Method, device, equipment, medium and program product for determining data information

Abstract

The application discloses a data information determination method and device, equipment, medium and program product, and belongs to the technical field of big data. The method comprises the following steps: obtaining preset key information and algorithm identification information of a target preset encryption algorithm by a server, and generating a data acquisition instruction based on the information; sending the data acquisition instruction to a target device; in the case that a first ciphertext is received, obtaining a target second ciphertext same as the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and the first ciphertext generated by different target devices is different; and determining target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext. According to the embodiment of the application, the device identification of the target device can be accurately and rapidly determined, the deployment position and use of the device can be effectively tracked, and the daily supervision efficiency of the device is greatly improved.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of big data, and particularly relates to a data information determination method and device, equipment, medium and program product. BACKGROUND

[0002] Banking and other financial institutions rely on a large number of auxiliary peripherals in business handling, but many of the devices do not support reading device identification information from firmware, making it difficult to track their deployment location and usage, and bringing challenges to the daily supervision of the devices.

[0003] For devices that do not support reading device identification information, the commonly used manual inventory method is inefficient, and although the Radio Frequency Identification (RFID) technology improves the inventory efficiency, it is high in cost and limited in frequency, and cannot achieve real-time monitoring on a daily basis.

[0004] Therefore, the prior art has the problem of being unable to automatically obtain device identification information and being difficult to conduct daily monitoring of the devices. SUMMARY

[0005] The embodiments of the application provide a data information determination method and device, equipment, medium and program product, which can solve the problem that the prior art cannot automatically obtain device identification information and is difficult to conduct daily monitoring of the devices.

[0006] In a first aspect, the embodiments of the application provide a data information determination method, applied to a server, and the method comprises:

[0007] obtaining preset key information and algorithm identification information of a target preset encryption algorithm;

[0008] generating a data acquisition instruction based on the preset key information and the algorithm identification information;

[0009] sending the data acquisition instruction to a target device;

[0010] in a case where a first ciphertext sent by the target device is received, obtaining a target second ciphertext same as the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and the first ciphertext generated by different target devices is different;

[0011] determining target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext.

[0012] In a possible implementation of the first aspect, before determining the target data information corresponding to the target second ciphertext according to the correspondence between the preset data information and the second ciphertext from the plurality of preset data information, the method further includes:

[0013] In response to the data write request, obtaining data information in the data write request;

[0014] Encrypting the preset key information and the data information by using the target preset encryption algorithm to obtain information of the second ciphertext;

[0015] Generating the correspondence between the data information and the second ciphertext based on the data information and the information of the second ciphertext.

[0016] In a possible implementation of the first aspect, the method further includes:

[0017] Storing the correspondence between the data information and the second ciphertext.

[0018] In a possible implementation of the first aspect, the method further includes:

[0019] Sending the data information to the encryption chip in the target device.

[0020] In a possible implementation of the first aspect, the target data information includes device identification information of the target device.

[0021] Based on the same inventive concept, in a second aspect, the embodiments of the present application further provide a data information determination method applied to a target device, the target device including an encryption chip, and the method includes:

[0022] In response to a data acquisition instruction, obtaining preset key information and algorithm identification information of a preset encryption algorithm in the data acquisition instruction, and obtaining target data information from the encryption chip;

[0023] Obtaining information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip;

[0024] Encrypting the preset key information and the target data information by using the target preset encryption algorithm to obtain a first ciphertext;

[0025] Sending the first ciphertext to a server, so that the server obtains a target second ciphertext same as the first ciphertext from a plurality of preset second ciphertexts in a case where the first ciphertext is received, and determines target data information corresponding to the target second ciphertext according to a correspondence between preset data information and the second ciphertext from a plurality of preset data information.

[0026] In a possible implementation of the second aspect, the obtaining of the information of the target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip includes:

[0027] According to the algorithm identification information, information of a target preset encryption algorithm corresponding to the algorithm identification information is determined from the information of the plurality of preset encryption algorithms stored in the encryption chip.

[0028] Based on the same inventive concept, in a third aspect, the embodiments of the present application also provide a data information determination apparatus applied to a server, which comprises:

[0029] The obtaining module is configured to obtain preset key information and algorithm identification information of a target preset encryption algorithm.

[0030] The generating module is configured to generate a data obtaining instruction based on the preset key information and the algorithm identification information.

[0031] The sending module is configured to send the data obtaining instruction to a target device.

[0032] The obtaining module is further configured to, in a case where the first ciphertext sent by the target device is received, obtain a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data obtaining instruction, and the first ciphertext generated by different target devices is different.

