Data processing method, device and equipment and computer storage medium

Abstract

The invention discloses a data processing method, device and equipment and a computer storage medium, and relates to the technical field of Internet of Things. According to the method, a data collection device firstly obtains collected data, encrypts the data through a data key and sends the data to a cloud platform device for storage. A data receiving device sends an encrypted data acquisition request to a cloud platform device and a security platform device, and obtains target encrypted data sent by the cloud platform device and a data key ciphertext sent by the security platform device. And the security platform device receives the acquisition request and sends the data key ciphertext to the data receiving device. And after receiving the data key ciphertext, the data receiving equipment decrypts the target encrypted data according to the data key to obtain target data. According to the embodiment of the invention, the data is kept in an encrypted state in the transmission process, so that the risk of being intercepted and stolen in the transmission process is reduced, and meanwhile, the encrypted data and the data key are respectively stored and acquired, so that the security of the data transmission process is improved.

Description

Technical Field

[0001] The present application belongs to the technical field of Internet of Things, and in particular, relates to a method, device, equipment and computer storage medium for data processing. Background Art

[0002] With the rapid increase in home network bandwidth, data collection devices, such as cameras, microphones, and health monitoring devices, have gradually become part of daily life, but the potential risk of data content leakage will bring negative impacts and economic losses to users. Therefore, it is particularly important to protect data content, encrypt data transmission, hide the content of transmitted data, and ensure data security.

[0003] Traditional data encryption methods only perform encryption processing during the data storage stage. Although it can improve the security of data transmission to a certain extent, the data can be easily intercepted and tampered with or leaked during the data transmission from the data acquisition device to the cloud platform device or data receiving device, and the data transmission process is less secure. Summary of the invention

[0004] The embodiments of the present application provide a data processing method, device, equipment and computer storage medium to solve the problem of low security in the data transmission process in the prior art.

[0005] In a first aspect, an embodiment of the present application provides a data processing method, which is applied to a data acquisition device, and the method includes:

[0006] Collect data to be transmitted;

[0007] The data to be transmitted is encrypted using a data key to obtain encrypted data. The data key is generated based on a preset root key and a preset device key ciphertext. The device key is a key of a data acquisition device.

[0008] Send encrypted data to cloud platform devices.

[0009] In a second aspect, an embodiment of the present application provides a data processing method, which is applied to a data receiving device, and the method includes:

[0010] Sending an encrypted data acquisition request to the cloud platform device, where the encrypted data acquisition request includes a device identifier of the data receiving device;

[0011] Receive target encrypted data corresponding to the device identifier sent by the cloud platform device. The target encrypted data is the encrypted data sent by the data acquisition device and received by the cloud platform device. The encrypted data is encrypted by the data acquisition device based on the data key. The data key is generated based on the root key and the preset key ciphertext.

[0012] Encrypt the device identification to obtain the device identification ciphertext;

[0013] Sending a data key acquisition request to the security platform device, the data key acquisition request including the device identification ciphertext;

[0014] Receive the data key ciphertext of the encrypted data corresponding to the device identification sent by the security platform device, where the device identification is obtained by the security platform device based on the decryption of the device identification ciphertext;

[0015] Decrypt the data key ciphertext to obtain the data key;

[0016] The target encrypted data is decrypted according to the data key to obtain the target data.

[0017] In a third aspect, an embodiment of the present application provides a data processing method, which is applied to a cloud platform device, and the method includes:

[0018] Receiving an encrypted data acquisition request sent by a data receiving device, the encrypted data acquisition request includes a device identification of the data receiving device, and the encrypted data is the encrypted data sent by the data acquisition device;

[0019] In response to the encrypted data acquisition request, the corresponding encrypted data is sent to the data receiving device corresponding to the device identification according to the relationship information between the encrypted data and the device identification, and the relationship information between the encrypted data and the device identification is the information sent by the data acquisition device.

[0020] In a fourth aspect, an embodiment of the present application provides a data processing method, which is applied to a security platform device, and the method includes:

[0021] Receiving a data key acquisition request sent by a data receiving device, the data key acquisition request including a device identification ciphertext;

[0022] In response to the data key acquisition request, generate a data key ciphertext of the encrypted data corresponding to the device identification, wherein the device identification is obtained by decrypting the device identification ciphertext;

[0023] Send the data key ciphertext to the data receiving device.

[0024] In a fifth aspect, an embodiment of the present application provides a data processing device, which is applied to a data acquisition device, and the device includes:

[0025] A collection module, used for collecting data to be transmitted;

[0026] An encryption module, used to encrypt the data to be transmitted using a data key to obtain encrypted data, the data key is generated based on a preset root key and a preset device key ciphertext, and the device key is a key of a data acquisition device;

[0027] The sending module is used to send encrypted data to the cloud platform device.

[0028] In a sixth aspect, an embodiment of the present application provides a data processing device, which is applied to a data receiving device, and the device includes:

[0029] A sending module, used to send an encrypted data acquisition request to a cloud platform device, wherein the encrypted data acquisition request includes a device identifier of a data receiving device;

[0030] A receiving module is used to receive target encrypted data corresponding to a device identifier sent by a cloud platform device. The target encrypted data is encrypted data sent by a data acquisition device and received by the cloud platform device. The encrypted data is encrypted by the data acquisition device based on a data key. The data key is generated based on a root key and a preset key ciphertext.

