Secure cloud storage method, device and equipment based on local general physical storage

Abstract

The present application relates to a secure cloud storage method, device and equipment based on local general physical storage, wherein the method includes: receiving a pairing code and a user password sent by a user terminal; if the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal; when a data processing request sent by the user terminal is received, the data processing request is parsed to obtain user information; the corresponding target home gateway is queried according to the user information, and a task message is generated based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform read / write operations on the local physical storage; and the task message is sent to the target home gateway. During the whole process, data is processed based on the paired key pair corresponding to the user terminal to ensure data security.

Description

Technical Field

[0001] The present application relates to the field of cloud storage technology, and in particular to a secure cloud storage method, apparatus, computer equipment and storage medium based on local general physical storage. Background Art

[0002] Common public cloud storage services store data on cloud servers, which poses risks to data privacy and security. For example, after purchasing a company's cloud storage service, the mobile app will usually automatically synchronize photos and videos in the album to the cloud. If the corresponding company has a data leak or there are doubts about the reliability of the cloud service provider, concerns may arise.

[0003] In response to the risk of data leakage in traditional public cloud storage, private cloud methods are currently available on the market to protect user data privacy. However, common private cloud NAS (Network Attached Storage) solutions can only work in the same network environment and cannot be accessed on the external network. There is also a risk of being accessed by any terminal and stealing files.

[0004] It can be seen that there is no highly secure cloud storage solution in traditional technology. Summary of the invention

[0005] Based on this, it is necessary to provide a secure cloud storage method, device, computer equipment and storage medium based on local general physical storage to address the above technical problems.

[0006] In a first aspect, the present application provides a secure cloud storage method based on local general physical storage. The method comprises:

[0007] Receive the pairing code and user password sent by the user terminal;

[0008] If the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal;

[0009] When receiving a data processing request sent by a user terminal, parsing the data processing request to obtain user information;

[0010] Querying the corresponding target home gateway according to the user information, and generating a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform a read / write operation on the local physical storage;

[0011] Send the task message to the target home gateway.

[0012] In one embodiment, before receiving the pairing code sent by the user terminal, the method further includes:

[0013] Receiving a registration request sent by a user terminal;

[0014] Parsing the registration request to authenticate the user;

[0015] If the identity authentication is successful, the user terminal is paired with the home gateway, and a pairing code is sent to the user terminal.

[0016] In one embodiment, the data processing request is a file upload request; querying the corresponding target home gateway according to the user information and generating a task message based on the data processing request includes:

[0017] Querying a corresponding target home gateway according to the user information;

[0018] Parsing the data processing request to obtain a file to be uploaded, wherein the file to be uploaded is encrypted by the user terminal based on the cached key pair;

[0019] A file upload message is generated based on the file to be uploaded, and the file upload message is used to instruct the target home gateway to decrypt the file to be uploaded based on the cached key pair corresponding to the user terminal, and store the decrypted file in local physical storage.

[0020] In one embodiment, the data processing request is a file download request; querying the corresponding target home gateway according to the user information and generating a task message based on the data processing request includes:

[0021] Querying a corresponding target home gateway according to the user information;

[0022] Based on the file download request, a file download message is generated, and the file download message is used to instruct the target home gateway to search for the file requested to be downloaded from the local physical storage, and encrypt the file requested to be downloaded based on the cached key pair corresponding to the user terminal, and return the encrypted file to the cloud service.

[0023] In one embodiment, after sending the task message to the target home gateway, the method further includes:

[0024] Receiving the encrypted file sent back by the target home gateway;

[0025] The encrypted file is forwarded to the user terminal.

[0026] In one embodiment, the above secure cloud storage method based on local general physical storage further includes:

[0027] When receiving a file browsing request sent by the user terminal, parsing the file browsing request to obtain user information;

[0028] Querying the home gateway corresponding to the user information;

[0029] forwarding the file browsing request to the queried home gateway;

[0030] Receiving the file browsing directory list fed back by the queried home gateway in response to the file browsing request;

[0031] The file browsing directory list is returned to the user terminal.

[0032] In a second aspect, the present application also provides a secure cloud storage device based on local general physical storage. The device includes:

[0033] A receiving module, used to receive a pairing code and a user password sent by a user terminal;

[0034] A verification module, configured to generate a key pair according to the user password when the pairing code is successfully verified, and issue the key pair to the user terminal and a home gateway paired with the user terminal;

[0035] A parsing module, configured to parse a data processing request sent by a user terminal to obtain user information when receiving the data processing request;

[0036] A task message generation module, used to query the corresponding target home gateway according to the user information, and generate a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform a read / write operation on the local physical storage;

[0037] The message sending module is used to send the task message to the target home gateway.

