiment of this application is shown. Figure 2 As shown, the data processing method for blockchain provided in this application includes the following steps: S201 to S205.

[0183] S201, obtain the status value of the first historical period of the first server, the average status value of the first historical period, the cloud computing task identifier, and the first server identifier;

[0184] In one example, the server's status value can be obtained by comprehensively evaluating factors such as the server's CPU status and bandwidth. This reflects the server's operational status.

[0185] In one example, the first server is the first server assigned the cloud computing task;

[0186] S202, determine the first data based on the state value and average state value of the first historical period of the first server;

[0187] As one possible implementation of S202, the first data is determined based on the quotient of the state value of the first historical period and the average state value of the first server.

[0188] S203, determine the symmetric key based on the cloud computing task identifier and the first server identifier;

[0189] As a possible implementation of S203, a hash value is calculated on the cloud computing task identifier to obtain a first hash value; a hash value is calculated on the first server identifier to obtain a second hash value; and a symmetric key is determined based on the XOR value of the first hash value and the second hash value.

[0190] In one example, hash() is a hash function, H1 = hash(cloud computing task identifier), H2 = hash(first server identifier), then the symmetric key is H1⊕H2.

[0191] Therefore, the symmetric key is determined based on the cloud computing task identifier and the first server identifier.

[0192] S204, encrypt the first data using the symmetric key to obtain the encryption key;

[0193] As one possible implementation, encryption can be performed using the encryption methods of a data encryption standard. Alternatively, other encryption methods can also be used.

[0194] S205, send the encryption key to the first server.

[0195] The data processing method of this application embodiment determines first data based on the state value and average state value of the first server in the first historical period, determines a symmetric key based on the cloud computing task identifier and the first server identifier, and encrypts the first data based on the symmetric key to obtain an encryption key, thereby improving the security of data transmission.

[0196] Following S204, the method may also include: creating new nodes in the blockchain after an existing blockchain to store cryptographic keys and symmetric keys.

[0197] Therefore, the encryption key and symmetric key are stored in the blockchain.

[0198] Following S204, the method may further include: the blockchain determining whether the XOR value is stored; if not, determining that the first server does not have access and reporting that the encryption key cannot be obtained; if it is stored, reporting the encryption key.

[0199] Because the encryption key of the primary server executing the cloud computing task is obtained from the blockchain, the security of the encryption key is guaranteed.

[0200] Figure 3 A flowchart illustrating a data processing method provided in another embodiment of this application is shown. Figure 3 As shown, the data processing method for aggregating devices provided in this application includes the following steps: S301 to S306.

[0201] S301, Receive encrypted information sent by the first server;

[0202] In one example, the first server is the first server assigned the cloud computing task;

[0203] S302, based on the first server identifier in the encrypted information, determine the cloud computing task identifier assigned to the first server, the status value of the first server in the first historical period, and the average status value.

[0204] S303, determine the first data based on the status value and average status value of the first historical period of the first server;

[0205] As one possible implementation of S303, the first data is determined based on the quotient of the state value of the first historical period and the average state value of the first server.

[0206] S304. Determine the symmetric key based on the cloud computing task identifier and the first server identifier;

[0207] As a possible implementation of S304, in order to improve data security, a hash value is calculated on the cloud computing task identifier to obtain a first hash value; a hash value is calculated on the first server identifier to obtain a second hash value; and a symmetric key is determined based on the XOR value of the first hash value and the second hash value.

[0208] Therefore, the symmetric key is determined based on the cloud computing task identifier and the first server identifier.

[0209] S305, encrypt the first data using the symmetric key to obtain the encryption key;

[0210] S306, decrypt the encrypted data in the encrypted information according to the encryption key to obtain the sub-data.

[0211] As one possible implementation of S303, the decryption process is the reverse of the encryption process, and it also adopts the existing decryption scheme. The decryption scheme is the same as the encryption scheme.

[0212] In one example, if the encryption uses the data encryption standard's encryption scheme, then the decryption also uses the data encryption standard's decryption scheme. Alternatively, other decryption methods can be used, as long as they correspond to the encryption method.

