Data buffer reading method, storage medium and electronic equipment

Abstract

The invention relates to the field of data processing, in particular to a data buffer reading method, a storage medium and electronic equipment. Comprising the steps of obtaining a current available computing power value A; if A is less than or equal to Y1, only performing first analysis verification on the head verification character string; if the first analysis verification is passed, carrying out second analysis verification on the identity information character string and emptying the data stored in the current target buffer area; and if the second analysis verification is not passed, alarm information is generated. The identity information data set in the invention comprises two character strings with fixed sizes at the head part and the tail part, and the verification character string at the head part is smaller. When identity verification processing is carried out, the size of the current available computing power value A of the data processing system needs to be determined in advance, if the current available computing power value A is smaller than the threshold value, only small head data is verified, and if the head data has no problem, subsequent verification is carried out. Therefore, centralized occupation of computing power can be avoided through an asynchronous verification mode, and system jamming is avoided.

Description

Background Art

[0002] In modern travel, in order to maintain public safety, order and improve travel efficiency, a ticket inspection mechanism is usually implemented in airports, train stations, subway stations and other transportation hubs. Especially in airports, early ticket inspection will allow passengers to obtain more travel information, and it will also allow the airport to verify the passenger information more calmly. The most common way to check tickets at the station is that passengers need to place paper tickets, electronic tickets or identity documents on the reader, or scan them through the QR code or NFC technology on the mobile phone or even face recognition technology. Once the system verifies the ticket information, the gate will open and allow passengers to pass.

[0003] However, data processing systems are usually responsible for multiple tasks at the same time, such as passenger identity confirmation, ticket verification, security screening, entry / exit control, and supporting law enforcement and counter-terrorism operations. The operation of these tasks usually consumes a lot of system resources, especially processor computing power. Usually during busy operation periods, there may be insufficient remaining available computing power, which will result in the inability to recognize the identity information of passengers when they enter the station for ticket inspection, and may also cause system jams. Summary of the invention

[0004] In view of the above technical problems, the technical solution adopted by the present invention is:

[0005] According to one aspect of the present invention, a method for reading data buffer is provided, the method comprising the following steps:

[0006] In response to the identity authentication request, obtaining a current available computing power value A of the data processing system;

[0007] If A≤Y1, only the header verification string stored in the target buffer is read, and the header verification string is first parsed and verified; the size of the target buffer is equal to the size of one identity information data; the identity information data includes the header verification string and the identity information string, the header verification string is located before the identity information string, and the header verification string is less than the length of the identity information string; Y1 is the preset available computing power threshold;

[0008] If the first parsing verification is passed, the remaining identity information string is read from the target buffer, and the identity information string is subjected to a second parsing verification and the data stored in the current target buffer is cleared;

[0009] If the second analysis verification fails, an alarm message is generated.

[0010] According to a second aspect of the present invention, a non-transitory computer-readable storage medium is provided, wherein the non-transitory computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned data buffer reading method is implemented.

[0011] According to a third aspect of the present invention, an electronic device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned data buffer reading method when executing the computer program.

[0012] The present invention has at least the following beneficial effects:

[0013] The identity information data provided in the present invention includes two fixed-size strings at the head and the tail, and the verification string at the head is smaller. And when performing identity authentication processing, it is necessary to determine the size of the current available computing power value A of the data processing system in advance. If it is less than the threshold, only the smaller header data is verified, and subsequent verification is performed after the header data is ok. Thus, the centralized occupation of computing power can be avoided and the system can be prevented from being stuck by asynchronous verification. In addition, if the header data verification fails, the remaining identity information string read in the target buffer can be directly deleted, thereby avoiding DOS (Denial of Service) attacks and occupation of system resources.

[0014] In addition, the size of the target buffer for storing identity information data is consistent with the size of one identity information data. Therefore, only one identity information can be stored each time, thereby reducing the retention time of the identity information during the verification process, thereby reducing the risk of being stolen. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0016] Figure 1 A flow chart of a data buffer reading method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0017] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0018] As a possible embodiment of the present invention, Figure 1 As shown, a data buffer reading method is also provided, the method comprising the following steps:

[0019] S100: In response to the identity authentication request, obtain the current available computing power value A of the data processing system.

