A method for warehousing processing of customer identification module data

Abstract

The embodiment of the present application relates to a kind of customer identification module data warehousing processing method, the method comprises: receiving personnel information and carrying out identity verification;When verification succeeds, receive raw data file;And each raw data record in file is standardized to generate standard data file;And each standard data record is parsed and desensitization analysis log assembly is parsed;And key data encryption is carried out;And according to non-key data set and encrypted key data, warehousing record assembly is generated to store in customer identification module database;And when warehousing succeeds, add warehousing time and database name in desensitization analysis log to generate warehousing log;And in the warehousing process of standard data file, print all warehousing logs based on warehousing log printing rule;And after the end of the warehousing process of standard data file, according to all warehousing logs, warehousing operation verification is carried out.The present application can ensure that customer identification module key data is not exposed in plaintext.

Description

Technical Field

[0001] This invention relates to the field of data processing technology, and in particular to a method for processing customer identification module data for database entry. Background Technology

[0002] In the field of mobile communication such as 2G / 3G / 4G / 5G, the personalized Subscriber Identity Module (SIM) is loaded with a series of operator data for network access, including: Integrated Circuit Card Identity (ICCID), Mobile Subscriber International ISDN (MSISDN) number, International Mobile Subscriber Identity (IMSI) number, Authentication Key (Ki), Authentication Parameter (OPC), etc.

[0003] In 2G / 3G / 4G / 5G network operations, customer identification (CID) module operators are divided into two categories: communication operators and service operators. Service operators purchase a large number of unpersonalized CID modules from communication operators, store all CID module operator data locally, and personalize one CID module by selecting a stored operator data set when activating it. The activated CID module is then placed on the service terminals deployed on its own service platform to establish front-end and back-end communication connections. Service operators also periodically settle communication costs with communication operators for all activated CID modules.

[0004] As described above, after obtaining all customer identification module (CIM) data, service operators store it locally. Currently, most service operators use plaintext storage for CIM data because it facilitates retrieval. However, in practical applications, we have discovered a data security vulnerability in this plaintext storage method: it completely exposes critical data used for network authentication by the CIM (such as Ki and OPC). Once hackers or other unauthorized third parties copy this plaintext data from the database, they can personalize the CIM and activate it, while the resulting communication costs are borne by the service operator whose data was stolen. Summary of the Invention

[0005] The purpose of this invention is to address the shortcomings of existing technologies by providing a method, electronic device, and computer-readable storage medium for processing customer identification module (CIM) data in a database. First, the scope of personnel authorized to access CIM data files is restricted. Then, a dual encryption mechanism combining asymmetric and symmetric encryption is used to encrypt the Ki and OPC data of the CIM module. Next, an entry record is created by combining the plaintext ICCID, MSISDN, and IMSI data with the encrypted Ki and OPC data for database storage. During the entry process, the plaintext Ki and OPC data are anonymized, and an entry log is created by combining the plaintext ICCID, MSISDN, and IMSI data with the anonymized Ki and OPC data for logging. This invention ensures that critical CIM data (such as Ki and OPC) used for online authentication is not exposed in plaintext in the database. Furthermore, the simultaneous generation of an entry log with anonymized plaintext Ki and OPC data during entry helps staff conduct entry verification without exposing the full text of the Ki and OPC data.

[0006] To achieve the above objectives, a first aspect of the present invention provides a method for processing customer identification module data in a database, the method comprising:

[0007] The system receives first personnel information input by a first staff member; and performs identity verification processing on the first personnel information according to a preset personnel operation permission list to generate a corresponding first verification result and a first data interface list; the first verification result includes verification failure and verification success; when the first verification result is verification failure, the corresponding first data interface list is empty;

[0008] When the first verification result is successful, the first data interface list is displayed to the first staff member, and the data interface selected and confirmed by the first staff member on the list is taken as the corresponding first data interface; and the customer identification module data file is received and processed through the first data interface to generate the corresponding first original data file; the first original data file includes multiple first original data records;

[0009] The first original data file is then standardized to generate corresponding first standard data records, forming a first standard data file; the first standard data file includes multiple first standard data records.

[0010] The system performs data parsing and de-identification parsing log assembly processing on each of the first standard data records to generate corresponding first non-critical datasets, first critical datasets, and first de-identification parsing logs. It then performs key data encryption processing on the first non-critical datasets and the first critical datasets to generate corresponding first encrypted key data. Finally, it assembles entry records based on the first non-critical datasets and the first encrypted key data to generate corresponding first entry records, which are then stored in a preset customer identification module database. Upon successful entry, the entry time of the first entry record is used as the corresponding first entry time, and the name of the customer identification module database is used as the corresponding first database name. The first entry time and the first database name are then added to the first de-identification parsing log to generate the corresponding first entry log.

[0011] During the process of importing the first standard data file into the database, all the first import logs are printed based on the preset import log printing rules.

[0012] After the first standard data file is stored in the database, the storage operation is verified based on all the first storage logs.

[0013] Preferably, the first personnel information includes a first personnel identifier and a first personnel verification code;

[0014] The personnel operation permission list includes multiple personnel operation permission records; the personnel operation permission record includes a personnel identifier field, a personnel verification code field, and a data interface list field; the data interface list field includes one or more customer identification module data file receiving interfaces.

[0015] The first raw data file includes at least the following file formats: CSV, TXT, Excel, TSV, and Word.

[0016] The first standard data file uses CSV file format by default;

[0017] Both the first raw data record and the first standard data record consist of a first operator code, a first ICCID data, a first MSISDN data, a first IMSI data, a first Ki data, a first OPC data, and a first timestamp;

[0018] The first non-critical dataset includes the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, and the first timestamp;

[0019] The first key dataset includes the first Ki data and the first OPC data;

[0020] The first de-identified parsing log includes the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki de-identified data, the first OPC de-identified data, and the first timestamp;

[0021] The first entry record includes the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, the first encrypted key data, and the first timestamp;

[0022] The first inbound log includes the first inbound time, the first database name, the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki de-identified data, the first OPC de-identified data, and the first timestamp;

[0023] The log printing rules include print type configuration, print interface configuration, and print mode configuration. The print type configuration includes screen display type, file print type, and paper print type. When the print type is configured as screen display type, the corresponding print interface is configured as a preset display processing interface. When the print type is configured as file print type, the corresponding print interface is configured as a preset file processing interface. When the print type is configured as paper print type, the corresponding print interface is configured as a preset printer processing interface. The print mode configuration includes record-by-record printing mode and batch record printing mode.

[0024] Preferably, the step of performing identity verification processing on the first personnel information according to a preset personnel operation permission list to generate a corresponding first verification result and a first data interface list specifically includes:

[0025] The personnel operation permission records in the personnel operation permission list that match the personnel identifier field with the first personnel identifier of the first personnel information and the personnel verification code field with the first personnel verification code of the first personnel information are taken as the corresponding matching records; and it is identified whether the matching record is empty; if yes, the corresponding first verification result is set to verification failure and the corresponding first data interface list is set to empty; if no, the corresponding first verification result is set to verification success and the data interface list field of the matching record is extracted as the corresponding first data interface list; and the obtained first verification result and first data interface list are output as the corresponding identity verification processing result.