[0033] The determining module is further configured to determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext.

[0034] Based on the same inventive concept, in a fourth aspect, the embodiments of the present application also provide a data information determination apparatus applied to a target device, wherein the target device comprises an encryption chip, and the apparatus comprises:

[0035] The obtaining module is configured to, in response to a data obtaining instruction, obtain preset key information and algorithm identification information of a preset encryption algorithm in the data obtaining instruction, and obtain target data information from the encryption chip.

[0036] The obtaining module is further configured to obtain information of a target preset encryption algorithm corresponding to the algorithm identification information from the encryption chip.

[0037] The encryption module is configured to encrypt the preset key information and the target data information by using the target preset encryption algorithm to obtain a first ciphertext.

[0038] The sending module is configured to send the first ciphertext to the server, so that the server obtains a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts in a case where the first ciphertext is received, and determines target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext.

[0039] Based on the same inventive concept, in a fifth aspect, the embodiments of the present application also provide a device for determining data information, which comprises a processor and a memory storing computer program instructions; the processor implements the method for determining data information according to any one of the embodiments of the first aspect, or implements the method for determining data information according to any one of the embodiments of the second aspect when executing the computer program instructions.

[0040] Based on the same inventive concept, in a sixth aspect, the embodiments of the present application also provide a computer readable storage medium, which stores computer program instructions; the computer program instructions are executed by a processor to implement the method for determining data information according to any one of the embodiments of the first aspect, or implement the method for determining data information according to any one of the embodiments of the second aspect.

[0041] Based on the same inventive concept, in a sixth aspect, the embodiments of the present application also provide a computer program product, instructions in the computer program product are executed by a processor of a device to enable the device to implement the method for determining data information according to any one of the embodiments of the first aspect, or implement the method for determining data information according to any one of the embodiments of the second aspect.

[0042] The method, device, equipment, medium and program product for determining data information provided by the embodiments of the present application, in the method, the server generates a data acquisition instruction by using preset key information and an encryption algorithm identifier, and sends the data acquisition instruction to a target device; the target device generates a unique first ciphertext and returns the first ciphertext to the server in response to the instruction; the server can quickly match a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, and can accurately determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext. Since the first ciphertext generated by different target devices is different, the target data information is data information corresponding to the target device in a plurality of data information (such as device identifiers), that is, the target data information corresponding to the target device can be determined from the data information of different devices, so that the device identity can be identified, the device identifier of the target device can be accurately and quickly determined from a plurality of device identifiers, the deployment position and use of the device can be effectively tracked, and the daily supervision efficiency of the device is greatly improved. BRIEF DESCRIPTION OF DRAWINGS

[0043] Other characteristics, objects and advantages of the present application will become more apparent from the following detailed description of the non-limiting embodiments with reference to the attached drawings, in which the same or similar reference signs refer to the same or similar features, and the drawings are not drawn to scale.

[0044] Figure 1 is a flowchart of a method for determining data information provided by the embodiments of the present application;

[0045] Figure 2 is another flow diagram of a method for determining data information according to an embodiment of the present application;

[0046] Figure 3 is another flow diagram of a method for determining data information according to an embodiment of the present application;

[0047] Figure 4 is another flow diagram of a method for determining data information according to an embodiment of the present application;

[0048] Figure 5 is a structural diagram of a device for determining data information according to an embodiment of the present application;

[0049] Figure 6 is a structural diagram of a device for determining data information according to an embodiment of the present application;

[0050] Figure 7 is a structural diagram of a device for determining data information according to an embodiment of the present application. DETAILED DESCRIPTION

[0051] The features and exemplary embodiments of the various aspects of the present application will be described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are merely configured to explain the present application and are not configured to limit the present application. The present application can be implemented without some of the specific details described below. The following description of the embodiments is merely provided to provide a better understanding of the present application by showing examples of the present application.

[0052] It should be noted that, in this document, the terms such as first and second are merely used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations. Moreover, the terms "include", "contain" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such a process, method, article or device. Without more limitations, the elements defined by the statement "include" do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0053] It should be understood that the term "and / or" as used herein merely describes an associated relationship between associated objects, and can represent three relationships, for example, A and / or B, which can represent three cases of A alone, A and B together, and B alone. In addition, the character " / " herein generally represents an "or" relationship between the front and rear associated objects.

[0054] Various modifications and changes can be made to the application in matters of form and details without departing from the spirit and scope of the application, which will be apparent to one skilled in the art. Therefore, the application is intended to cover modifications and variations of the application that come within the scope of the corresponding claims (claimed technical solutions) and their equivalents. It should be noted that the embodiments provided by the application can be combined with each other without contradiction.