[0213] The data processing method of this application embodiment determines first data based on the state value and average state value of the first server in the first historical period, determines a symmetric key based on the cloud computing task identifier and the first server identifier, encrypts the first data based on the symmetric key to obtain an encryption key, and decrypts the encrypted data in the encrypted information.

[0214] The encryption key of the aggregation device is obtained when it allocates cloud computing tasks. It has not undergone any transmission or other operations and is stored inside the device. Therefore, it reduces the risk of data tampering, ensures the security of decryption, and thus guarantees the effectiveness of encrypted transmission of cloud computing data.

[0215] Figure 4 A schematic diagram of the structure of a data processing apparatus provided in one embodiment of this application is shown. Figure 4 As shown, the data processing apparatus 400 provided in this application embodiment includes:

[0216] The first determining module 401 is used to determine the status value of the server in the historical period based on the security information of the server in the historical period.

[0217] The second determining module 402 is used to determine the first server capable of performing cloud computing based on the first status value of the server and the average status value of all servers; the first status value is the status value of the server in the first historical period closest to the current time;

[0218] The allocation module 403 is used to allocate the subtasks after the cloud computing task is split to the first server, so that the first server can perform cloud computing processing on the subtasks to obtain sub-data.

[0219] The first sending module 404 is used to send the server identifier of the first server and the cloud computing task identifier of the cloud computing task to the blockchain, so that the blockchain can determine the encryption key based on the server identifier and the cloud computing task identifier.

[0220] The encryption module 405 is used to encrypt the sub-data using the received encryption key to obtain encrypted data;

[0221] The second sending module 406 is used to send encrypted data to the aggregation device, which then decrypts the encrypted data to obtain sub-data from each server. The aggregation device then performs aggregation processing based on the sub-data to obtain aggregated data.

[0222] In one possible implementation, to determine the security of the server, the first determining module 401 can be used to:

[0223] Perform the following operations on any server:

[0224] Retrieve data packet information sent by the server within a historical period;

[0225] Based on the IP information in the data packet, identify the associated server that has a data connection with the server;

[0226] Based on the server type, historical data values, and network values ​​of the associated server, determine the status value of the server for the historical period.

[0227] Therefore, based on the data packets sent by the server within a historical period, the server's security is represented by specific status values.

[0228] In one possible implementation, to determine the security of the server, the data packet information includes: the number of data packets sent and the number of data packets forwarded in the server's historical period; the IP information includes: the destination IP of the data packets sent and the source IP of the forwarded data; the data processing apparatus 400 provided in this application embodiment may further include:

[0229] The clustering module is used to perform clustering based on the destination IP and source IP to determine the associated servers that have data connections with the server.

[0230] Therefore, by analyzing the number of data packets sent, forwarded, and the IP addresses of incoming and outgoing data packets in the server's historical data cycles, the associated servers with data transmission can be identified.

[0231] In one possible implementation, to determine the security of the server, the data packet information further includes: currently available bandwidth and historical period bandwidth; before determining the server's historical period status value based on the server type of the associated server, the server's historical period data value, and network value, the data processing apparatus 400 provided in this application embodiment may further include:

[0232] The sub-data value determination module is used to determine the sub-data value between the server and the associated server based on the server type of the associated server.

[0233] The data value determination module is used to determine the data values ​​of the server for historical periods based on the sub-data values ​​between the server's associated servers, the number of data packets sent, and the number of data packets forwarded.

[0234] The network value determination module is used to determine the server's network value for a historical period based on the server's current available bandwidth and historical period bandwidth.

[0235] Therefore, based on the data transmitted between the server and its associated servers, and the server's bandwidth, the data values ​​and network values ​​that reflect the server's security are determined, which facilitates the subsequent determination of the status value that reflects the server's security based on the server's data values ​​and network values.

[0236] In one possible implementation, to determine server security, the sub-data value determination module can also be used for:

[0237] When the server type is a data input connection server, the sub-data value is determined based on the total number of data packets sent from the associated server to the server.

[0238] When the server type is a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server.

