Data information determination method and device, equipment, medium and program product

Abstract

The invention discloses a data information determination method and device, equipment, a medium and a program product, and belongs to the technical field of big data. The method comprises the following steps: acquiring preset key information and algorithm identification information of a target preset encryption algorithm through a server, and generating a data acquisition instruction based on the information; sending a data acquisition instruction to the target device; under the condition that the first ciphertext is received, a target second ciphertext which is the same as the first ciphertext is acquired from a plurality of preset second ciphertexts, the first ciphertext is generated by the target device based on the data acquisition instruction, and the first ciphertexts generated by different target devices are different; and determining target data information corresponding to the target second ciphertext from a plurality of pieces of preset data information according to a corresponding relationship between the preset data information and the second ciphertext. According to the embodiment of the invention, the device identifier of the target device can be accurately and quickly determined, the deployment position and the use condition of the device can be effectively tracked, and the daily supervision efficiency of the device is greatly improved.

Description

Technical Field

[0001] The present application belongs to the field of big data technology, and in particular, relates to a method, device, equipment, medium and program product for determining data information. Background Art

[0002] Banks and other financial institutions rely on a large number of auxiliary peripherals in their business operations, but many of these devices do not support reading device identification information from the firmware, making it difficult to track their deployment location and usage, posing challenges to the daily supervision of the equipment.

[0003] For devices that do not support reading device identification information, the currently commonly used manual inventory method is inefficient. Although Radio Frequency Identification (RFID) technology improves inventory efficiency, it is costly and has limited frequency, making it impossible to achieve daily real-time monitoring.

[0004] Therefore, the prior art has the problem that it is unable to automatically obtain device identification information, making it difficult to perform daily monitoring of the device. Summary of the invention

[0005] The embodiments of the present application provide a method, apparatus, device, medium and program product for determining data information, which can solve the problem that the prior art cannot automatically obtain device identification information and is difficult to perform daily monitoring of the device.

[0006] In a first aspect, an embodiment of the present application provides a method for determining data information, which is applied to a server, and the method includes:

[0007] Obtaining preset key information and algorithm identification information of a target preset encryption algorithm;

[0008] Generate a data acquisition instruction based on preset key information and algorithm identification information;

[0009] Sending data acquisition instructions to the target device;

[0010] When receiving a first ciphertext sent by a target device, obtaining a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and different target devices generate different first ciphertexts;

[0011] From a plurality of preset data information, target data information corresponding to the target second ciphertext is determined according to a correspondence between the preset data information and the second ciphertext.

[0012] In a possible embodiment of the first aspect, before determining, from a plurality of preset data information, target data information corresponding to the target second ciphertext according to a correspondence between the preset data information and the second ciphertext, the method further includes:

[0013] In response to a data writing request, obtaining data information in the data writing request;

[0014] Encrypting the preset key information and data information using the target preset encryption algorithm to obtain second ciphertext information;

[0015] Based on the data information and the information of the second ciphertext, a correspondence relationship between the data information and the second ciphertext is generated.

[0016] In a possible embodiment of the first aspect, the method further includes:

[0017] The corresponding relationship between the stored data information and the second ciphertext.

[0018] In a possible embodiment of the first aspect, the method further includes:

[0019] Send data information to the encryption chip in the target device.

[0020] In a possible embodiment of the first aspect, the target data information includes device identification information of the target device.

[0021] Based on the same inventive concept, in a second aspect, an embodiment of the present application further provides a method for determining data information, which is applied to a target device, wherein the target device includes an encryption chip, and the method includes:

[0022] In response to the data acquisition instruction, obtain the preset key information and the algorithm identification information of the preset encryption algorithm in the data acquisition instruction, and obtain the target data information from the encryption chip;

[0023] Obtaining information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip;

[0024] Using a target preset encryption algorithm, encrypt the preset key information and the target data information to obtain a first ciphertext;

[0025] A first ciphertext is sent to a server so that the server, when receiving the first ciphertext, can obtain a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts; and target data information corresponding to the target second ciphertext is determined from a plurality of preset data information according to a correspondence between the preset data information and the second ciphertext.

[0026] In a possible embodiment of the second aspect, obtaining information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip includes:

[0027] According to the algorithm identification information, information of a target preset encryption algorithm corresponding to the algorithm identification information is determined from information of a plurality of preset encryption algorithms stored in the encryption chip.