[0038] In a third aspect, the present application further provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0039] Receive the pairing code and user password sent by the user terminal;

[0040] If the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal;

[0041] When receiving a data processing request sent by a user terminal, parsing the data processing request to obtain user information;

[0042] Querying the corresponding target home gateway according to the user information, and generating a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform a read / write operation on the local physical storage;

[0043] Send the task message to the target home gateway.

[0044] In a fourth aspect, the present application further provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0045] Receive the pairing code and user password sent by the user terminal;

[0046] If the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal;

[0047] When receiving a data processing request sent by a user terminal, parsing the data processing request to obtain user information;

[0048] Querying the corresponding target home gateway according to the user information, and generating a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform a read / write operation on the local physical storage;

[0049] Send the task message to the target home gateway.

[0050] In a fifth aspect, the present application further provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0051] Receive the pairing code and user password sent by the user terminal;

[0052] If the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal;

[0053] When receiving a data processing request sent by a user terminal, parsing the data processing request to obtain user information;

[0054] Querying the corresponding target home gateway according to the user information, and generating a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform a read / write operation on the local physical storage;

[0055] Send the task message to the target home gateway.

[0056] The above-mentioned secure cloud storage method, device, computer equipment, storage medium and computer program product based on local general physical storage receive the pairing code and user password sent by the user terminal; if the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal; when a data processing request sent by the user terminal is received, the data processing request is parsed to obtain user information; the corresponding target home gateway is queried according to the user information, and a task message is generated based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform read / write operations on the local physical storage; and the task message is sent to the target home gateway. During the whole process, the data is responded to and processed based on the pairing key pair corresponding to the user terminal to ensure data security. In addition, the reading and writing of data is performed in the local object storage, which avoids the risk of data leakage in the cloud service and can achieve high-security cloud storage. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] FIG1 is a diagram of an application environment of a secure cloud storage method based on local general physical storage in one embodiment;

[0058] FIG2 is a schematic diagram of a process of a secure cloud storage method based on local general physical storage in one embodiment;

[0059] FIG3 is a schematic diagram of a flow chart of a secure cloud storage method based on local general physical storage in another embodiment;

[0060] FIG4 is a schematic diagram of a process flow of a file upload scenario in one embodiment;

[0061] FIG5 is a schematic diagram of a process flow of a file downloading scenario in one embodiment;

[0062] FIG6 is a schematic diagram of a process flow of a file browsing scenario in one embodiment;

[0063] FIG7 is a structural block diagram of a secure cloud storage device based on local general physical storage in one embodiment;

[0064] FIG. 8 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0065] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0066] The secure cloud storage method based on local general physical storage provided in the embodiment of the present application can be applied to the application environment shown in Figure 1. The user terminal 102 is connected to the home gateway 106 through the shared cloud service 104 (hereinafter referred to as the cloud service), and the home gateway 106 is connected to the local physical storage 108 through a data cable. The local physical storage 108 can specifically include a mobile hard disk, a USB flash drive, etc. In actual application, the user terminal 102 completes registration on the cloud service 104, and the cloud service 104 feeds back a pairing code to the user terminal 102. When the user terminal 102 needs to perform data read / write (storage) operations, the user terminal 102 sends its own cached pairing code and the user password entered by the user to the cloud service 104, and the cloud service 104 receives the pairing code and user password sent by the user terminal; if the pairing code is verified successfully, a key pair is generated according to the user password, and the key pair is sent to the user terminal 102 and the home gateway 106 paired with the user terminal; when a data processing request sent by the user terminal 102 is received, the data processing request is parsed to obtain user information; the corresponding target home gateway is queried according to the user information, and a task message is generated based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform read / write operations on the local physical storage 108; and the task message is sent to the target home gateway. The user terminal 102 may be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, IoT devices, and portable wearable devices. IoT devices may be smart speakers, smart TVs, smart air conditioners, smart car devices, etc. Portable wearable devices may be smart watches, smart bracelets, head-mounted devices, etc. The cloud service 104 may be implemented using an independent server or a server cluster consisting of multiple servers.

[0067] In one embodiment, as shown in FIG. 2 , a secure cloud storage method based on local general physical storage is provided, and the method is applied to the cloud service 104 in FIG. 1 as an example for description, including the following steps:

[0068] S100: receiving a pairing code and a user password sent by a user terminal.

