Data processing method, device, system and equipment and storage medium

Abstract

The invention relates to the technical field of data processing, and particularly provides a data processing method, device, system and equipment and a storage medium, the data processing method comprises the following steps: in response to a wake-up instruction sent by an application program, sending a capability identifier list to the application program, the capability identifier list comprising at least one capability identifier, the capability identifier is used for indicating the capability supported by the security chip; in response to a target capability identifier sent by the application program, sending a data demand to the application program, the data demand being used for indicating data required for executing a task corresponding to the target capability identifier by the security chip; in response to data information corresponding to a data demand sent by the application program, executing a task corresponding to the target capability identifier based on the data information to obtain target data; and sending the target data to the application program. According to the technical scheme, the problem of integrating all commands in the application program is avoided, and the system complexity in the application program is reduced.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a data processing method, apparatus, system, device and storage medium. Background Art

[0002] With the development of Internet technology, more and more data needs to be transmitted and stored in the network. In order to ensure the security of data, the secure chip (Secure Element, SE) came into being. The secure chip is a hardware module specially designed for secure storage and processing of sensitive information. The chip usually has high security and anti-attack capabilities, and is often used to protect important data, perform security-critical operations, and store encryption keys.

[0003] The security chip uses the Application Protocol Data Unit (APDU) message format defined by ISO7816 for communication. APDU has a fixed format and communication method. For example, if an application wants to send a piece of data for 3DES-CBC encryption, it needs to integrate the command according to the user manual of the security chip, generate a correct APDU send instruction, and send the APDU send instruction to the security chip. The security chip returns an APDU return data. Among them, an APDU send instruction usually includes: sending channel (CLA), command type (INS), control field (P1P2), data length (LC), data (DATA_TAG+DATA +ICV_TAG+ICV).

[0004] Since there are many commands in the user manual, all commands need to be integrated into the application, which increases the system complexity in the application and increases the workload of the staff. Summary of the invention

[0005] In order to solve the above technical problems, the present application provides a data processing method, apparatus, system, device and storage medium, which adopts a secure chip boot method to reduce the number of commands integrated in the application, reduce the system complexity in the application, and reduce the workload of the staff.

[0006] In a first aspect, the present application provides a data processing method, which is applied to a security chip, and the method includes: in response to a wake-up instruction sent by an application, sending a capability identification list to the application, the capability identification list including at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; in response to a target capability identification sent by the application, sending a data requirement to the application, the data requirement is used to indicate the data required for the security chip to perform a task corresponding to the target capability identification; in response to data information corresponding to the data requirement sent by the application, executing the task corresponding to the target capability identification based on the data information to obtain target data; and sending the target data to the application.

[0007] In a second aspect, the present application provides a data processing method, which is applied to an application, comprising: in response to a set trigger operation, sending a wake-up instruction to a security chip, the wake-up instruction being used to instruct the security chip to send a capability identification list, the capability identification list including at least one capability identification, and the capability identification being used to indicate the capabilities supported by the security chip; selecting a target capability identification that matches the data to be processed from the capability identification list, and sending the target capability identification to the security chip; in response to a data requirement sent by the security chip, sending data information to the security chip, the data requirement being used to indicate the data required for the security chip to execute a task corresponding to the target capability identification; and receiving target data sent by the security chip, the target data being data obtained by the security chip executing the task corresponding to the target capability identification based on the data information.

[0008] In a third aspect, the present application provides a data processing method, which is applied to a data processing system, wherein the data processing system includes an application and a security chip, and includes: using the application to respond to a set trigger operation to send a wake-up instruction to the security chip, wherein the wake-up instruction is used to instruct the security chip to send a capability identification list, wherein the capability identification list includes at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; using the security chip to respond to the wake-up instruction sent by the application to send a capability identification list to the application; using the application to select a target capability identification matching the data to be processed from the capability identification list, and send the target capability identification to the security chip; using the security chip to respond to the target capability identification sent by the application to send a data requirement to the application, wherein the data requirement is used to indicate the data required for the security chip to perform the task corresponding to the target capability identification; using the application to respond to the data requirement sent by the security chip to send data information to the security chip; using the security chip to respond to the data information sent by the application to perform the task corresponding to the target capability identification based on the data information to obtain the target data; using the security chip to send the target data to the application.

[0009] In a fourth aspect, the present application provides a data processing system, comprising: an application and a security chip, the security chip being used to execute the data processing method in the first aspect, and the application being used to execute the data processing method in the second aspect.

[0010] In a fifth aspect, the present application provides a data processing device, comprising: a first sending module, for sending a capability identification list to the application in response to a wake-up instruction sent by the application, the capability identification list including at least one capability identification, and the capability identification being used to indicate the capabilities supported by the security chip; a second sending module, for sending a data requirement to the application in response to a target capability identification sent by the application, the data requirement being used to indicate the data required for the security chip to execute a task corresponding to the target capability identification; a task execution module, for executing the task corresponding to the target capability identification based on the data information in response to the data information sent by the application to obtain target data; and a third sending module, for sending the target data to the application.

[0011] In a sixth aspect, the present application provides a data processing device, comprising: a fourth sending module, for sending a wake-up instruction to a security chip in response to a set trigger operation, the wake-up instruction being used to instruct the security chip to send a capability identification list, the capability identification list including at least one capability identification, and the capability identification being used to indicate the capabilities supported by the security chip; a fifth sending module, for selecting a target capability identification that matches the data to be processed from the capability identification list, and sending the target capability identification to the security chip; a sixth sending module, for sending data information to the security chip in response to a data requirement sent by the security chip, the data requirement being used to indicate the data required for the security chip to execute a task corresponding to the target capability identification; a first receiving module, for receiving target data sent by the security chip, the target data being data obtained by the security chip executing the task corresponding to the target capability identification based on the data information.

[0012] In the seventh aspect, the present application provides an electronic device, comprising: one or more processors; a storage device for storing one or more programs; when the one or more programs are executed by one or more processors, the one or more processors implement the data processing method as in the first aspect above or the data processing method as in the second aspect above.