[0031] The encryption module is used to encrypt the device identification to obtain the device identification ciphertext;

[0032] The sending module is further used to send a data key acquisition request to the security platform device, where the data key acquisition request includes a device identification ciphertext;

[0033] The receiving module is further used to receive the data key ciphertext of the encrypted data corresponding to the device identification sent by the security platform device, where the device identification is obtained by the security platform device based on decryption of the device identification ciphertext;

[0034] A decryption module is used to decrypt the data key ciphertext to obtain the data key;

[0035] The decryption module is also used to decrypt the target encrypted data according to the data key to obtain the target data.

[0036] In a seventh aspect, an embodiment of the present application provides a data processing device, which is applied to a cloud platform device, and the device includes:

[0037] A receiving module, used for receiving an encrypted data acquisition request sent by a data receiving device, wherein the encrypted data acquisition request includes a device identification of the data receiving device, and the encrypted data is the encrypted data sent by the data acquisition device;

[0038] The sending module is used to respond to the encrypted data acquisition request and send the corresponding encrypted data to the data receiving device corresponding to the device identifier according to the relationship information between the encrypted data and the device identifier. The relationship information between the encrypted data and the device identifier is the information sent by the data acquisition device.

[0039] In an eighth aspect, an embodiment of the present application provides a data processing device, which is applied to a security platform device, and the device includes:

[0040] A receiving module receives a data key acquisition request sent by a data receiving device, wherein the data key acquisition request includes a device identification ciphertext;

[0041] A generating module, configured to generate a data key ciphertext of encrypted data corresponding to a device identification in response to a data key acquisition request, wherein the device identification is obtained by decrypting the device identification ciphertext;

[0042] The sending module is used to send the data key ciphertext to the data receiving device.

[0043] In the ninth aspect, an embodiment of the present application provides a terminal device, which includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method of data processing such as the first aspect, the second aspect, the third aspect, or the fourth aspect is implemented.

[0044] In the tenth aspect, an embodiment of the present application provides a computer-readable storage medium having computer program instructions stored thereon. When the computer program instructions are executed by a processor, a method for data processing as in the first aspect, the second aspect, the third aspect, or the fourth aspect is implemented.

[0045] In the eleventh aspect, an embodiment of the present application provides a computer program product. When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device performs a data processing method such as the first aspect, the second aspect, the third aspect, or the fourth aspect.

[0046] The embodiment of the present application provides a method, device, equipment and computer storage medium for data processing. The method first uses a data acquisition device to acquire the acquired data; the data acquisition device encrypts the data through a data key and sends it to a cloud platform device for storage, thereby encrypting the data at the source of data acquisition and reducing the risk of video stream leakage during transmission. The data receiving device sends an encrypted data acquisition request carrying a device identifier to the cloud platform device, receives the target encrypted data sent by the cloud platform device, and through the request carrying the device identifier, the cloud platform device can accurately send the encrypted data to the specified data receiving device. The data receiving device encrypts the device identifier, obtains the device identifier ciphertext, and sends a data key acquisition request carrying the device identifier ciphertext to the security platform device, receives the data key ciphertext sent by the security platform device, encrypts the device identifier and then sends the request, thereby preventing the device identifier from being tampered with or stolen during transmission, and increasing the security and credibility of the request. After receiving the acquisition request, the security platform device sends the data key ciphertext to the target data receiving device. After receiving the data key ciphertext, the data receiving device performs decryption processing to obtain the data key and decrypts the target encrypted data according to the data key to obtain the target data. The data in the embodiments of the present application remains encrypted during transmission, reducing the risk of being intercepted and stolen during transmission. At the same time, the encrypted data and data keys are stored and retrieved separately. Even if the data is illegally accessed, it cannot be decrypted without the corresponding key, thereby improving the security of the data transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0048] Figure 1 It is a schematic diagram of the structure of the data processing system provided by the embodiment of the present application;

[0049] Figure 2 It is a flowchart of a data processing method provided in an embodiment of the present application;

[0050] Figure 3 is a schematic diagram of a method for encrypting a video stream provided in an embodiment of the present application;

[0051] Figure 4 It is a structural schematic diagram of a device for data processing applied to a data acquisition device provided in an embodiment of the present application;

[0052] Figure 5 is a structural diagram of a device for data processing applied to a data receiving device provided in an embodiment of the present application;

[0053] Figure 6 It is a structural diagram of a device for data processing applied to a cloud platform device provided in an embodiment of the present application;

[0054] Figure 7 It is a structural schematic diagram of a device for data processing applied to a security platform device provided in an embodiment of the present application;

[0055] Figure 8 It is a schematic diagram of the structure of the terminal device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0056] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0057] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "include..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0058] In the prior art, the encryption processing of video data is mainly focused on the storage stage of the video stream. This method usually involves encrypting the video data before saving it to the storage medium to ensure that the data stored in the server or cloud platform is secure. This storage encryption method relies on static data protection. Once the data leaves the storage environment and begins to be transmitted, it is no longer protected by this protection. During the transmission process, data usually flows in the network in an unencrypted form, which makes the data vulnerable to various security threats, such as man-in-the-middle attacks, data interception, tampering, and eavesdropping. These threats may lead to the leakage of sensitive information and damage user privacy and data integrity.

