A data encryption transmission method based on random key

By using a random key to encrypt the data and key serial number in data transmission, the problem of insufficient data transmission security in the prior art is solved, and higher data transmission security is achieved.

CN118646598BActive Publication Date: 2024-12-10ZHEJIANG ZHENSHU TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411103108.3
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-08-13
Publication Date
2024-12-10
Estimated Expiration
2044-08-13

AI Technical Summary

Technical Problem

The existing technology relies on key encryption during data transmission, and the decryption is not difficult, resulting in a high risk of data leakage and poses security risks.

Method used

Using a random key-based data encryption transmission method, the server generates and stores multiple keys. The client randomly extracts the key to encrypt the data and key serial number, and verifies the encrypted ciphertext through the server's decryption key value to ensure the data Transmission security.

Benefits of technology

It increases the difficulty of interception and decryption of the transmission layer, reduces the security risks of data leakage and intrusion by risky data, and improves the security of data transmission.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN118646598B_ABST
    Figure CN118646598B_ABST
Patent Text Reader

Abstract

The embodiments of this specification disclose a data encryption transmission method based on random keys. The method includes a server generating and storing at least two first keys; the server randomly extracts at least two second keys from all the first keys; the client randomly extracts a third key, and encrypts the target data and the target key serial number based on the encryption algorithm and the target key value of the third key, respectively, to obtain encrypted data and encrypted ciphertext; the server queries the decryption key value based on the target key serial number, and after the decryption key value successfully verifies the encrypted ciphertext, decrypts the encrypted data based on the decryption key value to obtain the target data. In addition to the target data to be transmitted, the embodiments of this specification also encrypt the key serial number according to the randomly selected key, thereby encrypting the key itself, which increases the difficulty of interception and decryption at the transport layer, and reduces the security risks of data leakage and intrusion by risky data.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] One or more embodiments of the present specification relate to network transmission security technology, and more particularly, to a data encryption transmission method based on random keys. Background Art

[0002] With the development of information systems, the frequency of data transmission between servers and clients is getting higher and higher, and there is a lot of sensitive data in the transmitted data, such as personal ID cards, mobile phone numbers, etc., which can be easily intercepted by hackers through the transmission layer during transmission, resulting in the leakage of sensitive data and causing security risks. At present, the existing technology will encrypt the transmitted data by means of keys, but the decryption difficulty is not high by simply encrypting the data, and there is still a high risk of data leakage. Summary of the invention

[0003] In order to solve the above problems, one or more embodiments of this specification describe a data encryption transmission method based on a random key.

[0004] According to a first aspect, a random key-based data encryption transmission method is provided, the method comprising:

[0005] The server generates and stores at least two first keys, wherein the first keys include a key sequence number and a key value;

[0006] When the server receives the key acquisition request from the client, the server randomly extracts at least two second keys from all the first keys, and transmits the second keys to the client;

[0007] When the client detects a data transmission instruction, a third key is randomly extracted from each of the second keys, and the target data and the target key serial number of the third key are respectively encrypted based on the encryption algorithm and the target key value of the third key to obtain the encrypted data corresponding to the target data and the encrypted ciphertext corresponding to the target key serial number, and the transmission data is sent to the server, where the transmission data includes the target key serial number, the encrypted ciphertext and the encrypted data;

[0008] After receiving the transmission data, the server queries the decryption key value based on the target key serial number, and after the decryption key value successfully verifies the encrypted ciphertext, decrypts the encrypted data based on the decryption key value to obtain the target data.

[0009] Preferably, the server generates and stores at least two first keys, including:

[0010] After each preset period, the server generates at least two first keys according to the key generation engine, and stores the first keys in the key storage.

[0011] Preferably, after each preset period, the server generates at least two first keys according to the key generation engine, and stores the first keys in the key storage, including:

[0012] After each preset period, the server destroys all the keys in the key storage, and regenerates at least two first keys according to the key generation engine, and stores the first keys in the key storage.