[0020] In this embodiment, taking the ticket checking scene at the airport as an example, usually multiple gates are equipped with devices for reading passenger identity information (i.e., identity information collection devices hereinafter), such as ID card recognition devices, face recognition devices, and corresponding QR code recognition devices. The identity information of the corresponding passengers can be collected through these devices. Then, these devices can generate corresponding identity information data after combining and processing with the passenger's identity information based on their own device ID and other information. When performing the above operations, the local computing resources of the identity information collection device can be directly used for processing.

[0021] Then, each identity information collection device will send the generated identity information data to a designated queue, and then the parsing and verification device (that is, the data processing system, used to verify the identity) will store the identity information data in the queue in the target memory in turn according to the first-in-first-out mechanism, waiting for subsequent verification. By setting up queues, we can also try to avoid the pressure on the data processing system caused by high request concurrency.

[0022] Specifically, the header verification string in each identity information data may be the device identifier corresponding to the device that obtains the identity information data. The identity information string in each identity information data may be the encrypted string corresponding to the obtained ID number. The length of each header verification string is equal, and the length of each identity information string is equal. For example, the ID number can be encrypted using the MD5 encryption algorithm to generate the corresponding encrypted string.

[0023] S200: If A≤Y1, only the header verification string stored in the target buffer is read, and the header verification string is first parsed and verified. The size of the target buffer is equal to the size of an identity information data. The identity information data includes a header verification string and an identity information string. The header verification string is located before the identity information string, and the header verification string is less than the length of the identity information string. Y1 is the preset available computing power threshold. This value can be set for the corresponding row according to the actual usage scenario.

[0024] Usually, the available computing power of the data processing system can be determined by existing statistical methods. For example, the existing occupancy calculation method for computing cores such as CPU and GPU can be used to obtain the current available computing power value A of the data processing system in real time. Then compare it with Y1. In this step, only a smaller part of the identity information data can be parsed and verified when the current available computing power value is low, thereby reducing the occupancy of the system computing power and reducing the pressure on the system. Usually, the length of the header verification string is much smaller than the length of the identity information string, which can generally differ by 2-3 orders of magnitude. For example, the header verification string has a total of 10 characters and the identity information string has a total of 1000 characters.

[0025] In addition, the first parsing and verification process may also be an operation that consumes less computing power. For example, when the header verification string is a device identifier (ie, device ID), the first parsing and verification process may be to match the device ID with a set of device IDs stored in advance.

[0026] S300: If the first parsing verification is passed, the remaining identity information character string is read from the target buffer, and a second parsing verification is performed on the identity information character string and the data stored in the current target buffer is cleared.

[0027] S400: If the second analysis verification fails, an alarm message is generated.

[0028] In this embodiment, in order to further reduce the occupation of system computing power during analysis and verification, symmetric encryption can be used to obtain an encrypted string when encrypting the ID number. Therefore, when the data processing system performs analysis, the corresponding private key can be directly used for rapid decryption to obtain the corresponding ID number. Then, this ID number is used to match the existing identity information in the order library.

[0029] If the corresponding order information is not matched, an error message will be generated to prompt the user to recheck the ticket. In this way, it can be avoided that the identity information collection device fails to recognize the identity information.

[0030] After S100, the method further includes:

[0031] S210: If A>Y1, all identity information data stored in the target buffer is read, and the third parsing verification is performed on the entire identity information data and the data stored in the current target buffer is cleared.

[0032] S220: If the third analysis verification fails, an alarm message is generated. The third analysis verification in this embodiment may be a combination of the first analysis verification and the second analysis verification, but the first analysis verification and the second analysis verification may be performed simultaneously in the third analysis verification.

[0033] In the present invention, after the verification is passed or failed, the character string in the target buffer is quickly cleared, thereby greatly shortening the retention time of the identity information during the verification process, thereby reducing the risk of identity information being stolen.

[0034] In another possible embodiment of the present invention, in order to improve the security of identity information data, the header verification string in each identity information data can also be a hash value of the information obtained by combining the device ID corresponding to the device that obtains the identity information data and the Unix timestamp when the identity information collection is completed. The Unix timestamp is a timestamp representing seconds. The device IDs stored in the identity information collection device and the parsing and verification device respectively change once every preset period, and the method of changing the device ID is the same. The preset period can be one day or several days.