[0059] In order to solve the existing technology, the embodiment of the present application provides a method, device, equipment and computer storage medium for data processing. The method first uses a data acquisition device to acquire the acquired data; the data acquisition device encrypts the data through a data key and sends it to a cloud platform device for storage, thereby encrypting the data at the source of data acquisition and reducing the risk of video stream leakage during transmission. The data receiving device sends an encrypted data acquisition request carrying a device identifier to the cloud platform device, receives the target encrypted data sent by the cloud platform device, and through the request carrying the device identifier, the cloud platform device can accurately send the encrypted data to the specified data receiving device. The data receiving device encrypts the device identifier, obtains the device identifier ciphertext, and sends a data key acquisition request carrying the device identifier ciphertext to the security platform device, receives the data key ciphertext sent by the security platform device, encrypts the device identifier and then sends the request, thereby preventing the device identifier from being tampered with or stolen during transmission, and increasing the security and credibility of the request. After receiving the acquisition request, the security platform device sends the data key ciphertext to the target data receiving device. After receiving the data key ciphertext, the data receiving device performs decryption processing to obtain the data key and decrypts the target encrypted data according to the data key to obtain the target data. The data in the embodiments of the present application remains encrypted during transmission, reducing the risk of being intercepted and stolen during transmission. At the same time, the encrypted data and data keys are stored and retrieved separately. Even if the data is illegally accessed, it cannot be decrypted without the corresponding key, thereby improving the security of the data transmission process.

[0060] The following first introduces the data processing system provided in the embodiment of the present application.

[0061] Figure 1 1 shows a schematic diagram of the structure of the data processing system 100. Figure 1 As shown, the system may include: a data acquisition device 110, a cloud platform device 120, a security platform device 130 and a data receiving device 140. The data acquisition device 110 includes a collection module 111 and an encryption module 112.

[0062] The acquisition module 111 of the data acquisition device 110 is used to acquire data to be transmitted, and the encryption module 112 is used to encrypt the data using an encryption algorithm before the data leaves the data acquisition device, thereby encrypting the data from the source and ensuring that the plaintext video does not leave the device. This ensures the security of the data during transmission, and even if the data is intercepted during transmission, unauthorized third parties cannot read the data content.

[0063] The cloud platform device 120 is used to store the encrypted data sent by the data acquisition device 100, and store the corresponding relationship between the encrypted data and the data receiving device 140. The security platform device 130 is responsible for the security key and access control of the entire system, generates and manages encryption keys, and ensures that only authorized users or devices can decrypt and access sensitive data. The data receiving device 140 sends a data acquisition request to the cloud platform device 120 and receives the encrypted data. The data receiving device 140 is also used to interact with the security platform device 130 to obtain the key required to decrypt the data, and decrypt the encrypted data according to the key to obtain the transmission data.

[0064] The data processing method provided in the embodiments of the present application is introduced below with reference to the accompanying drawings.

[0065] Figure 2 FIG. 1 is a flow chart showing a method for data processing provided by an embodiment of the present application. Figure 2 As shown, the method may include the following steps: S201 to S208.

[0066] S201, a data collection device collects data to be transmitted and uses a data key to encrypt the data to be transmitted to obtain encrypted data, wherein the data key is generated based on a preset root key and a preset device key ciphertext.

[0067] In some embodiments, the security equipment manufacturer applies for a device key from the security platform with the manufacturer and device information. The security platform sends a preset device key generated by the security encryption machine based on the manufacturer and device information, and generates the preset device key ciphertext through the root key and the national secret SM4 block encryption algorithm.

[0068] In some embodiments, before the security platform sends the device key, the validity of the manufacturer information and whether the same device ID has repeatedly applied for the preset key are verified through a preset whitelist.

[0069] In some embodiments, the manufacturer burns the preset key ciphertext into the corresponding device through the production line to ensure that the preset key ciphertext does not pass through a third party, thereby ensuring the security of the burning process.

[0070] In some embodiments, the manufacturer information may include the manufacturer name and manufacturer ID, and the device information may include the device identification ID, the Media Access Control (Mac) address, and the product serial number (SN) code.

[0071] S202, the data acquisition device sends encrypted data to the cloud platform device.

[0072] In some embodiments, when the data acquisition device sends encrypted data to the cloud platform device, a secure transmission protocol, such as Transport Layer Security (TLS) or Secure Sockets Layer (SSL), can be used for transmission to protect the integrity and confidentiality of the data during transmission.

[0073] In some embodiments, end-to-end encryption technology may be used during the transmission process to ensure that only the sender and receiver of the data can decrypt the data.

[0074] In some embodiments, a data integrity check mechanism, such as HMAC, may be added during the transmission process to ensure that the data has not been tampered with during the transmission process.

[0075] By transmitting encrypted data, the security of data transmission in the network is improved. Even if the data is intercepted during transmission, it cannot be deciphered.

[0076] S203, the data receiving device sends an encrypted data acquisition request to the cloud platform device, where the encrypted data acquisition request includes a device identifier of the data receiving device.

[0077] In some embodiments, the device identifier may be a hardware identifier of the device, such as a MAC address or a device serial number, or may be a unique identifier generated by software.

[0078] Authorized data receiving devices are allowed to obtain encrypted data on demand, and device identification is used to ensure that only authorized devices can request data, thereby increasing the security of data access.

[0079] S204, the cloud platform device receives the encrypted data acquisition request sent by the data receiving device, and sends the corresponding target encrypted data to the data receiving device corresponding to the device identifier according to the relationship information between the encrypted data and the device identifier.

[0080] In some embodiments, the cloud platform device may record the relationship information between the encrypted data and the device identification through access control lists (ACL).

[0081] By encrypting the relationship information between data and device identification, it can be ensured that data is only sent to devices that have access rights, preventing unauthorized access.

[0082] S205, the data receiving device encrypts the device identification to obtain a ciphertext of the device identification.

[0083] In some embodiments, the data receiving device encrypts the device identification to obtain the device identification ciphertext, which may include:

[0084] Generate a real-time key based on the concatenation of a fixed string, a timestamp and a random number using the SM3 hash algorithm;

[0085] The device identification is encrypted according to the real-time key and the national secret SM4 block cipher algorithm.