[0013] In an eighth aspect, the present application provides a storage medium, which may be a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the data processing method in the first aspect or the data processing method in the second aspect is implemented.

[0014] In a ninth aspect, an embodiment of the present application provides a computer program product, which includes a computer program or instructions, and when the computer program or instructions are executed by a processor, the data processing method in the first aspect or the data processing method in the second aspect is implemented.

[0015] Compared with the prior art, the technical solution provided by the embodiments of the present application has the following advantages:

[0016] The embodiment of the present application provides a data processing method, apparatus, system, device and storage medium, the method comprising: in response to a wake-up instruction sent by an application, sending a capability identification list to the application, the capability identification list including at least one capability identification, the capability identification being used to indicate the capabilities supported by the security chip; in response to a target capability identification sent by the application, sending a data requirement to the application, the data requirement being used to indicate the data required for the security chip to execute the task corresponding to the target capability identification; in response to data information corresponding to the data requirement sent by the application, executing the task corresponding to the target capability identification based on the data information to obtain the target data; sending the target data to the application. In the embodiment of the present application, after the application wakes up the security chip, the task to be executed by the security chip and the data information required to execute the task are obtained by the interaction between the security chip and the application, thereby avoiding the problem of integrating all commands in the application, reducing the system complexity in the application, and reducing the workload of the staff. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0018] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0019] Figure 1 A schematic diagram of a data processing method applied to a security chip provided in an embodiment of the present application;

[0020] Figure 2 A flowchart of a data processing method applied to an application provided in an embodiment of the present application;

[0021] Figure 3 A schematic diagram of the structure of a data processing system provided in an embodiment of the present application;

[0022] Figure 4 A flowchart of a data processing method applied to a data processing system provided in an embodiment of the present application;

[0023] Figure 5 A schematic diagram of a flow chart of a data processing device configured in a security chip provided in an embodiment of the present application;

[0024] Figure 6 A schematic diagram of a flow chart of a data processing device configured in an application program provided in an embodiment of the present application;

[0025] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0026] In order to more clearly understand the above-mentioned purposes, features and advantages of the present application, the scheme of the present application will be further described below. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0027] In the following description, many specific details are set forth to facilitate a full understanding of the present application, but the present application may also be implemented in other ways different from those described herein; obviously, the embodiments in the specification are only part of the embodiments of the present application, rather than all of the embodiments.

[0028] The term "including" and its variations used herein are open inclusions, i.e., "including but not limited to". The term "based on" means "based at least in part on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The relevant definitions of other terms will be given in the following description.

[0029] It should be noted that the concepts such as "first" and "second" mentioned in this application are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0030] It should be noted that the modifications of "one" and "plurality" mentioned in the present application are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0031] The data processing method provided by the present application is described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0032] Figure 1 This is a flowchart of a data processing method in an embodiment of the present application. This embodiment is applicable to situations where an application program and a security chip communicate. The method can be executed by a data processing device. The data processing device can be implemented in software and / or hardware. The data processing device can be configured in a security chip.

[0033] First, the application scenarios of the data processing methods are introduced.

[0034] In the embodiment of the present application, the chip operation system (COS) of the security chip is modified so that the original fixed interface access in the security chip is transformed into interactive access. The data processing method provided in the embodiment of the present application is mainly implemented by the COS of the security chip, and the security chip is deployed at the hardware layer.

[0035] like Figure 1 As shown, the data processing method provided in the embodiment of the present application mainly includes steps S101-S104.

[0036] S101. In response to a wake-up instruction sent by an application, a capability identification list is sent to the application. The capability identification list includes at least one capability identification, and the capability identification is used to indicate a capability supported by the security chip.

[0037] The application program refers to a software program deployed in the application layer to implement certain functions. The application program can be a code program directly deployed in the application layer, or a software program deployed in an AI chip, which is also deployed in the application layer.

[0038] In a possible implementation, when the device using the security chip is a terminal such as a mobile phone or a computer, the application runs in the operating system and is responsible for interacting with the user.

[0039] In another possible implementation, when the device using the above-mentioned security chip is some medium such as the Internet of Things / Internet of Vehicles, the application that implements AI may run on some real-time operating systems and exist as an embedded program.

[0040] It should be noted that no matter what device the security chip is deployed in or in what form the application is deployed, the application layer is the front end that directly accepts natural language and interacts with humans.

[0041] The wake-up instruction can be understood as a specific instruction for activating the security chip to listen to commands. The wake-up instruction is generated by the application and sent to the security chip.

[0042] The capability identifier is used to indicate the capabilities supported by the security chip. In other words, the capability identifier refers to a label or name used to indicate the functions or operations that the security chip can perform. The capability identifier list includes capability identifiers corresponding to all capabilities supported by the security chip. It should be noted that the capability identifier list is only a description method. The multiple capability identifiers included in the capability identifier list can be stored in the form of a collection, or in the form of a data group or a database, which is not limited in the embodiments of the present application.

[0043] Specifically, after receiving the wake-up instruction sent by the application, the security chip queries the configuration file or the instruction document stored in itself, reads the capability identification list from the configuration file or the instruction document, and sends the capability identification list to the application.

[0044] In one possible implementation, the security chip is deployed at the hardware layer, the application is deployed at the application layer, and a driver layer is included between the application layer and the hardware layer. A chip agent is deployed in the driver layer, and the chip agent is used to implement transparent transmission of data and / or instructions between the application and the security chip.

[0045] Specifically, after the application generates a wake-up instruction, it transmits the wake-up instruction to the chip agent in the driver layer, and the chip agent transmits the wake-up instruction to the security chip. After the security chip receives the wake-up instruction, it obtains the application list and sends the application list to the chip agent. The chip agent transmits the application list to the application.

[0046] Furthermore, the application program interacts with the chip agent through natural language, and the chip agent interacts with the security chip through machine language. Exemplarily, the machine language may be in APDU message format.