[0035] Since the information in the information verification process of this embodiment has a strong correlation with time, in order to ensure the consistency of data, a time synchronization mechanism is set between the identity information collection device and the analysis and verification device. For example, the Network Time Protocol NTP (Network Time Protocol) can be used to ensure the time synchronization between the two devices. NTP is a protocol for synchronizing computer clocks in a distributed network environment. It uses UDP port 123 for communication and can provide millisecond-level accuracy. The NTP client (which can be an identity information collection device) regularly requests time from the NTP server (which can be a server corresponding to the data processing system, that is, a server corresponding to the analysis and verification device) and adjusts the local clock to keep synchronization with the server time.

[0036] The combination of the device ID and the Unix timestamp when identity information collection is completed meets the following conditions:

[0037] S201: If the last digit of the Unix timestamp when the identity information collection is completed is an odd number, the device ID is concatenated before the first character of the Unix timestamp.

[0038] S202: If the last digit of the Unix timestamp when the identity information collection is completed is an even number, the device ID is concatenated to the last character of the Unix timestamp.

[0039] Unix timestamp is one of the most commonly used formats, which represents the number of seconds (sometimes expressed as milliseconds or microseconds) since midnight (Coordinated Universal Time UTC) on January 1, 1970. Unix timestamp is usually a long integer number, such as 1689765105, indicating the number of seconds. Taking the device ID of 123456 as an example, the combined information is 1234561689765105.

[0040] The first analysis verification includes:

[0041] S203: The parsing and verification device generates verification information corresponding to each identity information collection device every second based on the current timestamp and the device ID corresponding to each identity information collection device. The parsing and verification device saves all verification information within the last 5 seconds. Since the time of the server corresponding to the identity information collection device and the data processing system is synchronized, and the way the parsing and verification device generates verification information is the same as the way the identity information collection device generates the header verification string, the header verification string that has just been collected must exist in all verification information within the last 5 seconds.

[0042] S204: Traverse all verification information, if the header verification string is the same as any verification information, the first parsing verification is passed.

[0043] Since the generation and parsing of the header verification string is a very fast process, it can usually be completed within 1 second, and the identity information in the queue will also be updated in a shorter time. Therefore, in order to ensure that each recently verified header verification string has corresponding verification information, the parsing and verification device will save all verification information within the last 5 seconds, which can also reduce the amount of storage in the database and alleviate the storage pressure of the database.

[0044] In this embodiment, the header verification string will change over time, thereby reducing the pressure on the system when the identity information with the external counterfeit header verification string is used to attack the data processing system. At the same time, the confidentiality of the device ID is also improved to avoid information loss or tampering.

[0045] In addition, in this embodiment, the identity information string in each identity information data is a string encrypted using a public key in asymmetric encryption after the corresponding identity information collection device collects the identity information. The parsing and verification device stores the private key in asymmetric encryption corresponding to each identity information collection device.

[0046] The second analysis verification includes:

[0047] S301: According to the device ID corresponding to the header verification string, the identity information string is decrypted using the private key in the corresponding asymmetric encryption.

[0048] S302: Traverse the existing identity information in the order library, and if there is no information identical to the decrypted identity information, generate an alarm message.

[0049] Since asymmetric encryption has higher security, in this embodiment, asymmetric encryption is used for encryption and decryption during the encryption and second analysis verification of the user identity information, which can further improve the security of the user identity information.

[0050] In addition, although the steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps, etc.

[0051] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0052] In an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

[0053] It will be appreciated by those skilled in the art that various aspects of the present invention may be implemented as a system, method or program product. Therefore, various aspects of the present invention may be specifically implemented in the following forms, namely: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to herein as a "circuit", "module" or "system".

[0054] The electronic device according to this embodiment of the present invention is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0055] The electronic device is presented in the form of a general-purpose computing device. The components of the electronic device may include, but are not limited to: the at least one processor mentioned above, the at least one storage device mentioned above, and a bus connecting different system components (including storage devices and processors).

[0056] The storage stores program codes, which can be executed by the processor, so that the processor executes the steps according to various exemplary embodiments of the present invention described in the above “Exemplary Method” section of this specification.

[0057] The memory may include readable media in the form of volatile memory, such as random access memory (RAM) and / or cache memory, and may further include read only memory (ROM).

[0058] The storage may also include a program / utility having a set (at least one) of program modules, such program modules including but not limited to: an operating system, one or more application programs, other program modules and program data, each of which or some combination may include the implementation of a network environment.

[0059] The bus may represent one or more of several types of bus structures including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor, or a local bus using any of a variety of bus architectures.

