Method, apparatus, device and computer storage medium for data processing

Abstract

The application discloses a data processing method, device, equipment and computer storage medium, and relates to the technical field of Internet of Things. The method comprises the following steps: a data acquisition device firstly acquires collected data, encrypts the data through a data key, and sends the data to a cloud platform device for storage. A data receiving device sends an encrypted data acquisition request to the cloud platform device and a security platform device respectively, obtains target encrypted data sent by the cloud platform device, and obtains data key ciphertext sent by the security platform device. The security platform device receives the acquisition request and sends the data key ciphertext to the data receiving device. After receiving the data key ciphertext, the data receiving device decrypts and processes the target encrypted data according to the data key, and obtains target data. The data of the embodiment of the application remains in an encrypted state in the transmission process, reduces the risk of interception and theft in the transmission process, and improves the security of the data transmission process by storing and acquiring the encrypted data and the data key respectively.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of Internet of Things, and particularly relates to a data processing method and device, equipment and a computer storage medium. BACKGROUND

[0002] With the rapid increase of home network bandwidth, data collection devices such as cameras, microphones and health monitoring devices have gradually become part of daily life, but potential data content leakage risks can bring negative impact and economic losses to users. Therefore, it is particularly important to protect data content, encrypt data transmission and hide transmission data content to ensure data security.

[0003] Traditional data encryption methods only perform encryption processing in the data storage stage. Although it can improve the security of data transmission to a certain extent, in the process of transmitting data from the data collection device to the cloud platform device or the data receiving device, the transmission data is easy to be intercepted and tampered with or leaked, and the security of the data transmission process is low. SUMMARY

[0004] The embodiments of the present application provide a data processing method, device, equipment and computer storage medium to solve the problem of low process security of data transmission in the prior art.

[0005] In a first aspect, the embodiments of the present application provide a data processing method applied to a data collection device, which comprises:

[0006] collecting to-be-transmitted data;

[0007] encrypting the to-be-transmitted data using a data key to obtain encrypted data, the data key being generated based on a preset root key and a preset device key ciphertext, the device key being a key of the data collection device;

[0008] sending the encrypted data to a cloud platform device.

[0009] In a second aspect, the embodiments of the present application provide a data processing method applied to a data receiving device, which comprises:

[0010] sending an encrypted data acquisition request to a cloud platform device, the encrypted data acquisition request comprising a device identifier of the data receiving device;

[0011] receiving target encrypted data corresponding to the device identifier sent by the cloud platform device, the target encrypted data being encrypted data sent by the data collection device and received by the cloud platform device, the encrypted data being obtained by encrypting the to-be-transmitted data based on the data key, the data key being generated based on the root key and the preset key ciphertext;

[0012] The device identifier is encrypted to obtain device identifier ciphertext;

[0013] A data key acquisition request is sent to the security platform device, and the data key acquisition request includes the device identifier ciphertext;

[0014] The data key ciphertext of the encrypted data corresponding to the device identifier is received, which is sent by the security platform device and is decrypted based on the device identifier ciphertext;

[0015] The data key ciphertext is decrypted to obtain the data key;

[0016] The target encrypted data is decrypted based on the data key to obtain the target data.

[0017] In a third aspect, an embodiment of the present application provides a data processing method applied to a cloud platform device, and the method comprises the following steps:

[0018] An encrypted data acquisition request is received, which is sent by a data receiving device and includes a device identifier of the data receiving device, and the encrypted data is encrypted data sent by a data collection device;

[0019] In response to the encrypted data acquisition request, corresponding encrypted data is sent to the data receiving device corresponding to the device identifier based on relationship information between the encrypted data and the device identifier, and the relationship information between the encrypted data and the device identifier is information sent by the data collection device.

[0020] In a fourth aspect, an embodiment of the present application provides a data processing method applied to a security platform device, and the method comprises the following steps:

[0021] A data key acquisition request is received, which is sent by a data receiving device and includes device identifier ciphertext;

[0022] In response to the data key acquisition request, data key ciphertext of encrypted data corresponding to the device identifier is generated, and the device identifier is decrypted based on the device identifier ciphertext;

[0023] The data key ciphertext is sent to the data receiving device.

[0024] In a fifth aspect, an embodiment of the present application provides a data processing device applied to a data collection device, and the device comprises the following steps:

[0025] A collection module is configured to collect to-be-transmitted data;

[0026] An encryption module is configured to encrypt the to-be-transmitted data based on a data key to obtain encrypted data, the data key is generated based on a preset root key and preset device key ciphertext, and the device key is a key of the data collection device;

[0027] The sending module is configured to send the encrypted data to the cloud platform device.

[0028] In a sixth aspect, an embodiment of the present application provides a data processing apparatus applied to a data receiving device, the apparatus comprising:

[0029] The sending module is configured to send an encrypted data obtaining request to the cloud platform device, the encrypted data obtaining request comprising a device identifier of the data receiving device.

[0030] The receiving module is configured to receive target encrypted data corresponding to the device identifier sent by the cloud platform device, the target encrypted data being encrypted data sent by a data collection device and received by the cloud platform device, the encrypted data being obtained by the data collection device based on a data key, and the data key being generated based on a root key and a preset key ciphertext.

[0031] The encryption module is configured to perform encryption processing on the device identifier to obtain a device identifier ciphertext.

[0032] The sending module is further configured to send a data key obtaining request to the security platform device, the data key obtaining request comprising the device identifier ciphertext.

[0033] The receiving module is further configured to receive a data key ciphertext of the encrypted data corresponding to the device identifier sent by the security platform device, the device identifier being obtained by the security platform device based on decryption of the device identifier ciphertext.

[0034] The decryption module is configured to perform decryption processing on the data key ciphertext to obtain a data key.

[0035] The decryption module is further configured to perform decryption processing on the target encrypted data based on the data key to obtain target data.

[0036] In a seventh aspect, an embodiment of the present application provides a data processing apparatus applied to a cloud platform device, the apparatus comprising:

[0037] The receiving module is configured to receive an encrypted data obtaining request sent by a data receiving device, the encrypted data obtaining request comprising a device identifier of the data receiving device, and the encrypted data being encrypted data sent by a data collection device.

[0038] The sending module is configured to, in response to the encrypted data obtaining request, send corresponding encrypted data to the data receiving device corresponding to the device identifier based on relationship information between the encrypted data and the device identifier, the relationship information between the encrypted data and the device identifier being information sent by the data collection device.

