Encrypted storage method and system based on time, electronic equipment and storage medium

Abstract

The invention provides a time-based encrypted storage method and system, electronic equipment and a storage medium, and aims to solve the problems that data storage has a key leakage risk and cannot be periodically alternated. The method comprises the following steps: setting a security module between an application server and a data storage library; generating a master key in the security module based on the time parameter, and encrypting the data key to obtain a ciphertext of the data key; acquiring ciphertext information of the configured master key and the data key from the security module through the application server, and verifying whether the master key is in a valid period; if the master key is within the period of validity, using the master key and the ciphertext of the data key to initialize a security module; after the security module is initialized, calling the security module through the application server to realize encryption and decryption of the stored data; and storing the data encrypted by the security module into a data storage library. According to the invention, encryption protection can be carried out on the storage key, and the security requirement of regular rotation of the key is met.

Description

Technical Field

[0001] The present disclosure relates to the field of data security technology, and in particular to a time-based encryption storage method, a time-based encryption storage system, an electronic device, and a computer-readable storage medium. Background Art

[0002] Encrypted storage of sensitive data in application services is a necessary measure for information security. When an application service receives sensitive data, it is first encrypted and then stored; when an application service needs to read data, it first reads the ciphertext data from the database and then decrypts it for use.

[0003] There are two main implementation ideas for existing data encryption storage: one is to directly use the locally dependent symmetric encryption algorithm to encrypt and decrypt data, which is highly efficient, but can only guarantee security at the database level. The security at the application level is relatively weak, and the risk of key leakage cannot be completely avoided, and it is not easy to rotate the key regularly. The second is to connect to the password resource pool and implement data encryption and decryption through the interface call encryption algorithm, which basically solves the risk of key leakage at the application level, but adds additional service calls, which not only increases performance loss, but also greatly increases the deployment and operation and maintenance costs of application services. Summary of the invention

[0004] In order to at least solve the problem that the data encryption storage in the prior art directly uses the locally dependent symmetric encryption algorithm, cannot completely avoid the risk of key leakage, is not easy to rotate the key regularly, and the connection to the password resource pool increases the performance loss and cost. The present invention discloses a time-based encryption storage method, a time-based encryption storage system, an electronic device, and a computer-readable storage medium, which integrates an additional master key and a time-based data authentication mechanism to encrypt and protect the storage key, thereby ensuring the security of the data key and the data storage, and also meeting the security needs of regular key rotation.

[0005] In a first aspect, the present disclosure provides a time-based encrypted storage method, the method comprising:

[0006] Set up a security module between the application server and the data repository;

[0007] Generate a master key based on the time parameter in the security module, and encrypt the data key to obtain the ciphertext of the data key;

[0008] Obtain the ciphertext information of the configured master key and data key from the security module through the application server, and verify whether the master key is within the validity period; and

[0009] If the master key is within the validity period, the security module is initialized using the ciphertext of the master key and the data key;

[0010] After the security module is initialized, the application server calls the security module to encrypt and decrypt the stored data;

[0011] Store the data encrypted by the security module into the data repository.

[0012] Furthermore, the generating of the master key based on the time parameter in the security module and encrypting the data key to obtain the ciphertext of the data key includes:

[0013] Generate a temporary verification code based on the time parameters and key parameters input into the security module;

[0014] Generate a master key based on the key key parameters and temporary verification code, and return the master key to the user;

[0015] For the master key and data key input into the security module, the master key is verified;

[0016] After the master key is verified, the data key is encrypted and the ciphertext of the data key is returned to the user for application server configuration.

[0017] Furthermore, the encryption and decryption of the stored data by calling the security module through the application server includes:

[0018] Receive data from the front-end or other third-party services through the application server; and,

[0019] After parsing the data, the sensitive data is passed to the security module, and the security module is called to encrypt the sensitive data to obtain the ciphertext data;

[0020] The encrypted ciphertext data is saved to a data storage repository through a storage driver of the application server; and,

[0021] When relevant data is needed, the ciphertext data is queried from the data repository through the storage driver of the application server, and is passed to the security module to decrypt the plaintext data, and the decrypted plaintext data is obtained from the security module.