[0055] It should be noted that the acquisition, storage, use and processing of data in the embodiments of the application comply with the relevant provisions of national laws and regulations.

[0056] It should be noted that in the embodiments of the application, some software, components, models and other industry solutions may be mentioned, which should be considered as exemplary, and the purpose is only to illustrate the feasibility of the implementation of the technical solutions of the application, but it does not mean that the applicant has or will necessarily use the solution.

[0057] Before describing the technical solutions provided by the embodiments of the application, in order to facilitate the understanding of the embodiments of the application, the application first specifically describes the problems existing in the related art:

[0058] Banking and other financial institutions rely on a large number of auxiliary peripherals in business handling, but many of these devices do not support reading device identification information from device firmware, making it difficult to track device deployment location and usage, and bringing challenges to the daily supervision of the device. According to statistics, among the auxiliary peripherals, peripherals that support reading device identification information only account for 30%, while peripherals that do not support reading device identification information account for 70%.

[0059] For devices that do not support reading device identification information, the commonly used manual inventory method is inefficient, for example, manually reading the device serial number from the nameplate or label pasted on the device. Some related technologies use RFID technology to paste RFID tags on the device, and then scan the device with a handheld RFID reader to obtain the device identification information. Although RFID technology improves the inventory efficiency, it is relatively high in cost and limited in frequency, and cannot achieve real-time monitoring on a daily basis. Therefore, the related art has the problem of being unable to automatically obtain device identification information and being difficult to perform daily monitoring of the device.

[0060] Based on this, the embodiment of the application provides a data information determination method, device, equipment, medium and program product, which can accurately and quickly determine the device identifier of the target device among multiple device identifiers, can effectively track the deployment position and use of the device, and greatly improves the daily supervision efficiency of the device.

[0061] The data information determination method provided by the embodiment of the application is described in detail below with reference to the accompanying drawings.

[0062] Figure 1 is a data information determination method flowchart provided by the embodiment of the application, as shown in the figure, the method can include steps S110-S190. Figure 1

[0063] S110, the server acquires preset key information and algorithm identifier information of a target preset encryption algorithm.

[0064] The server is a computer program or device that can store, process or transmit data.

[0065] In one example, the database of the server pre-stores preset key information, algorithm identifier information of a target preset encryption algorithm, multiple preset data information, and the correspondence between the preset data information and the second ciphertext, wherein the preset data information has a one-to-one correspondence with the device.

[0066] The preset key information is information set in advance and is a fixed value, which can be 1234567812345678, or 341261A5FD, and the embodiment of the application does not limit the specific value of the preset key information.

[0067] The algorithm identifier information is used to uniquely identify the encryption algorithm.

[0068] Specifically, when the server needs to determine the target data information corresponding to the target device from multiple data information, the server can acquire the key information set in advance and the algorithm identifier information of the selected encryption algorithm.

[0069] S120, the server generates a data acquisition instruction based on the preset key information and the algorithm identifier information.

[0070] Specifically, the server can generate a data acquisition instruction including the preset key information and the algorithm identifier information.

[0071] S130, the server sends the data acquisition instruction to the target device.

[0072] The target device can include an encryption chip.

[0073] ​The encryption chip is a kind of secure chip that internally integrates various symmetric and asymmetric algorithms, has a very high security level, and can ensure that the internally stored data information cannot be illegally read and tampered with. The encryption chip is characterized in that the stored data information is not readable, but can only be used for operation. In addition, the encryption chip can store multiple preset encryption algorithms.

[0074] Specifically, the server can send a data acquisition instruction to the target device.

[0075] In S140, the target device acquires the preset key information and the algorithm identification information of the preset encryption algorithm in the data acquisition instruction, and acquires the target data information from the encryption chip in response to the data acquisition instruction.

[0076] Specifically, after receiving the data acquisition instruction, the target device parses the instruction to acquire the preset key information and the algorithm identification information of the preset encryption algorithm contained therein, and then uses these information to acquire the pre-stored target data information from the encryption chip inside the target device, such as the device identification information of the target device.

[0077] In S150, the target device acquires the information of the target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip.

[0078] Specifically, the encryption chip of the target device can find the program code information of the target preset encryption algorithm corresponding to the algorithm identification information according to the algorithm identification information.

[0079] In S160, the target device encrypts the preset key information and the target data information using the target preset encryption algorithm to obtain a first ciphertext.

[0080] Specifically, the target device can encrypt the preset key information and the target data information using the program code of the target preset encryption algorithm, and can obtain a ciphertext, which can be referred to as the first ciphertext.