[0039] In an eighth aspect, an embodiment of the present application provides a data processing apparatus applied to a security platform device, the apparatus comprising:

[0040] The receiving module receives a data key acquisition request sent by the data receiving device, and the data key acquisition request comprises device identification ciphertext;

[0041] The generating module generates data key ciphertext of encrypted data corresponding to the device identification in response to the data key acquisition request, and the device identification is obtained by decrypting the device identification ciphertext;

[0042] The sending module sends the data key ciphertext to the data receiving device.

[0043] In a ninth aspect, an embodiment of the present application provides a terminal device, which comprises a processor and a memory storing computer program instructions; and the processor implements the data processing method of the first aspect or the second aspect or the third aspect or the fourth aspect when executing the computer program instructions.

[0044] In a tenth aspect, an embodiment of the present application provides a computer readable storage medium, which stores computer program instructions; and the computer program instructions are executed by a processor to implement the data processing method of the first aspect or the second aspect or the third aspect or the fourth aspect.

[0045] In an eleventh aspect, an embodiment of the present application provides a computer program product, and instructions in the computer program product are executed by a processor of an electronic device to enable the electronic device to execute the data processing method of the first aspect or the second aspect or the third aspect or the fourth aspect.

[0046] The embodiment of the present application provides a data processing method, device, equipment and computer storage medium. The method comprises the following steps: firstly, using a data acquisition device to acquire collected data; the data acquisition device encrypts the data by using a data key and sends the data to a cloud platform device for storage, so that the data is encrypted at the data acquisition source, and the risk of data leakage in the transmission process of the video stream is reduced. The data receiving device sends an encrypted data acquisition request carrying a device identifier to the cloud platform device, receives target encrypted data sent by the cloud platform device, and through the request carrying the device identifier, the cloud platform device can accurately send the encrypted data to the specified data receiving device. The data receiving device encrypts the device identifier, obtains device identifier ciphertext, and sends a data key acquisition request carrying the device identifier ciphertext to the security platform device, and receives data key ciphertext sent by the security platform device. After the device identifier is encrypted and the request is sent, the device identifier is prevented from being tampered with or stolen in the transmission process, and the security and credibility of the request are improved. After the security platform device receives the acquisition request, the data key ciphertext is sent to the target data receiving device. After the data receiving device receives the data key ciphertext, the data key is obtained through decryption processing, the target encrypted data is decrypted according to the data key, and the target data is obtained. The data of the embodiment of the present application is kept in an encrypted state in the transmission process, the risk of interception and theft in the transmission process is reduced, and the encrypted data and the data key are stored and acquired respectively. Even if the data is illegally accessed, the data cannot be decrypted without the corresponding key, and the security of the data transmission process is improved. BRIEF DESCRIPTION OF DRAWINGS

[0047] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required to be used in the embodiments of the present application will be briefly introduced. Those skilled in the art can obtain other drawings according to these drawings without creating any creative labor.

[0048] Figure 1 is a structural schematic diagram of a data processing system that can be realized by the embodiments of the present application;

[0049] Figure 2 is a flow schematic diagram of a data processing method provided by the embodiments of the present application;

[0050] Figure 3 is a schematic diagram of a video stream encryption method provided by the embodiments of the present application;

[0051] Figure 4 is a structural schematic diagram of a data processing device applied to a data acquisition device and provided by the embodiments of the present application;

[0052] Figure 5 is a structural schematic diagram of a data processing device applied to a data receiving device and provided by the embodiments of the present application;

[0053] Figure 6 is a structural schematic diagram of an apparatus for data processing applied to a cloud platform device provided by an embodiment of the present application;

[0054] Figure 7 is a structural schematic diagram of an apparatus for data processing applied to a security platform device provided by an embodiment of the present application;

[0055] Figure 8 is a structural schematic diagram of a terminal device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0056] The features and exemplary embodiments of various aspects of the present application will be described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are intended to explain the present application, not to limit the present application. The present application can be implemented without some of the specific details described below. The following description of the embodiments is merely intended to provide a better understanding of the present application by showing examples of the present application.

[0057] It should be noted that, in this document, relational terms such as first and second, and the like, are used solely to distinguish one entity or action from another entity or action, without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises", "comprising", or any other variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without more limitations, an element defined by the statement "comprising" does not exclude the existence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0058] In the prior art, the encryption processing of video data mainly focuses on the storage stage of video stream. This method usually involves encrypting video data before saving to storage media to ensure that the data stored in the server or cloud platform is secure. This storage encryption method relies on static data protection, and once the data leaves the storage environment and starts transmission, it is no longer protected. During transmission, data usually flows in an unencrypted form in the network, making it vulnerable to various security threats such as man-in-the-middle attacks, data interception, tampering, and eavesdropping. These threats can lead to sensitive information leakage, compromising user privacy and data integrity.

[0059] To solve the prior art, the embodiment of the application provides a data processing method, device, equipment and computer storage medium. The method first acquires collected data using a data acquisition device; the data acquisition device encrypts the data through a data key and sends the data to a cloud platform device for storage, thereby realizing encryption of the data at the data acquisition source and reducing the risk of leakage of the video stream in the transmission process. The data receiving device sends an encrypted data acquisition request carrying a device identifier to the cloud platform device, receives target encrypted data sent by the cloud platform device, and through the request carrying the device identifier, the cloud platform device can accurately send the encrypted data to the specified data receiving device. The data receiving device encrypts the device identifier, obtains device identifier ciphertext, and sends a data key acquisition request carrying the device identifier ciphertext to the security platform device, receives data key ciphertext sent by the security platform device, and sends the request after encrypting the device identifier, thereby preventing the device identifier from being tampered with or stolen in the transmission process and increasing the security and credibility of the request. After receiving the acquisition request, the security platform device sends the data key ciphertext to the target data receiving device. After receiving the data key ciphertext, the data receiving device performs decryption processing to obtain the data key and decrypts the target encrypted data according to the data key to obtain the target data. The data of the embodiment of the application remains in an encrypted state in the transmission process, reduces the risk of interception and theft in the transmission process, and separately stores and acquires the encrypted data and the data key, so that even if the data is illegally accessed, the data cannot be decrypted without the corresponding key, and the security of the data transmission process is improved.