[0013] Preferably, when the server receives the key acquisition request from the client, the server randomly extracts at least two second keys from all the first keys, including:

[0014] When the server receives the key acquisition request from the client, the server determines the key acquisition time interval corresponding to the current cycle;

[0015] When the request time matches the key acquisition time interval, the server randomly extracts at least two second keys from all the first keys;

[0016] When the request time does not match the key acquisition time interval, the access of the client is prohibited in the current period, and a warning message is sent to a preset terminal.

[0017] Preferably, after sending the warning information to the preset terminal, the method further includes:

[0018] After receiving the feedback information sent by the preset terminal, the server analyzes the feedback information, determines the number of prohibition cycles, and continuously prohibits the client from accessing within the number of prohibition cycles.

[0019] Preferably, transmitting the second key to the client comprises:

[0020] The second key is transmitted to the client based on a preset transmission interface.

[0021] Preferably, querying the decryption key value based on the target key sequence number includes:

[0022] Based on the target key serial number, searching the key storage for a decryption key value matching the target key serial number;

[0023] When the decryption key value does not exist, first return information is sent to the client, where the first return information is used to indicate that the key cannot be queried.

[0024] Preferably, after the decryption key value successfully verifies the encrypted ciphertext, decrypting the encrypted data based on the decryption key value to obtain the target data includes:

[0025] The server decrypts the encrypted ciphertext based on the key verifier and the decryption key value to obtain a decryption key serial number;

[0026] When the decryption key serial number matches the target key serial number, the encrypted data is decrypted based on the decryption key value to obtain the target data.

[0027] Preferably, the server decrypts the encrypted ciphertext based on the key verifier and the decryption key value to obtain the decryption key serial number, and further comprises:

[0028] When the decryption key serial number does not match the target key serial number, second return information is sent to the client, where the second return information is used to indicate that the key verification fails.

[0029] Preferably, after decrypting the encrypted data based on the decryption key value to obtain the target data, the method further includes:

[0030] Sending third return information to the client, wherein the third return information is used to indicate that the data transmission is successful.

[0031] The method provided in the embodiment of this specification obtains multiple second keys generated by the server at the same time through the client, and randomly selects a third key from the second key when data needs to be transmitted, and encrypts the target data and the target key serial number with the target key value of the third key, so that the server needs to successfully authenticate the encrypted ciphertext with the decryption key value queried according to the target key serial number before decrypting the encrypted data according to the decryption key value. In addition to the target data to be transmitted, the key serial number is also encrypted according to the randomly selected key, thereby encrypting the key itself, increasing the difficulty of interception and decryption at the transport layer, and reducing the security risks of data leakage and invasion by risky data. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 It is a schematic diagram of the system architecture of a data encryption transmission method based on a random key in one embodiment of this specification.

[0034] Figure 2 It is a flowchart of a data encryption transmission method based on a random key in an embodiment of this specification. DETAILED DESCRIPTION

[0035] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0036] In the following introduction, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance. The following introduction provides multiple embodiments of the present application, and different embodiments can be replaced or combined, so the present application can also be considered to include all possible combinations of the same and / or different embodiments recorded. Therefore, if one embodiment includes features A, B, and C, and another embodiment includes features B and D, then the present application should also be considered to include embodiments containing one or more of all other possible combinations of A, B, C, and D, although the embodiment may not be clearly recorded in the following text.

[0037] The following description provides examples and does not limit the scope, applicability or examples set forth in the claims. Changes may be made to the functions and arrangements of the elements described without departing from the scope of the present application. Various processes or components may be appropriately omitted, substituted or added to each example. For example, the described method may be performed in an order different from the order described, and various steps may be added, omitted or combined. In addition, features described in some examples may be combined in other examples.

[0038] See also Figure 1 , Figure 1 A schematic diagram of the system architecture of a random key-based data encryption transmission method provided in an embodiment of this specification is shown.

[0039] like Figure 1 As shown, the system architecture of the random key-based data encryption transmission method may at least include a terminal 10, a server 20 and a network.

[0040] The terminal 10 includes but is not limited to electronic devices such as smart phones, desktop computers, tablet computers, laptops, smart speakers, digital assistants, smart wearable devices, etc., and may also be software running on the above electronic devices, such as applications, etc. Optionally, the operating system running on the electronic device may include but is not limited to Android system, IOS system, Linux, Windows, etc. Optionally, the terminal 10 may send a key acquisition request to the server 20, receive a second key, and when a data transmission instruction is detected, randomly extract a third key from each of the second keys, encrypt the target data and the target key serial number of the third key based on the encryption algorithm and the target key value of the third key, respectively, obtain the encrypted data corresponding to the target data and the encrypted ciphertext corresponding to the target key serial number, and send the transmission data to the server 20.