[0069] The pairing code is sent by the cloud service to the user terminal when the user terminal registers on the cloud service. Specifically, the new user terminal needs to be paired with the home gateway and its connected local physical storage when registering. Pairing here refers to the pairing of the new user terminal (new mobile phone, computer, etc.) and the home gateway. When the user uses the device with the newly installed client software for the first time and binds the gateway and hard disk at home, he needs to enter the pairing code. The pairing code is generated by the cloud service and can be sent to the user via SMS verification code using the mobile phone number used when registering, or can be viewed by logging in to the management web page provided by the Agent in the home LAN. After the user terminal completes the pairing, the cloud service sends the pairing code to the user terminal. When the user terminal needs to request data processing (data reading and writing) later, it sends a request carrying the pairing code to the cloud service.

[0070] On the cloud service side, the pairing code sent by the user terminal and the user password entered by the user on the user terminal side are received.

[0071] S200: If the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal.

[0072] The cloud service verifies the received pairing code to confirm whether it is a valid pairing code. If so, the cloud service generates a key pair based on the user password, and then sends the key pair to the user terminal and the home gateway paired with the user terminal. Further, when the user terminal registers, the user terminal will be paired with the home gateway, and then the cloud service generates a pairing code corresponding to the pairing result, and then sends the pairing code to the user terminal and the home gateway. Both the user terminal and the home gateway will cache the pairing code in the local storage space.

[0073] Here, an encryption algorithm can be used to process the user password to generate a key pair. Specifically, here, an encryption algorithm can be used to generate a set of public key / private key pairs based on the password string entered by the user as a seed, that is, a key pair is generated, and then the key pair is sent to the user terminal and the home gateway paired with the user terminal.

[0074] S300: When a data processing request sent by a user terminal is received, the data processing request is parsed to obtain user information.

[0075] In the subsequent processing, the user operates on the user terminal. When data needs to be processed, the user terminal sends the data processor to the cloud service. The cloud service parses the data processing request to obtain the user information carried therein for the next step of analysis.

[0076] S400: Query the corresponding target home gateway according to the user information, and generate a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform read / write operations on the local physical storage.

[0077] Based on the user information obtained in S300, the cloud service further queries the target home gateway corresponding to the current user terminal pairing, that is, the home gateway that stores the same pairing code as the current user terminal. After determining the target home gateway, a task message is further generated based on the data processing request, and the task message is used to be sent to the target home gateway so that the target home gateway can respond to the data processing request and perform read / write operations on the local physical storage. Specifically, the data processing request here may include file upload requests, file download requests and others. For file upload requests, that is, the user terminal needs to store data in the cloud (in this application, it is stored in local physical storage), at this time, the home gateway needs to write the received data (file) to the local physical storage; for file download requests, that is, the user terminal needs to download files from the cloud, at this time, the home gateway needs to read the user's required files from the local physical storage, and then forward the user's required files to the cloud service, and then the cloud service sends them to the user terminal.

[0078] S500: Sending a task message to a target home gateway.

[0079] After generating the task message, the cloud service sends the task message to the target home gateway, and the target home gateway responds to the task message to perform subsequent operations.

[0080] The above-mentioned secure cloud storage method based on local general physical storage receives the pairing code and user password sent by the user terminal; if the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal; when a data processing request sent by the user terminal is received, the data processing request is parsed to obtain user information; the corresponding target home gateway is queried according to the user information, and a task message is generated based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform read / write operations on the local physical storage; and the task message is sent to the target home gateway. During the whole process, the data is responded to and processed based on the pairing key pair corresponding to the user terminal to ensure data security. In addition, the reading and writing of data is performed in the local object storage, which avoids the risk of data leakage in the cloud service and can achieve high-security cloud storage.

[0081] As shown in FIG3 , in one embodiment, before S100, the process further includes:

[0082] S120: Receive a registration request sent by a user terminal.

[0083] S140: Parse the registration request to authenticate the user.

[0084] S160: If the identity authentication is successful, the user terminal is paired with the home gateway, and a pairing code is sent to the user terminal.