[0026] Preferably, the step of standardizing each of the first original data records in the first original data file to generate corresponding first standard data records to form a corresponding first standard data file specifically includes:

[0027] The file format of the first original data file is identified to generate a corresponding first file format; the first file format includes at least CSV, TXT, Excel, TSV, and Word file formats;

[0028] The system parses each record of the first original data file according to a preset file record parser corresponding to the first file format to obtain one or more corresponding first original data records; the file record parser includes at least a CSV file record parser, a TXT file record parser, an Excel file record parser, a TSV file record parser, and a Word file record parser;

[0029] And create a corresponding first standard data record for each of the first original data records according to the preset standard data record format; and store the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki data, the first OPC data and the first timestamp of each of the first original data records into the corresponding data fields of the corresponding first standard data record;

[0030] The first standard data file is composed of all the obtained first standard data records according to the preset standard data file record assembly rules, and the file format is the preset standard data file format; the default standard data file format is CSV file format;

[0031] The obtained first standard data file is then output as the corresponding standardization result.

[0032] Preferably, the step of performing data parsing and de-identification parsing log assembly processing on each of the first standard data records to generate the corresponding first non-critical dataset, first critical dataset, and first de-identification parsing log specifically includes:

[0033] The first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, and the first timestamp from the first standard data record are extracted to form the corresponding first non-critical dataset;

[0034] The first Ki data and the first OPC data recorded in the first standard data record are extracted to form the corresponding first key dataset;

[0035] The first Ki data recorded in the first standard data is taken as the corresponding first string; the substring from the preset first start character index to the preset first end character index in the first string is recorded as the corresponding first substring; and all characters in the first substring are replaced one by one using the preset desensitized single character; and the first string after the desensitized character replacement is taken as the corresponding first Ki desensitized data.

[0036] The first OPC desensitized data recorded in the first standard data is used as the corresponding second string; the second string is hashed using a preset hash algorithm to generate a first hash code in hexadecimal data format; the first hash code is converted into a hexadecimal data string to generate a corresponding first hash code string; and the first hash code string is used as the corresponding first OPC desensitized data.

[0037] The first de-identification parsing log is composed of the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki de-identification data, the first OPC de-identification data, and the first timestamp corresponding to the first standard data record.

[0038] The first non-critical dataset, the first critical dataset, and the first de-identified parsing log are used as the corresponding data parsing and de-identified parsing log assembly processing results and output.

[0039] Preferably, the step of generating corresponding first encrypted key data by performing key data encryption processing based on the first non-key dataset and the first key dataset specifically includes:

[0040] The first ICCID data, the first MSISDN data, and the first IMSI data of the first non-critical dataset are used as the corresponding first ICCID string, first MSISDN string, and first IMSI string; and the first Ki data and the first OPC data of the first critical dataset are used as the corresponding first Ki string and first OPC string.

[0041] The substring from the preset second start character index to the preset second end character index in the first ICCID string is recorded as the corresponding first ICCID substring, and the substring from the preset third start character index to the preset third end character index is recorded as the corresponding second ICCID substring; the first ICCID substring, the second ICCID substring, the first Ki string, and the first OPC string are sequentially concatenated to generate the corresponding first concatenated string; the first concatenated string is hashed based on a preset hash algorithm to generate the corresponding second hash code in hexadecimal data format; the second hash code is converted to a hexadecimal data string to generate the corresponding second hash code string; and the first Ki string, the second hash code string, and the first OPC string are sequentially concatenated to generate the corresponding second concatenated string.

[0042] Based on the preset first private key, the second concatenated string is encrypted using the corresponding first asymmetric encryption and decryption algorithm to generate the corresponding first encrypted string;

[0043] The length of the first encrypted string is statistically calculated to generate a corresponding first string length; the remainder when the first string length is divided by a preset first group length is taken as the corresponding first remainder; the difference between the first group length and the first remainder is taken as the corresponding first two's complement length; a substring with a length of the first two's complement length is extracted from the first character of the preset complete two's complement string as the corresponding first two's complement string; and the first two's complement string is concatenated to the first encrypted string to form a new first encrypted string; the length of the complete two's complement string is the same as the first group length.

[0044] The system identifies the on / off state of a preset data augmentation switch. If the data augmentation switch is in the off state, the first MSISDN string, the first ICCID string, and the first IMSI string are sequentially concatenated to generate a corresponding third concatenated string. If the data augmentation switch is in the on state, the first and second ICCID substrings are sequentially concatenated to generate a corresponding first ICCID concatenated string. Based on the hash algorithm, a hash code is calculated on the first ICCID concatenated string to generate a corresponding hexadecimal data format third hash code. The third hash code is then converted to a hexadecimal data string to generate a corresponding third hash code string. Finally, the first MSISDN string, the first ICCID string, the first IMSI string, and the third hash code string are sequentially concatenated to generate the corresponding third concatenated string. The on / off state of the data augmentation switch includes an off state and an on state.

[0045] The hash code of the third concatenated string is calculated based on the hash algorithm to generate a fourth hash code in hexadecimal data format; and the first X high-order bytes of the fourth hash code are extracted as the corresponding first key based on the preset high-order byte extraction principle; X is the preset number of high-order bytes.

[0046] Based on the first key, the first encrypted string is encrypted using the corresponding first symmetric encryption and decryption algorithm to generate the corresponding second encrypted string; and the second encrypted string is output as the corresponding first encrypted key data.

[0047] Furthermore, the first asymmetric encryption and decryption algorithm includes the RSA algorithm and the Chinese national cryptographic SM2 algorithm; when the first asymmetric encryption and decryption algorithm is the RSA algorithm, the corresponding first private key is a preset RSA private key; when the first asymmetric encryption and decryption algorithm is the Chinese national cryptographic SM2 algorithm, the corresponding first private key is a preset RSM2 private key.

[0048] The first symmetric encryption / decryption algorithm is the national standard SM4 algorithm by default. When the first symmetric encryption / decryption algorithm is the national standard SM4 algorithm, the corresponding first block length is 32 by default, the corresponding number of high-order bytes X is 16, the corresponding key length of the first key is 16 bytes, and the corresponding complete complement string is "100000000000000000000000000000000000".

[0049] Preferably, the step of printing all the first entry logs based on preset entry log printing rules during the entry process of the first standard data file specifically includes:

[0050] Before performing an inbound operation on the first inbound record corresponding to the first standard data file, the print type configuration, print interface configuration, and print mode configuration of the inbound log printing rules are used as the corresponding current print type, current print interface, and current print mode; and the current print type is identified.

[0051] If the current printing type is a screen display type, then a corresponding display interface is initialized for the first standard data file that is currently being imported through the display processing interface corresponding to the current printing interface, and this interface is called the first display interface.

[0052] If the current print type is a file print type, then the first standard data file in this database is initialized with a storage file of a specified file format through the file processing interface corresponding to the current print interface, and is recorded as the first storage file;

[0053] If the current printing type is paper printing, then the printer processing interface corresponding to the current printing interface initializes a corresponding single-page cache file for the first standard data file entered into the database as the first single-page cache file and selects a corresponding printer as the first printer.

[0054] During the process of performing the data entry operation on all the first data entry records corresponding to the first standard data file, the current printing mode is identified.

[0055] If the current printing mode is a record-by-record printing mode, then each time a new first entry log is generated, the latest first entry log is used as the corresponding current entry log; and if the current printing type is a screen display type, a new line is created on the first display interface to display the current entry log; and if the current printing type is a file printing type, the current entry log is added to the first storage file, and the first storage file is saved when the log addition is complete; and if the current printing type is a paper printing type, the current entry log is added to the first single-page cache file as a new log, and it is identified whether the number of used lines in the first single-page cache file after the log addition has exceeded the preset maximum number of lines per page. If it has exceeded the limit, the current entry log is removed from the first single-page cache file, and the first printer is used to print the first single-page cache file after the log removal is completed. After printing, the first single-page cache file is cleared, and the current entry log is added to the cleared first single-page cache file again as a new log.