[0060] First, the data processing system provided by the embodiment of the application is introduced.

[0061] Figure 1 The structure of the data processing system 100 is shown. As shown in the figure, the system can include a data acquisition device 110, a cloud platform device 120, a security platform device 130 and a data receiving device 140. The data acquisition device 110 includes an acquisition module 111 and an encryption module 112. Figure 1

[0062] The acquisition module 111 of the data acquisition device 110 is used to acquire the data to be transmitted, and the encryption module 112 is used to encrypt the data using an encryption algorithm before the data leaves the data acquisition device, thereby realizing encryption from the source and ensuring that the plaintext video does not leave the device. The security of the data in the transmission process is ensured, and even if the data is intercepted in the transmission process, unauthorized third parties cannot read the data content.

[0063] ​The cloud platform device 120 is configured to store the encrypted data sent by the data collection device 100 and store the correspondence between the encrypted data and the data receiving device 140. The security platform device 130 is configured to be responsible for the security key and access control of the entire system, generate and manage the encryption key, and ensure that only authorized users or devices can decrypt and access sensitive data. The data receiving device 140 sends a data acquisition request to the cloud platform device 120 and receives encrypted data. The data receiving device 140 is also configured to interact with the security platform device 130 to obtain the key required for decrypting the data, and decrypt the encrypted data according to the key to obtain the transmission data.

[0064] The method for processing data provided by the embodiment of the application will be described below with reference to the accompanying drawings.

[0065] Figure 2 A flowchart of the method for processing data provided by an embodiment of the application is shown. As shown in the figure, the method can include the following steps: S201 to S208. Figure 2

[0066] S201, the data collection device collects the data to be transmitted and encrypts the data to be transmitted using a data key to obtain encrypted data, the data key being generated based on a preset root key and a preset device key ciphertext.

[0067] In some embodiments, the security platform issues a preset device key generated by the security encryption machine through the manufacturer and device information to the security platform, and generates the preset device key ciphertext through the root key and the SM4 group encryption algorithm.

[0068] In some embodiments, before the security platform issues the device key, the legality of the manufacturer information and whether the same device ID is repeatedly applied for the preset key are checked through a preset white list.

[0069] In some embodiments, the manufacturer burns the preset key ciphertext into the corresponding device through the production line to ensure that the preset key ciphertext is not handed over to a third party and to ensure the safety of the burning process.

[0070] In some embodiments, the manufacturer information can include the manufacturer name and the manufacturer ID, and the device information can include the device identification ID, the media access control (Mac, Media Access Control) address, and the product serial number (Serial Number, SN) code.

[0071] S202, the data collection device sends the encrypted data to the cloud platform device.

[0072] ​In some embodiments, when the data collection device has sent the encrypted data to the cloud platform device, a secure transmission protocol such as Transport Layer Security (TLS) or Secure Sockets Layer (SSL) can be used for transmission to protect the integrity and confidentiality of the data during transmission.

[0073] In some embodiments, end-to-end encryption technology can be used during transmission to ensure that only the data sender and receiver can decrypt the data.

[0074] In some embodiments, a data integrity verification mechanism such as HMAC can also be added during transmission to ensure that the data has not been tampered with during transmission.

[0075] By transmitting encrypted data, the security of data transmission in the network is improved, and even if the data is intercepted during transmission, it cannot be read.

[0076] S203, the data receiving device sends an encrypted data acquisition request to the cloud platform device, and the encrypted data acquisition request includes the device identifier of the data receiving device.

[0077] In some embodiments, the device identifier can be the hardware identifier of the device, such as the MAC address or the device serial number, or a unique identifier generated by software.

[0078] Allowing authorized data receiving devices to acquire encrypted data on demand, and ensuring that only authorized devices can request data through device identifiers increases the security of data access.

[0079] S204, the cloud platform device receives the encrypted data acquisition request sent by the data receiving device, and according to the relationship information between the encrypted data and the device identifier, sends the corresponding target encrypted data to the data receiving device corresponding to the device identifier.

[0080] In some embodiments, the cloud platform device can record the relationship information between the encrypted data and the device identifier through Access Control Lists (ACL).

[0081] Through the relationship information between the encrypted data and the device identifier, it can be ensured that the data is only sent to devices with access rights, preventing unauthorized access.

[0082] S205, the data receiving device encrypts the device identifier to obtain the device identifier ciphertext.

[0083] In some embodiments, the data receiving device encrypts the device identifier to obtain the device identifier ciphertext, which can include:

[0084] Based on the splicing result of the fixed string, the timestamp and the random number, a real-time key is generated according to an SM3 hash algorithm;

[0085] The device identifier is encrypted according to the real-time key and a national SM4 block cipher algorithm.

[0086] The encryption of the device identifier can prevent others from tracking the device, protect the device identifier from being leaked, increase the difficulty of forging the device identity, and increase the transmission security.

[0087] In S206, the data receiving device sends a data key acquisition request containing the device identifier ciphertext to the security platform device.

[0088] By sending the encrypted device identifier, it is ensured that only authorized devices can request the data key, and the security platform device can distribute the corresponding data key for the encrypted data requested by the device according to the device identifier.

[0089] In S207, the security platform device receives the data key acquisition request sent by the data receiving device, generates the data key ciphertext of the encrypted data corresponding to the device identifier, and sends the data key ciphertext to the data receiving device.

[0090] In some embodiments, the security platform device is provided with a decryption algorithm corresponding to the device identifier encryption algorithm of the data receiving device, and the obtained device identifier ciphertext is decrypted using the decryption algorithm.

[0091] In some embodiments, the security platform device is preconfigured with the same encryption algorithm as the data collection device, and when the data key acquisition request sent by the data receiving device is acquired, the security platform device generates the data key ciphertext based on the encryption algorithm.

[0092] The data key is sent in the form of ciphertext to prevent the key from being intercepted during transmission, and the key and the encrypted data are stored and obtained separately to prevent the key and the data from being destroyed at the same time, thereby increasing the confidentiality and integrity of the data.

[0093] In S208, the data receiving device decrypts the data key ciphertext and decrypts the target encrypted data according to the data key to obtain the target data.