[0022] Furthermore, the method further comprises:

[0023] Set the lifecycle of the security module to be the same as that of the application server.

[0024] In a second aspect, the present disclosure provides a time-based encrypted storage system, the system comprising an application server, a security module and a data repository, the security module being arranged between the application server and the data repository;

[0025] The security module is configured to generate a master key based on a time parameter, and encrypt the data key to obtain a ciphertext of the data key;

[0026] The application server is configured to obtain the ciphertext of the configured master key and data key from the security module, and verify whether the master key is within the validity period; and,

[0027] If the master key is within the validity period, the security module is initialized using the ciphertext of the master key and the data key;

[0028] The application server is also configured to call the security module to implement encryption and decryption of the stored data after the security module is initialized;

[0029] The data storage repository is configured to store data encrypted by the security module.

[0030] Furthermore, the security module includes a time calculation module, a key generation module and an encryption and decryption module;

[0031] The time calculation module is configured to generate a temporary verification code based on the time parameter and key parameter of the key input into the security module;

[0032] The key generation module is configured to generate a master key according to the key key parameters and the temporary verification code transmitted to the key generation module, and return the master key to the user; and

[0033] For the master key and data key input into the security module, the master key is verified;

[0034] The encryption and decryption module is configured to encrypt the data key after the key generation module verifies the master key, and return the ciphertext of the data key to the user for application server configuration.

[0035] Furthermore, the application server is specifically configured as:

[0036] Receive data from the front-end or other third-party services;

[0037] After parsing the data, the sensitive data is passed to the security module, so that the security module is called to encrypt the sensitive data to obtain ciphertext data;

[0038] The encrypted ciphertext data is stored in a data storage repository through a storage driver; and

[0039] When relevant data is needed, the ciphertext data is queried from the data repository through the storage driver, and is passed to the security module to decrypt the plaintext data, and the decrypted plaintext data is obtained from the security module.

[0040] Furthermore, the security module has the same life cycle as the application server.

[0041] In a third aspect, the present disclosure provides an electronic device comprising a memory and a processor, wherein the memory stores a computer program, and when the processor runs the computer program stored in the memory, the processor executes the time-based encryption storage method as described in any one of the first aspects.

[0042] In a fourth aspect, the present disclosure provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the time-based encryption storage method described in any one of the above-mentioned first aspects is implemented.

[0043] Beneficial effects:

[0044] The present invention provides a time-based encryption storage method, a time-based encryption storage system, an electronic device, and a storage medium. An additional master key and a time-based data authentication mechanism are introduced. The master key is introduced to encrypt the storage key, which solves the security requirement of regularly rotating the key configuration; the time-based authentication algorithm is introduced to process the master key, which limits the master key to be used only within the valid time and becomes invalid after expiration. Under the condition of ensuring the high efficiency of the local algorithm, the data security of the application is guaranteed as much as possible. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 A schematic diagram of a flow chart of a time-based encrypted storage method provided in Embodiment 1 of the present disclosure;

[0046] Figure 2 A schematic diagram of an application security architecture of a time-based encrypted storage system provided in an embodiment of the present disclosure;

[0047] Figure 3 A schematic diagram of a key generation process provided by an embodiment of the present disclosure;

[0048] Figure 4 A schematic diagram of a security module usage process provided by an embodiment of the present disclosure;

[0049] Figure 5 An architectural diagram of a time-based encrypted storage system provided in Embodiment 3 of the present disclosure;

[0050] Figure 6 This is an architecture diagram of an electronic device provided in Embodiment 4 of the present disclosure. DETAILED DESCRIPTION

[0051] In order to enable those skilled in the art to better understand the technical solution of the present disclosure, the present disclosure is further described in detail below in conjunction with the drawings and embodiments. It should be understood that the specific embodiments and drawings described herein are only used to explain the present invention, rather than to limit the present invention.

[0052] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence; and, in the absence of conflict, the embodiments in the present disclosure and the features in the embodiments can be arbitrarily combined with each other.

[0053] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure. The singular forms of "a", "said" and "the" used in the embodiments of the present disclosure and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings.