[0056] If the current printing mode is batch recording printing mode, then when generating the last first entry log, all the obtained first entry logs are arranged in chronological order to form a corresponding first entry log sequence; and when the current printing type is screen display type, each of the first entry logs in the first entry log sequence is displayed sequentially on the first display interface; and when the current printing type is file printing type, each of the first entry logs in the first entry log sequence is added sequentially to the first storage file, and the first storage file is saved when the sequence addition is complete; and when the current printing type is paper printing type, the first entry log sequence is input into a preset log sequence printing template for log entry, document line breaks and document pagination processing to obtain one or more corresponding first print pages, and all the first print pages are printed one by one by the first printer in chronological order of page number.

[0057] Preferably, the step of verifying the data entry operation based on all the first data entry logs after the data entry process of the first standard data file is completed specifically includes:

[0058] The system calculates the total number of records in the first standard data file to generate a first total; it also calculates the total number of logs in the first inbound logs to generate a second total; and it identifies the first and second totals. If the first and second totals match, the corresponding inbound quantity verification result is set to "inbound quantity is normal"; if the first total is less than the second total and they match, the corresponding inbound quantity verification result is set to "inbound quantity exceeds limit"; if the first total is greater than the second total and they match, the corresponding inbound quantity verification result is set to "inbound quantity is missing".

[0059] The first Ki de-identified data and the first OPC de-identified data of each of the first entry logs are extracted and concatenated together to form the corresponding first log de-identified string; and among all the obtained first log de-identified strings, it is confirmed whether there are two first log de-identified strings that match each other; if they do, the corresponding duplicate entry verification result is set to "duplicate entry exists"; if they do not, the corresponding duplicate entry verification result is set to "duplicate entry does not exist".

[0060] The obtained verification results of the quantity of goods entering the warehouse and the verification results of duplicate goods entering the warehouse are output as the verification results of this goods entering operation.

[0061] A second aspect of the present invention provides an electronic device, including: a memory, a processor, and a transceiver;

[0062] The processor is configured to be coupled to the memory, read and execute instructions in the memory to implement the method described in the first aspect above;

[0063] The transceiver is coupled to the processor, and the processor controls the transceiver to send and receive messages.

[0064] A third aspect of the present invention provides a computer-readable storage medium storing computer instructions that, when executed by a computer, cause the computer to perform the method described in the first aspect.

[0065] This invention provides a method for processing customer identification module (CIM) data in a database, an electronic device, and a computer-readable storage medium. First, the scope of personnel authorized to access CIM data files is restricted. Then, a dual encryption mechanism combining asymmetric and symmetric encryption is used to encrypt the Ki and OPC data of the CIM module. Next, an inbound record is created by combining the plaintext ICCID, MSISDN, and IMSI data with the encrypted Ki and OPC data for database storage. During the inbound operation, the plaintext Ki and OPC data are anonymized, and an inbound log is created by combining the plaintext ICCID, MSISDN, and IMSI data with the anonymized Ki and OPC data for logging. This invention ensures that critical CIM data (such as Ki and OPC) is not exposed in plaintext in the database through encrypted storage, improving data security and reducing operational risks for business operators. Furthermore, this invention can output an inbound log with anonymized Ki and OPC data without exposing the full text of Ki and OPC, allowing staff to review issues such as duplicate entries and omissions. Attached Figure Description

[0066] Figure 1 This is a schematic diagram of a method for processing customer identification module data in a database according to Embodiment 1 of the present invention;

[0067] Figure 2 This is a schematic diagram of the structure of an electronic device provided in Embodiment 2 of the present invention. Detailed Implementation

[0068] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are merely some embodiments of this invention, and not all embodiments. Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this invention.

[0069] The customer identification module business operator's processing system, through the customer identification module data entry processing method provided in Embodiment 1 of the present invention, can ensure that the key data (Ki and OPC) of the customer identification module will not be exposed in plain text in the database, and can be audited by using the entry log that does not expose the full text of Ki and OPC. Figure 1 This is a schematic diagram of a method for processing customer identification module data in a database according to Embodiment 1 of the present invention, as shown below. Figure 1 As shown, this method mainly includes the following steps:

[0070] Step 1: Receive the first person information input by the first staff member; and perform identity verification processing on the first person information according to the preset personnel operation permission list to generate the corresponding first verification result and first data interface list;

[0071] Specifically, this includes: Step 11, receiving the first person information input by the first staff member;

[0072] The first person information includes the first person identifier and the first person verification code;

[0073] Here, the first staff member in this embodiment of the invention is an internal staff member of the customer identification module business operator. This embodiment of the invention authorizes each staff member to operate through a personnel operation permission list.

[0074] Step 12, and perform identity verification processing on the first person information according to the preset personnel operation permission list to generate the corresponding first verification result and first data interface list;

[0075] The first verification result includes verification failure and verification success; when the first verification result is verification failure, the corresponding first data interface list is empty; the personnel operation permission list includes multiple personnel operation permission records; the personnel operation permission record includes a personnel identifier field, a personnel verification code field, and a data interface list field; the data interface list field includes one or more customer identification module data file receiving interfaces; here, each customer identification module data file receiving interface corresponds to a customer identification module operator, and all customer identification module data file receiving interfaces are data transmission interfaces based on security protocols. In this embodiment of the invention, the data transmission interfaces based on security protocols should at least include data transmission interfaces based on HTTPS protocols;

[0076] Specifically, this includes: identifying personnel operation permission records where the personnel identifier field in the personnel operation permission list matches the first personnel identifier in the first personnel information, and the personnel verification code field matches the first personnel verification code in the first personnel information, as corresponding matching records; identifying whether the matching record is empty; if so, setting the corresponding first verification result to verification failure and setting the corresponding first data interface list to empty; if not, setting the corresponding first verification result to verification success and extracting the data interface list field of the matching record as the corresponding first data interface list; and outputting the obtained first verification result and first data interface list as the corresponding identity verification processing result.

[0077] Here, this embodiment of the invention stipulates that subsequent steps 2-6 can only be executed if the first verification result is successful.

[0078] Step 2: When the first verification result is successful, the first data interface list is displayed to the first staff member, and the data interface selected and confirmed by the first staff member on the list is taken as the corresponding first data interface; and the customer identification module data file is received and processed through the first data interface to generate the corresponding first raw data file;

[0079] The first raw data file includes at least the following file formats: CSV, TXT, Excel, TSV, and Word. The first raw data file includes multiple first raw data records. Each first raw data record consists of a first operator code, a first ICCID, a first MSISDN, a first IMSI, a first Ki, a first OPC, and a first timestamp.

[0080] Here, in this embodiment of the invention, the customer identification module service operator can simultaneously connect to multiple customer identification module communication operators. The customer identification module data file format output by each communication operator may be different, commonly including CSV, TXT, Excel, TSV, and Word file formats. Therefore, the system of the service operator in this embodiment of the invention should at least support the above-mentioned file formats of raw data files. Each first raw data record in the first raw data file corresponds to a customer identification module. In addition to the conventional SIM module, the customer identification module can also be other forms of identification modules such as e-SIM, v-SIM, UICC, and USIM that can realize network access functions similar to SIM cards. The first operator code, first ICCID data, first MSISDN data, first IMSI data, first Ki data, and first OPC data in the first raw data record are the plaintext communication operator code information, plaintext ICCID information, plaintext MSISDN information, plaintext IMSI information, plaintext Ki information, and plaintext OPC information of the corresponding customer identification module. The first timestamp is the data generation time information provided by the communication operator.