[0081] In S170, the target device sends the first ciphertext to the server.

[0082] Specifically, after encrypting the preset key information and the target data information according to the program code of the target preset encryption algorithm to obtain the first ciphertext, the target device can send the first ciphertext to the server.

[0083] In S180, the server acquires a target second ciphertext identical to the first ciphertext from multiple preset second ciphertexts in a case where the first ciphertext sent by the target device is received, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and the first ciphertext generated by different target devices is different.

[0084] The first ciphertext calculated based on the target preset encryption algorithm has uniqueness, different target data information corresponds to different first ciphertext, in other words, the device, data information and ciphertext have one-to-one correspondence.

[0085] Specifically, when the server receives the first ciphertext from the target device, it searches in the pre-stored multiple second ciphertexts to find a second ciphertext identical to the first ciphertext, which can be referred to as a target second ciphertext.

[0086] S190, the server determines the target data information corresponding to the target second ciphertext from the multiple preset data information according to the preset correspondence between the data information and the second ciphertext.

[0087] Specifically, after the server finds the target second ciphertext identical to the first ciphertext, it can continue to determine the target data information corresponding to the target second ciphertext from the multiple preset data information according to the preset correspondence between the data information and the second ciphertext.

[0088] The method for determining data information provided by the embodiments of the present application generates a data acquisition instruction containing preset key information and an encryption algorithm identifier by a server and sends it to a target device containing an encryption chip. The target device acquires target data information from the encryption chip using these information and uses a specified encryption algorithm to encrypt the preset key information and the target data information to generate a unique first ciphertext returned to the server. The server matches the target second ciphertext identical to the first ciphertext from the pre-stored multiple second ciphertexts, and then accurately determines the target data information corresponding to the target device according to the preset correspondence between the data information and the second ciphertext, realizes the safe and accurate acquisition of the data information, and in the case that the data information contains device identifier information, can accurately and quickly determine the device identifier information of the target device from multiple device identifier information, so as to identify the device identity, effectively track the deployment position and use of the device, and greatly improve the daily supervision efficiency of the device.

[0089] Figure 2 is another flowchart of the method for determining data information provided by the embodiments of the present application.

[0090] In some embodiments, as shown in Figure 2 Before step S190, the method further includes steps S210-S230.

[0091] S210, the server acquires the data information in the data write request in response to the data write request.

[0092] The data information is included in the data write request, for example, the device identification information of the target device is included in the data write request, and the device identification information can be input by manually reading the nameplate or label on the shell of the target device.

[0093] Specifically, when the server receives the data write request, the data information to be written into the encryption chip of the target device can be extracted from the request.

[0094] S220, the server encrypts the preset key information and the data information by using a target preset encryption algorithm to obtain second ciphertext information.

[0095] The target preset encryption algorithm can be a specified encryption algorithm from a plurality of encryption algorithms pre-stored in the encryption chip of the target device.

[0096] Specifically, the server uses the specified preset encryption algorithm to encrypt the pre-set key information and the data information (such as the device identification information of the target device) to be encrypted, and finally generates a ciphertext information, which can be referred to as the second ciphertext information.

[0097] S230, the server generates a corresponding relationship between the data information and the second ciphertext based on the data information and the second ciphertext information.

[0098] Specifically, the server establishes a corresponding relationship between the original data information and the second ciphertext information obtained by the encryption algorithm, so that the data information and the encrypted second ciphertext can correspond to each other.

[0099] In the server of the embodiment of the application, the second ciphertext can be obtained by encryption processing after receiving the data write request, and the corresponding relationship between the data information and the second ciphertext can be generated, which is beneficial to finding the target data information corresponding to the target device from a plurality of data information in the subsequent process, and the identity of the target device can be quickly and accurately determined, so that the deployment position and use of the device can be effectively tracked, and the daily supervision efficiency of the device is greatly improved.

[0100] Figure 3 is another flowchart of a method for determining data information provided by the embodiment of the application.

[0101] In some embodiments, as shown in Figure 3 The method for determining data information can further include step S240.

[0102] S240, store the corresponding relationship between the data information and the second ciphertext.

[0103] Specifically, after generating the corresponding relationship between the data information and the second ciphertext, the server can store the corresponding relationship in the database.

[0104] The server in the embodiments of the present application can obtain the second ciphertext through encryption processing after receiving the data write request, and generate the correspondence between the data information and the second ciphertext, so as to ensure that the data information is securely stored before being written into the encryption chip of the target device, and facilitate subsequent quick and accurate finding of the target data information corresponding to the target device from multiple data information, so as to determine the identity of the target device, thereby effectively tracking the deployment position and use of the device, and greatly improving the daily supervision efficiency of the device.