[0086] Encrypting the device ID can prevent others from tracking the device, protect the device ID from being leaked, increase the difficulty of forging the device identity, and increase transmission security.

[0087] S206: The data receiving device sends a data key acquisition request including a device identification ciphertext to the security platform device.

[0088] By sending the encrypted device identification, it is ensured that only authorized devices can request data keys, and the security platform device can distribute the corresponding data keys for the encrypted data requested by the device according to the device identification.

[0089] S207, the security platform device receives the data key acquisition request sent by the data receiving device, generates a data key ciphertext of the encrypted data corresponding to the device identifier, and sends the data key ciphertext to the data receiving device.

[0090] In some embodiments, a decryption algorithm corresponding to the device identification encryption algorithm of the data receiving device is set in the security platform device, and the decryption algorithm is used to decrypt the acquired device identification ciphertext.

[0091] In some embodiments, the security platform device is preset with the same encryption algorithm as the data acquisition device. When obtaining the data key acquisition request sent by the data receiving device, the security platform device generates a data key ciphertext based on the encryption algorithm.

[0092] The data key is sent in ciphertext form to prevent the key from being intercepted during transmission. The key and encrypted data are stored and retrieved separately to prevent the key and data from being destroyed at the same time, thereby increasing the confidentiality and integrity of the data.

[0093] S208, the data receiving device decrypts the data key ciphertext, and decrypts the target encrypted data according to the data key to obtain the target data.

[0094] In some embodiments, the data receiving device is preset with a decryption algorithm corresponding to the data acquisition device. Since the encryption algorithm in the data acquisition device is a symmetric algorithm, the data receiving device decrypts the encrypted data according to the data key by performing the opposite operation of the encryption algorithm in the data acquisition device to obtain the decrypted data.

[0095] The data acquisition device encrypts the data through the data key and sends it to the cloud platform device for storage, realizing the encryption of data at the source of data acquisition and reducing the risk of video stream leakage during transmission. The data receiving device sends an encrypted data acquisition request carrying the device identification to the cloud platform device, receives the target encrypted data sent by the cloud platform device, and through the request carrying the device identification, the cloud platform device can accurately send encrypted data to the specified data receiving device. The data receiving device encrypts the device identification, obtains the device identification ciphertext and sends a data key acquisition request carrying the device identification ciphertext to the security platform device, receives the data key ciphertext sent by the security platform device, encrypts the device identification and then sends the request, preventing the device identification from being tampered with or stolen during transmission, and increasing the security and credibility of the request. After receiving the acquisition request, the security platform device sends the data key ciphertext to the target data receiving device. After receiving the data key ciphertext, the data receiving device performs decryption processing to obtain the data key and decrypts the target encrypted data according to the data key to obtain the target data. The data in the embodiments of the present application remains encrypted during transmission, reducing the risk of being intercepted and stolen during transmission. At the same time, the encrypted data and data keys are stored and retrieved separately. Even if the data is illegally accessed, it cannot be decrypted without the corresponding key, thereby improving the security of the data transmission process.

[0096] In some embodiments, the data includes video stream data, and the data acquisition device uses the data key to encrypt the data to be transmitted to obtain encrypted data, which may include:

[0097] The data acquisition device determines the type of each frame of the video stream data according to the video stream encoding format of the video stream data, and obtains the type result of each frame;

[0098] The data acquisition device encrypts the video stream data of the target type frame in the type result using the data key;

[0099] The data acquisition device splices the encrypted video stream data of the target type frame with the field information according to the preset encryption protocol format to obtain the encrypted video stream data of the target type frame;

[0100] The data acquisition device replaces the video stream data of the target type frame in the video stream data with the corresponding encrypted video stream data to obtain an encrypted video stream.

[0101] The frame type to be encrypted can be selected as needed, providing greater flexibility. After encrypting the specified frame content data, the field information is spliced ​​to avoid the encryption result destroying the original video protocol format. The encrypted video data does not affect the video protocol parsing.

[0102] In some embodiments, the frame types may include intra-coded frames (I-frames, I frames), forward predictive coded frames (P-frames, P frames), and bidirectionally predictive intra-coded frames (B-frames, B frames).

[0103] Among them, the I frame is a key frame that contains a complete picture; the P frame represents the difference between this frame and the previous I frame (or P frame). During decoding, the difference defined by this frame needs to be superimposed with the previously cached picture to generate the final picture; the B frame uses the previous I or P frame and the following P frame as reference frames.

[0104] The video data encryption method in the prior art method is to encrypt or entropy encode the I frame, and only encrypt the frame header parameter set information, such as the video parameter set (VPS), sequence parameter set (SPS) and picture parameter set (PPS). However, since the P frame and B frame are not encrypted, the motion information or dynamic pictures in the video image are not protected, so they can be decoded and played normally. In addition, the standard video data structure is relatively fixed, and the image data is organized according to a certain structure. The video data itself has strong characteristics. It is easy to be cracked if only the frame header parameter set information is encrypted, and the confidentiality is poor.

[0105] In some embodiments, the preset encryption protocol format may be: fixed encryption header identifier + version number + algorithm + timestamp + SM3 hash value + encrypted data length + encrypted data + fixed encryption tail identifier.

[0106] like Figure 3 As shown, the intra-frame coded frame and the forward-predicted coded frame are taken as frames to be encrypted, and the intra-frame coded frame and the forward-predicted coded frame are taken as encrypted data in the encryption protocol, and encrypted video data is generated after being spliced ​​through the encryption protocol.