[0028] Based on the same inventive concept, in a third aspect, an embodiment of the present application further provides a device for determining data information, which is applied to a server, and the device includes:

[0029] An acquisition module, used to acquire preset key information and algorithm identification information of a target preset encryption algorithm;

[0030] A generating module, used to generate a data acquisition instruction based on preset key information and algorithm identification information;

[0031] A sending module, used for sending a data acquisition instruction to a target device;

[0032] The acquisition module is further used to acquire a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts when receiving a first ciphertext sent by a target device, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and different target devices generate different first ciphertexts;

[0033] The determination module is also used to determine the target data information corresponding to the target second ciphertext from a plurality of preset data information according to the corresponding relationship between the preset data information and the second ciphertext.

[0034] Based on the same inventive concept, in a fourth aspect, an embodiment of the present application further provides a device for determining data information, which is applied to a target device, wherein the target device includes an encryption chip, and the device includes:

[0035] An acquisition module, used to respond to a data acquisition instruction, acquire preset key information and algorithm identification information of a preset encryption algorithm in the data acquisition instruction, and acquire target data information from the encryption chip;

[0036] The acquisition module is also used to acquire information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip;

[0037] An encryption module, used to encrypt preset key information and target data information using a preset target encryption algorithm to obtain a first ciphertext;

[0038] The sending module is used to send a first ciphertext to a server, so that when the server receives the first ciphertext, it can obtain a target second ciphertext that is the same as the first ciphertext from multiple preset second ciphertexts; from multiple preset data information, according to the corresponding relationship between the preset data information and the second ciphertext, determine the target data information corresponding to the target second ciphertext.

[0039] Based on the same inventive concept, in the fifth aspect, an embodiment of the present application also provides a device for determining data information, the device comprising: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, it implements a method for determining data information as in any embodiment of the first aspect, or implements a method for determining data information as in any embodiment of the second aspect.

[0040] Based on the same inventive concept, in the sixth aspect, an embodiment of the present application also provides a computer-readable storage medium, on which computer program instructions are stored. When the computer program instructions are executed by a processor, a method for determining data information as in any embodiment of the first aspect is implemented, or a method for determining data information as in any embodiment of the second aspect is implemented.

[0041] Based on the same inventive concept, in the sixth aspect, an embodiment of the present application also provides a computer program product. When the instructions in the computer program product are executed by the processor of the device, the device can execute the method for determining data information as described in any embodiment of the first aspect, or execute the method for determining data information as described in any embodiment of the second aspect.

[0042] The data information determination method, device, equipment, medium and program product of the embodiment of the present application, in which the server generates a data acquisition instruction using preset key information and encryption algorithm identification, and sends it to the target device, and the target device generates a unique first ciphertext in response to the instruction and returns it to the server, and the server can quickly match the target second ciphertext that is the same as the first ciphertext in the preset multiple second ciphertexts, and can accurately determine the target data information corresponding to the target second ciphertext from the multiple preset data information according to the correspondence between the preset data information and the second ciphertext. Among them, since the first ciphertexts generated by different target devices are different, the target data information is the data information that uniquely corresponds to the target device in multiple data information (such as device identification), that is, the target data information corresponding to the target device can be determined from the data information of different devices, so that the device identity can be identified, the device identification of the target device can be accurately and quickly determined in multiple device identifications, and the deployment location and usage of the device can be effectively tracked, which greatly improves the daily supervision efficiency of the device. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Other features, objects and advantages of the present application will become more apparent by reading the following detailed description of non-limiting embodiments with reference to the accompanying drawings, in which the same or similar reference numerals represent the same or similar features and the accompanying drawings are not drawn to scale.