[0105] Figure 4 FIG. 4 is another flowchart of a method for determining data information according to an embodiment of the present application.

[0106] In some embodiments, as shown in FIG. 5, the method for determining data information can further include step S250. Figure 4

[0107] S250, the server sends the data information to the encryption chip in the target device.

[0108] Specifically, after obtaining the data information in the data write request, the server can not only generate the correspondence between the data information and the second ciphertext, but also send the data information to the encryption chip of the target device, so that the encryption chip stores the data information (such as device identification information).

[0109] In the embodiments of the present application, the server can not only generate the correspondence between the data information and the second ciphertext, but also directly send the data information to the encryption chip of the target device for storage, which is equivalent to the initialization of the device, that is, the unique data information is stored in the encryption chip of the corresponding device, thereby making sufficient and accurate work for the server to determine the target data information corresponding to the target device from multiple data information in the subsequent process.

[0110] In some embodiments, the target data information includes device identification information of the target device.

[0111] The device identification is a unique identification of the physical device, and the manufacturer usually uniquely identifies the device through a certain rule of the device serial number (SN).

[0112] In the embodiments of the present application, the target data information can include the device identification information of the target device, which can uniquely and accurately identify and recognize the target device, quickly and accurately find the target device identification information corresponding to the target device from multiple device identification information, quickly and accurately determine the identity of the target device, thereby effectively tracking the deployment position and use of the device, and greatly improving the daily supervision efficiency of the device.

[0113] ​In some embodiments, the step S150 of obtaining, by the target device, the information of the target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip can include a step S151.

[0114] S151, determining, by the target device according to the algorithm identification information, the information of the target preset encryption algorithm corresponding to the algorithm identification information from the information of the plurality of preset encryption algorithms stored in the encryption chip.

[0115] Specifically, the target device can find and confirm, according to the provided algorithm identification information, which of the plurality of preset encryption algorithm information stored in the encryption chip matches the algorithm identification information, so as to determine the information of the target preset encryption algorithm.

[0116] In the embodiments of the present application, the preset encryption algorithm information stored in the encryption chip is various, and the target device can use the plurality of preset encryption algorithm information stored in the encryption chip to quickly and accurately find and determine the corresponding target preset encryption algorithm according to the provided algorithm identification information, thereby improving the flexibility and efficiency of the encryption processing.

[0117] In one example, the method for determining data information mainly includes two steps. The first step is to initialize the device identification, and the second step is to read the identification and map the serial number.

[0118] 1) Initialize the device identification

[0119] A serial number entry interface is presented to the user, and the user enters the data information of the device serial number SN in the interface. After the server obtains the serial number SN, a fixed value V (preset key information) is encrypted using the target preset encryption algorithm (for example, SM4) to obtain a second ciphertext C.

[0120] It should be noted that at this time, the device serial number SN and the second ciphertext C value are obtained, and due to the characteristics of the target preset encryption algorithm, the uniqueness of the device serial number SN will also be reflected in the uniqueness of the second ciphertext C value. There will be no case that two different device serial numbers SN1 and SN2 are encrypted to obtain second ciphertexts C1 and C2 respectively, and C1 and C2 are equal. Therefore, a mapping relationship between the device serial number SN and the second ciphertext C value can be established and saved in the database of the server.

[0121] After saving the SN and C value in the database of the device management system and establishing the mapping relationship between the device serial number and the ciphertext value, the device serial number SN can also be written into the encryption chip of the external device, and the device serial number information is saved in the device hardware. Even if the device is moved to another terminal for use, this information is stored in the device hardware.

[0122] It should be noted that since the device serial number SN is not burned into the device firmware at the time of factory shipment, the serial number initialization needs to be completed by manual operation, and the serial number on the device nameplate or label is filled into the encryption chip through manual input.

[0123] 2) Read the identification and map the serial number

[0124] In the device management activity, when the unique identification of the device needs to be identified, the encryption chip will use the device serial number SN stored in the initialization stage and the fixed value V sent by the server to perform encryption calculation to obtain the first ciphertext.

[0125] If the peripheral device has not been initialized, an error will be reported at this time, and the program will prompt the user to initialize the device identification first.

[0126] If it is a peripheral device after the initialization of the device identification, the peripheral device will internally call the encryption chip to use the device serial number SN to perform encryption calculation on the fixed value V (preset key information) to obtain the first ciphertext C', and return to the server.