[0047] The chip agent runs in the framework (FW) layer, and the chip agent can also be integrated into the application program of the application layer. The chip agent is responsible for the agent of the interaction between the application layer and the security chip in the hardware layer. The chip agent will translate between the application program and the security chip, and express them as interface instructions that can be recognized by both parties, so as to facilitate the communication between the two parties. Specifically, the application program and the chip agent interact using natural language, represented by n"", while the chip agent and the security chip interact using APDU, represented by m"". For example: when the chip agent receives the natural language n"seencryption" from the application program, it will execute the APDU instruction m"setup profile" on the security chip. The above correspondence can be stored in advance and is not specifically limited in this embodiment.

[0048] S102: In response to the target capability identifier sent by the application, a data requirement is sent to the application, where the data requirement is used to indicate data required for the security chip to execute a task corresponding to the target capability identifier.

[0049] After receiving the capability identifier list sent by the security chip, the application selects the capability identifier corresponding to the task it wants to perform from the capability identifier list as the target capability identifier and sends it to the security chip.

[0050] The data requirement can be understood as the data required by the security chip to execute the task corresponding to the target capability identification. Specifically, the data requirement may include multiple data conditions, such as: condition 1, condition 2, condition 3, and so on.

[0051] When the security chip receives the target capability identifier sent by the application, it queries the configuration file for the data conditions required to execute the task corresponding to the target capability identifier, forms a data requirement, and sends it to the application.

[0052] Exemplarily, when the target capability is identified as encryption, the data conditions include the encryption algorithm and various specific parameter classes required by the encryption algorithm. The above data conditions are formed into data requirements and sent to the application.

[0053] In a possible implementation, responding to the target capability identifier sent by the application includes: responding to the target capability identifier transparently transmitted by the chip agent, the target capability identifier being sent by the application to the chip agent. The security chip sends a data request to the chip agent, and the data request is sent to the application through the transparent transmission of the chip agent.

[0054] S103. In response to the data information corresponding to the data demand sent by the application, execute the task corresponding to the target capability identifier based on the data information to obtain the target data.

[0055] After receiving the data demand, the application obtains the data information corresponding to the data demand and transmits the data information to the security chip through the chip agent. After receiving the data information, the security chip executes the task corresponding to the target capability identifier based on the data information to obtain the target data.

[0056] In one possible implementation, in response to data information corresponding to a data requirement sent by an application, a task corresponding to a target capability identifier is executed based on the data information to obtain target data, including: in response to data information corresponding to a data requirement sent by an application, determining whether the data information sent by the application meets the data requirement; if the data information does not meet the data requirement, obtaining the unmet data requirement and sending the unmet data requirement to the application; in response to data information corresponding to the unmet data requirement sent by the application, returning to execute and determining whether the data information sent by the application meets the data requirement; until the data information meets the data requirement, the task corresponding to the target capability identifier is executed based on the data information to obtain the target data.

[0057] In this embodiment, after receiving the data information, the security chip first determines whether the data information meets all the data conditions included in the data requirements. If so, the task corresponding to the target capability identifier is executed based on the data information to obtain the target data.

[0058] If it is not satisfied, the unsatisfied data condition is determined, and the unsatisfied data condition is formed into a new data demand, that is, an unsatisfied data demand, and sent to the application. The application obtains the data information corresponding to the unsatisfied data demand and sends it to the security chip. The security chip merges the newly received data information with the previously received data information to obtain all the data information, and determines whether all the data information meets the data demand. If it is not satisfied, the unsatisfied data condition is determined, and the unsatisfied data condition is formed into a new data demand, that is, an unsatisfied data demand, and sent to the application. The application obtains the data information corresponding to the unsatisfied data demand and sends it to the security chip. The above process can be performed multiple times until the data information meets the data demand.

[0059] The data information not meeting the data condition includes: the data information does not include the data corresponding to the data condition, or the data corresponding to the data condition included in the data information is incorrect. For example, if data condition 1 is to obtain data 1, but the data information does not include data 1, then it is determined that the data information does not meet data condition 1. Alternatively, if data condition 1 is to obtain data 1, but the data information includes data 2 corresponding to data condition 1, then it is determined that the data information does not meet data condition 1.

[0060] In the embodiment of the present application, through multiple dialogue interactions, the security chip obtains the data information required to perform the task, further reducing the complexity of system docking.

[0061] In one possible implementation, when the task corresponding to the target capability identifier includes an encryption task and the data information includes an encryption algorithm, the task corresponding to the target capability identifier is executed based on the data information to obtain the target data, including: generating a public key and a private key using an encryption algorithm; sending an inquiry instruction to an application, the inquiry instruction is used to ask the application whether to send a public key; in response to a confirmation instruction sent by the application, using the public key and private key as target data; or, in response to a denial instruction sent by the application, using the private key as target data.

[0062] In the case where the task selected by the application is an encryption task, the security chip queries the encryption algorithms that it can execute, and sends the executable encryption algorithms and the parameters that need to be configured for each encryption algorithm as data requirements to the application. In response to the user's selection operation, the application selects a target encryption algorithm from multiple encryption algorithms, configures the parameters of the target encryption algorithm, and sends the target encryption algorithm and the parameters of the target encryption algorithm as data information to the security chip. If the security chip determines that the data information meets the data requirements, it generates an encrypted public key and private key based on the target encryption algorithm and the parameters of the target encryption algorithm, and sends the public key and private key as target data to the application.

[0063] Furthermore, after generating the encrypted public key and private key based on the target encryption algorithm and the parameters of the target encryption algorithm, a query instruction is sent to the application, the query instruction is used to ask the application whether it needs the public key. If the application needs the public key, the application generates a confirmation instruction after receiving the query instruction and sends it to the security chip. After receiving the confirmation instruction, the security chip sends the public key and private key as target data to the application. If the application does not need the public key, the application generates a denial instruction after receiving the query instruction and sends it to the security chip. After receiving the denial instruction, the security chip sends the private key as target data to the application.