[0044] Figure 1 It is a flow chart of a method for determining data information provided in an embodiment of the present application;

[0045] Figure 2 This is another flow chart of the method for determining data information provided in the embodiment of the present application;

[0046] Figure 3 This is another flow chart of the method for determining data information provided in the embodiment of the present application;

[0047] Figure 4 is another flow chart of a method for determining data information provided in an embodiment of the present application;

[0048] Figure 5 It is a structural schematic diagram of a device for determining data information provided in an embodiment of the present application;

[0049] Figure 6 It is a structural schematic diagram of a device for determining data information provided in an embodiment of the present application;

[0050] Figure 7 It is a structural diagram of a device for determining data information provided in an embodiment of the present application. DETAILED DESCRIPTION

[0051] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only configured to explain the present application and are not configured to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0052] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0053] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0054] It is obvious to those skilled in the art that various modifications and changes can be made in the present application without departing from the spirit or scope of the present application. Therefore, the present application is intended to cover modifications and changes of the present application that fall within the scope of the corresponding claims (technical solutions for protection) and their equivalents. It should be noted that the implementation methods provided in the embodiments of the present application can be combined with each other without contradiction.

[0055] It should be noted that the acquisition, storage, use and processing of data in the embodiments of the present application are in compliance with the relevant provisions of national laws and regulations.

[0056] It should also be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0057] Before describing the technical solutions provided by the embodiments of the present application, in order to facilitate the understanding of the embodiments of the present application, the present application first specifically describes the problems existing in the related art:

[0058] Banks and other financial institutions rely on a large number of auxiliary peripherals in their business operations, but many of these devices do not support reading device identification information from the device firmware, making it difficult to track the device deployment location and usage, which poses a challenge to the daily supervision of the equipment. According to statistics, among the auxiliary peripherals, only 30% support reading device identification information, while 70% do not.

[0059] For devices that do not support reading device identification information, the currently commonly used manual inventory method is inefficient, such as manually reading the device serial number from the nameplate or label attached to the device. Some related technologies use RFID technology to attach RFID tags to the device, and then scan the device with a handheld RFID reader to obtain the device identification information. Although RFID technology improves inventory efficiency, it is costly and has limited frequency, making it impossible to achieve daily real-time monitoring. Therefore, the related technology has the problem of being unable to automatically obtain device identification information and difficult to perform daily monitoring of the device.

[0060] Based on this, the embodiments of the present application provide a method, apparatus, device, medium and program product for determining data information, which can accurately and quickly determine the device identification of the target device among multiple device identifications, can effectively track the deployment location and usage of the device, and greatly improve the daily supervision efficiency of the device.

[0061] The following is a detailed description of the method for determining data information provided in the embodiments of the present application in conjunction with the accompanying drawings.

[0062] Figure 1 is a flow chart of a method for determining data information provided by an embodiment of the present application, such as Figure 1 As shown, the method may include steps S110 to S190.

[0063] S110, the server obtains preset key information and algorithm identification information of a target preset encryption algorithm.

[0064] A server is a computer program or device that can store, process or transmit data.

[0065] In one example, the server's database pre-stores preset key information, algorithm identification information of a target preset encryption algorithm, multiple preset data information, and a correspondence between the preset data information and the second ciphertext, wherein there is a one-to-one correspondence between the preset data information and the device.

[0066] The preset key information is information set in advance and is a fixed value. It can be 1234567812345678, or 341261A5FD, etc. The embodiment of the present application does not limit the specific value of the preset key information.

[0067] Algorithm identification information, used to uniquely identify the encryption algorithm.

[0068] Specifically, when the server needs to determine the target data information corresponding to the target device from multiple data information, it can obtain the pre-set key information and the algorithm identification information of the selected encryption algorithm.

[0069] S120, the server generates a data acquisition instruction based on the preset key information and algorithm identification information.

[0070] Specifically, the server may generate a data acquisition instruction including preset key information and algorithm identification information.

[0071] S130, the server sends a data acquisition instruction to the target device.

[0072] Among them, the target device may include an encryption chip.

[0073] An encryption chip is a general term for a type of security chip that integrates various symmetric and asymmetric algorithms and has a very high security level. It can ensure that the data information stored inside cannot be illegally read or tampered with. The characteristics of an encryption chip are that the stored data information cannot be read and can only be used for calculations. In addition, the encryption chip can store a variety of preset encryption algorithms.

[0074] Specifically, the server may send a data acquisition instruction to the target device.

[0075] S140, the target device responds to the data acquisition instruction, obtains the preset key information and the algorithm identification information of the preset encryption algorithm in the data acquisition instruction, and obtains the target data information from the encryption chip.

[0076] Specifically, after receiving the data acquisition instruction, the target device will parse the instruction to obtain the preset key information and algorithm identification information of the preset encryption algorithm contained therein, and then use this information to obtain the pre-stored target data information from the encryption chip inside the target device, such as obtaining the device identification information of the target device.