[0081] Step 3: Standardize each of the first original data records in the first original data file to generate corresponding first standard data records, which together form the corresponding first standard data file;

[0082] The first standard data file uses CSV format by default; the first standard data file includes multiple first standard data records; each first standard data record consists of a first operator code, a first ICCID, a first MSISDN, a first IMSI, a first Ki, a first OPC, and a first timestamp.

[0083] As can be seen from the preceding text, the service operator in this embodiment of the invention can connect to multiple communication operators and receive first raw data files of various file formats. In order to improve data compatibility and data processing efficiency, this embodiment of the invention will not create a corresponding inbound processing flow for each type of raw data file, but will plan a standard data file format and only create a corresponding inbound processing flow for the standard data file. The current step 3 is the processing step of converting various types of raw data files into standard data files.

[0084] Specifically, this includes: Step 31, identifying the file format of the first original data file and generating the corresponding first file format;

[0085] The first file format includes at least CSV, TXT, Excel, TSV, and Word file formats;

[0086] Step 32, and based on the preset file record parser corresponding to the first file format, the original data records of the first original data file are parsed one by one to obtain one or more corresponding first original data records;

[0087] Among them, the file record parser includes at least a CSV file record parser, a TXT file record parser, an Excel file record parser, a TSV file record parser, and a Word file record parser;

[0088] Here, the preset CSV file record parser, TXT file record parser, Excel file record parser, TSV file record parser, and Word file record parser in the embodiments of the present invention can read all the first original data records stored in the first original data file of the corresponding file format; it should be noted that all data objects in the proposed first original data record, namely the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki data, the first OPC data, and the first timestamp, are all in string format;

[0089] Step 33: Create a corresponding first standard data record for each first original data record according to the preset standard data record format; and store the first operator code, first ICCID data, first MSISDN data, first IMSI data, first Ki data, first OPC data and first timestamp of each first original data record into the corresponding data fields of the corresponding first standard data record;

[0090] Here, the data element objects in the first original data record and the first standard data record of this embodiment are consistent, both consisting of the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki data, the first OPC data, and the first timestamp; this embodiment does not restrict the specific data field format of the first original data record and the first standard data record; however, it should be noted that the data format of all data objects in the first standard data record, namely the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki data, the first OPC data, and the first timestamp, is also string format;

[0091] Step 34, and then the obtained first standard data records are assembled into a first standard data file with the preset standard data file format according to the preset standard data file record assembly rules;

[0092] The default standard data file format is CSV.

[0093] Here, the standard data file record assembly rule preset in the embodiments of the present invention can be to sort the first standard data records sequentially according to the time order to obtain the first standard data file, or it can be to sort the first standard data records according to other sorting rules to obtain the first standard data file;

[0094] Step 35, and output the obtained first standard data file as the corresponding standardization processing result.

[0095] Step 4: Perform data parsing and de-identification parsing log assembly processing on each first standard data record to generate the corresponding first non-critical dataset, first critical dataset, and first de-identification parsing log; perform key data encryption processing on the first non-critical dataset and first critical dataset to generate the corresponding first encrypted key data; assemble the entry record according to the first non-critical dataset and first encrypted key data to generate the corresponding first entry record and store it in the preset customer identification module database; when the entry is successful, use the entry time of the first entry record as the corresponding first entry time, and use the name of the customer identification module database as the corresponding first database name; and add the first entry time and the first database name to the first de-identification parsing log to generate the corresponding first entry log.

[0096] Specifically, this includes: Step 41, performing data parsing and desensitization parsing log assembly processing on each first standard data record to generate the corresponding first non-critical dataset, first critical dataset and first desensitization parsing log;

[0097] The first non-critical dataset includes the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, and the first timestamp; the first critical dataset includes the first Ki data and the first OPC data; the first anonymized parsed log includes the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki anonymized data, the first OPC anonymized data, and the first timestamp.

[0098] Specifically, this includes: step 411, extracting the first operator code, first ICCID data, first MSISDN data, first IMSI data and first timestamp from the first standard data record to form the corresponding first non-critical dataset;

[0099] Step 412, and extract the first Ki data and the first OPC data from the first standard data record to form the corresponding first key dataset;

[0100] Step 413, and take the first Ki data of the first standard data record as the corresponding first string; and take the substring from the preset first start character index to the preset first end character index in the first string as the corresponding first substring; and use the preset desensitized single character to replace all the characters in the first substring one by one; and take the first string with the desensitized character replacement as the corresponding first Ki desensitized data;

[0101] Here, the first start character index and the first end character index are two pre-set string position indices. These character indices can be either absolute or relative. When the first start character index and the first end character index are absolute indices, the first end character index > the first start character index. When the first start character index and the first end character index are relative indices, the first start character index is expressed as "first x position," meaning it starts from the xth character in the string, and the first end character index is expressed as "last y position," meaning it ends at the yth character from the end of the string. The de-identified single character in this embodiment can be any pre-set character. This embodiment uses "*" as the de-identified single character by default.

[0102] For example, given that the first string is "ABCDEFG0129KKK" and the desensitized single character is "*", then:

[0103] When the first start character index and the first end character index are absolute indices, if the first start character index is set to 3 and the first end character index is set to 11, then the first substring is the substring "CDEFG0129" which starts from the 3rd character and ends at the 11th character of the first string. The first string obtained by replacing all characters in the first substring one by one with the desensitizing single character "*" is "AB*********KKK".

[0104] When the first start character index and the first end character index are relative indices, if the first start character index is set to "first 3 characters" and the first end character index is set to "last 4 characters", then the first substring is the substring "CDEFG0129" that starts from the 3rd character of the first string and ends at the 4th character from the end. After replacing all the characters in the first substring one by one with the desensitizing single character "*", the first string, i.e. the first Ki desensitized data, is "AB*********KKK".

[0105] Step 414: The first OPC desensitized data of the first standard data record is used as the corresponding second string; the second string is hashed using a preset hash algorithm to generate the corresponding hexadecimal data format first hash code; the first hash code is converted into a hexadecimal data string to generate the corresponding first hash code string; and the first hash code string is used as the corresponding first OPC desensitized data.

[0106] Here, the hash algorithm in this embodiment of the invention can be any hash algorithm that can generate a hash code with a length of not less than 16 bytes. This embodiment of the invention uses the SHA-256 hash algorithm as the default hash algorithm.

[0107] Step 415, and the first de-identification parsing log is composed of the first operator code, first ICCID data, first MSISDN data, first IMSI data, first Ki de-identification data, first OPC de-identification data and first timestamp corresponding to the first standard data record;

[0108] Step 416, and output the obtained first non-critical dataset, first critical dataset and first de-identified parsing log as the corresponding data parsing and de-identified parsing log assembly processing results;

[0109] Step 42, and perform key data encryption processing based on the first non-key dataset and the first key dataset to generate the corresponding first encrypted key data;

[0110] Specifically, this includes: step 421, using the first ICCID data, first MSISDN data, and first IMSI data of the first non-critical dataset as the corresponding first ICCID string, first MSISDN string, and first IMSI string; and using the first Ki data and first OPC data of the first critical dataset as the corresponding first Ki string and first OPC string;

[0111] Step 422: The substring from the preset second start character index to the preset second end character index in the first ICCID string is recorded as the corresponding first ICCID substring, and the substring from the preset third start character index to the preset third end character index is recorded as the corresponding second ICCID substring; the first ICCID substring, the second ICCID substring, the first Ki string, and the first OPC string are sequentially concatenated to generate the corresponding first concatenated string; the hash code of the first concatenated string is calculated based on a preset hash algorithm to generate the corresponding second hash code in hexadecimal data format; the second hash code is converted to a hexadecimal data string to generate the corresponding second hash code string; and the first Ki string, the second hash code string, and the first OPC string are sequentially concatenated to generate the corresponding second concatenated string.