[0064] In the embodiment of the present application, after the public key and the private key are generated, the target data to be received is determined by the application through dialogue interaction, which further reduces the complexity of system docking.

[0065] In one possible implementation, when the task corresponding to the target capability identifier includes a task of generating a signature identity, the data information includes data to be processed; based on the data information, the task corresponding to the target capability identifier is executed to obtain the target data, including: generating signature data of the data to be processed, and using the signature data as the target data.

[0066] In the case where the task selected by the application is to generate a signature identity task, the security chip queries the signature identity algorithms that it can execute, and sends the executable signature identity algorithms and the parameters that need to be configured for each signature identity algorithm as data requirements to the application. In response to the user's selection operation, the application selects a target signature identity algorithm from multiple signature identity algorithms, configures the parameters of the signature identity encryption algorithm, and sends the target signature identity algorithm and the parameters of the target signature identity algorithm as data information to the security chip. If the security chip determines that the data information meets the data requirements, it generates signature data based on the target signature identity algorithm and the parameters of the target signature identity algorithm, and sends the signature data as target data to the application.

[0067] S104: Send target data to the application.

[0068] The target data refers to the data generated by the security chip when executing the task corresponding to the target capability identifier. How the target data is used is determined by the processing logic in the application. For example, when the target data is a public key and a private key, the target data is used to encrypt the data to be processed. For another example, when the target data is signature data, the signature data is sent to the destination corresponding to the data to be processed.

[0069] The embodiment of the present application provides a data processing method, which is applied to a security chip, and the method includes: in response to a wake-up instruction sent by an application, sending a capability identification list to the application, the capability identification list includes at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; in response to a target capability identification sent by the application, sending a data requirement to the application, the data requirement is used to indicate the data required for the security chip to execute the task corresponding to the target capability identification; in response to data information corresponding to the data requirement sent by the application, executing the task corresponding to the target capability identification based on the data information to obtain the target data; sending the target data to the application. In the embodiment of the present application, after the application wakes up the security chip, the task to be executed by the security chip and the data information required to execute the task are obtained by the interaction between the security chip and the application, thereby avoiding the problem of integrating all commands in the application, reducing the system complexity in the application, and reducing the workload of the staff.

[0070] Based on the above embodiments, the present application embodiment provides a data processing method, which is applied to an application program, such as Figure 2 As shown, the data processing method provided in the embodiment of the present application mainly includes S201-S204.

[0071] S201. In response to a setting trigger operation, a wake-up instruction is sent to the security chip, where the wake-up instruction is used to instruct the security chip to send a capability identification list, where the capability identification list includes at least one capability identification, and the capability identification is used to indicate a capability supported by the security chip.

[0072] The trigger operation may be understood as an operation that triggers the application to generate a wake-up instruction.

[0073] In a possible implementation, when the device using the security chip is a terminal such as a mobile phone or a computer, the application runs in an operating system, and the trigger operation can be a trigger operation performed by a user in the interface of the application. Exemplarily, the interface of the application includes a wake-up control, and in response to the trigger operation on the wake-up control in the interface of the application, a wake-up instruction is generated and sent to the security chip.

[0074] In another possible implementation, when the device using the above-mentioned security chip is a medium such as some Internet of Things / Internet of Vehicles, the application that implements AI may run on some real-time operating systems and exist as an embedded program. The above-mentioned trigger operation can be generated and responded to the set trigger operation when the application detects the data to be processed. For example: when the above-mentioned security chip is deployed in the speed sensor of the Internet of Vehicles, the speed sensor can detect the driving speed of the vehicle and send the driving speed of the vehicle to the vehicle controller so that the vehicle controller controls the vehicle based on the driving speed. However, in the process of the sensor sending the driving speed to the vehicle controller, in order to prevent other programs from tampering with the driving speed, it is usually necessary to use a security chip deployed in the speed sensor to encrypt the driving speed. Therefore, it can be pre-set that after the speed sensor detects the driving speed of the vehicle, it will generate and respond to the set trigger operation, generate a wake-up instruction, and send a wake-up instruction to the security chip.

[0075] It should be noted that, in this embodiment, only the security chip is deployed in the speed sensor to encrypt the driving speed as an example, and the security chip is not limited to being deployed only in the speed sensor.

[0076] The security chip can be deployed in any device in the Internet of Vehicles or the Internet of Things. The data in the device that needs to be processed by the security chip can be pre-set by the user or staff. When the application in the device detects the pending data that needs to be processed by the security chip, it generates and responds to the set trigger operation, generates a wake-up instruction, and sends the wake-up instruction to the security chip.

[0077] S202: Select a target capability identifier that matches the data to be processed from the capability identifier list, and send the target capability identifier to the security chip.

[0078] The target capability identifier is used to indicate the capability identifier corresponding to the task that the security application needs to perform.

[0079] In one possible implementation, when the device using the above-mentioned security chip is a terminal such as a mobile phone or a computer, the above-mentioned application runs in the operating system. After the application receives the capability identification list, each capability identification in the capability identification list is displayed in the interface of the application, and in response to the user's selection operation on the capability identification displayed in the interface of the application, the selected capability identification is used as the target capability identification, and the target capability identification is sent to the security chip.

[0080] In another possible implementation, when the device using the above-mentioned security chip is some medium such as the Internet of Things / Internet of Vehicles, the application that implements AI may run on some real-time operating systems and exist as an embedded program. After the application receives the capability identification list, it queries the pre-set tasks that need to be performed for the data to be processed, and selects the capability identification corresponding to the task that needs to be performed for the data to be processed from the capability identification list as the target capability identification, and sends the target capability identification to the security chip. Exemplarily, the application queries the pre-set task that needs to be performed for the data to be processed, which is an encryption task, then selects the capability identification corresponding to the encryption task from the capability identification list as the target capability identification and sends it to the security chip.

[0081] S203. In response to a data requirement sent by the security chip, data information is sent to the security chip, where the data requirement is used to indicate data required for the security chip to execute a task corresponding to the target capability identifier.