[0094] In some embodiments, the data receiving device is preconfigured with a decryption algorithm corresponding to the data collection device. Since the encryption algorithm in the data collection device is a symmetric algorithm, the data receiving device decrypts the encrypted data according to the operation opposite to the encryption algorithm in the data collection device according to the data key, and obtains the decrypted data.

[0095] The data acquisition device encrypts the data by using the data key and sends the data to the cloud platform device for storage, so that the data is encrypted at the data acquisition source, and the risk of data leakage in the transmission process is reduced. The data receiving device sends an encrypted data acquisition request carrying the device identifier to the cloud platform device, receives the target encrypted data sent by the cloud platform device, and through the request carrying the device identifier, the cloud platform device can accurately send the encrypted data to the specified data receiving device. The data receiving device encrypts the device identifier to obtain the device identifier ciphertext and sends a data key acquisition request carrying the device identifier ciphertext to the security platform device, receives the data key ciphertext sent by the security platform device, and sends the request after encrypting the device identifier, so as to prevent the device identifier from being tampered with or stolen in the transmission process and increase the security and credibility of the request. After receiving the acquisition request, the security platform device sends the data key ciphertext to the target data receiving device. After receiving the data key ciphertext, the data receiving device decrypts the data key ciphertext to obtain the data key and decrypts the target encrypted data according to the data key to obtain the target data. The data in the transmission process of the embodiment of the application remains in an encrypted state, reduces the risk of interception and theft in the transmission process, and stores and acquires the encrypted data and the data key respectively. Even if the data is illegally accessed, it cannot be decrypted without the corresponding key, and the security of the data transmission process is improved.

[0096] In some embodiments, the data includes video stream data, and the data acquisition device encrypts the to-be-transmitted data by using the data key to obtain encrypted data, which can include:

[0097] The data acquisition device determines the type of each frame of the video stream data according to the video stream coding format of the video stream data to obtain a type result of each frame;

[0098] The data acquisition device encrypts the video stream data of the target type frame in the type result by using the data key;

[0099] The data acquisition device splices field information according to a preset encryption protocol format for the encrypted video stream data of the target type frame to obtain encrypted video stream data of the target type frame;

[0100] The data acquisition device replaces the video stream data of the target type frame in the video stream data with the corresponding encrypted video stream data to obtain encrypted video stream data.

[0101] The frame type to be encrypted can be selected as needed, and higher flexibility is provided. The field information is spliced after the specified frame content data is encrypted, so that the original video protocol format is not damaged by the encryption result, and the video protocol parsing is not affected after the video data is encrypted.

[0102] In some embodiments, the frame type may include an intra-frame coded frame (I-frame), a forward predictive coded frame (P-frame), and a bidirectional predictive intravariant coded frame (B-frame).

[0103] Among them, I-frame is a keyframe containing the complete picture; P-frame represents the difference between this frame and the previous I-frame (or P-frame). During decoding, the difference defined in this frame needs to be superimposed on the previously cached picture to generate the final picture; B-frame uses the preceding I-frame or P-frame and the following P-frame as reference frames.

[0104] Existing video data encryption methods typically involve encrypting or entropy-coding I-frames, and only encrypting the frame header parameter set information, such as the Video Parameter Set (VPS), Sequence Parameter Sets (SPS), and Picture Parameter Sets (PPS). However, since P-frames and B-frames are not encrypted, motion information or dynamic scenes in the video image are not protected, allowing for normal decoding and playback. Furthermore, standard video data structures are relatively fixed, organizing image data according to a specific structure, and video data itself has strong characteristics; encrypting only the frame header parameter set information makes it easy to crack, resulting in poor security.

[0105] In some embodiments, the preset encryption protocol format may be: fixed encryption header identifier + version number + algorithm + timestamp + SM3 hash value + encrypted data length + encrypted data + fixed encryption tail identifier.

[0106] like Figure 3 As shown, intra-coded frames and predictive-coded frames are used as the frames to be encrypted, and intra-coded frames and predictive-coded frames are used as the encrypted data in the encryption protocol. After being concatenated by the encryption protocol, encrypted video data is generated.

[0107] By encrypting intra-frame coded frames and predictive coded frames, not only are keyframes of the video protected, but also motion information and dynamic scenes within the video, thus improving the confidentiality of the video data. Using video frame data as encrypted data is more difficult to crack than methods that only encrypt the frame header parameter set, thereby enhancing the security of the video content.

[0108] In some embodiments, before the data acquisition device encrypts the data to be transmitted using a data key to obtain encrypted data, the method may further include:

[0109] The data acquisition device decrypts the preset device key ciphertext according to the preset root key to obtain the device key;

[0110] The data acquisition device encrypts the device key using a preset hash function to obtain a data key used for encrypting the transmission data.

[0111] The device key ciphertext is first decrypted by the root key, and then the decrypted device key is encrypted using a hash function to generate a data key, thereby achieving double encryption protection of the data.

[0112] In some embodiments, when the data acquisition device decrypts the preset device key ciphertext, a national standard SM4 block cipher algorithm is used.

[0113] In some embodiments, the data acquisition device decrypts the device key ciphertext according to the preset root key to obtain the device key, which can include:

[0114] The data acquisition device divides the device key ciphertext into multiple data blocks according to a preset bit width;

[0115] The data acquisition device performs an exclusive or operation on each data block using the root key to obtain an encrypted data block;

[0116] The data acquisition device shifts each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block;

[0117] The data acquisition device determines a key value of each encrypted data block according to a relationship between the shift result of each encrypted data block and the key value;

[0118] The data acquisition device connects the key values of each data block to obtain the device key.

[0119] By dividing the device key ciphertext, performing exclusive or, shifting, and other operations, the difficulty of cracking is increased, and an attacker needs to master the detailed process and parameters of these transformations at the same time to attempt to restore the original device key, thereby improving the security of the data. Meanwhile, the device key ciphertext is divided into blocks for processing, which can be operated in parallel to improve the decryption efficiency.

[0120] In some embodiments, the decryption algorithm in the data acquisition device is a symmetric algorithm, and the security platform device is provided with a corresponding encryption algorithm. The security platform can encrypt the device key according to the decryption algorithm in the data acquisition device in reverse according to the root key, and the encryption of the device key can include:

[0121] The device key is divided into multiple data blocks according to a preset bit width;

[0122] Each data block is shifted according to a preset shift value to obtain a shift result of each data block;

[0123] XOR each data block using the root key to obtain an encrypted data block;

[0124] According to the relationship between the shift result of each encrypted data block and the key value, the key value of each encrypted data block is determined;

[0125] The key values of each data block are connected to obtain the device key ciphertext.