[0041] The node network formed by the server 20 can provide background services for the terminal 10, randomly extract at least two second keys from all the first keys according to the key acquisition request of the client, and after receiving the transmission data, query the decryption key value based on the target key sequence number, and after the decryption key value successfully verifies the encrypted ciphertext, decrypt the encrypted data based on the decryption key value to obtain the target data. Specifically, the server 20 can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms.

[0042] The network is used to provide a medium for a communication link between the terminal 10 and the server 20. The network may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0043] In addition, it should be noted that Figure 1 What is shown is only one system provided by the present disclosure. In practical applications, other systems may also be included, for example, more terminals may be included.

[0044] In the embodiments of the present specification, the terminal 10 and the server 20 may be directly or indirectly connected via wired or wireless communication, which is not limited in the present disclosure.

[0045] See next Figure 2 , Figure 2 The overall flow chart of a random key-based data encryption transmission method provided in an embodiment of the present specification is shown, and the method can be partially applied to the terminal 10 and the server 20 respectively.

[0046] like Figure 2 As shown, the random key-based data encryption transmission method may at least include the following steps:

[0047] Step 201: The server generates and stores at least two first keys.

[0048] The first key includes a key sequence number and a key value.

[0049] In the embodiments of this specification, the server itself generates multiple first keys instead of a specific key, and the key sequence number and key value in each first key are different, and each key sequence number corresponds to only a unique key value. After all the first keys are generated, the server stores all the first keys in a dedicated storage area and records the mapping relationship between each key sequence number and key value.

[0050] Step 202: The server receives a key acquisition request from the client.

[0051] In the embodiment of the present specification, the server generates a first key. After the entire system starts to work normally, the client first sends a key acquisition request to the server to obtain the key from the server.

[0052] Step 203: The server randomly extracts at least two second keys from all the first keys.

[0053] In the embodiment of the present specification, after parsing the key acquisition request, the server can determine the number of keys requested by the client, and randomly extract a corresponding number of second keys from all currently stored first keys according to the number of keys. Depending on the key acquisition request, the server can extract only part of the first keys as the second keys, or extract all the first keys as the second keys, but the number of second keys cannot be one, otherwise it will affect the security of subsequent data transmission.

[0054] Step 204: The server transmits the second key to the client.

[0055] In the embodiment of this specification, after the server extracts the corresponding second key according to the key acquisition request, it will transmit the second key to the client. The client will also store the obtained second key separately.

[0056] Step 205: When the client detects a data transmission instruction, it randomly extracts a third key from each of the second keys, and encrypts the target data and the target key serial number of the third key based on the encryption algorithm and the target key value of the third key, respectively, to obtain the encrypted data corresponding to the target data and the encrypted ciphertext corresponding to the target key serial number.

[0057] The transmission data includes the target key serial number, encrypted ciphertext and encrypted data.

[0058] In the embodiments of this specification, if the client needs to transfer the corresponding target data to the server during the operation of a certain application, or the user performs corresponding operations on the client because he actively wants to upload the target data to the server, a data transmission instruction will be generated in the client. After the client detects the data transmission instruction, it will first encrypt the target data. Specifically, the client will randomly extract a third key from the stored multiple second keys as the key used for this data encryption. After determining the third key, in addition to encrypting the target data to be transmitted according to the encryption algorithm and the target key value of the third key to obtain encrypted data, the client will also encrypt the target key serial number of the third key to obtain encrypted ciphertext. Finally, the client will package the target key serial number, encrypted ciphertext and encrypted data into transmission data. In this way, even if the data is intercepted during the transmission process, the key obtained is not the complete key. In addition to the encrypted data, the transmitted data also contains encrypted ciphertext. Since each transmission is randomly selected from multiple keys obtained rather than a fixed key, when the specific key selected and the encryption algorithm selected cannot be determined, the key serial number part of the key is encrypted into encrypted ciphertext. It is difficult for hackers to crack the data by intercepting it once, and forced cracking will also cause the encrypted ciphertext to fail to pass verification in the subsequent process, ensuring the security of the data received by the server. Among them, the encryption algorithm can be selected from the national secret series encryption algorithm, stream encryption algorithm, asymmetric encryption algorithm, etc. In order to further improve the security of data transmission, different encryption algorithms can be used to encrypt the target data and the target key serial number.