[0085] The user terminal needs to be registered when it is used for the first time. For example, the user's new mobile phone and new computer need to be registered and paired with the home gateway. Specifically, the new user terminal will send a registration request to the cloud service. The cloud service receives the registration request sent by the user terminal and then authenticates the user to identify whether the user is a legitimate user. If the identity authentication is passed, the user terminal will be paired with the home gateway, and then the pairing code will be sent to the user terminal. Specifically, registration refers to registering your own account information on the cloud service. After successful registration, the user account information will be saved in the service on the public cloud. Pairing first requires the Agent and the client to use the same account for login authentication (the Agent can log in and pair through the front-end control page of the Agent service). When pairing, the user needs to enter the password and the pairing code generated by the cloud service. In actual applications, pairing refers to pairing a new device terminal (new mobile phone, computer, etc.) with the gateway. When a user uses a device with newly installed client software for the first time, he needs to enter the pairing code when binding the home gateway and local physical storage (such as a hard disk). The pairing code is generated by the cloud service and can be sent to the user via a text message verification code using the mobile phone number used during registration, or it can be viewed by logging into the management web page provided by the Agent within the home LAN.

[0086] In one embodiment, the data processing request is a file upload request; querying the corresponding target home gateway according to the user information and generating a task message based on the data processing request includes:

[0087] Query the corresponding target home gateway according to the user information; parse the data processing request to obtain the file to be uploaded, and the file to be uploaded is encrypted by the user terminal based on the cached key pair; generate a file upload message based on the file to be uploaded, and the file upload message is used to instruct the target home gateway to decrypt the file to be uploaded based on the cached key pair corresponding to the user terminal, and store the decrypted file to the local physical storage.

[0088] For the file upload request processing scenario, the cloud service first queries the corresponding target home gateway according to the user information, that is, determines the target home gateway paired with the current user terminal. Specifically, it can query the corresponding pairing code according to the user information, and then query the corresponding home gateway based on the pairing code, that is, determine the target home gateway. After determining the target home gateway, the cloud service parses the data processing request to obtain the file to be uploaded corresponding to the file uploaded this time. The file to be uploaded has been encrypted by the user terminal based on the cached key pair, and is specifically encrypted by the public key in the key pair. After parsing the file to be uploaded, the cloud service generates a file upload message based on the file to be uploaded. The file upload message is used to instruct the target home gateway to store the file to be uploaded in the local physical storage. Further, the cloud service can send the file upload message to the target home gateway, and the target home gateway decrypts the file to be uploaded based on the cached private key in the key pair corresponding to the user terminal, and then stores the decrypted file in the local physical storage connected to itself.

[0089] For the file upload request processing scenario, in actual application as shown in Figure 4, the user operates on the user terminal side (for example, on the APP), the user terminal detects that there is a file to be uploaded and synchronized, the user terminal uses the public key generated during registration and pairing to encrypt the file to generate the file to be uploaded, the user terminal initiates an upload request to the cloud server, the encrypted file to be uploaded is uploaded to the cloud service, and the cloud service finds the corresponding gateway device (target home gateway) according to the user information. The cloud service transmits the data to the Agent service on the corresponding gateway device. The Agent service uses the private key to decrypt the encrypted file to be uploaded, and saves the decrypted file to the local physical storage according to the target information. Further, in the above-mentioned file encryption and decryption process, the overall encryption and decryption of large files such as streaming media is relatively time-consuming. The encryption and decryption of large files can be segmented, and the files can be divided into blocks of a certain size and processed concurrently. This can avoid the time-consuming encryption and decryption affecting the upload / download efficiency of large files.

[0090] In one embodiment, the data processing request is a file download request; querying the corresponding target home gateway according to the user information and generating a task message based on the data processing request includes:

[0091] Query the corresponding target home gateway according to the user information;

[0092] Based on the file download request, a file download message is generated. The file download message is used to instruct the target home gateway to search for the requested download file from the local physical storage, encrypt the requested download file based on the cached key pair corresponding to the user terminal, and return the encrypted file to the cloud service.

[0093] For the file download scenario, the cloud service first generates a file download message based on the file download request sent by the user terminal. The file download message is used to instruct the target home gateway to search for the requested download file from the local physical storage, and instruct the target home gateway to encrypt the found download file, and then return the encrypted file to the cloud service. The cloud service then feeds back the loaded download file to the user terminal.

[0094] In actual applications, the overall process for the file download scenario is shown in Figure 5. The user operates on the user terminal side (for example, on the APP), and the user terminal initiates a file download request to the cloud service. The cloud service searches for the corresponding gateway device (target home gateway) based on the user information. The cloud service transmits the file download request to the Agent service on the corresponding gateway device. The Agent service uses the public key to encrypt the file requested for download and returns it to the cloud service. The cloud service returns the encrypted file to the user terminal, and the user terminal decrypts the received file using the private key and saves or displays it.