[0126] In some embodiments, the data acquisition device encrypts the device key using a preset hash function to obtain a data key used for encrypting the transmission data, which can include:

[0127] The data acquisition device pads the device key to obtain a device key with the same bit width as the set bit width;

[0128] The data acquisition device divides the device key into multiple data blocks according to a preset bit width;

[0129] The data acquisition device inputs each data block into a preset hash function to obtain a hash value of each data block;

[0130] The data acquisition device connects the hash values of each data block to obtain the data key.

[0131] The hash function can only calculate the hash value from the original data, but cannot reverse the original data from the hash value. This ensures the security of the data key, and even if the data key is leaked, attackers cannot recover the device key through reverse calculation of the hash value.

[0132] In some embodiments, the block processing is performed so that the bit width of each data block is the same, and the padding operation is not performed at different times to ensure that the length of the data block meets the input requirements of the hash function.

[0133] In some embodiments, the data key can also take a preset byte of the hash value connection result of each data block, for example, 24-40 bytes of the hash value connection result of each data block.

[0134] In some embodiments, the method can further include:

[0135] The cloud platform device receives a security check request sent by the security platform device, and the security check request includes a target device identifier, which is the device identifier of the data receiving device that sends a data key acquisition request to the security platform device;

[0136] The cloud platform device responds to the security check request, determines whether the target device identifier has corresponding encrypted data according to the relationship information between the encrypted data and the device identifier, and obtains a security check result;

[0137] The cloud platform device sends the security check result to the security platform device.

[0138] Through the security check request, the identity of the data receiving device can be verified to ensure that only authorized devices can request and receive sensitive data. It ensures that data is transmitted to the correct recipient and reduces the risk of data being obtained by unauthorized devices.

[0139] In some embodiments, before the security platform device generates the data key ciphertext corresponding to the device identification, the method can further include:

[0140] The security platform device sends a security check request to the cloud platform device, and the security check request includes a target device identification, which is the device identification of the data receiving device sending the data key acquisition request;

[0141] The security platform device receives the security check result sent by the cloud platform device, and the security check result includes the target device identification and the corresponding encrypted data relationship;

[0142] The security platform device generates the data key ciphertext of the encrypted data in the case that the device identification and the encrypted data of the requested data key have a corresponding relationship.

[0143] By checking that there is a correct corresponding relationship between the encrypted data and the requested data key, it can be avoided to generate or distribute the key incorrectly.

[0144] Figure 4 An apparatus 400 for data processing is shown, which is applied to a data collection device, such as Figure 4 As shown, the apparatus can include:

[0145] The collection module 401 is configured to collect to-be-transmitted data.

[0146] The encryption module 402 is configured to perform encryption processing on the to-be-transmitted data using a data key to obtain encrypted data, and the data key is generated based on a preset root key and a preset device key ciphertext, and the device key is a key of the data collection device.

[0147] The sending module 403 is configured to send the encrypted data to a cloud platform device.

[0148] In some embodiments, the apparatus 400 for data processing can further include:

[0149] The determination module is configured to determine the type of each frame of the video stream data according to the video stream encoding format of the video stream data to obtain a type result of each frame.

[0150] Correspondingly, the encryption module 402 is further configured to encrypt the video stream data of the target type frame in the type result using the data key.

[0151] The processing module is configured to splice field information according to a preset encryption protocol format of the encrypted target type frame video stream data, to obtain encrypted target type frame video stream data.

[0152] Correspondingly, the determining module is further configured to replace the target type frame video stream data in the video stream data with the corresponding encrypted video stream data, to obtain encrypted video stream data.

[0153] In some embodiments, the data processing apparatus 400 can further include:

[0154] The decryption module is configured to decrypt the preset device key ciphertext according to a preset root key, to obtain a device key.

[0155] Correspondingly, the encryption module 402 is further configured to encrypt the device key using a preset hash function, to obtain a data key corresponding to the device key.

[0156] In some embodiments, the processing module is further configured to block process the device key ciphertext according to a preset bit width size, to obtain a plurality of data blocks.

[0157] The processing module is further configured to perform an exclusive or operation on each data block using the root key, to obtain encrypted data blocks.

[0158] The processing module is further configured to perform a shift operation on each encrypted data block according to a preset shift value, to obtain a shift result of each encrypted data block.

[0159] The determining module is further configured to determine a key value of each encrypted data block according to a relationship between the shift result of each encrypted data block and the key value.

[0160] The determining module is further configured to connect the key values of each data block, to obtain the device key.

[0161] In some embodiments, the processing module is further configured to pad the device key, to obtain a device key with a bit width same as a set bit width.

[0162] The processing module is further configured to block process the device key according to a preset bit width size, to obtain a plurality of data blocks.

[0163] The determining module is further configured to input each data block into a preset hash function, to obtain a hash value of each data block.

[0164] The determining module is further configured to connect the hash values of each data block, to obtain the data key.

[0165] Figure 4 Each module in the apparatus shown can be implemented by hardware, software or a combination of hardware and software. Figure 2Each step in the above method can be implemented by the corresponding technical effect, and the details are not described herein for brevity.

[0166] Figure 5 An apparatus 500 for data processing is shown, which is applied to a data receiving device, and the apparatus can include Figure 5 As shown in the figure, the apparatus can include:

[0167] The sending module 501 is configured to send an encrypted data acquisition request to a cloud platform device, and the encrypted data acquisition request includes a device identifier of the data receiving device.

[0168] The receiving module 502 is configured to receive target encrypted data corresponding to the device identifier sent by the cloud platform device, and the target encrypted data is encrypted data sent by a data collection device and received by the cloud platform device, and the encrypted data is obtained by the data collection device based on a data key, and the data key is generated based on a root key and a preset key ciphertext.

[0169] The encryption module 503 is configured to perform encryption processing on the device identifier to obtain a device identifier ciphertext.

[0170] The sending module 501 is further configured to send a data key acquisition request to a security platform device, and the data key acquisition request includes the device identifier ciphertext.

[0171] The receiving module 502 is further configured to receive a data key ciphertext of the encrypted data corresponding to the device identifier sent by the security platform device, and the device identifier is obtained by the security platform device based on the device identifier ciphertext.