[0059] Step 206: The client sends the transmission data to the server.

[0060] In the embodiment of the present specification, after generating the encrypted ciphertext and the encrypted data, the client will integrate the encrypted ciphertext, the encrypted data and the target key serial number into transmission data, and send the transmission data to the server.

[0061] Step 207: After receiving the transmission data, the server queries the decryption key value based on the target key serial number, and after the decryption key value successfully verifies the encrypted ciphertext, decrypts the encrypted data based on the decryption key value to obtain the target data.

[0062] In the embodiments of the present specification, since the key obtained by the client is initially generated by the server, the server itself will store the key information corresponding to each key. Therefore, when the server receives the transmission data, it can first determine the target key serial number by information matching, and then query the key mapping database stored in the server according to the target key serial number to determine the key value in the key corresponding to the target key serial number in the key initially generated by the server, and the key value is the decryption key value. Through the decryption key value, the server can decrypt the encrypted ciphertext and verify the reliability of the encrypted ciphertext according to whether the decryption result matches the target key serial number. After the verification is successful, the server considers that the transmission data is normal, and will encrypt the encrypted data according to the decryption key value and the decryption algorithm to obtain the target data that the client wants to transmit.

[0063] In one possible implementation, the server generates and stores at least two first keys, including:

[0064] After each preset period, the server generates at least two first keys according to the key generation engine, and stores the first keys in the key storage.

[0065] In the embodiments of this specification, in order to enhance the security of the key, the server does not only generate multiple keys for storage in the initial state, but generates several new first keys again according to the key generation engine every preset period, and stores these first keys in the key storage device together with the previously generated first keys. In addition, the client can also re-acquire a batch of second keys from the server every preset period, so as to ensure that the second keys stored in the client are also constantly changing, further improving the security of data transmission. In this way, each time the client obtains the second key from the server, the key stored in the key storage device is at least partially changed, which increases the randomness of each second key obtained by the client.

[0066] In one possible implementation, the server generates at least two first keys according to the key generation engine every preset period, and stores the first keys in the key storage, including:

[0067] After each preset period, the server destroys all the keys in the key storage, and regenerates at least two first keys according to the key generation engine, and stores the first keys in the key storage.

[0068] In the embodiments of the present specification, in order to further improve the security of the keys, after each preset period, the server will first destroy all the keys in the key storage, that is, all the keys generated in the previous period will be destroyed, and then a number of first keys will be regenerated according to the key generation engine, so as to ensure that all the keys stored in the key storage in each period are regenerated, and the client will not obtain duplicate keys.

[0069] In one possible implementation, when the server receives the key acquisition request from the client, the server randomly extracts at least two second keys from all the first keys, including:

[0070] When the server receives the key acquisition request from the client, the server determines the key acquisition time interval corresponding to the current cycle;

[0071] When the request time matches the key acquisition time interval, the server randomly extracts at least two second keys from all the first keys;

[0072] When the request time does not match the key acquisition time interval, the access of the client is prohibited in the current period, and a warning message is sent to a preset terminal.

[0073] In the embodiment of this specification, normally, in order to ensure that the encrypted data can be correctly verified and identified by the server, after each preset cycle, the server regenerates a batch of new keys, and the client should immediately obtain a batch of new second keys from the server, and will not obtain the keys in the middle time period of the cycle. Therefore, considering the delay and error, the server will set a key acquisition time interval according to the start time of each cycle. When the server receives the key acquisition request sent by the client, it is first necessary to determine whether the request time matches the key acquisition time interval, that is, whether the request time is within the key acquisition time interval. If the two match, the server believes that everything is normal and will randomly extract multiple second keys from the first key and send them to the client. If the two do not match, the server believes that this request is abnormal, and it may be that a hacker pretends to be a client and wants to obtain the second key. At this time, the server will prohibit the client from accessing in the current cycle to ensure the safety of the server. At the same time, the server will also send a warning message to the preset terminal used by the management personnel to inform the management personnel of the situation and let them conduct corresponding security inspections.