[0107] By encrypting intra-frame coded frames and forward-predicted coded frames, not only the key frames of the video are protected, but also the motion information and dynamic images in the video are protected, thus improving the confidentiality of the video data. Compared with the method of encrypting only the frame header parameter set, using the video frame data as encrypted data is more difficult to crack, thus improving the security of the video content.

[0108] In some embodiments, before the data acquisition device uses the data key to encrypt the data to be transmitted to obtain the encrypted data, the method may further include:

[0109] The data collection device decrypts the preset device key ciphertext according to the preset root key to obtain the device key;

[0110] The data acquisition device uses a preset hash function to encrypt the device key to obtain a data key used to encrypt the transmitted data.

[0111] First, the device key ciphertext is decrypted using the root key, and then the decrypted device key is encrypted using a hash function to generate a data key, achieving double encryption protection for the data.

[0112] In some embodiments, the data collection device uses the national secret SM4 block cipher algorithm when decrypting the preset device key ciphertext.

[0113] In some embodiments, the data collection device decrypts the device key ciphertext according to the preset root key to obtain the device key, which may include:

[0114] The data acquisition device divides the device key ciphertext into blocks according to a preset bit width to obtain multiple data blocks;

[0115] The data acquisition device uses the root key to perform an XOR operation on each data block to obtain an encrypted data block;

[0116] The data acquisition device performs a shift operation on each encrypted data block according to a preset shift value to obtain a shift result for each encrypted data block;

[0117] The data acquisition device determines the key value of each encrypted data block according to the relationship between the shift result of each encrypted data block and the key value;

[0118] The data acquisition device connects the key value of each data block to obtain the device key.

[0119] By performing a series of operations such as block division, XOR, and shifting of the device key ciphertext, the difficulty of cracking is increased. Attackers need to master the detailed process and parameters of these transformations at the same time to try to restore the original device key, which improves data security. At the same time, the device key ciphertext is divided into blocks, and operations can be performed in parallel, which improves the decryption efficiency.

[0120] In some embodiments, the decryption algorithm in the data acquisition device is a symmetric algorithm, and the security platform device is provided with a corresponding encryption algorithm. The security platform can encrypt the device key according to the root key in accordance with the reverse operation of the decryption algorithm in the data acquisition device. When encrypting the device key, it can include:

[0121] Divide the device key into blocks according to a preset bit width to obtain multiple data blocks;

[0122] Perform a shift operation on each data block according to a preset shift value to obtain a shift result of each data block;

[0123] Use the root key to perform an XOR operation on each data block to obtain an encrypted data block;

[0124] Determine the key value of each encrypted data block according to the relationship between the shift result of each encrypted data block and the key value;

[0125] Concatenate the key value of each data block to obtain the device key ciphertext.

[0126] In some embodiments, the data collection device encrypts the device key using a preset hash function to obtain a data key used to encrypt the transmission data, which may include:

[0127] The data acquisition device fills the device key to obtain a device key with the same bit width as the set bit width;

[0128] The data acquisition device divides the device key into blocks according to a preset bit width to obtain multiple data blocks;

[0129] The data acquisition device inputs each data block into a preset hash function to obtain a hash value for each data block;

[0130] The data acquisition device connects the hash value of each data block to obtain the data key.

[0131] The hash function can only calculate the hash value from the original data, but cannot infer the original data from the hash value. This ensures the security of the data key. Even if the data key is leaked, the attacker cannot reversely recover the device key through the hash value.

[0132] In some embodiments, when performing block processing, the bit width of each data block is made the same, and padding operations are not performed at the same time, so as to ensure that the length of the data block meets the input requirements of the hash function.

[0133] In some embodiments, the data key may also take preset bytes of the hash value connection result of each data block, for example, it may take 24-40 bytes of the hash value connection result of each data block.

[0134] In some embodiments, the method may further include:

[0135] The cloud platform device receives a security verification request sent by the security platform device, where the security verification request includes a target device identifier, where the target device identifier is a device identifier of a data receiving device that sends a data key acquisition request to the security platform device;

[0136] The cloud platform device responds to the security verification request, determines whether the target device identifier has corresponding encrypted data based on the relationship information between the encrypted data and the device identifier, and obtains a security verification result;

[0137] The cloud platform device sends the security verification result to the security platform device.

[0138] Through security verification requests, the identity of the data receiving device can be verified to ensure that only authorized devices can request and receive sensitive data. This ensures that data is transmitted to the correct recipient and reduces the risk of data being obtained by unauthorized devices.

[0139] In some embodiments, before the security platform device generates a data key ciphertext of the encrypted data corresponding to the device identification, the method may further include:

[0140] The security platform device sends a security verification request to the cloud platform device, where the security verification request includes a target device identifier, where the target device identifier is the device identifier of the data receiving device that sends the data key acquisition request;

[0141] The security platform device receives the security verification result sent by the cloud platform device, and the security verification result includes the target device identification and the corresponding encrypted data relationship;

[0142] The security platform device generates a data key ciphertext of the encrypted data when there is a corresponding relationship between the device identifier and the encrypted data of the requested data key.

[0143] By verifying that there is a correct correspondence between the encrypted data and the requested data key, incorrect key generation or distribution can be avoided.

[0144] Figure 4 A data processing device 400 provided in an embodiment of the present application is shown, and the device is applied to a data acquisition device, such as Figure 4 As shown, the device may include:

[0145] The acquisition module 401 is used to acquire data to be transmitted;

[0146] The encryption module 402 is used to encrypt the data to be transmitted using a data key to obtain encrypted data. The data key is generated based on a preset root key and a preset device key ciphertext. The device key is a key of a data acquisition device.