[0082] After receiving the data requirement sent by the security chip, the application obtains the data information corresponding to the data requirement and transmits the data information to the security chip through the chip agent. After receiving the data information, the security chip executes the task corresponding to the target capability identifier based on the data information to obtain the target data. The data information is mainly determined based on the data conditions included in the data requirement.

[0083] Exemplarily, the security chip sends the executable encryption algorithms and the parameters that need to be configured for each encryption algorithm as data requirements to the application. In response to the user's selection operation, the application selects a target encryption algorithm from multiple encryption algorithms, configures the parameters of the target encryption algorithm, and sends the target encryption algorithm and the parameters of the target encryption algorithm as data information to the security chip.

[0084] Exemplarily, the security chip sends the executable signature identity algorithms and the parameters that need to be configured for each signature identity algorithm as data requirements to the application. In response to the user's selection operation, the application selects a target signature identity algorithm from multiple signature identity algorithms, configures the parameters of the signature identity encryption algorithm, and sends the target signature identity algorithm and the parameters of the target signature identity algorithm as data information to the security chip.

[0085] In a possible implementation, in response to an unsatisfied data demand sent by the security chip, data information corresponding to the unsatisfied data demand is acquired and sent to the security chip.

[0086] In an embodiment of the present application, the application receives unmet data demands sent by the security chip, obtains data information corresponding to the unmet data demands, and sends it to the security chip. The data information required by the security chip can be sent to the security chip through dialogue interaction.

[0087] Furthermore, in the form of dialogue interaction, the security chip can guide the application on which data information to send, avoiding the traditional security chip using a fixed interface mode. The format of the received message will be strictly checked. If the format is incorrect or the data segment is missing, it will directly return with an error prompt. The mode is very fixed, which will cause inconvenience in use or integration.

[0088] S204: Receive target data sent by the security chip, where the target data is data obtained by the security chip executing a task corresponding to the target capability identifier based on the data information.

[0089] After the application receives the target data sent by the security chip, the data processing process is completed. The application processes the target data according to a pre-set process, which will not be described in detail in the embodiment of the present application.

[0090] The embodiment of the present application provides a data processing method, which is applied to a security chip, and the method includes: in response to a set trigger operation, sending a wake-up instruction to the security chip, the wake-up instruction is used to instruct the security chip to send a capability identification list, the capability identification list includes at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; selecting a target capability identification that matches the data to be processed from the capability identification list, and sending the target capability identification to the security chip; in response to the data demand sent by the security chip, sending data information to the security chip, the data demand is used to indicate the data required for the security chip to execute the task corresponding to the target capability identification; receiving the target data sent by the security chip, the target data is the data obtained by the security chip executing the task corresponding to the target capability identification based on the data information. In the embodiment of the present application, after the application wakes up the security chip, the task to be executed by the security chip and the data information required to execute the task are obtained by the interaction between the security chip and the application, thereby avoiding the problem of integrating all commands in the application, reducing the system complexity in the application, and reducing the workload of the staff.

[0091] Based on the above embodiments, the present application provides a data processing system, such as Figure 3 As shown, the data processing system 30 includes: an application 31 and a security chip 32, wherein the security chip 32 is used to execute the data processing method, and the application 31 is used to execute any of the above data processing methods.

[0092] Further, such as Figure 3 As shown, the data processing system provided in the embodiment of the present application further includes a chip agent 33 , and the chip agent 33 is used for transparent transmission of data between the application 31 and the security chip 32 .

[0093] Based on the above embodiments, the present application provides a data processing method, which is applied to a data processing system. The data processing system includes an application program and a security chip, such as Figure 4 As shown, the data processing method provided in the embodiment of the present application mainly includes steps S401-S407.

[0094] S401. Using an application to respond to a set trigger operation, a wake-up instruction is sent to the security chip, where the wake-up instruction is used to instruct the security chip to send a capability identification list, where the capability identification list includes at least one capability identification, and the capability identification is used to indicate a capability supported by the security chip.

[0095] The AI ​​application may initiate a conversation with a user or agent. In response to a set trigger operation, the application sends n"se encryption" to the chip agent. n indicates that the application and the chip agent use natural language to interact. n"se encryption" indicates the natural language format.

[0096] After receiving the wake-up instruction n"se encryption", the chip agent converts the wake-up instruction into m"setup profile", and sends the wake-up instruction m"setup profile" to the security chip. m represents the APDU message format, and m"setup profile" represents the wake-up instruction in the message format.

[0097] S402: Using the security chip to respond to the wake-up instruction sent by the application, send a capability identification list to the application.

[0098] After receiving the command m"setup profile", the security chip encodes all capability representations according to the regulations to form a capability identification list. The security chip sends the capability identification list to the chip agent.

[0099] The chip agent decodes the capability identification list and converts it into the capability identification list in natural language, and the chip agent forwards the capability identification list in natural language to the application.

[0100] S403: Using the application program to select a target capability identifier that matches the data to be processed from the capability identifier list, and sending the target capability identifier to the security chip.

[0101] What the application receives is a function list (i.e., capability identification list), which displays the capability identifications of all capabilities possessed by the security chip. The user or agent can select according to the needs and send the selected target capability identification to the chip agent, which is then sent to the security chip through the chip agent.

[0102] S404: Using the security chip to respond to the target capability identifier sent by the application, send a data requirement to the application, where the data requirement is used to indicate data required for the security chip to execute the task corresponding to the target capability identifier.

[0103] After receiving the target capability identifier, the security chip will feedback what data conditions are needed to complete the task corresponding to the target capability identifier, condition 1, condition 2, condition 3..., and form data requirements, and transmit the data requirements to the application through the chip agent.

[0104] S405: Utilize the application program to respond to the data demand sent by the security chip and send data information to the security chip.

[0105] The application sends the collected data information to the chip agent according to the data requirements of the security chip, and forwards it to the security chip through the chip agent.

[0106] S406: Utilize the security chip to respond to the data information sent by the application, execute the task corresponding to the target capability identifier based on the data information, and obtain the target data.