[0060] The electronic device may also communicate with one or more external devices (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may communicate with one or more devices that enable a user to interact with the electronic device, and / or may communicate with any device (e.g., routers, modems, etc.) that enables the electronic device to communicate with one or more other computing devices. Such communication may be performed through an input / output (I / O) interface. Furthermore, the electronic device may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) through a network adapter. The network adapter communicates with other modules of the electronic device through a bus. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device, including but not limited to: microcode, device drivers, redundant processors, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0061] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0062] In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, on which a program product capable of implementing the above method of the present specification is stored. In some possible implementations, various aspects of the present invention may also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps according to various exemplary embodiments of the present invention described in the above "Exemplary Method" section of the present specification.

[0063] The program product may use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0064] Computer readable signal media may include data signals propagated in baseband or as part of a carrier wave, in which readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Readable signal media may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0065] The program code embodied on the readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0066] Program code for performing the operations of the present invention may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., through the Internet using an Internet service provider).

[0067] In addition, the above-mentioned figures are only schematic illustrations of the processes included in the method according to an exemplary embodiment of the present invention, and are not intended to be limiting. It is easy to understand that the processes shown in the above-mentioned figures do not indicate or limit the time sequence of these processes. In addition, it is also easy to understand that these processes can be performed synchronously or asynchronously, for example, in multiple modules.

[0068] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

[0069] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A data buffer reading method, characterized in that: The method comprises the following steps: In response to the identity authentication request, obtaining a current available computing power value A of the data processing system; If A≤Y1, only the header verification string stored in the target buffer is read, and the header verification string is subjected to a first parsing verification; the size of the target buffer is equal to the size of one identity information data; the identity information data includes a header verification string and an identity information string, the header verification string is located before the identity information string, and the header verification string is less than the length of the identity information string; Y1 is the preset available computing power threshold; If the first parsing verification passes, then read the remaining identity information string from the target buffer, perform a second parsing verification on the identity information string, and clear the data stored in the current target buffer; If the second analysis verification fails, an alarm message is generated.

2. The method according to claim 1, characterized in that After obtaining the current available computing power value A of the data processing system, the method further includes: If A>Y1, all identity information data stored in the target buffer is read, and the third parsing verification is performed on the entire identity information data and the data stored in the current target buffer is cleared; If the third analysis verification fails, an alarm message is generated.

3. The method according to claim 1, characterized in that The header verification string in each of the identity information data is a device identifier corresponding to the device that obtains the identity information data; Each identity information string in the identity information data is an encrypted string corresponding to the obtained ID card number; the length of each header verification string is equal, and the length of each identity information string is equal.

4. The method according to claim 1, characterized in that: The header verification string in each of the identity information data is a hash value of the device ID corresponding to the device that obtains the identity information data and the Unix timestamp when the identity information collection is completed; the Unix timestamp is a timestamp representing seconds; The combination of the device ID and the Unix timestamp when the identity information collection is completed meets the following conditions: If the last digit of the Unix timestamp when identity information collection is completed is an odd number, the device ID is concatenated before the first character of the Unix timestamp; If the last digit of the Unix timestamp when identity information collection is completed is an even number, the device ID is concatenated to the last character of the Unix timestamp.

5. The method according to claim 4, characterized in that A time synchronization mechanism is provided between the identity information collection device and the analysis and verification device; the first analysis and verification includes: The parsing and verification device generates verification information corresponding to each identity information collection device every second based on the current timestamp and the device ID corresponding to each identity information collection device; the parsing and verification device saves all verification information within the last 5 seconds; Traverse all the verification information. If the header verification string is the same as any verification information, the first parsing verification passes.

6. The method according to claim 5, characterized in that The device IDs respectively stored in the identity information collection device and the analysis and verification device change once in each preset period, and the method of changing the device ID is the same.

7. The method according to claim 5, characterized in that The identity information character string in each of the identity information data is a character string encrypted using a public key in asymmetric encryption after the corresponding identity information collection device collects the identity information; The analysis and verification device stores the private key in the asymmetric encryption corresponding to each identity information collection device.

8. The method according to claim 7, characterized in that The second analysis verification includes: According to the corresponding device ID in the header verification string, the identity information string is decrypted using the corresponding private key in the asymmetric encryption; Traverse the existing identity information in the order library, and if there is no information that is the same as the decrypted identity information, generate an alarm message.

9. A non-transitory computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, a data buffer reading method as claimed in any one of claims 1 to 8 is implemented.

10. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method for reading data buffer according to any one of claims 1 to 8 is implemented.

Images