[0054] In the subsequent description, the suffixes such as "module", "component" or "unit" used to represent elements are only used to facilitate the description of the present disclosure, and have no specific meanings. Therefore, "module", "component" or "unit" can be used in a mixed manner.

[0055] The technical solution of the present invention and how the technical solution of the present invention solves the above-mentioned problems existing in the prior art are described in detail below with specific embodiments. It is understandable that in the embodiments of the present application, the execution subject can perform some or all of the steps in the embodiments of the present application, and these steps or operations are only examples. The embodiments of the present application can also perform other operations or deformations of various operations. In addition, each step can be performed in a different order presented in the embodiments of the present application, and it is possible not to perform all the operations in the embodiments of the present application. And, the following several specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments.

[0056] Figure 1 A schematic diagram of a time-based encrypted storage method provided in the first embodiment of the present disclosure is shown in FIG. Figure 1 As shown, the method includes:

[0057] Step S101: Setting a security module between the application server and the data storage repository;

[0058] Step S102: Generate a master key based on the time parameter in the security module, and encrypt the data key to obtain a ciphertext of the data key;

[0059] Step S103: obtaining the ciphertext information of the configured master key and data key from the security module through the application server, and verifying whether the master key is within the validity period; and,

[0060] Step S104: If the master key is within the validity period, the security module is initialized using the ciphertext of the master key and the data key;

[0061] Step S105: After the security module is initialized, the application server calls the security module to implement encryption and decryption of the stored data;

[0062] Step S106: Store the data encrypted by the security module into the data storage library.

[0063] In order to solve the defects of the two data encryption storage in the prior art, the embodiment of the present disclosure adds a security module between the application service (i.e., application server) and the database, which mainly provides encryption and decryption processing of sensitive data for the entire application service, while ensuring the data security of the application layer and the storage layer. Moreover, the key can be easily rotated in the security module.

[0064] When data storage encryption is required, a master key based on the time parameter is first generated in the security module, and the data key for encrypting the stored data is encrypted with the master key to obtain the ciphertext of the data key.

[0065] The application service obtains the ciphertext information of the configured master key and data key, verifies whether the master key is within the validity period, and if it expires, the initialization fails and an error message is prompted. If the master key is valid, the ciphertext of the master key and the data key is used to initialize the security module. When the application service is started, the initialization of the security module will be triggered actively, and the verification and use of the master key will only be used in the initialization of the security module. After the initialization is completed, the security module can use the master key to decrypt the ciphertext of the data key to obtain the data key. The application of the application service can directly call the security module to implement data encryption and decryption. This process can be repeated within the validity period of the master key. In this way, the data to be stored is encrypted in the security module using the data key, and then the application service can store the encrypted sensitive data in the database.

[0066] When key rotation is required, the new master key can be obtained directly by changing the time parameter in the security module. Since the master key is replaced, the ciphertext of the new data key can be obtained at the same time, realizing efficient key replacement and ensuring security at the database and application levels. At the same time, there will not be too much performance loss, and the deployment and operation and maintenance costs of application services are also low.

[0067] The disclosed embodiment integrates an additional master key and a time-based data authentication mechanism to encrypt and protect storage keys, thereby ensuring both the security of data keys and data storage, while also meeting the security needs of regular key rotation.

[0068] Furthermore, the generating of the master key based on the time parameter in the security module and encrypting the data key to obtain the ciphertext of the data key includes:

[0069] Generate a temporary verification code based on the time parameters and key parameters input into the security module;

[0070] Generate a master key based on the key key parameters and temporary verification code, and return the master key to the user;

[0071] For the master key and data key input into the security module, the master key is verified;

[0072] After the master key is verified, the data key is encrypted and the ciphertext of the data key is returned to the user for application server configuration.

[0073] The internal implementation of the security module consists of three parts: time calculation module, key generation module and encryption and decryption module; the process of preparing the key is as follows:

[0074] Input time parameters and key key parameters, and generate a temporary verification code through the time calculation module; it can be when the key rotation cycle is reached, by obtaining the current time as the time parameter, or by externally inputting the time parameter, the time calculation module generates a temporary verification code based on the time parameter, passes the key key parameter and the temporary verification code to the key generation module, generates a master key, and returns the master key to the user at the same time. The key key parameters can be generated according to the user information, or set by the user independently; after obtaining the master key, it is necessary to configure the application service, and the master key and data encryption key input into the security module are verified by the key generation module. After the verification is passed, the encryption and decryption module encrypts the data key through the master key to obtain the ciphertext of the data key, and returns the ciphertext of the data key for application service configuration; in another embodiment, the data key can also be encrypted by the key generation module.