[0077] S150, the target device obtains information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip.

[0078] Specifically, the encryption chip of the target device can find the program code information of the target preset encryption algorithm corresponding to the algorithm identification information according to the algorithm identification information.

[0079] S160, the target device encrypts the preset key information and the target data information using a target preset encryption algorithm to obtain a first ciphertext.

[0080] Specifically, the target device may utilize the program code of the target preset encryption algorithm to encrypt the preset key information and the target data information, and may obtain a ciphertext, which may be referred to as a first ciphertext.

[0081] S170, the target device sends a first ciphertext to the server.

[0082] Specifically, after the target device encrypts the preset key information and the target data information according to the program code of the target preset encryption algorithm to obtain the first ciphertext, the first ciphertext can be sent to the server.

[0083] S180, when receiving the first ciphertext sent by the target device, the server obtains a target second ciphertext that is the same as the first ciphertext from multiple preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and different target devices generate different first ciphertexts.

[0084] Among them, the first ciphertext calculated based on the target preset encryption algorithm is unique, and different target data information corresponds to different first ciphertexts. In other words, there is a one-to-one correspondence between the device, data information, and ciphertext.

[0085] Specifically, when the server receives a first ciphertext from a target device, it searches among a plurality of pre-stored second ciphertexts to find a second ciphertext that is identical to the first ciphertext, and the second ciphertext may be referred to as a target second ciphertext.

[0086] S190, the server determines target data information corresponding to the target second ciphertext from a plurality of preset data information according to a correspondence between the preset data information and the second ciphertext.

[0087] Specifically, after finding the target second ciphertext identical to the first ciphertext, the server may continue to determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to the correspondence between the preset data information and the second ciphertext.

[0088] The method for determining data information provided in the embodiment of the present application generates a data acquisition instruction containing preset key information and an encryption algorithm identifier through a server, and sends it to a target device containing an encryption chip. The target device uses this information to obtain the target data information from the encryption chip, and uses a specified encryption algorithm to encrypt the preset key information and the target data information, and generates a unique first ciphertext and returns it to the server. The server matches the target second ciphertext that is the same as the first ciphertext in the pre-stored multiple second ciphertexts, and then accurately determines the target data information corresponding to the target device based on the correspondence between the preset data information and the second ciphertext, thereby achieving safe and accurate acquisition of data information. In the case where the data information contains device identification information, the device identification information of the target device can be accurately and quickly determined from multiple device identification information, so that the device identity can be identified, and the deployment location and usage of the device can be effectively tracked, greatly improving the daily supervision efficiency of the device.

[0089] Figure 2 This is another flow chart of the method for determining data information provided in the embodiment of the present application.

[0090] In some embodiments, Figure 2 As shown, before determining the target data information corresponding to the target second ciphertext from a plurality of preset data information according to the correspondence between the preset data information and the second ciphertext in step S190, the method further includes steps S210 to S230.

[0091] S210, the server responds to the data writing request and obtains data information in the data writing request.

[0092] The data writing request includes data information, for example, the data writing request includes device identification information of the target device, and the device identification information can be obtained by manual input according to a nameplate or label on the shell of the target device.

[0093] Specifically, when the server receives a data writing request, data information that needs to be written into the encryption chip of the target device can be extracted from the request.

[0094] S220, the server encrypts the preset key information and the data information using the target preset encryption algorithm to obtain second ciphertext information.

[0095] The target preset encryption algorithm may be an encryption algorithm specified from a plurality of encryption algorithms pre-stored in an encryption chip of the target device.

[0096] Specifically, the server uses a specified preset encryption algorithm to encrypt the preset key information and the data information to be encrypted (such as the device identification information of the target device) together, and finally generates a ciphertext information, which can be called the second ciphertext information.

[0097] S230: The server generates a correspondence between the data information and the second ciphertext based on the data information and the second ciphertext.

[0098] Specifically, the server will establish a corresponding relationship between the original data information and the second ciphertext information obtained through the encryption algorithm, so as to ensure that the data information and the encrypted second ciphertext can correspond to each other.

