Data management method and device, electronic equipment, storage medium and product

Abstract

The invention relates to a data management method and device, electronic equipment, a storage medium and a product. The method comprises the steps of receiving to-be-processed data uploaded by data uploading equipment, wherein the to-be-processed data is used for representing a work completion condition of a user; allocating identification information to the to-be-processed data; for the to-be-processed data distributed with the identification information, abnormal data in the to-be-processed data is removed, and the format of the to-be-processed data is converted into a format matched with each analysis model; analyzing the to-be-processed data by applying each analysis model to obtain an analysis result; and performing encryption processing on the analysis result by adopting a symmetric encryption technology and an asymmetric encryption technology to obtain a ciphertext and a secret key, and sending the ciphertext and the secret key to data uploading equipment. By adopting the method, the practicability and reliability of the achievement management platform during data management can be improved.

Description

Technical Field

[0001] The present application relates to the field of data management technology, and in particular to a data management method and device, electronic equipment, storage medium and product. Background Art

[0002] A results management platform is an information system used to manage projects, tasks, and performance. It is mainly used in enterprises or organizations to optimize resource allocation, track and evaluate the work progress and effectiveness of employees or teams. This platform usually includes several key functions to make the management process more efficient and transparent.

[0003] However, the existing cloud computing-based performance management platforms and construction methods have problems with weak data security and privacy during use, resulting in insufficient protection of users' sensitive data. Users will be skeptical about the reliability of the cloud platform and refuse to use it or limit the type of data uploaded.

[0004] Therefore, how to improve the practicality and reliability of the performance management platform in data management still needs to be considered. Summary of the invention

[0005] Based on this, it is necessary to provide a data management method and device, electronic device, storage medium and product that can improve the practicality and reliability of the performance management platform when performing data management in response to the above technical problems.

[0006] In a first aspect, the present application provides a data management method, comprising:

[0007] Receiving the data to be processed uploaded by the data uploading device, wherein the data to be processed is used to represent the work completion status of the user;

[0008] Assigning identification information to the data to be processed, wherein the identification information includes at least one of a plurality of information, wherein the plurality of information includes: user account information, access permission information, access role information, various types of work project information associated with the data to be processed, and various work task information associated with the data to be processed;

[0009] For the data to be processed that is assigned identification information, remove abnormal data in the data to be processed, and convert the format of the data to be processed into a format that is compatible with each analysis model;

[0010] Applying each analysis model to analyze the data to be processed to obtain analysis results;

[0011] Symmetric encryption technology and asymmetric encryption technology are used to encrypt the analysis results to obtain ciphertext and key, and the ciphertext and key are sent to the data uploading device.

[0012] In one embodiment, the symmetric encryption technology and the asymmetric encryption technology are used to encrypt the analysis result data to obtain a ciphertext and a key, and the ciphertext and the key are sent to the data uploading device, including:

[0013] Generate a first key of a symmetric encryption algorithm, and encrypt the first key using a public key of an asymmetric encryption algorithm to obtain a second key;

[0014] Encrypt the analysis result using a symmetric encryption algorithm to obtain a ciphertext;

[0015] The ciphertext and the second key are sent to the data uploading device.

[0016] In one embodiment, encrypting the analysis result using a symmetric encryption algorithm includes:

[0017] The analysis result is encrypted in multiple rounds using a symmetric encryption algorithm.

[0018] In one embodiment, the method of performing multiple rounds of encryption on the analysis result data using a symmetric encryption algorithm includes:

[0019] Generate a subkey required for each round of encryption according to the first key;

[0020] When performing the first round of encryption, an XOR operation is performed between the analysis result data and the subkey corresponding to the first round to obtain a state matrix;

[0021] When performing the last round of encryption, perform byte replacement and row shift operations on the state matrix after the previous round of encryption, and perform an XOR operation between the matrix obtained after the operation and the subkey corresponding to the current round;

[0022] When performing a round of encryption that is neither the first nor the last round of encryption, perform byte replacement, row shift, and column confusion operations on the state matrix after the previous round of encryption, and perform an XOR operation between the matrix obtained after the operation and the subkey corresponding to the current round to obtain a new state matrix.