[0239] When the server type is a data input connection service and a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server and the total number of data packets sent by the associated server to the server.

[0240] Therefore, determining the server's sub-data values ​​based on the server type facilitates the subsequent determination of the server's status value based on these sub-data values.

[0241] In one possible implementation, to determine server security, the data value determination module can also be used for:

[0242] The mean of the sub-data values ​​is obtained by averaging the sub-data values ​​across all associated servers.

[0243] If the associated server type is a data input connection server, the reference value is determined based on the number of forwarded data packets and the average value of sub-data; otherwise, the reference value is determined based on the number of sent data packets and the average value of sub-data.

[0244] The data values ​​for the server's historical period are determined according to formula (1).

[0245] Therefore, based on the sub-data values ​​between the associated servers, the number of data packets sent, and the number of data packets forwarded, the data values ​​for the server's historical periods are determined.

[0246] In one possible implementation, in order to determine the security of the server, the historical period bandwidth includes: the minimum available bandwidth and the maximum available bandwidth of the server's historical period; the network value determination module can also be used to: determine the network value of the server's historical period according to formula (2).

[0247] Therefore, based on the server's current available bandwidth and historical period bandwidth, the network value for the server's historical period is determined.

[0248] In one possible implementation, in order to determine the security of the server, the first determining module 401 can also be used to: determine the status value of the server's historical period according to formula (3).

[0249] Therefore, based on the server's current available bandwidth and historical period bandwidth, the network value for the server's historical period is determined.

[0250] In one possible implementation, to determine the security of the server, the second determining module 402 can also be used for:

[0251] If the server's first state value is greater than or equal to the average state value, the server is determined to be the first server capable of performing cloud computing.

[0252] Therefore, based on the server's initial state value and the average state value of all servers, the first server capable of performing cloud computing is determined.

[0253] Figure 5 A schematic diagram of the structure of a data processing apparatus provided in another embodiment of this application is shown.

[0254] like Figure 5 As shown, the data processing apparatus 500 for blockchain applications provided in this application embodiment includes:

[0255] The acquisition module 501 is used to acquire the status value of the first historical period, the average status value of the first historical period, the cloud computing task identifier, and the first server identifier of the first server; the first server is the first server to be assigned the cloud computing task.

[0256] The first determining module 502 is used to determine the first data based on the status value and average status value of the first server in the first historical period.

[0257] The second determining module 503 is used to determine the symmetric key based on the cloud computing task identifier and the first server identifier;

[0258] The encryption module 504 is used to encrypt the first data according to the symmetric key to obtain the encryption key;

[0259] The sending module 505 is used to send the encryption key to the first server.

[0260] The data processing method of this application embodiment determines first data based on the state value and average state value of the first server in the first historical period, determines a symmetric key based on the cloud computing task identifier and the first server identifier, and encrypts the first data based on the symmetric key to obtain an encryption key, thereby improving the security of data transmission.

[0261] In one possible implementation, the second determining module 503 can also be used for:

[0262] Calculate the hash value of the cloud computing task identifier to obtain the first hash value;

[0263] Calculate the hash value of the first server identifier to obtain the second hash value;

[0264] The symmetric key is determined based on the XOR value of the first hash value and the second hash value;

[0265] Therefore, the symmetric key is determined based on the cloud computing task identifier and the first server identifier.

[0266] Based on the state values ​​and average state values ​​of the first server for the first historical period, the first data is determined, including:

[0267] The first data is determined based on the quotient of the state value and the average state value of the first server in the first historical period;

[0268] Encryption module 504 can also be used for:

[0269] Create new nodes on top of an existing blockchain to store encryption keys and symmetric keys.

[0270] Therefore, the encryption key and symmetric key are stored in the blockchain.

[0271] Figure 6 A schematic diagram of the structure of a data processing apparatus provided in another embodiment of this application is shown. Figure 6 As shown, the data processing apparatus 600 for aggregating devices provided in this application embodiment includes:

[0272] The receiving module 601 is used to receive encrypted information sent by the first server; the first server is the first server to be assigned the cloud computing task.