[0112] Here, the indexing patterns of the two pairs of character indices, namely the second start character index, the second end character index, the third start character index, and the third end character index, are similar to those of the first start character index and the first end character index, and also include two indexing patterns: absolute index and relative index. The hash algorithm used in the current step is usually consistent with the hash algorithm used in step 414 above, but another hash algorithm that can generate a hash code length of not less than 16 bytes can also be selected.

[0113] For example, given that the first ICCID string is “0000000MFSSYYG001001”, the first Ki string is “A00102030405060708090A0B0C0D0E0F”, and the first OPC string is “24C05F7C2F2B368DE10F252F25F6CFC2”, then:

[0114] When the second start character index, the second end character index, the third start character index, and the third end character index are all absolute indices, if we set the second start character index to 1, the second end character index to 3, the third start character index to 17, and the third end character index to 20, then the first ICCID substring is "000" and the second ICCID substring is "1001". The first concatenated string generated by sequentially concatenating the first ICCID substring, the second ICCID substring, the first Ki string, and the first OPC string is:

[0115] "0001001A00102030405060708090A0B0C0D0E0F24C05F7C2F2B368DE10F252F25F6CFC2";

[0116] When the second start character index, the second end character index, the third start character index, and the third end character index are all relative indices, if we set the second start character index to "first 1 character", the second end character index to "last 18 characters", the third start character index to "first 17 characters", and the third end character index to "last 1 character", then the first ICCID substring is "000", the second ICCID substring is "1001", and the first concatenated string is:

[0117] "0001001A00102030405060708090A0B0C0D0E0F24C05F7C2F2B368DE10F252F25F6CFC2";

[0118] Step 423: Based on the preset first private key, encrypt the second concatenated string using the corresponding first asymmetric encryption and decryption algorithm to generate the corresponding first encrypted string;

[0119] The first asymmetric encryption and decryption algorithm includes the RSA algorithm and the national standard SM2 algorithm; when the first asymmetric encryption and decryption algorithm is the RSA algorithm, the corresponding first private key is the preset RSA private key; when the first asymmetric encryption and decryption algorithm is the national standard SM2 algorithm, the corresponding first private key is the preset RSM2 private key.

[0120] Step 424: Calculate the length of the first encrypted string to generate the corresponding first string length; divide the first string length by the preset first group length and take the remainder as the corresponding first remainder; subtract the first remainder from the first group length and take the corresponding first complement length; extract a substring with the length of the first complement length starting from the first character of the preset complete complement string and take it as the corresponding first complement string; concatenate the first complement string to the first encrypted string to form a new first encrypted string.

[0121] The length of the complete two's complement string is the same as the length of the first group;

[0122] Here, the preset first block length and the complete complement string in the current step correspond to the first symmetric encryption / decryption algorithm mentioned below;

[0123] For example, the first encrypted string is known to be:

[0124] "1233242342342342AAEFALEF9ABC1233242342342342AACDAEF001B3",

[0125] The complete two's complement string is "100000000000000000000000000000000".

[0126] The length of the first group is 32, then:

[0127] The first string has a length of 56 and a first remainder of 24. The calculated length of the first complement is 32 - 24 = 8. Then, starting from the first character of the complete complement string, a substring of length 8 with the first complement length is extracted, resulting in the first complement string "10000000". Finally, the first complement string is concatenated to the first encrypted string to obtain the new first encrypted string:

[0128] "1233242342342342AAEFALEF9ABC1233242342342342AACDAEF001B310000000";

[0129] For example, given that the first encrypted string is:

[0130] "1233242342342342AAEFALEF9ABC1233242342342342AACDAEF001B302ABEF99",

[0131] The complete two's complement string is "100000000000000000000000000000000".

[0132] The length of the first group is 32, then:

[0133] The first string has a length of 64 and a first remainder of 0. The calculated length of the first complement is 32 - 0 = 32. Then, starting from the first character of the complete complement string, a substring of length 32 (the first complement length) is extracted, resulting in the first complement string "1000000000000000000000000000000000". Finally, this first complement string is concatenated to the first encrypted string to obtain the new first encrypted string:

[0134] "1233242342342342AAEFALEF9ABC1233242342342342AACDAEF001B302ABEF9910000000000000000000000000000000";

[0135] Step 425: Identify the on / off state of the preset data augmentation switch; if the data augmentation switch is in the off state, sequentially concatenate the first MSISDN string, the first ICCID string, and the first IMSI string to generate the corresponding third concatenated string; if the data augmentation switch is in the on state, sequentially concatenate the first and second ICCID substrings to generate the corresponding first ICCID concatenated string, and calculate the hash code of the first ICCID concatenated string based on the hash algorithm to generate the corresponding third hash code in hexadecimal data format, and perform a hexadecimal data string conversion on the third hash code to generate the corresponding third hash code string, and sequentially concatenate the first MSISDN string, the first ICCID string, the first IMSI string, and the third hash code string to generate the corresponding third concatenated string.

[0136] The data augmentation switch has two states: off and on.

[0137] Here, in this embodiment of the invention, when the data enhancement switch is in the on state, the uniqueness of the third concatenated string is strengthened by adding a third hash code string; the hash algorithm in the current step is usually consistent with the hash algorithm used in step 414 above, or another hash algorithm that can generate a hash code length of not less than 16 bytes can be selected.

[0138] Step 426: Calculate the hash code of the third concatenated string using a hash algorithm to generate the corresponding hexadecimal data format fourth hash code; and extract the first X high-order bytes from the fourth hash code based on the preset high-order byte extraction principle as the corresponding first key.

[0139] Where X is the preset number of high-order bytes;

[0140] Here, the hash algorithm used in the current step is usually the same as the hash algorithm used in step 414 above, or another hash algorithm that can generate a hash code length of not less than 16 bytes can be selected; the number of high-order bytes X is a preset constant, which is a multiple of 16 by default; the high-order byte extraction principle of this embodiment is actually to extract the first X high-order bytes of the object to be extracted, i.e., the fourth hash code, as the corresponding first key;

[0141] For example, if the number of high-order bytes X is 16, the fourth hash code is a 32-byte hexadecimal number:

[0142] 0x0102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F20,

[0143] Therefore, the first key is a 16-byte hexadecimal number:

[0144] 0x0102030405060708090A0B0C0D0E0F10;

[0145] Step 427: Based on the first key, encrypt the first encrypted string using the corresponding first symmetric encryption / decryption algorithm to generate the corresponding second encrypted string; and output the second encrypted string as the corresponding first encrypted key data.