[0023] In one embodiment, the process of performing byte replacement, row shifting and column obfuscation includes:

[0024] Replace each byte in the state matrix;

[0025] According to different offsets, each row in the state matrix is ​​cyclically shifted in a preset direction;

[0026] Apply a specific mathematical transformation to each column of the state matrix.

[0027] In one embodiment, the cyclic shifting of each row in the state matrix in a preset direction includes:

[0028] Shift the data in row i to the left by i-1 bytes, where i is a natural number greater than 0.

[0029] In a second aspect, the present application further provides a data management device, comprising:

[0030] A communication module, used to receive the data to be processed uploaded by the data uploading device, wherein the data to be processed is used to represent the work completion status of the user;

[0031] A processing module, configured to assign identification information to the data to be processed, wherein the identification information includes at least one of a plurality of information, wherein the plurality of information includes: user account information, access permission information, access role information, various types of work item information associated with the data to be processed, and various types of work task information associated with the data to be processed;

[0032] The processing module is further used to remove abnormal data from the data to be processed and convert the format of the data to be processed into a format suitable for each analysis model.

[0033] The processing module is further used to apply various analysis models to analyze the data to be processed to obtain analysis results;

[0034] The processing module is further used to encrypt the analysis result using symmetric encryption technology and asymmetric encryption technology to obtain ciphertext and key;

[0035] The communication module is also used to send the ciphertext and key to the data uploading device.

[0036] In a third aspect, the present application further provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0037] Receiving the data to be processed uploaded by the data uploading device, wherein the data to be processed is used to represent the work completion status of the user;

[0038] Assigning identification information to the data to be processed, wherein the identification information includes at least one of a plurality of information, wherein the plurality of information includes: user account information, access permission information, access role information, various types of work project information associated with the data to be processed, and various work task information associated with the data to be processed;

[0039] For the data to be processed that is assigned identification information, remove abnormal data in the data to be processed, and convert the format of the data to be processed into a format that is compatible with each analysis model;

[0040] Applying each analysis model to analyze the data to be processed to obtain analysis results;

[0041] Symmetric encryption technology and asymmetric encryption technology are used to encrypt the analysis results to obtain ciphertext and key, and the ciphertext and key are sent to the data uploading device.

[0042] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0043] Receiving the data to be processed uploaded by the data uploading device, wherein the data to be processed is used to represent the work completion status of the user;

[0044] Assigning identification information to the data to be processed, wherein the identification information includes at least one of a plurality of information, wherein the plurality of information includes: user account information, access permission information, access role information, various types of work project information associated with the data to be processed, and various work task information associated with the data to be processed;

[0045] For the data to be processed that is assigned identification information, remove abnormal data in the data to be processed, and convert the format of the data to be processed into a format that is compatible with each analysis model;

[0046] Applying each analysis model to analyze the data to be processed to obtain analysis results;

[0047] Symmetric encryption technology and asymmetric encryption technology are used to encrypt the analysis results to obtain ciphertext and key, and the ciphertext and key are sent to the data uploading device.

[0048] In a fifth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0049] Receiving the data to be processed uploaded by the data uploading device, wherein the data to be processed is used to represent the work completion status of the user;

[0050] Assigning identification information to the data to be processed, wherein the identification information includes at least one of a plurality of information, wherein the plurality of information includes: user account information, access permission information, access role information, various types of work project information associated with the data to be processed, and various work task information associated with the data to be processed;

[0051] For the data to be processed that is assigned identification information, remove abnormal data in the data to be processed, and convert the format of the data to be processed into a format that is compatible with each analysis model;

[0052] Applying each analysis model to analyze the data to be processed to obtain analysis results;

[0053] Symmetric encryption technology and asymmetric encryption technology are used to encrypt the analysis results to obtain ciphertext and key, and the ciphertext and key are sent to the data uploading device.