[0127] After the server obtains the first ciphertext C', it first finds the target second ciphertext equal to the first ciphertext C' from the plurality of second ciphertexts C in the database, and then finds the target data information according to the correspondence between the second ciphertext and the data information, that is, finds the device serial number SN of the target device, and then records the SN and the device management activity information together to complete the management record collection of the target device.

[0128] The device identification recognition and management activity collection can be implemented in real time and periodically in the daily use of the device, so that the user can accurately master the use of the device asset.

[0129] The embodiments of the application realize accurate identification and management of the uniqueness of the device by initializing the device identification and establishing the mapping relationship between the serial number and the encryption ciphertext, which facilitates the user to master the use of the device asset in real time, and at the same time ensures the security and accuracy of the device information.

[0130] In one example, the device serial number SN can be filled into a specific key slot to strengthen key management and avoid key conflicts with business functions. In addition, the encryption chip may lose the key due to device falling, disassembly, etc., at which time the device identification can be initialized again.

[0131] The embodiments of the application fill the device serial number into a specific key slot to strengthen key management and avoid conflicts, and if the device loses the key due to falling, disassembly, etc., the device identification can be reinitialized to restore it, ensuring the flexibility and security of the device identification information management.

[0132] Based on the same inventive concept, the embodiment of the present application further provides a data information determination apparatus applied to a server, as shown in the figure, the apparatus 500 can include an acquisition module 510, a generation module 520 and a determination module 530. Figure 5 The acquisition module 510 is configured to acquire preset key information and algorithm identification information of a target preset encryption algorithm.

[0133] The acquisition module 510 is configured to acquire preset key information and algorithm identification information of a target preset encryption algorithm.

[0134] The generation module 520 is configured to generate a data acquisition instruction based on the preset key information and the algorithm identification information.

[0135] The sending module 530 is configured to send the data acquisition instruction to a target device.

[0136] The acquisition module 510 is further configured to, in a case where a first ciphertext sent by the target device is received, acquire a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and the first ciphertext generated by different target devices is different.

[0137] The determination module 540 is further configured to determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext.

[0138] The data information determination apparatus of the embodiment of the present application, the server in the apparatus generates a data acquisition instruction by using preset key information and encryption algorithm identification, and sends the data acquisition instruction to a target device, the target device generates a unique first ciphertext in response and returns the first ciphertext to the server, the server can quickly match a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, and can accurately determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext. Since the first ciphertext generated by different target devices is different, the target data information is data information corresponding to the target device in a plurality of data information (such as device identification), that is, the target data information corresponding to the target device can be determined from data information of different devices, so that the device identification of the target device can be accurately and quickly determined from a plurality of device identifications, the deployment position and use of the device can be effectively tracked, and the daily supervision efficiency of the device is greatly improved.

[0139] In some embodiments, before the determination module is configured to determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext, the apparatus further includes an encryption module:

[0140] The acquisition module is further configured to acquire data information in a data write request in response to the data write request.

[0141] encrypting the preset key information and the data information by using a target preset encryption algorithm to obtain second ciphertext information;

[0142] The generating module is further configured to generate a correspondence between the data information and the second ciphertext based on the data information and the second ciphertext information.

[0143] In some embodiments, the apparatus further includes a storing module:

[0144] The storing module is configured to store the correspondence between the data information and the second ciphertext.

[0145] In some embodiments, the apparatus further includes:

[0146] The sending module is further configured to send the data information to the encryption chip in the target device.

[0147] In some embodiments, the target data information includes device identification information of the target device.

[0148] Based on the same inventive concept, the embodiments of the present application further provide a data information determination apparatus applied to a target device, the target device including an encryption chip, as shown in Figure 6 The apparatus 600 can include an obtaining module 610, an encryption module 620, and a sending module 630:

[0149] The obtaining module 610 is configured to, in response to a data obtaining instruction, obtain preset key information and algorithm identification information of a preset encryption algorithm in the data obtaining instruction, and obtain target data information from the encryption chip;

[0150] The obtaining module 610 is further configured to obtain information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip;

[0151] The encryption module 620 is configured to encrypt the preset key information and the target data information by using the target preset encryption algorithm to obtain first ciphertext.

[0152] The sending module 630 is configured to send the first ciphertext to a server, so that the server obtains target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts in a case where the first ciphertext is received, and determines target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between the data information and the second ciphertext.

[0153] The various modules in the data information determination apparatus provided by the embodiments of the present application can realize the functions of the various steps of the data information determination method provided by the embodiments of the present application and achieve the corresponding technical effects. Figures 1 to 4 The various steps of the data information determination method provided by the embodiments of the present application and achieve the corresponding technical effects.