[0146] Here, the first symmetric encryption and decryption algorithm of this embodiment of the invention uses the national standard SM4 algorithm by default, but other symmetric encryption and decryption algorithms using a 16-byte key can also be selected; when the first symmetric encryption and decryption algorithm of this embodiment of the invention is the default national standard SM4 algorithm, the corresponding encryption and decryption mode is preferably ECB mode, the corresponding first block length is 32 by default, the corresponding number of high-order bytes X is 16 by default, the corresponding key length of the first key is 16 bytes by default, and the corresponding complete complement string is "100000000000000000000000000000000000" by default;

[0147] Step 43: Based on the first non-critical dataset and the first encrypted critical data, the entry records are assembled to generate the corresponding first entry record and stored in the preset customer identification module database; and when the entry is successful, the entry time of the first entry record is used as the corresponding first entry time, and the name of the customer identification module database is used as the corresponding first database name.

[0148] The first entry record includes a first operator code, a first ICCID data, a first MSISDN data, a first IMSI data, a first encrypted key data, and a first timestamp; the customer identification module database of this embodiment of the invention consists of multiple first entry records;

[0149] Step 44, and add the first entry time and the first database name to the first de-identification parsing log to generate the corresponding first entry log;

[0150] Here, the first entry log obtained includes the first entry time, the first database name, the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki de-identified data, the first OPC de-identified data, and the first timestamp.

[0151] Step 5: During the process of importing the first standard data file, print all first import logs based on the preset import log printing rules;

[0152] The inbound log printing rules include print type configuration, print interface configuration, and print mode configuration. Print type configuration includes screen display type, file print type, and paper print type. When the print type is configured as screen display type, the corresponding print interface is configured as a preset display processing interface. When the print type is configured as file print type, the corresponding print interface is configured as a preset file processing interface. When the print type is configured as paper print type, the corresponding print interface is configured as a preset printer processing interface. Print mode configuration includes record-by-record printing mode and batch record printing mode.

[0153] Specifically, this includes: Step 51, before performing the entry operation on the first entry record corresponding to the first standard data file, setting the print type configuration, print interface configuration, and print mode configuration of the entry log printing rules as the corresponding current print type, current print interface, and current print mode; and identifying the current print type;

[0154] Step 52: If the current print type is screen display type, then initialize a corresponding display interface for the first standard data file to be entered into the database through the display processing interface corresponding to the current print interface, and record it as the first display interface;

[0155] Step 53: If the current print type is file print type, then initialize a storage file with a specified file format for the first standard data file to be entered into the database through the file processing interface corresponding to the current print interface, and record it as the first storage file;

[0156] Step 54: If the current printing type is paper printing, initialize a corresponding single-page cache file for the first standard data file to be entered into the database this time through the printer processing interface corresponding to the current printing interface, and select a corresponding printer as the first printer.

[0157] Step 56: During the process of performing the data entry operation on all the first data entry records corresponding to the first standard data file, the current printing mode is identified.

[0158] Step 57: If the current printing mode is record-by-record printing mode, then when a new first entry log is generated, the latest first entry log is used as the corresponding current entry log; when the current printing type is screen display type, a new line is created on the first display interface to display the current entry log; when the current printing type is file printing type, the current entry log is added to the first storage file, and the first storage file is saved when the log addition is complete; when the current printing type is paper printing type, the current entry log is added to the first single-page cache file as a new log, and it is identified whether the number of used lines in the first single-page cache file after the log addition has exceeded the preset maximum number of lines per page. If it has exceeded the limit, the current entry log is removed from the first single-page cache file, and the first printer is used to print the first single-page cache file after the log removal is completed. When the printing is finished, the first single-page cache file is cleared, and the current entry log is added to the cleared first single-page cache file as a new log again.

[0159] Here, the maximum number of lines per page is a pre-set printing parameter that identifies the maximum number of lines printed per page;

[0160] Step 58: If the current printing mode is batch record printing mode, when generating the last first entry log, all the obtained first entry logs are arranged in chronological order to form the corresponding first entry log sequence; when the current printing type is screen display type, each first entry log in the first entry log sequence is displayed sequentially on the first display interface; when the current printing type is file printing type, each first entry log in the first entry log sequence is added sequentially to the first storage file, and the first storage file is saved when the sequence addition is complete; when the current printing type is paper printing type, the first entry log sequence is input into the preset log sequence printing template for log entry, document line breaks and document pagination processing to obtain one or more corresponding first print pages, and all first print pages are printed one by one by the first printer in page number order.

[0161] Here, the log sequence printing template of this invention is a pre-set printing document editor; the log sequence printing template can sequentially enter each of the first entry logs of the first entry log sequence into a cache file with a limited line width but no limit on the maximum number of lines per page, and after all the first entry logs are entered, perform document line break segmentation processing with the end character of a single log as a line break mark, and then perform page segmentation of the cache file with completed line break segmentation based on the preset maximum number of lines per page to obtain one or more pages, and mark each page with the corresponding page number according to the page break order, and finally output one or more pages with completed page number marking as one or more corresponding first print pages.

[0162] Step 6: After the first standard data file is entered into the database, verify the entry operation based on all the first entry logs.

[0163] Specifically, this includes: Step 61, generating a first total number by statistically analyzing the total number of records in the first standard data file of the first standard data file; generating a second total number by statistically analyzing the total number of logs in the first inbound log; identifying the first and second totals; if the first and second totals match, setting the corresponding inbound quantity verification result as "inbound quantity is normal"; if the first total is less than the second total and they match, setting the corresponding inbound quantity verification result as "inbound quantity exceeds the limit"; if the first total is greater than the second total and they match, setting the corresponding inbound quantity verification result as "inbound quantity is missing".

[0164] Step 62: Extract the first Ki de-identified data and the first OPC de-identified data from each first entry log and concatenate them together to form the corresponding first log de-identified string; among all the obtained first log de-identified strings, confirm whether there are two first log de-identified strings that match each other; if they do, set the corresponding duplicate entry verification result to "duplicate entry exists"; if they do not, set the corresponding duplicate entry verification result to "duplicate entry does not exist".

[0165] Step 63, and output the verification results of the inbound quantity and the duplicate inbound verification results as the verification results of this inbound operation.

[0166] Figure 2 This is a schematic diagram of an electronic device provided in Embodiment 2 of the present invention. This electronic device can be the aforementioned terminal device or server, or it can be a terminal device or server connected to the aforementioned terminal device or server that implements the method of the embodiments of the present invention. Figure 2 As shown, the electronic device may include: a processor 301 (e.g., CPU), a memory 302, and a transceiver 303; the transceiver 303 is coupled to the processor 301, and the processor 301 controls the transmission and reception operations of the transceiver 303. The memory 302 may store various instructions for performing various processing functions and implementing the processing steps described in the foregoing method embodiments. Preferably, the electronic device involved in the embodiments of the present invention further includes: a power supply 304, a system bus 305, and a communication port 306. The system bus 305 is used to realize communication connections between components. The communication port 306 is used for communication between the electronic device and other peripherals.

[0167] exist Figure 2The system bus 305 mentioned can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This system bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 2 The symbol is represented by a single thick line, but this does not imply that there is only one bus or one type of bus. The communication interface is used to enable communication between the database access device and other devices (e.g., clients, read-write libraries, and read-only libraries). Memory may include random access memory (RAM) and may also include non-volatile memory, such as at least one disk drive.

[0168] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), graphics processing units (GPUs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0169] It should be noted that the embodiments of the present invention also provide a computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the methods provided in the above embodiments.

[0170] This invention also provides a chip for executing instructions, which is used to perform the processing steps described in the foregoing method embodiments.