[0172] The decryption module 504 is configured to perform decryption processing on the data key ciphertext to obtain a data key.

[0173] The decryption module 504 is further configured to perform decryption processing on the target encrypted data based on the data key to obtain target data.

[0174] Figure 5 Each module in the apparatus shown in the figure can implement Figure 2 Each step in the above method can be implemented by the corresponding technical effect, and the details are not described herein for brevity.

[0175] Figure 6 An apparatus 600 for data processing is shown, which is applied to a cloud platform device, and the apparatus can include

[0176] The receiving module 601 is configured to receive an encrypted data acquisition request sent by a data receiving device, and the encrypted data acquisition request includes a device identifier of the data receiving device, and the encrypted data is encrypted data sent by a data collection device.

[0177] The sending module 602 is configured to, in response to the encrypted data acquisition request, send corresponding encrypted data to a data receiving device corresponding to the device identifier according to the relationship information between the encrypted data and the device identifier, and the relationship information between the encrypted data and the device identifier is information sent by the data collection device.

[0178] In some embodiments, the device 600 for data processing further includes:

[0179] Correspondingly, the receiving module 601 is further configured to receive a security check request sent by the security platform device, and the security check request includes a target device identifier, which is a device identifier of a data receiving device that sends a data key acquisition request to the security platform device.

[0180] The checking module is configured to, in response to the security check request, determine whether the target device identifier exists corresponding encrypted data according to the relationship information between the encrypted data and the device identifier, and obtain a security check result.

[0181] Correspondingly, the sending module 602 is further configured to send the security check result to the security platform device.

[0182] Figure 6 Each module in the device shown can implement Figure 2 each step in the method and achieve the corresponding technical effects, and for brevity, will not be described again.

[0183] Figure 7 A device 700 for data processing provided by an embodiment of the application is shown, the device is applied to a security platform device, and the device can include:

[0184] The receiving module 701 receives a data key acquisition request sent by a data receiving device, and the data key acquisition request includes device identifier ciphertext.

[0185] The generating module 702 is configured to, in response to the data key acquisition request, generate data key ciphertext of encrypted data corresponding to the device identifier, and the device identifier is obtained by decrypting the device identifier ciphertext.

[0186] The sending module 703 is configured to send the data key ciphertext to the data receiving device.

[0187] In some embodiments, the sending module 703 is further configured to send a security check request to a cloud platform device, and the security check request includes a target device identifier, which is a device identifier of a data receiving device that sends a data key acquisition request.

[0188] Correspondingly, the receiving module 701 is further configured to receive a security check result sent by the cloud platform device, and the security check result includes a target device identifier and corresponding encrypted data relationship.

[0189] Correspondingly, the generation module 702 is further configured to generate the data key ciphertext of the encrypted data in a case where the device identifier and the encrypted data of the requested data key exist a corresponding relationship.

[0190] Figure 7 Each module in the apparatus shown can implement Figure 2 each step in the method and achieve the corresponding technical effects, which will not be described in detail here for brevity.

[0191] Figure 8 A hardware structure schematic diagram of a terminal device provided by an embodiment of the present application is shown.

[0192] The terminal device can include a processor 801 and a memory 802 storing computer program instructions.

[0193] Specifically, the processor 801 described above can include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or can be configured as one or more integrated circuits that implement one or more embodiments of the present application.

[0194] The memory 802 can include a mass storage for data or instructions. By way of example and not limitation, the memory 802 can include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In one example, the memory 802 can include a removable or non-removable (or fixed) medium, or the memory 802 is a non-volatile solid state memory. The memory 802 can be internal or external to the integrated gateway disaster recovery device.

[0195] In one example, the memory 802 can include read-only memory (ROM), random access memory (RAM), a disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical, or other physical / tangible memory storage device. Thus, generally, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions that, when executed (e.g., by one or more processors), are operable to perform the operations described with reference to the method of 5G data processing according to the present disclosure.

[0196] The processor 801 implements the method of 5G data processing in the embodiments shown by reading and executing the computer program instructions stored in the memory 802. Figure 1 the method of 5G data processing in the embodiments shown.

[0197] In one example, the terminal device can further include a communication interface 803 and a bus 804. As shown, the processor 801, the memory 802, the communication interface 803 are connected through the bus 804 and complete the communication between each other. Figure 8

[0198] The communication interface 803 is mainly used to realize the communication between each module, device, unit and / or equipment in the embodiments of the present application.

[0199] The bus 804 includes hardware, software or both to couple components of the terminal device to each other in a known manner. By way of example and not limitation, the bus can include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an InfiniBand interconnect, a Low Pin Count (LPC) bus, a memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association local (VLB) bus, or other suitable bus or combination of two or more of these. Where appropriate, the bus 804 can include one or more buses. Although specific buses are described and illustrated in the embodiments of the present application, the present application contemplates any suitable bus or interconnect.

[0200] In addition, in combination with the method for processing 5G data in the above-mentioned embodiments, the embodiments of the present application can provide a computer storage medium for implementation. The computer storage medium has computer program instructions stored thereon; the computer program instructions are executed by a processor to implement any of the methods for processing 5G data in the above-mentioned embodiments.

[0201] The embodiments of the present application also provide a computer program product, which includes a computer program, and the computer program is executed by a processor to implement any of the methods for processing 5G data in the above-mentioned embodiments.

[0202] ​It is to be understood that the application is not limited to particular configurations and processes described herein and shown in the drawings. For simplicity, detailed descriptions of known methods and apparatuses are omitted so as not to obscure the disclosure. In the above-described embodiments, several specific steps are described as examples. However, the method processes of the present application are not limited to the specific steps described and illustrated herein, but can include any number of additional steps or changes to the described steps, or can be performed in any order, or in parallel, depending on the circumstances.

[0203] The functional blocks shown in the above-described block diagrams can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application specific integrated circuits (ASICs), appropriate firmware, plug-ins, function cards, and the like. When implemented in software, the elements of the present application are program or text segments used to perform the required tasks. The program or text segments can be stored in a machine-readable medium or transmitted over a transmission medium or communication link as a data signal carried by a carrier wave. A "machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (ROM), flash memory, erasable read-only memory (EROM), floppy disks, compact discs (CD-ROM), optical disks, hard disks, optical fiber media, radio frequency (RF) links, and the like. The text segments can be downloaded via a computer network such as the Internet, an intranet, or the like.