[0054] The above data management method and device, electronic device, storage medium and product can ensure the security of data during transmission and storage by combining symmetric encryption technology and asymmetric encryption technology. Symmetric encryption technology provides a fast and efficient data encryption mechanism, while the public key encryption technology of asymmetric encryption technology is used to securely exchange keys. This double encryption strategy greatly enhances the security and protection level of data. Therefore, the data management method can improve the practicality and reliability of the achievement management platform when performing data management. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0056] FIG1 is an application environment diagram of a data management method in one embodiment;

[0057] FIG2 is a schematic diagram of a flow chart of a data management method in one embodiment;

[0058] FIG3 is a schematic diagram of a flow chart of step 302 in one embodiment;

[0059] FIG4 is a schematic diagram of a performance management platform in another embodiment;

[0060] FIG5 is a structural block diagram of a data management device in one embodiment;

[0061] FIG. 6 is a diagram showing the internal structure of an electronic device in one embodiment. DETAILED DESCRIPTION

[0062] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0063] The data management method provided in the embodiment of the present application can be applied to the application environment shown in Figure 1. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. Among them, the terminal 102 can be but is not limited to various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices. The portable wearable device can be a smart watch, a smart bracelet, etc. The server 104 can be an independent physical server, or it can be a server cluster or distributed system composed of multiple physical servers, or it can be a cloud server that provides cloud computing services.

[0064] A results management platform is an information system used to manage projects, tasks, and performance. It is mainly used in enterprises or organizations to optimize resource allocation, track and evaluate the work progress and effectiveness of employees or teams. This platform usually includes several key functions to make the management process more efficient and transparent.

[0065] However, the existing cloud computing-based performance management platforms and construction methods have problems with weak data security and privacy during use, resulting in insufficient protection of users' sensitive data. Users will be skeptical about the reliability of the cloud platform and refuse to use it or limit the type of data uploaded.

[0066] Based on this, the present application provides a data management method and device, electronic device, storage medium and product. The data management method can ensure the security of data during transmission and storage by combining symmetric encryption technology and asymmetric encryption technology. Symmetric encryption technology provides a fast and efficient data encryption mechanism, while the public key encryption technology of asymmetric encryption technology is used to securely exchange keys. This dual encryption strategy greatly enhances the security and protection level of data.

[0067] In an exemplary embodiment, as shown in FIG2 , a data management method is provided, which is described by taking the method applied to the server 104 in FIG1 as an example, and includes the following steps 201 to 205. Among them:

[0068] Step 201: receiving the data to be processed uploaded by the data uploading device, where the data to be processed is used to represent the work completion status of the user.

[0069] The data uploading device is, for example, the terminal mentioned above.

[0070] The data to be processed refers to achievement data, such as work completion progress, data of completed work, etc. The data to be processed is used to represent the user's work completion status.

[0071] Step 202: assign identification information to the data to be processed.

[0072] The identification information includes at least one of a variety of information, including: user account information, access permission information, access role information, various work project information associated with the data to be processed, and various work task information associated with the data to be processed.

[0073] Step 203: For the data to be processed that is assigned with identification information, remove abnormal data in the data to be processed, and convert the format of the data to be processed into a format that is compatible with each analysis model.

[0074] The abnormal data includes erroneous data, incomplete data, etc.

[0075] Among them, the analysis model is used for work progress analysis model, completion quality analysis model of completed work, etc. This analysis model is an analysis model in the achievement management platform.

[0076] Step 204: Apply each analysis model to analyze the data to be processed to obtain analysis results.

[0077] Each analysis model is used to conduct a multi-dimensional review of the data to be processed to ensure the compliance and authenticity of the data to be processed. The analysis result includes the data to be processed and the review result of the data to be processed.

[0078] Step 205: Use symmetric encryption technology and asymmetric encryption technology to encrypt the analysis result to obtain a ciphertext and a key, and send the ciphertext and the key to the data uploading device.

[0079] Among them, symmetric encryption technology can also be understood as a symmetric encryption algorithm. Symmetric encryption means that the same key is used for encryption and decryption. In this embodiment, the symmetric encryption technology is preferably Advanced Encryption Standard (AES) symmetric encryption technology. AES encryption technology uses 128-bit, 192-bit or 256-bit keys to encrypt and decrypt data. It uses a block cipher system to group plaintext according to a fixed size (usually 128 bits), and then encrypt each group in multiple rounds. Each round of encryption includes four steps: byte substitution (SubBytes), row shift (ShiftRows), column confusion (MixColumns) and round key addition (AddRoundKey). The encryption speed of AES encryption technology is relatively fast, especially for encryption with a key length of 128 bits, high-speed encryption can be achieved on hardware. In addition, AES encryption technology uses a highly complex algorithm structure, including multiple operations such as byte substitution, row shift, column confusion, etc., making it difficult for attackers to find an effective attack path.