[0075] Furthermore, the encryption and decryption of the stored data by calling the security module through the application server includes:

[0076] Receive data from the front-end or other third-party services through the application server; and,

[0077] After parsing the data, the sensitive data is passed to the security module, and the security module is called to encrypt the sensitive data to obtain the ciphertext data;

[0078] The encrypted ciphertext data is saved to a data storage repository through a storage driver of the application server; and,

[0079] When relevant data is needed, the ciphertext data is queried from the data repository through the storage driver of the application server, and is passed to the security module to decrypt the plaintext data, and the decrypted plaintext data is obtained from the security module.

[0080] In the process of data encryption and decryption, the application service first receives data from the front-end or other third-party services for parsing, and passes sensitive data to the initialized security module, which then calls the security module to encrypt the sensitive data using the data key, and then passes it to the storage driver module of the application service after encryption. The storage driver module stores the encrypted data in the database. When the application service needs to use the relevant data, it queries the ciphertext data through the storage driver module, and then passes it to the security module to decrypt the plaintext for use. The application service obtains the decrypted data and then performs subsequent business.

[0081] Furthermore, the method further comprises:

[0082] Set the lifecycle of the security module to be the same as that of the application server.

[0083] Set the life cycle of the security module and the application service to be the same. Each time the application service is started, the security module obtains the data key through initialization. When the application service goes offline, the security module also goes offline, thus ensuring the security of the data key.

[0084] The disclosed embodiment encrypts the data key through the master key, and by regularly updating the master key, the data key ciphertext obtained by the application server is updated, so that the key stored in the application service is regularly updated. When data processing is not required, the security module does not store key data. When the application service is started, it will actively trigger the initialization of the security module, and the verification and use of the master key will only be in the initialization stage of the security module. After the initialization is completed, the security module can obtain a temporary data key to encrypt and decrypt the data, which solves the security requirement of regularly rotating key configuration; introduces a time-based authentication algorithm to process the master key, which limits the use of the master key to only within the valid time, and it will become invalid after expiration. Under the condition of ensuring the high efficiency of the local algorithm, the data security of the application is guaranteed as much as possible.

[0085] The second embodiment of the present disclosure also provides a time-based encryption storage method; the application security architecture is as follows Figure 2 As shown in the figure, it is the main security module of the entire business architecture. The security module is a module between the application service and the database. Its main function is to provide encryption and decryption processing for sensitive data for the entire application service, while ensuring the data security of the application layer and the storage layer.

[0086] The key generation process is as follows: Figure 3 As shown in the figure, the internal implementation of the security module consists of three parts: time calculation module, key generation module, encryption and decryption module. The process of preparing the key is as follows:

[0087] 1. Generate a master key:

[0088] 1.1 Input time parameters and key parameters, and generate a temporary verification code through the time calculation module;

[0089] 1.2 Pass the key parameters and temporary verification code to the key generation module to generate the master key, and return the master key to the user.

[0090] 2. Generate data key:

[0091] Enter the master key and data encryption key, verify the master key through the key generation module, encrypt the data key after verification, and return the ciphertext of the data key for application service configuration;

[0092] The process of using the security module is as follows: Figure 4 The detailed description is as follows:

[0093] 1. Security module initialization

[0094] 1.1 Preparing keys

[0095] Prepare the ciphertext of the master key and data key.

[0096] 1.2 Initialize the security module

[0097] The application service obtains the configured master key and data key ciphertext information, verifies whether the master key is within the validity period, and if it is expired, the initialization fails and an error message is prompted. If the master key is valid, the master key and storage key ciphertext are used to initialize the security module. When the application service is started, the security module initialization is actively triggered, and the master key verification and use are only in the initialization security module stage. After the initialization is completed, the application can directly call the security module to implement data encryption and decryption. The process can be repeated within the validity period of the master key, and the life cycle of the security module is the same as that of the application service.