[0107] After receiving the data information, the security chip starts to perform integrity judgment to determine whether the data information meets all data conditions. If all conditions are met, it goes to step S407. If one / some conditions are missing, or one / some conditions are not met, the missing or unsatisfied data conditions are formed into new data requirements, and the execution returns to S404.

[0108] S407: Use the security chip to send target data to the application.

[0109] The security chip will process the target data that needs to be responded to and return it to the application through the chip agent.

[0110] It should be noted that the specific processing flow in S401-S407 can refer to the description in the above embodiment and will not be repeated in the embodiments of the present application.

[0111] The embodiment of the present application provides a data processing method, which is applied to a security chip, and the method includes: using an application to respond to a set trigger operation, sending a wake-up instruction to the security chip, the wake-up instruction is used to instruct the security chip to send a capability identification list, the capability identification list includes at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; using the security chip to respond to the wake-up instruction sent by the application, sending the capability identification list to the application; using the application to select a target capability identification matching the data to be processed from the capability identification list, and sending the target capability identification to the security chip; using the security chip to respond to the target capability identification sent by the application, sending a data requirement to the application, the data requirement is used to indicate the data required for the security chip to execute the task corresponding to the target capability identification; using the application to respond to the data requirement sent by the security chip, sending data information to the security chip; using the security chip to respond to the data information sent by the application, based on the data information, execute the task corresponding to the target capability identification and obtain the target data; using the security chip to send the target data to the application. In the embodiment of the present application, after the application wakes up the security chip, the task to be executed by the security chip and the data information required to execute the task are obtained by the interaction between the security chip and the application, avoiding the problem of integrating all commands in the application, reducing the system complexity in the application, and reducing the workload of the staff.

[0112] Based on the above embodiments, a data processing method requiring a security chip to perform encryption tasks is provided.

[0113] Taking the application processing a requirement for signature identity as an example, the implementation method of the technical solution of the present application is described in detail. The application sends a wake-up instruction n"se encryption" to the chip agent; after the chip agent receives n"se encryption", it sends a setup profile instruction to the security chip. Specifically, the chip agent sends a wake-up instruction m"80C1000000" to the security chip.

[0114] The security chip sends back the capability identification list m"030303040401040204110412041304140501050205030504060106060702 0801080208040B010B020B030B040B070B080D010E010F010F020F0310021101110211049000" to the chip agent. After receiving the above capability identification list, the chip agent parses it. Every two bytes represent a capability representation. For example, 0303 represents the SST GenerateTDesKey capability, and 0304 represents the SST GenerateHMACKey capability. According to the APDU instruction quick lookup table, the same can be deduced by analogy.

[0115] After receiving the capability identification list, the application can make a selection. In this embodiment, the goal is to generate an ECC key, so SST is selected to generate an ECC key pair (SST GenerateECCKeyPair). The application sends n"SSTGenerateECCKeyPair" to the chip agent.

[0116] After receiving n"SST GenerateECCKeyPair", the chip agent sends the SSTGenerateECCKeyPair instruction to the security chip. Specifically, the chip agent sends m"8004010000" to the security chip.

[0117] The security chip returns the data information m"706C6561736520696E7075742043757276652074797065" indicating the execution of generating the ECC key pair. The chip agent receives and parses the data information. The data is ASCII-encoded. The chip agent sends the data information n"please input Curve type" to the application.

[0118] After the application determines the curve type it needs, the application sends the data message n "set ctx secp112k1" to the chip agent; set ctx secp112k1 means using the secp112k1 elliptic curve parameter set to generate the key.

[0119] The chip agent translates secp112k1 into ASCII (736563703131326B31) and sends it to the security chip using the Set ctx method. Specifically, the chip agent sends m"80C2000009736563703131326B31" to the security chip.

[0120] The security chip determines that all required data conditions are met, generates a public-private key pair internally, and asks the application in the same way whether it needs to return the public key m"72657475726E20504B". If the user does not need to return the public key, the application sends a denial instruction to the chip agent. Specifically, the application sends n"set ctx no" to the chip agent. The chip agent sends m"80C20000026E6F" to the chip. The security chip returns the status word m"9000", and the process of generating the ECC public-private key pair is completed.

[0121] Based on the above embodiments, a data processing method is provided which requires a security chip to perform a signature authentication task.

[0122] Taking an application processing a requirement for ECC signature as an example, the implementation method of the technical solution of the present application is described in detail.

[0123] The application sends a wake-up command n"se encryption" to the chip agent; after receiving n"se encryption", the chip agent sends a setup profile command to the security chip. Specifically, the chip agent sends a wake-up command m"80C1000000" to the security chip.

[0124] The security chip sends back the capability identification list m"030303040401040204110412041304140501050205030504060106060702 0801080208040B010B020B030B040B070B080D010E010F010F020F0310021101110211049000" to the chip agent. After receiving the above capability identification list, the chip agent parses it. Every two bytes represent a capability representation. For example, 0303 represents the SST GenerateTDesKey capability, and 0304 represents the SST GenerateHMACKey capability. According to the APDU instruction quick lookup table, the same can be deduced by analogy.

[0125] After receiving the capability identification list, the application can make a selection. In this embodiment, if the target is ECC signature, then select to use sign for ECC signature (RSA Sign), and the application sends n"RSA Sign" to the chip agent.

[0126] After receiving n"RSA Sign", the chip agent sends an RSA Sign instruction to the security chip. Specifically, the chip agent sends m"800B010000" to the security chip.

[0127] The security chip returns the data information m"706C6561736520696E7075742064617461206F6620746F2062652073696E676564" if the ECC signature is generated. The chip agent receives and parses the data information. The data is ASCII encoded. The chip agent sends the data information n"please input data of to be singed" to the application.

[0128] After the application determines the data to be signed, the application sends the data information n "set ctxexample" to the chip agent; "set ctx example" means using example for ECC signing.

[0129] The chip agent translates the signed data into ASCII (6578616D706C65) and sends it to the security chip using the Set ctx method. Specifically, the chip agent sends m"80C20000076578616D706C65" to the security chip.