[0080] Among them, asymmetric encryption technology can also be understood as an asymmetric encryption algorithm. In this embodiment, RSA (Rivest-Shamir-Adleman) asymmetric encryption technology is preferred. RSA is different from the symmetric encryption algorithm in that the RSA algorithm has two different keys, one of which is a public key and the other is a private key. The public key can be made public to anyone, while the private key needs to be kept confidential. The security of RSA is based on the difficulty of large number decomposition. It usually generates a pair of RSA keys (public key and private key) first, and then uses the public key to encrypt the plaintext to obtain the ciphertext. After receiving the ciphertext, the recipient uses the private key to decrypt the ciphertext to obtain the plaintext. The RSA algorithm has high security, but its encryption and decryption speed is relatively slow. This is because the RSA algorithm needs to perform multiple word length processing such as exponentiation and modulus of large integers, and the processing speed is significantly slower than symmetric encryption algorithms such as AES. Therefore, the RSA algorithm is usually not used to encrypt large amounts of data, but is used to encrypt small amounts of data (such as session keys) or perform operations such as digital signatures.

[0081] This embodiment adopts dual encryption technology, that is, combining symmetric encryption technology and asymmetric encryption technology, which can ensure the security of encryption while achieving high-speed encryption.

[0082] The above data management method can ensure the security of data during transmission and storage by combining symmetric encryption technology and asymmetric encryption technology. Symmetric encryption technology provides a fast and efficient data encryption mechanism, while the public key encryption technology of asymmetric encryption technology is used to securely exchange keys. This double encryption strategy greatly enhances the security and protection level of data. Therefore, the data management method can improve the practicality and reliability of the achievement management platform when performing data management.

[0083] In an exemplary embodiment, as shown in FIG3 , step 205 includes steps 301 to 303. Among them:

[0084] Step 301: Generate a first key of a symmetric encryption algorithm, and encrypt the first key using a public key of an asymmetric encryption algorithm to obtain a second key.

[0085] When using AES symmetric encryption, generate an AES key is the first key.

[0086] When using RSA asymmetric encryption, the first key is encrypted using the RSA public key, and the obtained second key is . .

[0087] Step 302: Use a symmetric encryption algorithm to encrypt the analysis result to obtain a ciphertext.

[0088] Assuming that the analysis result is M, when AES symmetric encryption is adopted, the analysis result M is encrypted by AES, and then a series of AES operations are used to convert the encrypted analysis result M into ciphertext.

[0089] Step 303: Send the ciphertext and the second key to the data uploading device.

[0090] That is, the encrypted AES key The data upload device can decrypt the AES key using the RSA private key. The decrypted AES key is , At this point, the data uploading device shares the AES key , you can use AES key to securely encrypt and decrypt data.

[0091] In this embodiment, the combined use of AES and RSA not only provides a stronger encryption effect, but also takes advantage of the high efficiency of symmetric encryption and the secure transmission capability of asymmetric encryption. Symmetric keys are securely transmitted through asymmetric encryption, and symmetric encryption is used to process large amounts of data, effectively combining the advantages of both.

[0092] In some embodiments, step 302 includes:

[0093] Step 1: Use a symmetric encryption algorithm to perform multiple rounds of encryption on the analysis result.

[0094] First, key expansion is performed, that is, the subkeys required for each round of encryption are generated based on the first key. Specifically, based on the original AES key Generate a series of subkeys required for multiple rounds of encryption. The subkeys are generated through an iterative algorithm that includes the substitution box (S-box) and the round constant (Rcon) XOR operation.

[0095] When performing the first round of encryption, perform an XOR operation between the analysis result data and the subkey corresponding to the first round to obtain a state matrix. Specifically, the first round of key addition: perform an XOR operation between the analysis result M and the first subkey: , where Represents the subkey corresponding to the first round, Represents the analysis result, Represents the state matrix.