[0074] In one possible implementation manner, after sending the warning information to the preset terminal, the method further includes:

[0075] After receiving the feedback information sent by the preset terminal, the server analyzes the feedback information, determines the number of prohibition cycles, and continuously prohibits the client from accessing within the number of prohibition cycles.

[0076] In the embodiment of this specification, if the administrator finds that there is indeed an abnormality in the system through inspection, the administrator can send feedback information to the server through the preset terminal. The server can determine the number of prohibited cycles set by the administrator by analyzing the feedback information, and prohibit the client from accessing during the next number of prohibited cycles, so as to leave the administrator with enough time to conduct investigation and maintenance.

[0077] In one possible implementation, transmitting the second key to the client includes:

[0078] The second key is transmitted to the client based on a preset transmission interface.

[0079] In an embodiment of the present specification, in order to improve the security of the process of the client obtaining the second key, a fixed transmission interface can be pre-set. The transmission interface can be an interface with a fixed protocol and / or a fixed address. Only after the client is connected to the server through the preset transmission interface, the server will transmit the second key to the client through the interface.

[0080] In one possible implementation, querying the decryption key value based on the target key sequence number includes:

[0081] Based on the target key serial number, searching the key storage for a decryption key value matching the target key serial number;

[0082] When the decryption key value does not exist, first return information is sent to the client, where the first return information is used to indicate that the key cannot be queried.

[0083] In the embodiments of the present specification, when the server queries the decryption key value according to the target key serial number, the server may not be able to query the corresponding decryption key value in the key storage device because the target key serial number sent by the client is wrong or the data transmitted this time is irregular data. At this time, the server will send a first return message to the client to inform the client that the key cannot be queried and the data transmission this time fails.

[0084] In one possible implementation, after the decryption key value successfully verifies the encrypted ciphertext, decrypting the encrypted data based on the decryption key value to obtain the target data includes:

[0085] The server decrypts the encrypted ciphertext based on the key verifier and the decryption key value to obtain a decryption key serial number;

[0086] When the decryption key serial number matches the target key serial number, the encrypted data is decrypted based on the decryption key value to obtain the target data.

[0087] In the embodiment of this specification, after the server decrypts the encrypted ciphertext according to the key verifier and the decryption key value, it will obtain the decryption key serial number. If the decryption key serial number matches the target key serial number, the server considers that the verification of the transmitted data is successful and it is safe data. At this time, the encrypted data will be decrypted to obtain the target data.

[0088] In one possible implementation, the server decrypts the encrypted ciphertext based on the key verifier and the decryption key value to obtain the decryption key serial number, and further includes:

[0089] When the decryption key serial number does not match the target key serial number, second return information is sent to the client, where the second return information is used to indicate that the key verification fails.

[0090] In the embodiments of this specification, if the decryption key serial number does not match the target key serial number, it is considered that the encrypted key serial number does not match the sent key serial number, or the decrypted key serial number changes due to incorrect use of the encryption algorithm, which means that there may be an abnormality in the data transmitted this time. At this time, the server will send a second return message to the client to inform the server that the key verification failed and the data transmission failed.

[0091] In one possible implementation, after decrypting the encrypted data based on the decryption key value to obtain the target data, the method further includes:

[0092] Sending third return information to the client, wherein the third return information is used to indicate that the data transmission is successful.

[0093] In the embodiment of the present specification, after successfully obtaining and storing the target data, the server will also send a third return message to the client to inform the client that the data transmission is successful.

[0094] The present application also provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, the steps of the above method are implemented. The computer-readable storage medium may include, but is not limited to, any type of disk, including a floppy disk, an optical disk, a DVD, a CD-ROM, a micro drive, and a magneto-optical disk, a ROM, a RAM, an EPROM, an EEPROM, a DRAM, a VRAM, a flash memory device, a magnetic card or an optical card, a nanosystem (including a molecular memory IC), or any type of medium or device suitable for storing instructions and / or data.