[0154] Figure 7 A hardware structure diagram of a data information determination device is shown.

[0155] The data information determination device can include a processor 701 and a memory 702 storing computer program instructions.

[0156] Specifically, the processor 701 can include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement one or more embodiments of the present application.

[0157] The memory 702 can include a mass storage for data or instructions. By way of example and not limitation, the memory 702 can include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a Universal Serial Bus (USB) drive or a combination of two or more of these. The memory 702 can include removable or non-removable (or fixed) media, where appropriate. The memory 702 can be internal or external to the data information determination device, where appropriate. In certain embodiments, the memory 702 is non-volatile, solid-state memory.

[0158] The memory can include read-only memory (ROM), random access memory (RAM), magnetic disk storage mediums, optical storage mediums, flash memory devices, electrical, optical, or other physical / tangible memory storage devices. Thus, in general, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software that, when executed (by one or more processors), is operable to access the data information determination device.

[0159] The processor 701 implements any of the data information determination methods in the above embodiments by reading and executing the computer program instructions stored in the memory 702.

[0160] In one example, the data information determination device can further include a communication interface 703 and a bus 704. As shown, the processor 701, the memory 702, and the communication interface 703 are connected through the bus 704 and complete communication among each other. Figure 7 ​

[0161] The communication interface 703 is mainly configured to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0162] The bus 704 includes hardware, software, or both, that couples components of a determination device of data information to each other in a determination device of data information. To that end, the bus can include an Accelerated Graphics Port (AGP) or other graphics bus, an Extended Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association local (VESA) bus, or another suitable bus or a combination of two or more of these. Where appropriate, the bus 704 can include one or more buses. Although the present application is described and illustrated with a particular bus, it is not intended to be limited to this arrangement.

[0163] The device can execute the data information determination method in the embodiments of the present application based on each unit / component in the determination device of data information, thereby realizing the data information determination method as described above. Figures 1 to 4 The data information determination method is described.

[0164] In addition, in combination with the data information determination method in the above embodiments, the embodiments of the present application can provide a computer storage medium to realize. The computer storage medium has computer program instructions stored thereon; the computer program instructions are executed by a processor to realize any one of the data information determination methods in the above embodiments.

[0165] The application further provides a computer program product, instructions in the computer program product are executed by a processor of an electronic device, so that the electronic device executes each process of the data information determination method embodiment.

[0166] It should be noted that the present application is not limited to the specific configurations and processes described above and shown in the drawings. For the sake of brevity, detailed descriptions of well-known methods are omitted herein. In the above embodiments, several specific steps are described and shown as examples. However, the method processes of the present application are not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order of the steps, after understanding the spirit of the present application.

[0167] The functional blocks shown in the structural block diagrams described above can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a functional card, etc. When implemented in software, the elements of the present application are program or code segments used to perform the required tasks. The program or code segments can be stored in a machine-readable medium or transmitted through a data signal carried in a carrier wave over a transmission medium or communication link. The "machine-readable medium" can include any medium capable of storing or transmitting information. Examples of the machine-readable medium include electronic circuits, semiconductor memory devices, read-only memory (ROM), flash memory, erasable read-only memory (EROM), floppy disks, compact discs (CD-ROM), optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segments can be downloaded via a computer network such as the Internet, an intranet, etc.

[0168] It should be further noted that the exemplary embodiments mentioned in the present application describe some methods or systems based on a series of steps or devices. However, the present application is not limited to the order of the above steps, that is, the steps can be executed in the order mentioned in the embodiments, or in an order different from the embodiments, or several steps can be executed simultaneously.

[0169] The computer program instructions can also be loaded onto a computer, other programmable data processing apparatus, or other processing device to cause a series of operational steps to be performed on the computer, other programmable apparatus or other processing device to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions / acts specified in the flowchart and / or block diagram block or blocks.

[0170] The above is merely specific implementation of the present application, and those skilled in the art can clearly understand the specific working processes of the system, module and unit described above for the convenience and brevity of description, which can refer to the corresponding processes in the foregoing method embodiments, and will not be described herein. It should be understood that the protection scope of the present application is not limited to this, and any person skilled in the art can easily think of various equivalent modifications or replacements within the technical range disclosed in the present application, and these modifications or replacements should be covered within the protection scope of the present application.