[0096] When performing a round of encryption that is neither the first nor the last round (i.e., an intermediate round of encryption), perform byte replacement, row shift, and column confusion operations on the state matrix after the previous round of encryption, and perform an XOR operation between the matrix obtained after the operation and the subkey corresponding to the current round to obtain a new state matrix.

[0097] When performing byte replacement, each byte in the state matrix is ​​replaced. Specifically, each byte in the state matrix is ​​replaced using S-box. Specifically, the formula used for byte replacement is .

[0098] When performing row shift, each row in the state matrix is ​​circularly shifted in a preset direction according to different offsets. Specifically, each row in the state matrix is ​​circularly shifted to the left by different offsets. For example, the data in the i-th row is shifted to the left by i-1 bytes, where i is a natural number greater than 0.

[0099] When performing column obfuscation, a specific mathematical transformation is applied to each column of the state matrix. Column obfuscation follows a linear transformation of the finite field multiplication and addition rules. , where represents the state matrix, Represents the state matrix after column confusion.

[0100] When performing the last round of encryption, the state matrix after the previous round of encryption is subjected to byte replacement and row shift operations, and the matrix obtained after the operation is subjected to an XOR operation with the subkey corresponding to the current round. In other words, column confusion is not performed in the last round of encryption, only byte replacement, row shift and round key addition are performed.

[0101] From the above description, it can be seen that subkeys are added in each round of encryption. Specifically, when adding subkeys, use Where Represents the state matrix to be processed in this round, Represents the subkey corresponding to this round of encryption, Represents the state matrix with subkeys added.

[0102] Since subkeys are added to each round of encryption, AES provides an additional layer of security. Even if an attacker can reverse one or more steps, the original data cannot be restored without the correct round key, which improves the security and reliability of data management.

[0103] It should be understood that, although the steps in the flowcharts of the embodiments described above are shown in sequence according to the instructions of the arrows, these steps are not necessarily performed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be performed in other orders. Moreover, at least a portion of the steps in the flowcharts of the embodiments described above can include multiple steps or multiple stages, and these steps or stages are not necessarily performed at the same time, but can be performed at different times, and the execution order of these steps or stages is not necessarily performed in sequence, but can be performed in turn or alternately with other steps or at least a portion of the steps or stages in other steps.

[0104] Please refer to FIG. 4 . Some embodiments of the present application further provide a performance management platform, which is used to execute the data management method provided in any of the above embodiments.

[0105] As shown in the figure, the results management platform includes system integration and optimization module, user management module, project management module, task management module, data analysis module and data security and privacy protection module.

[0106] The system integration and optimization module is configured with an application programming interface (API) gateway, which communicates with different types of data uploading devices through the API gateway. Based on this, the system integration and optimization module can receive the data to be processed uploaded by the data uploading device.

[0107] Based on the user management module, user account information, access permission information, access role information, etc. can be allocated to the data to be processed.

[0108] Based on the project management module, various types of work project information associated with the data to be processed can be allocated to the data to be processed.

[0109] Based on the task management module, each work task information associated with the data to be processed can be allocated to the data to be processed.

[0110] Based on the data analysis module, abnormal data in the data to be processed can be removed, and the format of the data to be processed can be converted into a format suitable for each analysis model. Each analysis model can also be used to analyze the data to be processed to obtain analysis results.

[0111] Based on the data security and privacy protection module, symmetric encryption technology and asymmetric encryption technology can be used to encrypt the analysis results to obtain ciphertext and key, and the ciphertext and key are sent to the data uploading device.

[0112] For the description of the data management method executed by the performance management platform, please refer to the above description of the data management method, which will not be repeated here.

[0113] In some embodiments, the containerization technology and container orchestration tools used in building the performance management platform are Docker and Kubernetes. Docker is an open source containerization platform that allows developers to package applications and all their dependencies into an independent container to achieve rapid deployment, portability, and environmental consistency. Kubernetes is an open source container orchestration and management platform for automating the deployment, expansion, and management of containerized applications. It provides a reliable cluster management system that can coordinate and schedule large-scale container deployments.