[0273] The first determining module 602 is used to determine the cloud computing task identifier assigned to the first server, the status value of the first server in the first historical period, and the average status value of the first server based on the first server identifier in the encrypted information.

[0274] The second determining module 603 is used to determine the first data based on the status value and average status value of the first server in the first historical period.

[0275] The third determining module 604 is used to determine the symmetric key based on the cloud computing task identifier and the first server identifier;

[0276] The encryption module 605 is used to encrypt the first data according to the symmetric key to obtain the encryption key;

[0277] The decryption module 606 is used to decrypt the encrypted data in the encrypted information according to the encryption key to obtain the sub-data.

[0278] The data processing apparatus of this application embodiment determines first data based on the state value and average state value of the first server in a first historical period, determines a symmetric key based on the cloud computing task identifier and the first server identifier, encrypts the first data based on the symmetric key to obtain an encryption key, and decrypts the encrypted data in the encrypted information.

[0279] In one possible implementation, to improve data security, the third determining module 604 can be used for:

[0280] Calculate the hash value of the cloud computing task identifier to obtain the first hash value;

[0281] Calculate the hash value of the first server identifier to obtain the second hash value;

[0282] The symmetric key is determined based on the XOR value of the first hash value and the second hash value;

[0283] Based on the state values ​​and average state values ​​of the first server for the first historical period, the first data is determined, including:

[0284] The first data is determined based on the quotient of the state value of the first historical period and the average state value of the first server.

[0285] Therefore, the symmetric key is determined based on the cloud computing task identifier and the first server identifier.

[0286] Figure 7 This is a schematic diagram of the structure of the data processing device provided in the embodiments of this application, such as... Figure 7 As shown, the data processing device may include a processor 701 and a memory 702 storing computer program instructions.

[0287] Specifically, the processor 701 may include a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits that can be configured to implement the embodiments of this application.

[0288] Memory 702 may include mass storage for data or instructions. For example, and not limitingly, memory 702 may include a hard disk drive (HDD), floppy disk drive, flash memory, optical disk, magneto-optical disk, magnetic tape, or Universal Serial Bus (USB) drive, or a combination of two or more of these. Where appropriate, memory 702 may include removable or non-removable (or fixed) media. Where appropriate, memory 702 may be internal or external to the integrated gateway disaster recovery device. In a particular embodiment, memory 702 is non-volatile solid-state memory.

[0289] Memory 702 may include read-only memory (ROM), random access memory (RAM), disk storage media device, optical storage media device, flash memory device, electrical, optical, or other physical / tangible memory storage device. Therefore, generally, memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to one aspect of this application.

[0290] The processor 701 implements any of the data processing methods described in the above embodiments by reading and executing computer program instructions stored in the memory 702.

[0291] In one example, the data processing device may further include a communication interface 703 and a bus 710. Wherein, as... Figure 7 As shown, the processor 701, memory 702, and communication interface 703 are connected through bus 710 and complete communication with each other.

[0292] The communication interface 703 is mainly used to realize communication between various modules, devices, units and / or equipment in the embodiments of this application.

[0293] Bus 710 includes hardware, software, or both, that couples components of a data processing device together. For example, and not limitingly, the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), HyperTransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an Infinite Bandwidth Interconnect, a Low Pin Count (LPC) bus, a memory bus, a Microchannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VLB) bus, or other suitable buses, or combinations of two or more of these. Where appropriate, bus 710 may include one or more buses. Although specific buses are described and illustrated in embodiments of this application, any suitable bus or interconnect is contemplated herein.

[0294] The data processing device can execute the data processing method described in the embodiments of this application, thereby achieving the combination Figures 1-6 The data processing methods and apparatus described.

[0295] In addition, in conjunction with the data processing methods in the above embodiments, this application embodiment can provide a computer-readable storage medium storing computer program instructions, which, when executed by a processor, implement the data processing method as described above.

[0296] In conjunction with the data processing methods in the above embodiments, this application embodiment can provide a computer program product, in which the instructions in the computer program product are executed by the processor of an electronic device, causing the electronic device to perform any of the data processing methods described above.