[0204] It is also to be understood that the exemplary embodiments described in this application are based on a series of steps or apparatuses to describe some methods or systems. However, the present application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiments, or in an order different from that in the embodiments, or several steps can be performed simultaneously.

[0205] The computer program instructions can also be loaded onto a computer, other programmable data processing apparatus, or other processing device to cause a series of operational steps to be performed on the computer, other programmable apparatus or other processing device to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions / acts specified in the flowchart and / or block diagram block or blocks.

[0206] The above describes only specific implementation of the present application. For the convenience and brevity of description, the specific working process of the system, module and unit described above can refer to the corresponding process in the foregoing method embodiments, which will not be described herein. It should be understood that the protection scope of the present application is not limited in this way. Any person skilled in the art can easily think of various equivalent modifications or replacements within the technical range disclosed in the present application, and these modifications or replacements should be covered within the protection scope of the present application.

Claims

1. A method of data processing, characterized by, The method is applied to a data collection device and comprises the following steps: collecting data to be transmitted; encrypting the data to be transmitted by using a data key to obtain encrypted data, wherein the data key is generated based on a preset root key and a preset device key ciphertext, and the device key is a key of the data collection device; sending the encrypted data to a cloud platform device; before the data to be transmitted is encrypted by using the data key to obtain the encrypted data, the method further comprises the following steps: decrypting the preset device key ciphertext by using the preset root key to obtain the device key; encrypting the device key by using a preset hash function to obtain the data key used for encrypting the transmitted data; decrypting the preset device key ciphertext by using the preset root key to obtain the device key, which comprises the following steps: blocking the device key ciphertext according to a preset bit width to obtain a plurality of data blocks; performing an exclusive OR operation on each data block by using the preset root key to obtain an encrypted data block; performing a shift operation on each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block; determining a key value of each encrypted data block according to a relationship between the shift result of each encrypted data block and the key value; connecting the key values of each encrypted data block to obtain the device key.

2. The method of data processing of claim 1, wherein, The data to be transmitted comprises video stream data, and the encrypted data is obtained by encrypting the data to be transmitted by using the data key, which comprises the following steps: judging the type of each frame of the video stream data according to a video stream coding format of the video stream data to obtain a type result of each frame; encrypting the video stream data of a target type frame in the type result by using the data key; splicing field information according to a preset encryption protocol format to obtain encrypted video stream data of the target type frame; replacing the video stream data of the target type frame with the corresponding encrypted video stream data to obtain encrypted video stream.

3. The method of data processing of claim 1, wherein, The data key is encrypted by using a preset hash function to obtain the data key used for encrypting the transmitted data, which comprises the following steps: padding the device key to obtain a device key with a bit width same as a set bit width; blocking the device key with the bit width same as the set bit width according to a preset bit width to obtain a plurality of data blocks; inputting each data block into a preset hash function to obtain a hash value of each data block; connecting the hash values of each data block to obtain the data key.

4. A method of data processing, characterized by, The method is applied to a data receiving device and comprises the following steps: sending an encrypted data acquisition request to a cloud platform device, wherein the encrypted data acquisition request comprises a device identifier of the data receiving device; receive the target encrypted data corresponding to the device identifier sent by the cloud platform device, the target encrypted data being encrypted data sent by a data collection device and received by the cloud platform device, the encrypted data being obtained by the data collection device based on a data key, the data key being generated based on a root key and preset key ciphertext; the data key being obtained by the data collection device by decrypting preset device key ciphertext according to a preset root key, and being encrypted by using a preset hash function; the device key being obtained by the data collection device by dividing the preset device key ciphertext into multiple data blocks according to a preset bit width, performing an exclusive or operation on each data block using the preset root key to obtain an encrypted data block, performing a shift operation on each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block, determining a key value of each encrypted data block according to a relationship between the shift result of each encrypted data block and the key value, and connecting the key values of all the encrypted data blocks; encrypt the device identifier to obtain device identifier ciphertext; send a data key acquisition request to a security platform device, the data key acquisition request including the device identifier ciphertext; receive data key ciphertext of the encrypted data corresponding to the device identifier sent by the security platform device, the device identifier being decrypted by the security platform device based on the device identifier ciphertext; decrypt the data key ciphertext to obtain a data key; decrypt the target encrypted data based on the data key to obtain target data.

5. A method of data processing, characterized by, The method applied to a cloud platform device includes: receive an encrypted data acquisition request sent by a data receiving device, the encrypted data acquisition request including a device identifier of the data receiving device, the encrypted data being encrypted data sent by a data collection device; the encrypted data being obtained by the data collection device based on a data key, the data key being generated based on a root key and preset key ciphertext; the data key being obtained by the data collection device by decrypting preset device key ciphertext according to a preset root key, and being encrypted by using a preset hash function; the device key being obtained by the data collection device by dividing the preset device key ciphertext into multiple data blocks according to a preset bit width, performing an exclusive or operation on each data block using the preset root key to obtain an encrypted data block, performing a shift operation on each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block, determining a key value of each encrypted data block according to a relationship between the shift result of each encrypted data block and the key value, and connecting the key values of all the encrypted data blocks; In response to the encrypted data acquisition request, corresponding encrypted data corresponding to the device identifier is sent to a data receiving device according to relationship information of the encrypted data and the device identifier, and the relationship information of the encrypted data and the device identifier is information sent by the data collection device.

6. The method of claim 5, wherein, The method further comprises: receiving a security check request sent by a security platform device, the security check request comprising a target device identifier, the target device identifier being a device identifier of a data receiving device that sends a data key acquisition request to the security platform device; in response to the security check request, judging whether the target device identifier has corresponding encrypted data according to relationship information of encrypted data and device identifiers, to obtain a security check result; sending the security check result to the security platform device.