[0095] In one embodiment, the above secure cloud storage method based on local general physical storage further includes:

[0096] When a file browsing request is received from a user terminal, the file browsing request is parsed to obtain user information; the home gateway corresponding to the user information is queried; the file browsing request is forwarded to the queried home gateway; a file browsing directory list fed back by the queried home gateway in response to the file browsing request is received; and the file browsing directory list is returned to the user terminal.

[0097] For the file browsing scenario, when the cloud service receives the file browsing request sent by the user terminal, it further parses the file browsing request to obtain the user information, then queries the home gateway corresponding to the user information, and forwards the file browsing request to the queried home gateway. The home gateway will respond to the file browsing request and feedback the file browsing directory list to the cloud service. The cloud service then sends the file browsing directory list to the user terminal.

[0098] In actual applications, the overall process for the file download scenario is shown in Figure 6. The user operates on the user terminal side (for example, on the APP), and the user terminal initiates a file directory request (file browsing request) to the cloud service. The cloud service finds the corresponding gateway device based on the user information, and the cloud service transmits the request to the Agent service on the corresponding gateway. The Agent service obtains the list of files and subdirectories based on the requested directory, and the Agent service returns the target list to the cloud service. The cloud service returns the target list to the terminal, and the terminal displays it.

[0099] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0100] In general, in the above embodiments, the secure cloud storage method based on local general physical storage of the present application has the following significant technical advantages:

[0101] 1) It can realize the capabilities that traditional public cloud storage should have, such as automatic file synchronization through APP and multi-terminal file sharing.

[0102] 2) The files are not actually saved on the cloud server, but written to the user's home hard drive, reducing the risk of data leakage caused by the service provider.

[0103] 3) The entire file transfer process is encrypted, and the secret key is only stored in the Agent and the client. Even if the data is intercepted by an attacker in the middle, the attacker cannot obtain the decrypted file. However, it is transparent encryption and decryption for the client user. The uploaded and downloaded files are automatically encrypted and decrypted without the user's awareness. The files actually stored on the terminal device and local physical storage are decrypted, and encryption only occurs during the transmission process, so you can directly use the uploaded or downloaded files without relying on the relevant client. Both the public and private keys are generated during pairing and stored locally, without the process of network exchange.

[0104] 4) General local physical storage is cheaper than purchasing cloud storage services or private cloud NAS boxes, and the storage space is flexible and easy to expand, which reduces costs for both service users and service providers.

[0105] Based on the same inventive concept, the embodiment of the present application also provides a local universal physical storage-based secure cloud storage device for implementing the above-mentioned local universal physical storage-based secure cloud storage method. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above-mentioned method, so the specific limitations in one or more embodiments of the local universal physical storage-based secure cloud storage device provided below can refer to the limitations of the local universal physical storage-based secure cloud storage method above, and will not be repeated here.

[0106] In one embodiment, as shown in FIG7 , a secure cloud storage device based on local general physical storage is provided, including:

[0107] The receiving module 100 is used to receive the pairing code and user password sent by the user terminal;

[0108] The verification module 200 is used to generate a key pair according to the user password when the pairing code is successfully verified, and send the key pair to the user terminal and the home gateway paired with the user terminal;

[0109] The parsing module 300 is used to parse the data processing request to obtain user information when receiving the data processing request sent by the user terminal;

[0110] The task message generation module 400 is used to query the corresponding target home gateway according to the user information and generate a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal and perform a read / write operation on the local physical storage;

[0111] The message sending module 500 is used to send the task message to the target home gateway.

[0112] In one embodiment, the secure cloud storage in the local general physical storage further includes:

[0113] The registration module is used to receive a registration request sent by a user terminal; parse the registration request to authenticate the user; if the authentication is successful, pair the user terminal with the home gateway and send a pairing code to the user terminal.

[0114] In one of the embodiments, the data processing request is a file upload request; the task message generation module 400 is also used to query the corresponding target home gateway based on user information; parse the data processing request, obtain the file to be uploaded, and the file to be uploaded is encrypted by the user terminal based on the cached key pair; generate a file upload message based on the file to be uploaded, and the file upload message is used to instruct the target home gateway to decrypt the file to be uploaded based on the cached key pair corresponding to the user terminal, and store the decrypted file to the local physical storage.

[0115] In one of the embodiments, the data processing request is a file download request; the task message generation module 400 is also used to query the corresponding target home gateway according to the user information; based on the file download request, a file download message is generated, and the file download message is used to instruct the target home gateway to search for the requested download file from the local physical storage, and encrypt the requested download file based on the cached key pair corresponding to the user terminal, and return the encrypted file to the cloud service.