[0297] It should be clarified that this application is not limited to the specific configurations and processes described above and shown in the figures. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of this application is not limited to the specific steps described and shown. Those skilled in the art can make various changes, modifications, and additions, or change the order of steps, after understanding the spirit of this application.

[0298] The functional blocks shown in the above block diagram can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application-specific integrated circuits (ASICs), appropriate firmware, plug-ins, function cards, etc. When implemented in software, the elements of this application are programs or code segments used to perform the required tasks. Programs or code segments can be stored on a machine-readable medium or transmitted over a transmission medium or communication link via data signals carried on a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, fiber optic media, radio frequency (RF) links, etc. Code segments can be downloaded via computer networks such as the Internet, intranets, etc.

[0299] It should also be noted that the exemplary embodiments mentioned in this application describe methods or systems based on a series of steps or apparatus. However, this application is not limited to the order of the above steps; that is, the steps can be performed in the order mentioned in the embodiments, or in a different order, or several steps can be performed simultaneously.

[0300] The aspects of this application have been described above with reference to flowchart illustrations and / or block diagrams of methods, apparatus, and computer program products according to embodiments of this application. It should be understood that each block in the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that these instructions, executable via the processor of the computer or other programmable data processing apparatus, enable the implementation of the functions / actions specified in one or more blocks of the flowchart illustrations and / or block diagrams. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field-programmable logic circuit. It is also understood that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can also be implemented by dedicated hardware performing the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0301] The above description is merely a specific implementation of this application. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, modules, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here. It should be understood that the protection scope of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the protection scope of this application.

Claims

1. A data processing method, characterized in that, include: Based on the security information of the server's historical periods, determine the status value of the server's historical periods; Based on the first state value of the server and the average state value of all servers, the first server capable of performing cloud computing is determined; The first situation value is the situation value of the first historical period closest to the current time for the server; The subtasks derived from the cloud computing task are assigned to the first server, which then performs cloud computing processing on the subtasks to obtain sub-data. The server identifier of the first server and the cloud computing task identifier of the cloud computing task are sent to the blockchain, so that the blockchain can determine the encryption key based on the server identifier and the cloud computing task identifier; The received encryption key is used to encrypt the sub-data to obtain encrypted data; The encrypted data is sent to a aggregation device, which decrypts the encrypted data to obtain sub-data from each server. The sub-data is then aggregated to obtain aggregated data.

2. The data processing method according to claim 1, characterized in that, The step of determining the status value of the server for a historical period based on the server's security information includes: Perform the following operations on any of the servers described: Obtain the data packet information sent by the server within the historical period; Based on the IP information in the data packet information, determine the associated server that has a data connection with the server; Based on the server type of the associated server, the historical data value and network value of the server, the status value of the server for the historical period is determined.

3. The data processing method according to claim 2, characterized in that, The data packet information includes: the number of data packets sent and the number of data packets forwarded by the server in a historical period; the IP information includes: the destination IP of the data packets and the source IP of the forwarded data. The step of determining the associated server with a data connection to the server based on the IP information in the data packet information includes: Clustering is performed based on the destination IP and the source IP to determine the associated servers that have data connections with the server.

4. The data processing method according to claim 3, characterized in that, The data packet information also includes: currently available bandwidth and historical period bandwidth; before determining the server's historical period status value based on the server type of the associated server, the server's historical period data value, and network value, the method further includes: Based on the server type of the associated server, determine the sub-data value between the server and the associated server; The historical period data value of the server is determined based on the sub-data values ​​between the associated servers of the server, the number of data packets sent, and the number of data packets forwarded. The network value for the server's historical period is determined based on the server's current available bandwidth and historical period bandwidth.

5. The data processing method according to claim 4, characterized in that, The step of determining the sub-data value between the server and the associated server based on the server type of the associated server includes: When the server type is a data input connection server, the sub-data value is determined based on the total number of data packets sent by the associated server to the server. When the server type is a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server; When the server type is a data input connection service and a data output connection server, the sub-data value is determined based on the total number of data packets sent by the server to the associated server and the total number of data packets sent by the associated server to the server.