7. A method of data processing, characterized by, The method applied to a security platform device comprises: receiving a data key acquisition request sent by a data receiving device, the data key acquisition request comprising device identifier ciphertext; in response to the data key acquisition request, generating data key ciphertext of encrypted data corresponding to a device identifier, the device identifier being obtained by decrypting the device identifier ciphertext; sending the data key ciphertext to the data receiving device; The method further comprises: encrypting a device key according to a root key in an operation opposite to a decryption algorithm in a data collection device, when encrypting the device key, comprising: blocking the device key according to a preset bit width size to obtain a plurality of data blocks; performing a shift operation on each data block according to a preset shift value to obtain a shift result of each data block; performing an exclusive or operation on each data block using the root key to obtain an encrypted data block; determining a key value of each encrypted data block according to a relationship between the shift result of each encrypted data block and the key value; connecting the key values of each data block to obtain device key ciphertext.

8. The method of data processing according to claim 7, characterized in that, Before generating the data key ciphertext of the encrypted data corresponding to the device identifier, the method further comprises: sending a security check request to a cloud platform device, the security check request comprising a target device identifier, the target device identifier being a device identifier of a data receiving device that sends a data key acquisition request; receiving a security check result sent by the cloud platform device, the security check result comprising the target device identifier and corresponding encrypted data relationship; generating the data key ciphertext of the encrypted data in the case that the target device identifier has a corresponding relationship with the encrypted data of the requested data key.

9. An apparatus for data processing, characterized by The device applied to a data collection device comprises: a collection module for collecting to-be-transmitted data; an encryption module for encrypting the to-be-transmitted data using a data key to obtain encrypted data, the data key being generated based on a preset root key and a preset device key ciphertext, the device key being a key of the data collection device; a sending module for sending the encrypted data to a cloud platform device; Before encrypting the to-be-transmitted data using the data key to obtain the encrypted data, further comprising: decrypting the preset device key ciphertext using the preset root key to obtain the device key; encrypt the device key using a preset hash function to obtain the data key used for encrypting the transmission data; decrypt the preset device key ciphertext using a preset root key to obtain the device key, including: block the device key ciphertext according to a preset bit width size to obtain a plurality of data blocks; perform an exclusive or operation on each data block using the preset root key to obtain an encrypted data block; shift each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block; determine the key value of each encrypted data block according to the relationship between the shift result of each encrypted data block and the key value; connect the key values of each encrypted data block to obtain the device key.

10. An apparatus for data processing, characterized by The application is applied to a data receiving device, and the device comprises: a sending module configured to send an encrypted data acquisition request to a cloud platform device, wherein the encrypted data acquisition request comprises a device identifier of the data receiving device; a receiving module configured to receive target encrypted data corresponding to the device identifier sent by the cloud platform device, wherein the target encrypted data is encrypted data sent by a data acquisition device and received by the cloud platform device, the encrypted data is obtained by encrypting the data key by the data acquisition device, and the data key is generated based on a root key and preset device key ciphertext; the data key is obtained by decrypting the preset device key ciphertext using the preset root key by the data acquisition device, and the data key is obtained by encrypting the device key using a preset hash function; the device key is obtained by blocking the preset device key ciphertext according to a preset bit width size to obtain a plurality of data blocks by the data acquisition device, performing an exclusive or operation on each data block using the preset root key to obtain an encrypted data block, shifting each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block, determining the key value of each encrypted data block according to the relationship between the shift result of each encrypted data block and the key value, and connecting the key values of each encrypted data block; an encryption module configured to perform encryption processing on the device identifier to obtain device identifier ciphertext; the sending module is further configured to send a data key acquisition request to a security platform device, wherein the data key acquisition request comprises the device identifier ciphertext; the receiving module is further configured to receive data key ciphertext of the encrypted data corresponding to the device identifier sent by the security platform device, wherein the device identifier is obtained by decrypting the device identifier ciphertext by the security platform device; a decryption module configured to perform decryption processing on the data key ciphertext to obtain a data key; the decryption module is further configured to perform decryption processing on the target encrypted data using the data key to obtain target data.

11. An apparatus for data processing, characterized by The application is applied to a cloud platform device, and the device comprises: The receiving module is configured to receive an encrypted data acquisition request sent by a data receiving device, wherein the encrypted data acquisition request comprises a device identifier of the data receiving device, and the encrypted data is encrypted data sent by a data collection device; the encrypted data is obtained by encrypting the data collection device based on a data key, and the data key is generated based on a root key and preset key ciphertext; the data key is obtained by decrypting the preset device key ciphertext according to the preset root key by the data collection device, and the device key is obtained by encrypting the device key using a preset hash function; the device key is obtained by dividing the preset device key ciphertext into multiple data blocks according to a preset bit width, performing an exclusive or operation on each data block using the preset root key to obtain an encrypted data block, performing a shift operation on each encrypted data block according to a preset shift value to obtain a shift result of each encrypted data block, determining a key value of each encrypted data block according to a relationship between the shift result of each encrypted data block and the key value, and connecting the key values of all the encrypted data blocks to obtain the device key ciphertext. The sending module is configured to send corresponding encrypted data to the data receiving device corresponding to the device identifier according to the relationship information between the encrypted data and the device identifier in response to the encrypted data acquisition request, wherein the relationship information between the encrypted data and the device identifier is information sent by the data collection device.

12. An apparatus for data processing, characterized by The device is applied to a security platform device, and the device comprises: The receiving module is configured to receive a data key acquisition request sent by a data receiving device, wherein the data key acquisition request comprises device identifier ciphertext. The generating module is configured to generate device identifier corresponding encrypted data key ciphertext in response to the data key acquisition request, wherein the device identifier is obtained by decrypting the device identifier ciphertext. The sending module is configured to send the data key ciphertext to the data receiving device. Further comprising: The device key is encrypted according to an operation opposite to a decryption algorithm in the data collection device, and when the device key is encrypted, the following operations are included: The device key is divided into multiple data blocks according to a preset bit width. A shift operation is performed on each data block according to a preset shift value to obtain a shift result of each data block. An exclusive or operation is performed on each data block using the root key to obtain an encrypted data block. A key value of each encrypted data block is determined according to a relationship between the shift result of each encrypted data block and the key value. The key values of all the data blocks are connected to obtain the device key ciphertext.

13. A terminal device, comprising: The device comprises a processor and a memory storing computer program instructions; and the processor implements the data processing method of any one of claims 1-8 when executing the computer program instructions.

14. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer program instructions, and the computer program instructions are executed by the processor to implement the data processing method of any one of claims 1-8.

15. A computer program product, characterised in that, The instructions in the computer program product, when executed by a processor of an electronic device, cause the electronic device to perform the method of data processing according to any one of claims 1-8.

Images