[0098] 2. Data encryption and decryption

[0099] 2.1 Parsing Data

[0100] The application service receives data from the front-end or other third-party services, parses the data and passes it to the security module.

[0101] 2.2 Encrypted Data

[0102] The security module is called to encrypt the sensitive data and pass it to the storage driver module.

[0103] 2.3 Storing Data

[0104] The encrypted ciphertext data is saved in the database.

[0105] 2.4 Decrypted Data

[0106] When the application service needs to use relevant data, the ciphertext data is queried through the storage driver module, and then passed to the security module to decrypt the plaintext for use.

[0107] 2.5 Usage Data

[0108] The application service obtains the decrypted data and then performs subsequent business operations.

[0109] The disclosed embodiment focuses on the key issues of existing data storage, integrates an additional master key and a time-based data authentication mechanism, and encrypts and protects the storage key, which not only ensures the security of data keys, but also ensures the security of data storage, and also meets the security needs of regular key rotation. The data security of application services is achieved with high efficiency and low cost.

[0110] The third embodiment of the present disclosure also provides a time-based encrypted storage system, such as Figure 5 As shown, the system includes an application server 1, a security module 2 and a data repository 3, wherein the security module 2 is arranged between the application server 1 and the data repository 3;

[0111] The security module 2 is configured to generate a master key based on a time parameter, and encrypt the data key to obtain a ciphertext of the data key;

[0112] The application server 1 is configured to obtain the ciphertext of the configured master key and data key from the security module 2, and verify whether the master key is within the validity period; and,

[0113] If the master key is within the validity period, the ciphertext of the master key and the data key is used to initialize the security module 2;

[0114] The application server 1 is also configured to call the security module 2 to implement encryption and decryption of the stored data after the security module 2 is initialized;

[0115] The data storage repository 3 is configured to store the data encrypted by the security module 2 .

[0116] Furthermore, the security module 2 includes a time calculation module, a key generation module and an encryption and decryption module;

[0117] The time calculation module is configured to generate a temporary verification code based on the time parameters and key parameters input into the security module 2;

[0118] The key generation module is configured to generate a master key according to the key key parameters and the temporary verification code transmitted to the key generation module, and return the master key to the user; and

[0119] For the master key and data key input into the security module 2, the master key is verified;

[0120] The encryption and decryption module is configured to encrypt the data key after the key generation module verifies the master key, and return the ciphertext of the data key to the user for application server configuration.

[0121] Furthermore, the application server 1 is specifically configured as follows:

[0122] Receive data from the front-end or other third-party services;

[0123] After parsing the data, the sensitive data is passed to the security module 2, so as to call the security module 2 to encrypt the sensitive data and obtain the ciphertext data;

[0124] The encrypted ciphertext data is stored in the data storage repository 3 through the storage driver; and

[0125] When relevant data is needed, the ciphertext data is queried from the data storage repository 3 through the storage driver, and is passed to the security module 2 for decryption to obtain the plaintext data, and the decrypted plaintext data is obtained from the security module 2.

[0126] Furthermore, the life cycle of the security module 2 is the same as that of the application server 1 .

[0127] The time-based encrypted storage system of the disclosed embodiment is used to implement the time-based encrypted storage method in method embodiment 1 and embodiment 2, so the description is relatively simple. For details, please refer to the relevant description in the previous method embodiment, which will not be repeated here.

[0128] In addition, if Figure 6 As shown, the fourth embodiment of the present disclosure further provides an electronic device, including a memory 100 and a processor 200, wherein the memory 100 stores a computer program, and when the processor 200 runs the computer program stored in the memory 100, the processor 200 executes the above-mentioned various possible methods.

[0129] The memory 100 is connected to the processor 200. The memory 100 may be a flash memory, a read-only memory or other memory, and the processor 200 may be a central processing unit or a single-chip microcomputer.

[0130] In addition, an embodiment of the present disclosure further provides a computer-readable storage medium, on which a computer program is stored, and the computer program is executed by a processor to perform the above-mentioned various possible methods.