[0099] In the embodiment of the present application, after receiving a data write request, the server can obtain a second ciphertext through encryption processing, and generate a corresponding relationship between the data information and the second ciphertext, which is conducive to subsequently finding the target data information corresponding to the target device from multiple data information, and can quickly and accurately determine the identity of the target device, thereby effectively tracking the deployment location and usage of the device, greatly improving the daily supervision efficiency of the equipment.

[0100] Figure 3 This is another flow chart of the method for determining data information provided in the embodiment of the present application.

[0101] In some embodiments, Figure 3 As shown, the method for determining the data information may further include step S240.

[0102] S240, storing the corresponding relationship between the data information and the second ciphertext.

[0103] Specifically, after generating the correspondence between the data information and the second ciphertext, the server may store the correspondence in a database.

[0104] In the embodiment of the present application, after receiving a data write request, the server can obtain a second ciphertext through encryption processing, and generate a corresponding relationship between the data information and the second ciphertext, thereby ensuring that the data information is securely stored before being written into the encryption chip of the target device, and facilitating the subsequent rapid and accurate retrieval of the target data information corresponding to the target device from multiple data information, thereby determining the identity of the target device, thereby being able to effectively track the deployment location and usage of the device, greatly improving the efficiency of daily supervision of the device.

[0105] Figure 4 This is another flow chart of the method for determining data information provided in the embodiment of the present application.

[0106] In some embodiments, Figure 4 As shown, the method for determining the data information may further include step S250.

[0107] S250, the server sends data information to the encryption chip in the target device.

[0108] Specifically, after obtaining the data information in the data write request, the server can not only generate a correspondence between the data information and the second ciphertext, but also send the data information to the encryption chip of the target device so that the encryption chip can store the data information (such as device identification information).

[0109] In the embodiment of the present application, the server can not only generate a correspondence between the data information and the second ciphertext, but also directly send the data information to the encryption chip of the target device for storage, which is equivalent to the initialization of the device, that is, storing the unique data information in the encryption chip of the corresponding device, thereby enabling the subsequent server to determine the target data information corresponding to the target device among multiple data information. This has done sufficient and accurate work.

[0110] In some embodiments, the target data information includes device identification information of the target device.

[0111] The device identification is a unique identification of a physical device. Usually, the manufacturer uniquely identifies the device through a device serial number (SN) according to certain rules.

[0112] In the embodiment of the present application, the target data information may include device identification information of the target device, which can uniquely and accurately identify and recognize the target device, can quickly and accurately find the target device identification information corresponding to the target device from multiple device identification information, and can quickly and accurately determine the identity of the target device, thereby effectively tracking the deployment location and usage of the device, greatly improving the daily supervision efficiency of the equipment.

[0113] In some embodiments, step S150 in which the target device obtains information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip may include step S151.

[0114] S151, the target device determines, according to the algorithm identification information, information of a target preset encryption algorithm corresponding to the algorithm identification information from information of multiple preset encryption algorithms stored in the encryption chip.

[0115] Specifically, the target device will search and confirm which encryption algorithm information matches the algorithm identification information among multiple preset encryption algorithm information stored in the encryption chip according to the provided algorithm identification information, thereby determining the information of the target preset encryption algorithm.

[0116] In the embodiment of the present application, there are multiple preset encryption algorithm information stored in the encryption chip, and the target device can use the multiple preset encryption algorithm information stored in the encryption chip to quickly and accurately find and determine the corresponding target preset encryption algorithm according to the provided algorithm identification information, thereby improving the flexibility and efficiency of encryption processing.

[0117] In one example, the method for determining data information mainly includes two steps: the first step is to initialize the device identification, and the second step is to read the identification and map the serial number.

[0118] 1) Initialize device identification

[0119] The user is presented with a serial number entry interface, in which the user enters the data information of the device serial number SN. After the server obtains the serial number SN, it uses the target preset encryption algorithm (such as SM4) to encrypt a fixed value V (preset key information) to obtain the second ciphertext C.

[0120] It should be noted that at this time, the device serial number SN and the second ciphertext C value are obtained. Due to the characteristics of the target preset encryption algorithm, the uniqueness of the device serial number SN will also be reflected in the uniqueness of the second ciphertext C value. There will not be two different device serial numbers SN1 and SN2, and the second ciphertexts C1 and C2 will be obtained after encryption, and C1 and C2 are equal. Therefore, a mapping relationship between the device serial number SN and the second ciphertext C value can be established and saved in the server database.