[0171] This invention provides a method for processing customer identification module (CIM) data in a database, an electronic device, and a computer-readable storage medium. First, the scope of personnel authorized to access CIM data files is restricted. Then, a dual encryption mechanism combining asymmetric and symmetric encryption is used to encrypt the Ki and OPC data of the CIM module. Next, an inbound record is created by combining the plaintext ICCID, MSISDN, and IMSI data with the encrypted Ki and OPC data for database storage. During the inbound operation, the plaintext Ki and OPC data are anonymized, and an inbound log is created by combining the plaintext ICCID, MSISDN, and IMSI data with the anonymized Ki and OPC data for logging. This invention ensures that critical CIM data (such as Ki and OPC) is not exposed in plaintext in the database through encrypted storage, improving data security and reducing operational risks for business operators. Furthermore, this invention can output an inbound log with anonymized Ki and OPC data without exposing the full text of Ki and OPC, allowing staff to review issues such as duplicate entries and omissions.

[0172] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0173] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein can be implemented in hardware, a software module executed by a processor, or a combination of both. The software module can be located in random access memory (RAM), main memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art.

[0174] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A method for processing customer identification module data in a database, characterized in that, The method includes: The system receives first personnel information input by a first staff member; and performs identity verification processing on the first personnel information according to a preset personnel operation permission list to generate a corresponding first verification result and a first data interface list; the first verification result includes verification failure and verification success; when the first verification result is verification failure, the corresponding first data interface list is empty; When the first verification result is successful, the first data interface list is displayed to the first staff member, and the data interface selected and confirmed by the first staff member on the list is taken as the corresponding first data interface; and the customer identification module data file is received and processed through the first data interface to generate the corresponding first original data file; the first original data file includes multiple first original data records; The first original data file is then standardized to generate corresponding first standard data records, forming a first standard data file; the first standard data file includes multiple first standard data records. The system performs data parsing and de-identification parsing log assembly processing on each of the first standard data records to generate corresponding first non-critical datasets, first critical datasets, and first de-identification parsing logs. It then performs key data encryption processing on the first non-critical datasets and the first critical datasets to generate corresponding first encrypted key data. Finally, it assembles entry records based on the first non-critical datasets and the first encrypted key data to generate corresponding first entry records, which are then stored in a preset customer identification module database. Upon successful entry, the entry time of the first entry record is used as the corresponding first entry time, and the name of the customer identification module database is used as the corresponding first database name. The first entry time and the first database name are then added to the first de-identification parsing log to generate the corresponding first entry log. During the process of importing the first standard data file into the database, all the first import logs are printed based on the preset import log printing rules. After the first standard data file is stored in the database, the storage operation is verified based on all the first storage logs. Specifically, the step of generating corresponding first encrypted key data by performing key data encryption processing based on the first non-key dataset and the first key dataset includes: The first ICCID data, first MSISDN data, and first IMSI data of the first non-critical dataset are used as the corresponding first ICCID string, first MSISDN string, and first IMSI string; and the first Ki data and first OPC data of the first critical dataset are used as the corresponding first Ki string and first OPC string. The substring from the preset second start character index to the preset second end character index in the first ICCID string is recorded as the corresponding first ICCID substring, and the substring from the preset third start character index to the preset third end character index is recorded as the corresponding second ICCID substring; the first ICCID substring, the second ICCID substring, the first Ki string, and the first OPC string are sequentially concatenated to generate the corresponding first concatenated string; the first concatenated string is hashed based on a preset hash algorithm to generate the corresponding second hash code in hexadecimal data format; the second hash code is converted to a hexadecimal data string to generate the corresponding second hash code string; and the first Ki string, the second hash code string, and the first OPC string are sequentially concatenated to generate the corresponding second concatenated string. Based on the preset first private key, the second concatenated string is encrypted using the corresponding first asymmetric encryption and decryption algorithm to generate the corresponding first encrypted string; The length of the first encrypted string is statistically calculated to generate a corresponding first string length; the remainder when the first string length is divided by a preset first group length is taken as the corresponding first remainder; the difference between the first group length and the first remainder is taken as the corresponding first two's complement length; a substring with a length of the first two's complement length is extracted from the first character of the preset complete two's complement string as the corresponding first two's complement string; and the first two's complement string is concatenated to the first encrypted string to form a new first encrypted string; the length of the complete two's complement string is the same as the first group length. The system identifies the on / off state of a preset data augmentation switch. If the data augmentation switch is in the off state, the first MSISDN string, the first ICCID string, and the first IMSI string are sequentially concatenated to generate a corresponding third concatenated string. If the data augmentation switch is in the on state, the first and second ICCID substrings are sequentially concatenated to generate a corresponding first ICCID concatenated string. Based on the hash algorithm, a hash code is calculated on the first ICCID concatenated string to generate a corresponding hexadecimal data format third hash code. The third hash code is then converted to a hexadecimal data string to generate a corresponding third hash code string. Finally, the first MSISDN string, the first ICCID string, the first IMSI string, and the third hash code string are sequentially concatenated to generate the corresponding third concatenated string. The on / off state of the data augmentation switch includes an off state and an on state. The hash code of the third concatenated string is calculated based on the hash algorithm to generate a fourth hash code in hexadecimal data format; and the first X high-order bytes of the fourth hash code are extracted as the corresponding first key based on the preset high-order byte extraction principle; X is the preset number of high-order bytes. Based on the first key, the first encrypted string is encrypted using the corresponding first symmetric encryption and decryption algorithm to generate the corresponding second encrypted string; and the second encrypted string is output as the corresponding first encrypted key data.

2. The method for processing customer identification module data in storage according to claim 1, characterized in that, The first person information includes a first person identifier and a first person verification code; The personnel operation permission list includes multiple personnel operation permission records; the personnel operation permission record includes a personnel identifier field, a personnel verification code field, and a data interface list field; the data interface list field includes one or more customer identification module data file receiving interfaces. The first raw data file includes at least the following file formats: CSV, TXT, Excel, TSV, and Word. The first standard data file uses CSV file format by default; Both the first raw data record and the first standard data record consist of a first operator code, a first ICCID data, a first MSISDN data, a first IMSI data, a first Ki data, a first OPC data, and a first timestamp; The first non-critical dataset includes the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, and the first timestamp; The first key dataset includes the first Ki data and the first OPC data; The first de-identified parsing log includes the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki de-identified data, the first OPC de-identified data, and the first timestamp; The first entry record includes the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, the first encrypted key data, and the first timestamp; The first inbound log includes the first inbound time, the first database name, the first carrier code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki de-identified data, the first OPC de-identified data, and the first timestamp; The inbound log printing rules include print type configuration, print interface configuration, and print mode configuration; the print type configuration includes screen display type, file print type, and paper print type. When the print type is configured as screen display type, the corresponding print interface is configured as a preset display processing interface; when the print type is configured as file print type, the corresponding print interface is configured as a preset file processing interface. When the print type is configured as paper print, the corresponding print interface is configured as a preset printer processing interface; the print mode configuration includes a line-by-line print mode and a batch print mode.

3. The method for processing customer identification module data in storage according to claim 2, characterized in that, The step of verifying the identity of the first person information according to a preset list of personnel operation permissions to generate a corresponding first verification result and a first data interface list specifically includes: The personnel operation permission records in the personnel operation permission list that match the personnel identifier field with the first personnel identifier of the first personnel information and the personnel verification code field with the first personnel verification code of the first personnel information are taken as the corresponding matching records; and it is identified whether the matching record is empty; if yes, the corresponding first verification result is set to verification failure and the corresponding first data interface list is set to empty; if no, the corresponding first verification result is set to verification success and the data interface list field of the matching record is extracted as the corresponding first data interface list; and the obtained first verification result and first data interface list are output as the corresponding identity verification processing result.