6. The data processing method according to claim 4, characterized in that, The step of determining the historical period data value of the server based on the sub-data values ​​between the associated servers, the number of data packets sent, and the number of data packets forwarded includes: The mean of the sub-data values ​​is obtained by averaging the sub-data values ​​of all the associated servers. If the server type of the associated server is a data input connection server, a reference value is determined based on the number of forwarded data packets and the average value of the sub-data; otherwise, a reference value is determined based on the number of sent data packets and the average value of the sub-data. The data values ​​for the server's historical period are determined according to formula (1): （1） in, For data values, (Transferred) refers to the number of forwarded data packets. (Total) represents the number of data packets sent. For sub-data values, For reference only. For associated servers, For the server, This is a historical cycle.

7. The data processing method according to claim 4, characterized in that, The historical period bandwidth includes: the minimum available bandwidth and the maximum available bandwidth of the server in the historical period; determining the network value of the server in the historical period based on the current available bandwidth and the historical period bandwidth includes: The network value for the server's historical period is determined according to formula (2): （2） in, For network values, Currently available bandwidth, For minimum available bandwidth, For the maximum available bandwidth, For the server, This is a historical cycle.

8. The data processing method according to claim 2, characterized in that, Based on the server type of the associated server, the historical data values ​​and network values ​​of the server, the status value of the server for the historical period is determined, including: The status value of the server's historical period is determined according to formula (3): （3） in, This is the situation value. The length of the historical cycle. For data values, For network values, For the server, This is a historical cycle.

9. The data processing method according to claim 1, characterized in that, The step of determining the first server capable of performing cloud computing based on the first status value of the server and the average status value of all servers includes: If the first state value of the server is greater than or equal to the average state value, the server is determined to be the first server capable of performing cloud computing.

10. A data processing method, characterized in that, Applications in blockchain, including: Obtain the situation value of the first historical period, the average situation value of the first historical period, the cloud computing task identifier, and the first server identifier of the first server; the first server is the first server to be assigned the cloud computing task. The first data is determined based on the situation value and average situation value of the first historical period of the first server; The symmetric key is determined based on the cloud computing task identifier and the first server identifier; The first data is encrypted using the symmetric key to obtain the encryption key; The encryption key is sent to the first server.

11. The data processing method according to claim 10, characterized in that, The step of determining the symmetric key based on the cloud computing task identifier and the first server identifier includes: The hash value of the cloud computing task identifier is calculated to obtain the first hash value; Calculate the hash value of the first server identifier to obtain the second hash value; The symmetric key is determined based on the XOR value of the first hash value and the second hash value; The step of determining the first data based on the situation value and average situation value of the first historical period of the first server includes: The first data is determined based on the quotient of the situation value and the average situation value of the first historical period of the first server. After encrypting the first data using the symmetric key to obtain the encryption key, the method further includes: Create new nodes in the blockchain after the existing blockchain to store the encryption key and the symmetric key.

12. A data processing method, characterized in that, Applied to aggregation devices, including: Receive encrypted information sent by the first server; the first server is the first server to be assigned the cloud computing task; Based on the first server identifier in the encrypted information, the cloud computing task identifier assigned to the first server, the status value of the first server in the first historical period, and the average status value are determined. The first data is determined based on the situation value and average situation value of the first historical period of the first server; The symmetric key is determined based on the cloud computing task identifier and the first server identifier; The first data is encrypted using the symmetric key to obtain the encryption key; The encrypted data in the encrypted information is decrypted using the encryption key to obtain sub-data.

13. The data processing method according to claim 12, characterized in that, The step of determining the symmetric key based on the cloud computing task identifier and the first server identifier includes: The hash value of the cloud computing task identifier is calculated to obtain the first hash value; Calculate the hash value of the first server identifier to obtain the second hash value; The symmetric key is determined based on the XOR value of the first hash value and the second hash value; The step of determining the first data based on the situation value and average situation value of the first historical period of the first server includes: The first data is determined based on the quotient of the situation value and the average situation value of the first historical period of the first server.

Images