[0130] The security chip determines that all required data conditions are met, signs, and returns the signature result m"093920f3e8e69d42f25f2e3c2147fffe4107ca2db26ba1720c7215064c64411edb65be3803f409ed41e78ea7087ea82e58cf6be5075b57bb9ea1aadaba9316699000". The 9000 at the end represents the success status. The part signed by 9000 is the signature data. The chip agent returns the signature data to the application, and the process ends.

[0131] Figure 5 A schematic diagram of a flow chart of a data processing device configured in a security chip provided in an embodiment of the present application, such as Figure 5 As shown, the data processing device 50 provided in the embodiment of the present application mainly includes: a first sending module 51, a second sending module 52, a task execution module 53 and a third sending module 54.

[0132] Among them, the first sending module 51 is used to send a capability identification list to the application in response to a wake-up instruction sent by the application, the capability identification list includes at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; the second sending module 52 is used to send a data requirement to the application in response to a target capability identification sent by the application, and the data requirement is used to indicate the data required for the security chip to execute the task corresponding to the target capability identification; the task execution module 53 is used to execute the task corresponding to the target capability identification based on the data information in response to the data information sent by the application to obtain the target data; the third sending module 54 is used to send the target data to the application.

[0133] In one possible implementation, the task execution module 53 is specifically used to respond to data information corresponding to the data requirements sent by the application, and determine whether the data information sent by the application meets the data requirements; if the data information does not meet the data requirements, obtain the unmet data requirements and send the unmet data requirements to the application; respond to the data information corresponding to the unmet data requirements sent by the application, and return to execute to determine whether the data information sent by the application meets the data requirements; until the data information meets the data requirements, execute the task corresponding to the target capability identifier of the data to be processed based on the data information to obtain the target data.

[0134] In one possible implementation, the security chip is deployed at the hardware layer, the application is deployed at the application layer, and a driver layer is included between the application layer and the hardware layer. A chip agent is deployed in the driver layer, and the chip agent is used to implement transparent transmission of data and / or instructions between the application and the security chip.

[0135] In one possible implementation, when the task corresponding to the target capability identifier includes an encryption task and the data information includes an encryption algorithm, the task execution module 53 is specifically used to generate a public key and a private key using the encryption algorithm; send an inquiry instruction to the application, the inquiry instruction is used to ask the application whether to send the public key; in response to a confirmation instruction sent by the application, the public key and the private key are used as target data; or, in response to a denial instruction sent by the application, the private key is used as the target data.

[0136] The task execution module 53 is specifically used for generating signature data of the data to be processed when the task corresponding to the target capability identifier includes generating a signature identity task; the task execution module 53 is specifically used for generating signature data of the data to be processed and using the signature data as the target data.

[0137] The data processing device provided in the embodiment of the present application can execute the data processing method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0138] Figure 6 A flow chart of a data processing device configured in an application program provided in an embodiment of the present application is shown as follows: Figure 6 As shown, the data processing device 60 provided in the embodiment of the present application mainly includes: a fourth sending module 61, a fifth sending module 62, a sixth sending module 63 and a first receiving module 64.

[0139] The fourth sending module 61 is used to send a wake-up instruction to the security chip in response to a set trigger operation, and the wake-up instruction is used to instruct the security chip to send a capability identification list, wherein the capability identification list includes at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; the fifth sending module 62 is used to select a target capability identification that matches the data to be processed from the capability identification list, and send the target capability identification to the security chip; the sixth sending module 63 is used to send data information to the security chip in response to a data requirement sent by the security chip, and the data requirement is used to indicate the data required for the security chip to execute the task corresponding to the target capability identification; the first receiving module 64 is used to receive target data sent by the security chip, and the target data is data obtained by the security chip executing the task corresponding to the target capability identification based on the data information.

[0140] In a possible implementation, the sixth sending module 63 is further configured to, in response to the unsatisfied data demand sent by the security chip, obtain data information corresponding to the unsatisfied data demand and send the data information to the security chip.

[0141] The data processing device provided in the embodiment of the present application can execute the data processing method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0142] Figure 7 is a schematic diagram of the structure of an electronic device provided in this embodiment. The electronic device may include a security chip or an electronic device including an application program, such as Figure 7 As shown, the electronic device 700 includes a processor 710, a memory 720, an input device 730, and an output device 740; the number of the processor 710 in the electronic device can be one or more. Figure 7 A processor 710 is taken as an example; the processor 710, the memory 720, the input device 730 and the output device 740 in the electronic device can be connected via a bus or other means. Figure 7 The example of connecting through bus is taken in the following.

[0143] The memory 720 is a computer-readable storage medium that can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to the data processing method in the embodiment of the present invention. The processor 710 executes various functional applications and data processing of the electronic device by running the software programs, instructions and modules stored in the memory 720, that is, implements the data processing method provided in the embodiment of the present invention.

[0144] The memory 720 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the terminal, etc. In addition, the memory 720 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 720 may further include a memory remotely arranged relative to the processor 710, and these remote memories may be connected to the electronic device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0145] The input device 730 may be used to receive input digital or character information and generate key signal input related to user settings and function control of the electronic device, and may include a keyboard, a mouse, etc. The output device 740 may include a display device such as a display screen.

[0146] This embodiment also provides a storage medium containing computer executable instructions, which are used to implement the data processing method provided by the embodiment of the present invention when executed by a computer processor.

[0147] Of course, the computer executable instructions of a storage medium containing computer executable instructions provided by an embodiment of the present invention are not limited to the method operations described above, and can also execute related operations in the data processing method provided by any embodiment of the present invention.