[0131] The computer-readable storage medium includes volatile or non-volatile, removable or non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules or other data). Computer-readable storage media include, but are not limited to, RAM (Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable read only memory), flash memory or other memory technology, CD-ROM (Compact Disc Read-Only Memory), Digital Video Disc (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer.

[0132] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present disclosure, but the present disclosure is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and substance of the present disclosure, and these modifications and improvements are also considered to be within the scope of protection of the present disclosure.

Claims

1. A time-based encrypted storage method, characterized in that: The method comprises: Set up a security module between the application server and the data repository; Generate a master key based on the time parameter in the security module, and encrypt the data key to obtain the ciphertext of the data key; Obtain the ciphertext information of the configured master key and data key from the security module through the application server, and verify whether the master key is within the validity period; and If the master key is within the validity period, the security module is initialized using the ciphertext of the master key and the data key; After the security module is initialized, the application server calls the security module to encrypt and decrypt the stored data; Store the data encrypted by the security module into the data repository.

2. The method according to claim 1, characterized in that The generating of the master key based on the time parameter in the security module and encrypting the data key to obtain the ciphertext of the data key includes: Generate a temporary verification code based on the time parameters and key parameters input into the security module; Generate a master key based on the key key parameters and temporary verification code, and return the master key to the user; For the master key and data key input into the security module, the master key is verified; After the master key is verified, the data key is encrypted and the ciphertext of the data key is returned to the user for application server configuration.

3. The method according to claim 1, characterized in that The method of implementing encryption and decryption of stored data by calling the security module through the application server includes: Receive data from the front-end or other third-party services through the application server; and, After parsing the data, the sensitive data is passed to the security module, and the security module is called to encrypt the sensitive data to obtain the ciphertext data; The encrypted ciphertext data is saved to a data storage repository through a storage driver of the application server; and, When relevant data is needed, the ciphertext data is queried from the data repository through the storage driver of the application server, and is passed to the security module to decrypt the plaintext data, and the decrypted plaintext data is obtained from the security module.

4. The method according to claim 1, characterized in that: The method further comprises: Set the lifecycle of the security module to be the same as that of the application server.

5. A time-based encrypted storage system, characterized in that: The system comprises an application server, a security module and a data repository, wherein the security module is arranged between the application server and the data repository; The security module is configured to generate a master key based on a time parameter, and encrypt the data key to obtain a ciphertext of the data key; The application server is configured to obtain the ciphertext of the configured master key and data key from the security module, and verify whether the master key is within the validity period; as well as, If the master key is within the validity period, the security module is initialized using the ciphertext of the master key and the data key; The application server is also configured to call the security module to implement encryption and decryption of the stored data after the security module is initialized; The data storage repository is configured to store data encrypted by the security module.

6. The system according to claim 5, characterized in that The security module includes a time calculation module, a key generation module and an encryption and decryption module; The time calculation module is configured to generate a temporary verification code based on the time parameter and key parameter of the key input into the security module; The key generation module is configured to generate a master key according to the key key parameters and the temporary verification code transmitted to the key generation module, and return the master key to the user; and For the master key and data key input into the security module, the master key is verified; The encryption and decryption module is configured to encrypt the data key after the key generation module verifies the master key, and return the ciphertext of the data key to the user for application server configuration.

7. The system according to claim 5, characterized in that The application server is specifically configured as follows: Receive data from the front-end or other third-party services; After parsing the data, the sensitive data is passed to the security module, so that the security module is called to encrypt the sensitive data to obtain ciphertext data; The encrypted ciphertext data is saved to the data storage repository through the storage driver; as well as, When relevant data is needed, the ciphertext data is queried from the data repository through the storage driver, and is passed to the security module to decrypt the plaintext data, and the decrypted plaintext data is obtained from the security module.

8. The system according to claim 5, characterized in that The security module has the same life cycle as the application server.

9. An electronic device, characterized in that: The invention comprises a memory and a processor, wherein a computer program is stored in the memory, and when the processor runs the computer program stored in the memory, the processor executes the time-based encryption storage method according to any one of claims 1 to 4.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the time-based encryption storage method according to any one of claims 1 to 4 is implemented.

Images