[0147] The sending module 403 is used to send encrypted data to the cloud platform device.

[0148] In some embodiments, the data processing device 400 may further include:

[0149] A determination module, used for determining the type of each frame of the video stream data according to the video stream encoding format of the video stream data, and obtaining a type result of each frame;

[0150] Correspondingly, the encryption module 402 is further used to encrypt the video stream data of the target type frame in the type result using the data key;

[0151] A processing module, used for splicing field information of the encrypted video stream data of the target type frame according to a preset encryption protocol format to obtain encrypted video stream data of the target type frame;

[0152] Correspondingly, the determination module is also used to replace the video stream data of the target type frame in the video stream data with the corresponding encrypted video stream data to obtain the encrypted video stream.

[0153] In some embodiments, the data processing device 400 may further include:

[0154] A decryption module, used to decrypt the preset device key ciphertext according to the preset root key to obtain the device key;

[0155] Correspondingly, the encryption module 402 is further configured to encrypt the device key using a preset hash function to obtain a data key corresponding to the device key.

[0156] In some embodiments, the processing module is further used to process the device key ciphertext in blocks according to a preset bit width to obtain multiple data blocks;

[0157] The processing module is further used to perform an XOR operation on each data block using the root key to obtain an encrypted data block;

[0158] The processing module is further used to perform a shift operation on each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block;

[0159] The determination module is further used to determine the key value of each encrypted data block according to the relationship between the shift result of each encrypted data block and the key value;

[0160] The determination module is also used to connect the key value of each data block to obtain the device key.

[0161] In some embodiments, the processing module is further used to fill the device key to obtain a device key with the same bit width as the set bit width;

[0162] The processing module is further used to process the device key in blocks according to a preset bit width to obtain multiple data blocks;

[0163] The determination module is further used to input each data block into a preset hash function to obtain a hash value of each data block;

[0164] The determination module is also used to connect the hash value of each data block to obtain the data key.

[0165] Figure 4 The various modules in the device shown can be implemented Figure 2Each step in the above steps can achieve the corresponding technical effect, which will not be repeated here for the sake of brevity.

[0166] Figure 5 A data processing device 500 provided in an embodiment of the present application is shown, and the device is applied to a data receiving device, such as Figure 5 As shown, the device may include:

[0167] A sending module 501 is used to send an encrypted data acquisition request to a cloud platform device, where the encrypted data acquisition request includes a device identifier of a data receiving device;

[0168] Receiving module 502, used to receive target encrypted data corresponding to the device identification sent by the cloud platform device, the target encrypted data is the encrypted data sent by the data acquisition device and received by the cloud platform device, the encrypted data is encrypted by the data acquisition device based on the data key, and the data key is generated based on the root key and the preset key ciphertext;

[0169] The encryption module 503 is used to encrypt the device identification to obtain a ciphertext of the device identification;

[0170] The sending module 501 is further used to send a data key acquisition request to the security platform device, where the data key acquisition request includes a device identification ciphertext;

[0171] The receiving module 502 is further used to receive the data key ciphertext of the encrypted data corresponding to the device identification sent by the security platform device, where the device identification is obtained by the security platform device based on the decryption of the device identification ciphertext;

[0172] The decryption module 504 is used to decrypt the data key ciphertext to obtain the data key;

[0173] The decryption module 504 is further used to decrypt the target encrypted data according to the data key to obtain the target data.

[0174] Figure 5 The various modules in the device shown can be implemented Figure 2 Each step in the above steps can achieve the corresponding technical effect, which will not be repeated here for the sake of brevity.

[0175] Figure 6 A data processing device 600 provided in an embodiment of the present application is shown. The device is applied to a cloud platform device, and the device may include:

[0176] The receiving module 601 is used to receive an encrypted data acquisition request sent by a data receiving device, the encrypted data acquisition request includes a device identification of the data receiving device, and the encrypted data is the encrypted data sent by the data acquisition device;

[0177] The sending module 602 is used to respond to the encrypted data acquisition request and send the corresponding encrypted data to the data receiving device corresponding to the device identifier according to the relationship information between the encrypted data and the device identifier. The relationship information between the encrypted data and the device identifier is the information sent by the data acquisition device.

[0178] In some embodiments, the data processing device 600 further includes:

[0179] Correspondingly, the receiving module 601 is also used to receive a security verification request sent by the security platform device, the security verification request includes a target device identifier, and the target device identifier is a device identifier of a data receiving device that sends a data key acquisition request to the security platform device;

[0180] A verification module, used to respond to a security verification request, determine whether the target device identifier has corresponding encrypted data according to the relationship information between the encrypted data and the device identifier, and obtain a security verification result;

[0181] Correspondingly, the sending module 602 is also used to send the security verification result to the security platform device.

[0182] Figure 6 The various modules in the device shown can be implemented Figure 2 Each step in the above steps can achieve the corresponding technical effect, which will not be repeated here for the sake of brevity.

[0183] Figure 7 A data processing device 700 provided in an embodiment of the present application is shown. The device is applied to a security platform device. The device may include:

[0184] A receiving module 701 receives a data key acquisition request sent by a data receiving device, where the data key acquisition request includes a device identification ciphertext;

[0185] A generating module 702 is used to generate a data key ciphertext of the encrypted data corresponding to the device identification in response to a data key acquisition request, where the device identification is obtained by decrypting the device identification ciphertext;

[0186] The sending module 703 is used to send the data key ciphertext to the data receiving device.