[0121] After the SN and C values ​​are saved in the database of the equipment management and control system and the mapping relationship between the equipment serial number and the ciphertext value is established, the equipment serial number SN can also be written into the encryption chip of the peripheral device to save the equipment serial number information in the equipment hardware. Even if the equipment is moved to other terminals for use, the information is also stored in the equipment hardware.

[0122] It should be noted that since the device serial number SN is not burned into the device firmware when it leaves the factory, it is necessary to complete the serial number initialization through manual operation, and manually enter the serial number on the device nameplate or label into the encryption chip.

[0123] 2) Read the ID and map the serial number

[0124] During device management and control activities, when it is necessary to identify the unique identifier of the device, the encryption chip will use the device serial number SN stored in the initialization phase and the fixed value V sent by the server to perform encryption calculations to obtain the first ciphertext.

[0125] If the peripheral has not been initialized, an error will be reported and the program will prompt the user to initialize the device identification first.

[0126] If it is a peripheral device with initialized device identification, the peripheral device will internally call the encryption chip to use the device serial number SN to perform encryption calculation on the fixed value V (preset key information), obtain the first ciphertext C', and return it to the server.

[0127] After the server obtains the first ciphertext C', it first finds the target second ciphertext equal to the first ciphertext C' from multiple second ciphertexts C in the database, and then finds the target data information based on the correspondence between the second ciphertext and the data information, that is, finds the device serial number SN of the target device, and then records the SN and the device control activity information together to complete the collection of control records of the target device.

[0128] Equipment identification and control activity collection can be implemented regularly and in real time during daily equipment use, allowing users to accurately understand the use of equipment assets.

[0129] The embodiment of the present application realizes accurate identification and control of device uniqueness by initializing the device identification and establishing a mapping relationship between the serial number and the encrypted ciphertext, which facilitates users to understand the usage of device assets in real time while ensuring the security and accuracy of device information.

[0130] In one example, the device serial number SN can be injected into a specific key slot to strengthen key management and avoid conflicts with keys used by business functions. In addition, the encryption chip may lose the key due to the device falling or disassembly, so the first step can be re-executed to initialize the device identification.

[0131] The embodiment of the present application injects the device serial number into a specific key slot to strengthen key management and avoid conflicts. At the same time, if the device is dropped, disassembled, etc., resulting in the loss of the key, it can be restored by reinitializing the device identification, ensuring the flexibility and security of device identification information management.

[0132] Based on the same inventive concept, the embodiment of the present application also provides a device for determining data information, which is applied to a server, such as Figure 5 As shown, the device 500 may include an acquisition module 510 , a generation module 520 and a determination module 530 .

[0133] An acquisition module 510 is used to acquire preset key information and algorithm identification information of a target preset encryption algorithm;

[0134] A generating module 520, for generating a data acquisition instruction based on preset key information and algorithm identification information;

[0135] The sending module 530 is used to send a data acquisition instruction to a target device;

[0136] The acquisition module 510 is further configured to, upon receiving a first ciphertext sent by a target device, acquire a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and different target devices generate different first ciphertexts;

[0137] The determination module 540 is further configured to determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to a correspondence between the preset data information and the second ciphertext.

[0138] The data information determination device of the embodiment of the present application, in which the server generates a data acquisition instruction using preset key information and encryption algorithm identifier, and sends it to the target device, and the target device generates a unique first ciphertext and returns it to the server after responding, and the server can quickly match the target second ciphertext that is the same as the first ciphertext in the preset multiple second ciphertexts, and can accurately determine the target data information corresponding to the target second ciphertext from the multiple preset data information according to the correspondence between the preset data information and the second ciphertext. Among them, since the first ciphertexts generated by different target devices are different, the target data information is the data information that uniquely corresponds to the target device in multiple data information (such as device identification), that is, the target data information corresponding to the target device can be determined from the data information of different devices, so that the device identification of the target device can be accurately and quickly determined in multiple device identifications, and the deployment location and usage of the device can be effectively tracked, which greatly improves the daily supervision efficiency of the device.