[0116] In one of the embodiments, the message sending module 500 is further used to receive the encrypted file sent back by the target home gateway; and forward the encrypted file to the user terminal.

[0117] In one embodiment, the above-mentioned secure cloud storage device based on local general physical storage further includes:

[0118] The browsing module is used to parse the file browsing request to obtain user information when receiving the file browsing request sent by the user terminal; query the home gateway corresponding to the user information; forward the file browsing request to the queried home gateway; receive the file browsing directory list fed back by the queried home gateway in response to the file browsing request; and return the file browsing directory list to the user terminal.

[0119] Each module in the above-mentioned secure cloud storage device based on local general physical storage can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0120] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG8. The computer device includes a processor, a memory, and a network interface connected via a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store preset data. The network interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, a secure cloud storage method based on local general physical storage is implemented.

[0121] Those skilled in the art will understand that the structure shown in FIG. 8 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0122] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the above-mentioned secure cloud storage method based on local general physical storage when executing the computer program.

[0123] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the above-mentioned secure cloud storage method based on local general physical storage is implemented.

[0124] In one embodiment, a computer program product is provided, including a computer program, which implements the above-mentioned secure cloud storage method based on local general physical storage when executed by a processor.

[0125] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0126] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0127] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0128] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A secure cloud storage method based on local general physical storage, characterized in that: Applied to cloud services, the method includes: Receive the pairing code and user password sent by the user terminal; If the pairing code is successfully verified, a key pair is generated according to the user password, and the key pair is sent to the user terminal and the home gateway paired with the user terminal; When receiving a data processing request sent by a user terminal, parsing the data processing request to obtain user information; Querying the corresponding target home gateway according to the user information, and generating a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform a read / write operation on the local physical storage; Send the task message to the target home gateway.

2. The method according to claim 1, characterized in that Before receiving the pairing code sent by the user terminal, it also includes: Receiving a registration request sent by a user terminal; Parsing the registration request to authenticate the user; If the identity authentication is successful, the user terminal is paired with the home gateway, and a pairing code is sent to the user terminal.

3. The method according to claim 1, characterized in that The data processing request is a file upload request; The querying of the corresponding target home gateway according to the user information and generating a task message based on the data processing request includes: Querying a corresponding target home gateway according to the user information; Parsing the data processing request to obtain a file to be uploaded, wherein the file to be uploaded is encrypted by the user terminal based on the cached key pair; A file upload message is generated based on the file to be uploaded, and the file upload message is used to instruct the target home gateway to decrypt the file to be uploaded based on the cached key pair corresponding to the user terminal, and store the decrypted file in local physical storage.

4. The method according to claim 1, characterized in that: The data processing request is a file download request; The querying of the corresponding target home gateway according to the user information and generating a task message based on the data processing request includes: Querying a corresponding target home gateway according to the user information; Based on the file download request, a file download message is generated, and the file download message is used to instruct the target home gateway to search for the file requested to be downloaded from the local physical storage, and encrypt the file requested to be downloaded based on the cached key pair corresponding to the user terminal, and return the encrypted file to the cloud service.

5. The method according to claim 4, characterized in that After sending the task message to the target home gateway, the method further includes: Receiving the encrypted file sent back by the target home gateway; The encrypted file is forwarded to the user terminal.

6. The method according to claim 1, characterized in that The method further comprises: When receiving a file browsing request sent by the user terminal, parsing the file browsing request to obtain user information; Querying the home gateway corresponding to the user information; forwarding the file browsing request to the queried home gateway; Receiving the file browsing directory list fed back by the queried home gateway in response to the file browsing request; The file browsing directory list is returned to the user terminal.

7. A secure cloud storage device based on local general physical storage, characterized in that: Applied to cloud services, the device comprises: A receiving module, used to receive a pairing code and a user password sent by a user terminal; A verification module, configured to generate a key pair according to the user password when the pairing code is successfully verified, and issue the key pair to the user terminal and a home gateway paired with the user terminal; A parsing module, configured to parse a data processing request sent by a user terminal to obtain user information when receiving the data processing request; A task message generation module, used to query the corresponding target home gateway according to the user information, and generate a task message based on the data processing request; the task message is used to instruct the target home gateway to respond to the data processing request based on the cached key pair corresponding to the user terminal, and perform a read / write operation on the local physical storage; The message sending module is used to send the task message to the target home gateway.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images