[0187] In some embodiments, the sending module 703 is further used to send a security verification request to the cloud platform device, the security verification request includes a target device identifier, and the target device identifier is a device identifier of a data receiving device that sends a data key acquisition request;

[0188] Correspondingly, the receiving module 701 is also used to receive the security verification result sent by the cloud platform device, and the security verification result includes the target device identification and the corresponding encrypted data relationship;

[0189] Correspondingly, the generating module 702 is further configured to generate a data key ciphertext of the encrypted data when there is a corresponding relationship between the device identification and the encrypted data of the requested data key.

[0190] Figure 7 The various modules in the device shown can be implemented Figure 2 Each step in the above steps can achieve the corresponding technical effect, which will not be repeated here for the sake of brevity.

[0191] Figure 8 A schematic diagram of the hardware structure of a terminal device provided in an embodiment of the present application is shown.

[0192] The terminal device may include a processor 801 and a memory 802 storing computer program instructions.

[0193] Specifically, the processor 801 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0194] The memory 802 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 802 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In an example, the memory 802 may include a removable or non-removable (or fixed) medium, or the memory 802 is a non-volatile solid-state memory. The memory 802 may be inside or outside the integrated gateway disaster recovery device.

[0195] In one example, the memory 802 may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Thus, typically, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method of 5G data processing according to the present disclosure.

[0196] The processor 801 reads and executes the computer program instructions stored in the memory 802 to implement Figure 1 The method of 5G data processing in the illustrated embodiment.

[0197] In one example, the terminal device may further include a communication interface 803 and a bus 804. Figure 8 As shown, the processor 801, the memory 802, and the communication interface 803 are connected via a bus 804 and communicate with each other.

[0198] The communication interface 803 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0199] Bus 804 includes hardware, software or both, and the components of terminal equipment are coupled to each other. For example, but not limitation, bus may include accelerated graphics port (Accelerated Graphics Port, AGP) or other graphics bus, enhanced industry standard architecture (Extended Industry Standard Architecture, EISA) bus, front side bus (Front Side Bus, FSB), Hyper Transport (Hyper Transport, HT) interconnection, industry standard architecture (Industry Standard Architecture, ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 804 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the application considers any suitable bus or interconnection.

[0200] In addition, in combination with the 5G data processing method in the above embodiment, the embodiment of the present application may provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by the processor, any one of the 5G data processing methods in the above embodiment is implemented.

[0201] An embodiment of the present application also provides a computer program product, including a computer program, which, when executed, implements any one of the 5G data processing methods in the above embodiments.

[0202] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0203] The functional blocks shown in the structural block diagram described above can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), appropriate firmware, plug-in, function card, etc. When implemented in software, the elements of the present application are programs or text segments used to perform the required tasks. The program or text segment can be stored in a machine-readable medium, or transmitted on a transmission medium or communication link via a data signal carried in a carrier. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (Read-Only Memory, ROM), flash memory, erasable read-only memory (Erasable ReadOnly Memory, EROM), floppy disks, compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), optical discs, hard disks, optical fiber media, radio frequency (Radio Frequency, RF) links, etc. The text segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0204] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0205] Aspects of the present disclosure are described above with reference to the flowchart and / or block diagram of the method, device (system) and computer program product according to the embodiment of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0206] The above is only a specific implementation of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A method for data processing, characterized in that: Applied to a data acquisition device, the method comprises: Collect data to be transmitted; Using a data key to encrypt the data to be transmitted to obtain encrypted data, the data key is generated based on a preset root key and a preset device key ciphertext, and the device key is a key of the data acquisition device; The encrypted data is sent to the cloud platform device.

2. The data processing method according to claim 1, characterized in that: The data to be transmitted includes video stream data, and the step of encrypting the data to be transmitted using a data key to obtain encrypted data includes: Determine the type of each frame of the video stream data according to the video stream encoding format of the video stream data, and obtain a type result of each frame; Encrypting the video stream data of the target type frame in the type result using the data key; Splicing the encrypted video stream data of the target type frame with field information according to a preset encryption protocol format to obtain encrypted video stream data of the target type frame; The video stream data of the target type frame is replaced with the corresponding encrypted video stream data to obtain an encrypted video stream.

3. The data processing method according to claim 1, characterized in that: Before using the data key to encrypt the data to be transmitted to obtain encrypted data, the method further includes: Decrypting the preset device key ciphertext according to the preset root key to obtain the device key; The device key is encrypted using a preset hash function to obtain the data key used to encrypt the transmission data.

4. The data processing method according to claim 3, characterized in that: The decrypting of the device key ciphertext according to the preset root key to obtain the device key includes: The device key ciphertext is divided into blocks according to a preset bit width to obtain multiple data blocks; Using the root key to perform an XOR operation on each of the data blocks to obtain an encrypted data block; Performing a shift operation on each of the encrypted data blocks according to a preset shift value to obtain a shift result for each encrypted data block; Determine the key value of each encrypted data block according to the relationship between the shift result of each encrypted data block and the key value; The key value of each encrypted data block is concatenated to obtain a device key.

5. The data processing method according to claim 3, characterized in that: The method of encrypting the device key using a preset hash function to obtain the data key used to encrypt the transmission data includes: Filling the device key to obtain a device key with the same bit width as the set bit width; Divide the device key having the same bit width as the set bit width into blocks according to the preset bit width to obtain multiple data blocks; Inputting each of the data blocks into a preset hash function to obtain a hash value of each data block; The hash value of each of the data blocks is concatenated to obtain the data key.