4. The method for processing customer identification module data in storage according to claim 2, characterized in that, The standardization process of each of the first original data records in the first original data file to generate corresponding first standard data records and thus forming the corresponding first standard data file specifically includes: The file format of the first original data file is identified to generate a corresponding first file format; the first file format includes at least CSV, TXT, Excel, TSV, and Word file formats; The system parses each record of the first original data file according to a preset file record parser corresponding to the first file format to obtain one or more corresponding first original data records; the file record parser includes at least a CSV file record parser, a TXT file record parser, an Excel file record parser, a TSV file record parser, and a Word file record parser; And create a corresponding first standard data record for each of the first original data records according to the preset standard data record format; and store the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki data, the first OPC data and the first timestamp of each of the first original data records into the corresponding data fields of the corresponding first standard data record; The first standard data file is composed of all the obtained first standard data records according to the preset standard data file record assembly rules, and the file format is the preset standard data file format; the default standard data file format is CSV file format; The obtained first standard data file is then output as the corresponding standardization result.

5. The method for processing customer identification module data in storage according to claim 2, characterized in that, The step of performing data parsing and de-identification parsing log assembly processing on each of the first standard data records to generate the corresponding first non-critical dataset, first critical dataset, and first de-identification parsing log specifically includes: The first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, and the first timestamp from the first standard data record are extracted to form the corresponding first non-critical dataset; The first Ki data and the first OPC data recorded in the first standard data record are extracted to form the corresponding first key dataset; The first Ki data recorded in the first standard data is taken as the corresponding first string; the substring from the preset first start character index to the preset first end character index in the first string is recorded as the corresponding first substring; and all characters in the first substring are replaced one by one using the preset desensitized single character; and the first string after the desensitized character replacement is taken as the corresponding first Ki desensitized data. The first OPC data recorded in the first standard data is used as the corresponding second string; the second string is hashed using a preset hash algorithm to generate a first hash code in hexadecimal data format; the first hash code is converted into a hexadecimal data string to generate a corresponding first hash code string; and the first hash code string is used as the corresponding first OPC de-identified data. The first de-identification parsing log is composed of the first operator code, the first ICCID data, the first MSISDN data, the first IMSI data, the first Ki de-identification data, the first OPC de-identification data, and the first timestamp corresponding to the first standard data record. The obtained first non-critical dataset, first critical dataset, and first de-identified parsing log are used as the corresponding data parsing and de-identified parsing log assembly processing results output.

6. The method for processing customer identification module data in storage according to claim 2, characterized in that, The first asymmetric encryption and decryption algorithm includes the RSA algorithm and the Chinese national cryptographic SM2 algorithm; when the first asymmetric encryption and decryption algorithm is the RSA algorithm, the corresponding first private key is a preset RSA private key; when the first asymmetric encryption and decryption algorithm is the Chinese national cryptographic SM2 algorithm, the corresponding first private key is a preset SM2 private key. The first symmetric encryption and decryption algorithm is the national standard SM4 algorithm by default. When the first symmetric encryption and decryption algorithm is the national standard SM4 algorithm, the corresponding first block length is 32 by default, the corresponding number of high-order bytes X is 16, the corresponding key length of the first key is 16 bytes, and the corresponding complete complement string is "10000000000000000000000000000000000".

7. The method for processing customer identification module data in storage according to claim 2, characterized in that, The step of printing all the first entry logs based on preset entry log printing rules during the entry process of the first standard data file specifically includes: Before performing an inbound operation on the first inbound record corresponding to the first standard data file, the print type configuration, print interface configuration, and print mode configuration of the inbound log printing rules are used as the corresponding current print type, current print interface, and current print mode; and the current print type is identified. If the current printing type is a screen display type, then a corresponding display interface is initialized for the first standard data file that is currently being imported through the display processing interface corresponding to the current printing interface, and this interface is called the first display interface. If the current print type is a file print type, then the first standard data file in this database is initialized with a storage file of a specified file format through the file processing interface corresponding to the current print interface, and is recorded as the first storage file; If the current printing type is paper printing, then the printer processing interface corresponding to the current printing interface initializes a corresponding single-page cache file for the first standard data file entered into the database as the first single-page cache file and selects a corresponding printer as the first printer. During the process of performing the data entry operation on all the first data entry records corresponding to the first standard data file, the current printing mode is identified. If the current printing mode is a record-by-record printing mode, then each time a new first entry log is generated, the latest first entry log is used as the corresponding current entry log; and if the current printing type is a screen display type, a new line is created on the first display interface to display the current entry log; and if the current printing type is a file printing type, the current entry log is added to the first storage file, and the first storage file is saved when the log addition is complete; and if the current printing type is a paper printing type, the current entry log is added to the first single-page cache file as a new log, and it is identified whether the number of used lines in the first single-page cache file after the log addition has exceeded the preset maximum number of lines per page. If it has exceeded the limit, the current entry log is removed from the first single-page cache file, and the first printer is used to print the first single-page cache file after the log removal is completed. After printing, the first single-page cache file is cleared, and the current entry log is added to the cleared first single-page cache file again as a new log. If the current printing mode is batch recording printing mode, then when generating the last first entry log, all the obtained first entry logs are arranged in chronological order to form a corresponding first entry log sequence; and when the current printing type is screen display type, each of the first entry logs in the first entry log sequence is displayed sequentially on the first display interface; and when the current printing type is file printing type, each of the first entry logs in the first entry log sequence is added sequentially to the first storage file, and the first storage file is saved when the sequence addition is complete; and when the current printing type is paper printing type, the first entry log sequence is input into a preset log sequence printing template for log entry, document line breaks and document pagination processing to obtain one or more corresponding first print pages, and all the first print pages are printed one by one by the first printer in chronological order of page number.

8. The method for processing customer identification module data in storage according to claim 2, characterized in that, The step of verifying the data entry operation based on all the first data entry logs after the data entry process of the first standard data file is completed specifically includes: The system calculates the total number of records in the first standard data file to generate a first total; it also calculates the total number of logs in the first inbound logs to generate a second total; and it identifies the first and second totals. If the first and second totals match, the corresponding inbound quantity verification result is set to "inbound quantity is normal"; if the first total is less than the second total, the corresponding inbound quantity verification result is set to "inbound quantity exceeds limit"; if the first total is greater than the second total, the corresponding inbound quantity verification result is set to "inbound quantity is missing". The first Ki de-identified data and the first OPC de-identified data of each of the first entry logs are extracted and concatenated together to form the corresponding first log de-identified string; and among all the obtained first log de-identified strings, it is confirmed whether there are two first log de-identified strings that match each other; if they do, the corresponding duplicate entry verification result is set to "duplicate entry exists"; if they do not, the corresponding duplicate entry verification result is set to "duplicate entry does not exist". The obtained verification results of the quantity of goods entering the warehouse and the verification results of duplicate goods entering the warehouse are output as the verification results of this goods entering operation.

9. An electronic device, characterized in that, include: Memory, processor, and transceiver; The processor is configured to be coupled to the memory, read and execute instructions in the memory to implement the method according to any one of claims 1-8; The transceiver is coupled to the processor, and the processor controls the transceiver to send and receive messages.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that, when executed by a computer, cause the computer to perform the method described in any one of claims 1-8.

Images