Claims

1. A method of determining data information, characterized by, The method applied to a server comprises: obtaining preset key information and algorithm identification information of a target preset encryption algorithm; generating a data acquisition instruction based on the preset key information and the algorithm identification information; sending the data acquisition instruction to a target device; in a case where a first ciphertext sent by the target device is received, obtaining a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and the first ciphertext generated by different target devices is different; determining target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between data information and second ciphertexts; before the determining, the method further comprises: obtaining data information in a data write request in response to the data write request; encrypting the preset key information and the data information by using the target preset encryption algorithm to obtain information of the second ciphertext; generating the correspondence between the data information and the second ciphertexts based on the data information and the information of the second ciphertext.

2. The method of claim 1, wherein, Further comprising: storing the correspondence between the data information and the second ciphertexts.

3. The method of claim 1, wherein, Further comprising: sending the data information to an encryption chip in the target device.

4. The method according to any one of claims 1 to 3, characterized in that, The target data information comprises device identification information of the target device.

5. A method of determining data information, characterized by, The method applied to a target device comprising an encryption chip comprises: in response to a data acquisition instruction, obtaining preset key information and algorithm identification information of a preset encryption algorithm in the data acquisition instruction, and obtaining target data information from the encryption chip; obtaining information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip; encrypting the preset key information and the target data information by using the target preset encryption algorithm to obtain a first ciphertext; sending the first ciphertext to a server, so that the server obtains a target second ciphertext identical to the first ciphertext from a plurality of preset second ciphertexts in a case where the first ciphertext is received; in response to a data write request, obtaining data information in the data write request; encrypting the preset key information and the data information by using the target preset encryption algorithm to obtain information of the second ciphertext; generating a correspondence between the data information and the second ciphertexts based on the data information and the information of the second ciphertext; and determining target data information corresponding to the target second ciphertext from a plurality of preset data information according to the preset correspondence between the data information and the second ciphertexts.

6. The method of claim 5, wherein, The obtaining information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip comprises: determining information of a target preset encryption algorithm corresponding to the algorithm identification information from information of a plurality of preset encryption algorithms stored in the encryption chip according to the algorithm identification information.

7. An apparatus for determining data information, characterized by comprising: The device applied to a server comprises: The acquisition module is configured to acquire preset key information and algorithm identification information of a target preset encryption algorithm; The generation module is configured to generate a data acquisition instruction based on the preset key information and the algorithm identification information; The sending module is configured to send the data acquisition instruction to a target device; The acquisition module is further configured to, in a case where the target device sends first ciphertext, acquire target second ciphertext that is the same as the first ciphertext from a plurality of preset second ciphertexts, wherein the first ciphertext is generated by the target device based on the data acquisition instruction, and the first ciphertext generated by different target devices is different; The acquisition module is further configured to, in response to a data write request, acquire data information in the data write request; The encryption module is configured to encrypt the preset key information and the data information by using the target preset encryption algorithm to obtain second ciphertext information; The generation module is further configured to generate a correspondence between the data information and the second ciphertext based on the data information and the second ciphertext information. The determination module is further configured to determine target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between data information and second ciphertext.

8. An apparatus for determining data information, characterized by comprising: The device is applied to a target device, and the target device includes an encryption chip. The acquisition module is configured to, in response to a data acquisition instruction, acquire preset key information and algorithm identification information of a preset encryption algorithm in the data acquisition instruction, and acquire target data information from the encryption chip; The acquisition module is further configured to acquire information of a target preset encryption algorithm corresponding to the algorithm identification information in the encryption chip; The encryption module is configured to encrypt the preset key information and the target data information by using the target preset encryption algorithm to obtain first ciphertext; The sending module is configured to send the first ciphertext to a server, so that the server acquires target second ciphertext that is the same as the first ciphertext from a plurality of preset second ciphertexts in a case where the first ciphertext is received; in response to a data write request, acquires data information in the data write request; encrypts the preset key information and the data information by using the target preset encryption algorithm to obtain second ciphertext information; generates a correspondence between the data information and the second ciphertext based on the data information and the second ciphertext information; and determines target data information corresponding to the target second ciphertext from a plurality of preset data information according to a preset correspondence between data information and second ciphertext.

9. A device for determining data information, characterized by The device includes a processor and a memory storing computer program instructions; the processor implements the data information determination method in any one of claims 1 to 4 when executing the computer program instructions, or implements the data information determination method in any one of claims 5 to 6 when executing the computer program instructions.

10. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer program instructions, which, when executed by a processor, implement the data information determination method of any one of claims 1 to 4, or implement the data information determination method of any one of claims 5 to 6.

11. A computer program product, characterised in that, The instructions in the computer program product, when executed by a processor of a device, enable the device to implement the data information determination method of any one of claims 1 to 4, or implement the data information determination method of any one of claims 5 to 6.

Images