6. A method of data processing, characterized in that: Applied to a data receiving device, the method comprises: Sending an encrypted data acquisition request to a cloud platform device, wherein the encrypted data acquisition request includes a device identifier of the data receiving device; Receive target encrypted data corresponding to the device identification sent by the cloud platform device, wherein the target encrypted data is encrypted data sent by the data acquisition device and received by the cloud platform device, and the encrypted data is encrypted by the data acquisition device based on a data key, and the data key is generated based on a root key and a preset key ciphertext; Encrypting the device identification to obtain a device identification ciphertext; Sending a data key acquisition request to the security platform device, wherein the data key acquisition request includes the device identification ciphertext; Receiving a data key ciphertext of encrypted data corresponding to the device identification sent by the security platform device, wherein the device identification is obtained by the security platform device by decrypting the device identification ciphertext; Decrypting the data key ciphertext to obtain the data key; The target encrypted data is decrypted according to the data key to obtain the target data.

7. A method of data processing, characterized in that: Applied to a cloud platform device, the method comprises: Receiving an encrypted data acquisition request sent by a data receiving device, wherein the encrypted data acquisition request includes a device identification of the data receiving device, and the encrypted data is the encrypted data sent by a data acquisition device; In response to the encrypted data acquisition request, the corresponding encrypted data is sent to the data receiving device corresponding to the device identification according to the relationship information between the encrypted data and the device identification, and the relationship information between the encrypted data and the device identification is the information sent by the data acquisition device.

8. A data processing method according to claim 7, characterized in that: The method further comprises: Receive a security verification request sent by a security platform device, the security verification request including a target device identifier, the target device identifier being a device identifier of a data receiving device that sends a data key acquisition request to the security platform device; In response to the security verification request, judging whether the target device identification has corresponding encrypted data according to the relationship information between the encrypted data and the device identification, and obtaining a security verification result; Send the security verification result to the security platform device.

9. A method of data processing, characterized in that: Applied to a security platform device, the method comprises: Receiving a data key acquisition request sent by a data receiving device, wherein the data key acquisition request includes a device identification ciphertext; In response to the data key acquisition request, generating a data key ciphertext of the encrypted data corresponding to the device identification, wherein the device identification is obtained by decrypting the device identification ciphertext; The data key ciphertext is sent to the data receiving device.

10. The data processing method according to claim 9, characterized in that: Before generating the data key ciphertext of the encrypted data corresponding to the device identification, the method further includes: Sending a security verification request to the cloud platform device, the security verification request including a target device identifier, the target device identifier being a device identifier of a data receiving device that sends a data key acquisition request; Receiving a security verification result sent by the cloud platform device, the security verification result including the target device identifier and the corresponding encrypted data relationship; In the case that there is a corresponding relationship between the target device identifier and the encrypted data of the requested data key, a data key ciphertext of the encrypted data is generated.

11. A data processing device, characterized in that: Applied to data acquisition equipment, the device comprises: A collection module, used for collecting data to be transmitted; An encryption module, used for encrypting the data to be transmitted using a data key to obtain encrypted data, wherein the data key is generated based on a preset root key and a preset device key ciphertext, and the device key is a key of a data acquisition device; The sending module is used to send the encrypted data to the cloud platform device.

12. A data processing device, characterized in that: Applied to a data receiving device, the device comprises: A sending module, used to send an encrypted data acquisition request to a cloud platform device, wherein the encrypted data acquisition request includes a device identification of the data receiving device; A receiving module, used for receiving target encrypted data corresponding to the device identification sent by the cloud platform device, wherein the target encrypted data is encrypted data sent by the data acquisition device and received by the cloud platform device, and the encrypted data is encrypted by the data acquisition device based on a data key, and the data key is generated based on a root key and a preset key ciphertext; An encryption module, used for encrypting the device identification to obtain a device identification ciphertext; The sending module is further used to send a data key acquisition request to the security platform device, wherein the data key acquisition request includes the device identification ciphertext; The receiving module is further used to receive the data key ciphertext of the encrypted data corresponding to the device identification sent by the security platform device, wherein the device identification is obtained by the security platform device based on decryption of the device identification ciphertext; A decryption module, used to decrypt the data key ciphertext to obtain the data key; The decryption module is further used to decrypt the target encrypted data according to the data key to obtain the target data.

13. A data processing device, characterized in that: Applied to cloud platform equipment, the device comprises: A receiving module, used for receiving an encrypted data acquisition request sent by a data receiving device, wherein the encrypted data acquisition request includes a device identification of the data receiving device, and the encrypted data is the encrypted data sent by the data acquisition device; The sending module is used to respond to the encrypted data acquisition request and send the corresponding encrypted data to the data receiving device corresponding to the device identification according to the relationship information between the encrypted data and the device identification. The relationship information between the encrypted data and the device identification is the information sent by the data acquisition device.

14. A data processing device, characterized in that: Applied to a security platform device, the device comprises: A receiving module receives a data key acquisition request sent by a data receiving device, wherein the data key acquisition request includes a device identification ciphertext; A generating module, configured to generate, in response to the data key acquisition request, a data key ciphertext of encrypted data corresponding to a device identification, wherein the device identification is obtained by decrypting the device identification ciphertext; The sending module is used to send the data key ciphertext to the data receiving device.

15. A terminal device, characterized in that: The device comprises: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method for data processing according to any one of claims 1 to 10 is implemented.

16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the method for data processing according to any one of claims 1 to 10 is implemented.

17. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes the data processing method as described in any one of claims 1 to 10.

Images