[0114] Specifically, during the development phase of the performance management platform, Docker is used to encapsulate applications and dependencies to ensure consistency in the development, testing, and production environments. During the deployment phase of the performance management platform, Kubernetes is used to automatically deploy Docker containers, perform load balancing, and ensure high availability of services. In addition, updates, expansions, or fine-tuning of applications in the performance management platform can all be managed through Kubernetes, providing seamless rolling updates and expansion capabilities.

[0115] The adoption of microservice architecture and containerization technology (Docker and Kubernetes) ensures the independence of each part of the achievement management platform, making the system easier to manage, maintain and expand. The architectural design of the achievement management platform not only simplifies the deployment and integration process, but also improves the availability and reliability of the system. At the same time, the system integration and optimization module uses the API gateway as a unified entrance between different systems, services and clients, which simplifies the communication between the achievement management platform and the cloud platform, reduces the complexity of integration, and can effectively improve the overall operation efficiency of the achievement management platform and reduce potential errors or failure points.

[0116] Based on the same inventive concept, the embodiment of the present application also provides a data management device for implementing the data management method involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations in one or more data management device embodiments provided below can refer to the limitations on the data management method above, and will not be repeated here.

[0117] In an exemplary embodiment, as shown in FIG5 , a data management device 50 is provided, including: a communication module 51 and a processing module 52, wherein:

[0118] The communication module 51 is used to receive the data to be processed uploaded by the data uploading device, and the data to be processed is used to represent the work completion status of the user.

[0119] The processing module 52 is used to assign identification information to the data to be processed, and the identification information includes at least one of multiple information, and the multiple information includes: user account information, access permission information, access role information, various work project information associated with the data to be processed, and various work task information associated with the data to be processed.

[0120] The processing module 52 is further used to remove abnormal data from the data to be processed to which identification information is assigned, and convert the format of the data to be processed into a format suitable for each analysis model.

[0121] The processing module 52 is also used to apply various analysis models to analyze the data to be processed to obtain analysis results.

[0122] The processing module 52 is also used to use symmetric encryption technology and asymmetric encryption technology to encrypt the analysis results to obtain ciphertext and keys.

[0123] The communication module 51 is also used to send the ciphertext and the key to the data uploading device.

[0124] In one embodiment, the processing module 52 is used to generate a first key of a symmetric encryption algorithm, and encrypt the first key using a public key of an asymmetric encryption algorithm to obtain a second key; encrypt the analysis result using a symmetric encryption algorithm to obtain a ciphertext; and send the ciphertext and the second key to the data upload device.

[0125] In one embodiment, the processing module 52 is used to perform multiple rounds of encryption on the analysis result using a symmetric encryption algorithm.

[0126] In one embodiment, the processing module 52 is used to generate the subkey required for each round of encryption based on the first key; when performing the first round of encryption, the analysis result data is XORed with the subkey corresponding to the first round to obtain a state matrix; when performing the last round of encryption, byte replacement and row shift operations are performed on the state matrix after the previous round of encryption, and the matrix obtained after the operation is XORed with the subkey corresponding to the current round; when performing a round of encryption that is not the first round of encryption and not the last round of encryption, byte replacement, row shift and column confusion operations are performed on the state matrix after the previous round of encryption, and the matrix obtained after the operation is XORed with the subkey corresponding to the current round to obtain a new state matrix.

[0127] In one embodiment, the processing module 52 is used to replace each byte in the state matrix; cyclically shift each row in the state matrix in a preset direction according to different offsets; and apply a specific mathematical transformation to each column of the state matrix.

[0128] In one embodiment, the processing module 52 is used to shift the data in the i-th row to the left by i-1 bytes, where i is a natural number greater than 0.

[0129] Each module in the above-mentioned data management device 50 can be implemented in whole or in part by software, hardware or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each of the above modules.

[0130] In an exemplary embodiment, an electronic device is provided, which may be a server, and its internal structure diagram may be shown in FIG6. The electronic device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the electronic device is used to provide computing and control capabilities. The memory of the electronic device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the electronic device is used to store data. The input / output interface of the electronic device is used to exchange information between the processor and an external device. The communication interface of the electronic device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, the data management method provided in any of the above embodiments is implemented.