[0095] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0096] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0097] A person skilled in the art may understand that all or part of the steps in the various methods of the above embodiments may be completed by entering a program to instruct related hardware, and the program may be stored in a computer-readable memory, which may include a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0098] The above is only an exemplary embodiment of the present disclosure, and the scope of the present disclosure cannot be limited thereto. That is, any equivalent changes and modifications made according to the teachings of the present disclosure are still within the scope of the present disclosure. After considering the specification and practicing the disclosure here, those skilled in the art will easily think of the implementation scheme of the present disclosure. This application is intended to cover any modification, use or adaptation of the present disclosure, which follows the general principles of the present disclosure and includes common knowledge or customary technical means in the technical field not recorded in the present disclosure. The description and examples are regarded as exemplary only, and the scope and spirit of the present disclosure are defined by the claims.

Claims

1. A data encryption transmission method based on random keys, It is characterized in that The method comprises: The server generates and stores at least two first keys, wherein the first keys include a key sequence number and a key value; When the server receives the key acquisition request from the client, the server randomly extracts at least two second keys from all the first keys, and transmits the second keys to the client; When the client detects a data transmission instruction, a third key is randomly extracted from each of the second keys, and the target data and the target key serial number of the third key are respectively encrypted based on the encryption algorithm and the target key value of the third key to obtain the encrypted data corresponding to the target data and the encrypted ciphertext corresponding to the target key serial number, and the transmission data is sent to the server, where the transmission data includes the target key serial number, the encrypted ciphertext and the encrypted data; After receiving the transmission data, the server queries the decryption key value based on the target key sequence number, and after the decryption key value successfully verifies the encrypted ciphertext, decrypts the encrypted data based on the decryption key value to obtain the target data; The server generates and stores at least two first keys, including: After each preset period, the server generates at least two first keys according to the key generation engine, and stores the first keys in the key storage; The server generates at least two first keys according to the key generation engine every preset period, and stores the first keys in the key storage, including: After each preset period, the server destroys all keys in the key storage, regenerates at least two first keys according to the key generation engine, and stores the first keys in the key storage; When the server receives the key acquisition request from the client, the server randomly extracts at least two second keys from all the first keys, including: When the server receives the key acquisition request from the client, the server determines the key acquisition time interval corresponding to the current cycle; When the request time matches the key acquisition time interval, the server randomly extracts at least two second keys from all the first keys; When the request time does not match the key acquisition time interval, the access of the client is prohibited in the current period, and a warning message is sent to a preset terminal.

2. The method according to claim 1, It is characterized in that After sending the warning information to the preset terminal, the method further includes: After receiving the feedback information sent by the preset terminal, the server analyzes the feedback information, determines the number of prohibition cycles, and continuously prohibits the client from accessing within the number of prohibition cycles.

3. The method according to claim 1, It is characterized in that The transmitting the second key to the client comprises: The second key is transmitted to the client based on a preset transmission interface.

4. The method according to claim 1, It is characterized in that The querying of the decryption key value based on the target key sequence number includes: Based on the target key serial number, searching the key storage for a decryption key value matching the target key serial number; When the decryption key value does not exist, first return information is sent to the client, where the first return information is used to indicate that the key cannot be queried.

5. The method according to claim 1, It is characterized in that After the decryption key value successfully verifies the encrypted ciphertext, decrypting the encrypted data based on the decryption key value to obtain the target data includes: The server decrypts the encrypted ciphertext based on the key verifier and the decryption key value to obtain a decryption key serial number; When the decryption key serial number matches the target key serial number, the encrypted data is decrypted based on the decryption key value to obtain the target data.

6. The method according to claim 5, It is characterized in that The server decrypts the encrypted ciphertext based on the key verifier and the decryption key value to obtain the decryption key serial number, and further includes: When the decryption key serial number does not match the target key serial number, second return information is sent to the client, where the second return information is used to indicate that the key verification fails.

7. The method according to claim 1, It is characterized in that After decrypting the encrypted data based on the decryption key value to obtain the target data, the method further includes: Sending third return information to the client, wherein the third return information is used to indicate that the data transmission is successful.