[0139] In some embodiments, before the determination module is used to determine the target data information corresponding to the target second ciphertext from a plurality of preset data information according to the correspondence between the preset data information and the second ciphertext, the device further includes an encryption module:

[0140] The acquisition module is further used to respond to the data writing request and acquire the data information in the data writing request;

[0141] An encryption module, used to encrypt the preset key information and data information using a target preset encryption algorithm to obtain second ciphertext information;

[0142] The generating module is further used to generate a corresponding relationship between the data information and the second ciphertext based on the data information and the information of the second ciphertext.

[0143] In some embodiments, the device further comprises a storage module:

[0144] The storage module is used to store the corresponding relationship between the data information and the second ciphertext.

[0145] In some embodiments, the apparatus further comprises:

[0146] The sending module is also used to send data information to the encryption chip in the target device.

[0147] In some embodiments, the target data information includes device identification information of the target device.

[0148] Based on the same inventive concept, the embodiment of the present application also provides a device for determining data information, which is applied to a target device, and the target device includes an encryption chip, such as Figure 6 As shown, the device 600 may include an acquisition module 610, an encryption module 620 and a sending module 630:

[0149] The acquisition module 610 is used to respond to the data acquisition instruction, acquire the preset key information and the algorithm identification information of the preset encryption algorithm in the data acquisition instruction, and acquire the target data information from the encryption chip;

[0150] The acquisition module 610 is further used to acquire information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip;

[0151] The encryption module 620 is used to encrypt the preset key information and the target data information using the target preset encryption algorithm to obtain a first ciphertext;

[0152] The sending module 630 is used to send a first ciphertext to the server, so that when the server receives the first ciphertext, it can obtain a target second ciphertext that is the same as the first ciphertext from multiple preset second ciphertexts; from multiple preset data information, according to the correspondence between the preset data information and the second ciphertext, determine the target data information corresponding to the target second ciphertext.

[0153] Each module in the data information determination device provided in the embodiment of the present application can realize Figures 1 to 4 The functions of each step of the method for determining the data information provided and the ability to achieve the corresponding technical effects are described briefly and will not be repeated here.

[0154] Figure 7 A schematic diagram of the hardware structure of a device for determining data information provided in an embodiment of the present application is shown.

[0155] The data information determination device may include a processor 701 and a memory 702 storing computer program instructions.

[0156] Specifically, the processor 701 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0157] The memory 702 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 702 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 702 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 702 may be inside or outside a determination device for data information. In a particular embodiment, the memory 702 is a non-volatile solid-state memory.

[0158] The memory may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Therefore, generally, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to one aspect of the present disclosure.

[0159] The processor 701 implements any one of the data information determination methods in the above embodiments by reading and executing computer program instructions stored in the memory 702 .

[0160] In one example, the data information determination device may further include a communication interface 703 and a bus 704. Figure 7 As shown, the processor 701, the memory 702, and the communication interface 703 are connected via a bus 704 and communicate with each other.

[0161] The communication interface 703 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0162] The bus 704 includes hardware, software or both, coupling the components of the data information determination device to each other. For example, but not limitation, the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Extended Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Linear Predictive Coding (LPC) bus, a memory bus, a MicroChannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (Peripheral Component Interconnect-X, PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VESA Local Bus, VLB) bus or other suitable buses or a combination of two or more of these. Where appropriate, the bus 704 may include one or more buses. Although embodiments of the present application describe and illustrate a particular bus, the present application contemplates any suitable bus or interconnect.

[0163] The device can execute the method for determining data information in the embodiment of the present application based on each unit / component in the data information determination device, thereby realizing the combination Figures 1 to 4 Describes the method for determining the data information.

[0164] In addition, in combination with the data information determination method in the above embodiment, the embodiment of the present application can provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by the processor, any one of the data information determination methods in the above embodiment is implemented.

[0165] The present application also provides a computer program product. When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes each process of implementing any one of the above-mentioned data information determination method embodiments.