[0131] Those skilled in the art will understand that the structure shown in FIG. 6 is merely a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the electronic device to which the scheme of the present application is applied. The specific electronic device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0132] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the data management method provided in any of the above embodiments is implemented.

[0133] In one embodiment, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the data management method provided in any of the above embodiments is implemented.

[0134] It should be noted that the data involved in this application (including but not limited to data used for analysis, stored data, displayed data, etc.) are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0135] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0136] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0137] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A data management method, characterized in that: include: Receiving the data to be processed uploaded by the data uploading device, wherein the data to be processed is used to represent the work completion status of the user; Assigning identification information to the data to be processed, wherein the identification information includes at least one of a plurality of information, wherein the plurality of information includes: user account information, access permission information, access role information, various types of work project information associated with the data to be processed, and various work task information associated with the data to be processed; For the data to be processed that is assigned identification information, remove abnormal data in the data to be processed, and convert the format of the data to be processed into a format that is compatible with each analysis model; Applying each analysis model to analyze the data to be processed to obtain analysis results; Symmetric encryption technology and asymmetric encryption technology are used to encrypt the analysis results to obtain ciphertext and key, and the ciphertext and key are sent to the data uploading device.

2. The method according to claim 1, characterized in that The method uses symmetric encryption technology and asymmetric encryption technology to encrypt the analysis result data to obtain ciphertext and key, and sends the ciphertext and key to the data uploading device, including: Generate a first key of a symmetric encryption algorithm, and encrypt the first key using a public key of an asymmetric encryption algorithm to obtain a second key; Encrypt the analysis result using a symmetric encryption algorithm to obtain a ciphertext; The ciphertext and the second key are sent to the data uploading device.

3. The method according to claim 2, characterized in that The step of encrypting the analysis result using a symmetric encryption algorithm comprises: The analysis result is encrypted in multiple rounds using a symmetric encryption algorithm.

4. The method according to claim 3, characterized in that: The method of using a symmetric encryption algorithm to perform multiple rounds of encryption on the analysis result data includes: Generate a subkey required for each round of encryption according to the first key; When performing the first round of encryption, an XOR operation is performed between the analysis result data and the subkey corresponding to the first round to obtain a state matrix; When performing the last round of encryption, perform byte replacement and row shift operations on the state matrix after the previous round of encryption, and perform an XOR operation between the matrix obtained after the operation and the subkey corresponding to the current round; When performing a round of encryption that is neither the first nor the last round of encryption, perform byte replacement, row shift, and column confusion operations on the state matrix after the previous round of encryption, and perform an XOR operation between the matrix obtained after the operation and the subkey corresponding to the current round to obtain a new state matrix.

5. The method according to any one of claim 4, characterized in that: The process of performing byte replacement, row shifting and column confusion includes: Replace each byte in the state matrix; According to different offsets, each row in the state matrix is ​​cyclically shifted in a preset direction; Apply a specific mathematical transformation to each column of the state matrix.

6. The data management method according to any one of claim 5, characterized in that: The cyclically shifting each row in the state matrix in a preset direction comprises: Shift the data in row i to the left by i-1 bytes, where i is a natural number greater than 0.

7. A data management device, characterized in that: include: A communication module, used to receive the data to be processed uploaded by the data uploading device, wherein the data to be processed is used to represent the work completion status of the user; A processing module, configured to assign identification information to the data to be processed, wherein the identification information includes at least one of a plurality of information, wherein the plurality of information includes: user account information, access permission information, access role information, various types of work item information associated with the data to be processed, and various types of work task information associated with the data to be processed; The processing module is further used to remove abnormal data from the data to be processed and convert the format of the data to be processed into a format suitable for each analysis model. The processing module is further used to apply various analysis models to analyze the data to be processed to obtain analysis results; The processing module is further used to encrypt the analysis result using symmetric encryption technology and asymmetric encryption technology to obtain ciphertext and key; The communication module is also used to send the ciphertext and key to the data uploading device.

8. An electronic device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images