[0148] Through the above description of the implementation methods, the technicians in the relevant field can clearly understand that the present invention can be implemented by means of software and necessary general hardware, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, server, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0149] It is worth noting that in the embodiment of the above-mentioned data processing device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0150] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0151] The above description is only a specific implementation of the present application, so that those skilled in the art can understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A data processing method, characterized in that: The method is applied to a security chip, comprising: In response to a wake-up instruction sent by an application, sending a capability identification list to the application, the capability identification list including at least one capability identification, the capability identification being used to indicate a capability supported by the security chip; In response to a target capability identifier sent by an application, sending a data requirement to the application, the data requirement being used to indicate data required for the security chip to perform a task corresponding to the target capability identifier; In response to the data information corresponding to the data demand sent by the application, executing the task corresponding to the target capability identifier based on the data information to obtain target data; The target data is sent to the application.

2. The method according to claim 1, characterized in that In response to the data information corresponding to the data demand sent by the application, executing the task corresponding to the target capability identifier based on the data information to obtain the target data, including: In response to the data information corresponding to the data demand sent by the application, determining whether the data information sent by the application meets the data demand; If the data information does not meet the data requirement, obtaining the unsatisfied data requirement and sending the unsatisfied data requirement to the application; Responding to the data information corresponding to the unsatisfied data requirement sent by the application, and returning to execute determining whether the data information sent by the application meets the data requirement; Until the data information meets the data requirement, the task corresponding to the target capability identifier is executed based on the data information to obtain the target data.

3. The method according to claim 1, characterized in that: The security chip is deployed at the hardware layer, the application is deployed at the application layer, and a driver layer is included between the application layer and the hardware layer. A chip agent is deployed in the driver layer, and the chip agent is used to realize transparent transmission of data and / or instructions between the application and the security chip.

4. The method according to claim 1, characterized in that: When the task corresponding to the target capability identifier includes an encryption task and the data information includes an encryption algorithm, Executing the task corresponding to the target capability identifier based on the data information to obtain target data includes: Generate a public key and a private key using the encryption algorithm; Sending a query instruction to the application, wherein the query instruction is used to inquire the application whether to send a public key; In response to a confirmation instruction sent by the application, the public key and the private key are used as target data; or, In response to a denial instruction sent by the application, the private key is used as target data.

5. The method according to claim 1, characterized in that When the task corresponding to the target capability identifier includes a task of generating a signature identity, the data information includes data to be processed; Executing the task corresponding to the target capability identifier based on the data information to obtain target data includes: Generate signature data for the data to be processed, and use the signature data as target data.

6. A data processing method, characterized in that: The method is applied to an application program, comprising: In response to the setting trigger operation, sending a wake-up instruction to the security chip, the wake-up instruction is used to instruct the security chip to send a capability identification list, the capability identification list includes at least one capability identification, and the capability identification is used to indicate a capability supported by the security chip; Selecting a target capability identifier that matches the data to be processed from the capability identifier list, and sending the target capability identifier to the security chip; In response to a data requirement sent by the security chip, sending data information to the security chip, wherein the data requirement is used to indicate data required for the security chip to perform the task corresponding to the target capability identifier; Receive target data sent by the security chip, where the target data is data obtained by the security chip executing a task corresponding to the target capability identifier based on the data information.

7. The method according to claim 6, characterized in that Also includes: In response to the unsatisfied data demand sent by the security chip, data information corresponding to the unsatisfied data demand is acquired and sent to the security chip.

8. A data processing method, characterized in that: The data processing method is applied to a data processing system, wherein the data processing system includes an application program and a security chip, including: Using the application to respond to the set trigger operation, sending a wake-up instruction to the security chip, the wake-up instruction is used to instruct the security chip to send a capability identification list, the capability identification list includes at least one capability identification, and the capability identification is used to indicate the capabilities supported by the security chip; Sending a capability identification list to the application program using the security chip in response to a wake-up instruction sent by the application program; Using the application to select a target capability identifier that matches the data to be processed from the capability identifier list, and sending the target capability identifier to the security chip; Using the security chip to respond to the target capability identifier sent by the application, sending a data requirement to the application, the data requirement is used to indicate the data required for the security chip to perform the task corresponding to the target capability identifier; using the application to respond to a data demand sent by the security chip to send data information to the security chip; Using the security chip to respond to the data information sent by the application, executing the task corresponding to the target capability identifier based on the data information to obtain target data; The target data is sent to the application program using the security chip.

9. A data processing system, characterized in that: The data processing system comprises: an application and a security chip, wherein the security chip is used to execute the data processing method according to any one of claims 1 to 5, and the application is used to execute the data processing method according to any one of claims 6 to 7.

10. A data processing device, characterized in that: The device comprises: A first sending module, configured to send a capability identification list to the application in response to a wake-up instruction sent by the application, wherein the capability identification list includes at least one capability identification, and the capability identification is used to indicate a capability supported by the security chip; A second sending module, configured to send a data requirement to the application in response to the target capability identifier sent by the application, wherein the data requirement is used to indicate data required for the security chip to execute a task corresponding to the target capability identifier; A task execution module, configured to respond to the data information sent by the application program, execute the task corresponding to the target capability identifier based on the data information, and obtain target data; The third sending module is used to send the target data to the application.

11. A data processing device, characterized in that: The device comprises: a fourth sending module, configured to send a wake-up instruction to the security chip in response to a set trigger operation, wherein the wake-up instruction is used to instruct the security chip to send a capability identification list, wherein the capability identification list includes at least one capability identification, and the capability identification is used to indicate a capability supported by the security chip; A fifth sending module, configured to select a target capability identifier that matches the data to be processed from the capability identifier list, and send the target capability identifier to the security chip; a sixth sending module, configured to send data information to the security chip in response to a data requirement sent by the security chip, wherein the data requirement is used to indicate data required for the security chip to execute the task corresponding to the target capability identifier; The first receiving module is used to receive target data sent by the security chip, where the target data is data obtained by the security chip executing a task corresponding to the target capability identifier based on the data information.

12. An electronic device, characterized in that: The device comprises: one or more processors; A storage device for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the data processing method according to any one of claims 1 to 5 or the data processing method according to any one of claims 6 to 7.

13. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the data processing method according to any one of claims 1 to 5 or the data processing method according to any one of claims 6 to 7 is implemented.

Images