[0166] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0167] The functional blocks shown in the above-described block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), appropriate firmware, plug-in, function card, etc. When implemented in software, the elements of the present application are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or communication link by a data signal carried in a carrier. "Machine-readable medium" may include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (Read-Only Memory, ROM), flash memory, erasable read-only memory (Erasable Read Only Memory, EROM), floppy disks, compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), optical discs, hard disks, optical fiber media, radio frequency (Radio Frequency, RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0168] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0169] Aspects of the present disclosure are described above with reference to the flowchart and / or block diagram of the method, device (system) and computer program product according to the embodiment of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0170] The above are only specific implementation methods of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A method for determining data information, characterized in that: Applied to a server, the method comprises: Obtaining preset key information and algorithm identification information of a target preset encryption algorithm; Based on the preset key information and the algorithm identification information, generate a data acquisition instruction; Sending the data acquisition instruction to the target device; When receiving a first ciphertext sent by the target device, obtaining a target second ciphertext that is the same as the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and different target devices generate different first ciphertexts; From a plurality of preset data information, target data information corresponding to the target second ciphertext is determined according to a correspondence between the preset data information and the second ciphertext.

2. The method according to claim 1, characterized in that Before determining, from among the plurality of preset data information, the target data information corresponding to the target second ciphertext according to the correspondence between the preset data information and the second ciphertext, the method further comprises: In response to a data writing request, acquiring data information in the data writing request; Encrypting the preset key information and the data information using the target preset encryption algorithm to obtain second ciphertext information; Based on the data information and information of the second ciphertext, a correspondence relationship between the data information and the second ciphertext is generated.

3. The method according to claim 2, characterized in that Also includes: The corresponding relationship between the data information and the second ciphertext is stored.

4. The method according to claim 2, characterized in that: Also includes: The data information is sent to the encryption chip in the target device.

5. The method according to any one of claims 1 to 4, characterized in that: The target data information includes device identification information of the target device.

6. A method for determining data information, characterized in that: Applied to a target device, the target device includes an encryption chip, and the method includes: In response to the data acquisition instruction, obtaining the preset key information and the algorithm identification information of the preset encryption algorithm in the data acquisition instruction, and obtaining the target data information from the encryption chip; Acquire information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip; Using the target preset encryption algorithm, encrypt the preset key information and the target data information to obtain a first ciphertext; The first ciphertext is sent to a server, so that the server, when receiving the first ciphertext, obtains a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts; and determines target data information corresponding to the target second ciphertext from a plurality of preset data information according to a correspondence between the preset data information and the second ciphertext.

7. The method according to claim 6, characterized in that The step of obtaining information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip includes: According to the algorithm identification information, information of a target preset encryption algorithm corresponding to the algorithm identification information is determined from information of a plurality of preset encryption algorithms stored in the encryption chip.

8. A device for determining data information, characterized in that: Applied to a server, the device comprises: An acquisition module, used to acquire preset key information and algorithm identification information of a target preset encryption algorithm; A generating module, used for generating a data acquisition instruction based on the preset key information and the algorithm identification information; A sending module, used for sending the data acquisition instruction to the target device; The acquisition module is further configured to, upon receiving a first ciphertext sent by the target device, acquire a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and different target devices generate different first ciphertexts; The determination module is also used to determine the target data information corresponding to the target second ciphertext from multiple preset data information according to the corresponding relationship between the preset data information and the second ciphertext.

9. A device for determining data information, characterized in that: Applied to a target device, the target device includes an encryption chip, and the device includes: An acquisition module, configured to respond to a data acquisition instruction, acquire preset key information and algorithm identification information of a preset encryption algorithm in the data acquisition instruction, and acquire target data information from the encryption chip; The acquisition module is further used to acquire information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip; An encryption module, used to encrypt the preset key information and the target data information using the target preset encryption algorithm to obtain a first ciphertext; A sending module is used to send the first ciphertext to the server, so that when the server receives the first ciphertext, it can obtain a target second ciphertext that is the same as the first ciphertext from multiple preset second ciphertexts; from multiple preset data information, according to the corresponding relationship between the preset data information and the second ciphertext, determine the target data information corresponding to the target second ciphertext.

10. A device for determining data information, characterized in that: The device includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, it implements the method for determining data information as described in any one of claims 1 to 5, or when the processor executes the computer program instructions, it implements the method for determining data information as described in any one of claims 6 to 7.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, which, when executed by a processor, implement the method for determining data information as described in any one of claims 1 to 5, or implement the method for determining data information as described in any one of claims 6 to 7.

12. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of a device, the device is enabled to execute the method for determining data information as described in any one of claims 1 to 5, or to execute the method for determining data information as described in any one of claims 6 to 7.

Images