Data processing method, device, cloud server and system

Abstract

The invention relates to a data processing method and device, a cloud server and a system, and the method comprises the steps: receiving a target access request sent by target equipment, and enabling the target equipment to transmit the obtained target data to the cloud server for storage through the target access request; according to the target access request, determining a target security level corresponding to target data to be transmitted by the target device; according to the target security level, determining a target encryption frequency required by the cloud server for processing the target data; and in response to the target access request, encrypting the target data according to the target encryption times when the target device transmits the target data, and storing the encrypted target data. According to the method, the storage space of the encrypted data is reduced, and the data processing efficiency is improved.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a data processing method, device, cloud server and system. Background Art

[0002] The continued rise of digitalization in the building sector presents a significant challenge, posing a significant challenge to data security related to building control. To ensure the security of data processing (i.e., the process of transferring data to cloud servers for storage) in large buildings like factories and office buildings, data is typically encrypted during processing.

[0003] At present, the data processing process of a building system usually includes the process of the building system transmitting data to the cloud server, the process of the cloud server receiving data, and the process of the cloud server storing the received data. In order to ensure the data security of the entire data processing process, it is usually necessary to identify the data (i.e., encrypt the data) in the process of the building system transmitting data to the cloud server, the process of the cloud server receiving data, and the process of the cloud server storing the received data. However, due to the wide variety of data that the building system needs to transmit, if the building system performs three identifications each time it transfers data to the cloud server for storage, it will not only complicate the data processing process of the building system, but also increase the storage space for the encrypted data. Summary of the Invention

[0004] The present application provides a data processing method, device, cloud server and system to solve the problems of complex data processing process and increase the storage space of encrypted data in the data processing of building systems in the prior art.

[0005] In a first aspect, the present application provides a data processing method, applied to a cloud server, comprising:

[0006] receiving a target access request sent by a target device, wherein the target access request is used by the target device to transmit the acquired target data to the cloud server for storage;

[0007] Determining, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device;

[0008] Determining a target number of encryption times required for the cloud server to process the target data according to the target security level;

[0009] In response to the target access request, when the target device transmits the target data, the target data is encrypted according to the target encryption times, and the encrypted target data is stored.

[0010] In an optional implementation manner, the target access request carries a target data type corresponding to the target data;

[0011] The determining, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device includes:

[0012] Acquire the target data type corresponding to the target data from the target access request;

[0013] Determining a target data type set to which the target data type belongs from a plurality of preset data type sets;

[0014] Determining the preset security level corresponding to the target data type set from a first association relationship, wherein the first association relationship stores a plurality of corresponding relationships between the preset data type sets and preset security levels;

[0015] The preset security level corresponding to the target data type set is determined as the target security level corresponding to the target data.

[0016] In an optional embodiment, the process of the cloud server processing the target data includes: a transmission encryption process of the target data, an encryption process of the cloud server, and a storage encryption process of the target data;

[0017] The encrypting the target data according to the target encryption times and storing the encrypted target data includes:

[0018] When the target encryption number is one, encrypting the target data according to the transmission encryption process of the target data, and storing the encrypted target data;

[0019] When the target encryption number is two, encrypting the target data in accordance with the target data transmission encryption process and the cloud server encryption process, and storing the encrypted target data;

[0020] When the target encryption times is three times, the target data is encrypted in sequence according to the target data transmission encryption process, the cloud server encryption process and the target data storage encryption process, and the encrypted target data is stored.

[0021] In an optional implementation manner, the target access request carries a target data type corresponding to the target data and target device information corresponding to the target device;

[0022] The determining, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device includes:

[0023] Acquire the target data type corresponding to the target data and the target device information corresponding to the target device from the target access request;

[0024] Determining a first security level corresponding to the target data type and a second security level corresponding to the target device information;

[0025] A target security level corresponding to the target data to be transmitted by the target device is determined according to the first security level and the second security level.

[0026] In an optional implementation manner, determining, based on the first security level and the second security level, a target security level corresponding to the target data to be transmitted by the target device includes:

[0027] When the first security level is higher than the second security level, determining the first security level as a target security level corresponding to the target data to be transmitted by the target device;

[0028] When the second security level is higher than the first security level, determining the second security level as a target security level corresponding to the target data to be transmitted by the target device;

[0029] When the first security level is consistent with the second security level, the first security level or the second security level is determined as the target security level corresponding to the target data to be transmitted by the target device.

[0030] In an optional implementation, after performing the step of receiving the target access request sent by the target device, the method further includes:

[0031] When the target security level corresponding to the target data to be transmitted by the target device is not determined according to the target access request, not responding to the target access request, and generating a target interface corresponding to the target data type according to the target data corresponding to the target data carried in the target access request, the target interface being used to configure the target security level corresponding to the target data type;

[0032] Displaying the target interface on the target terminal;

[0033] Obtaining target configuration information corresponding to the target interface, and determining the target security level corresponding to the target data from the target configuration information;

[0034] Updating the first association relationship according to the determined target security level to complete the update of the first association relationship;

[0035] A target retry request is sent to the target device, so that the target device resends the target access request according to the target retry request, so as to perform the step of receiving the target access request sent by the target device.

[0036] In an optional embodiment, the cloud server corresponds to a plurality of communication channels, and the target device communicates with the cloud server through a first communication channel among the plurality of communication channels;

[0037] The receiving a target access request sent by a target device includes:

[0038] When the target device needs to send the target access request to the cloud server, the target device determines the target data volume corresponding to the target data to be transmitted and the target channel information corresponding to the first communication channel;

[0039] The target device determines a target congestion level corresponding to the first communication channel according to the target data volume and the target channel information;

[0040] When the target device determines that the target congestion level is less than a preset congestion level threshold, the target device sends the target access request to the cloud server through the first communication channel, so that the cloud server receives the target access request sent by the target device. The preset congestion level threshold is used as the lower limit value of the target congestion level corresponding to the switching of the communication channel.

[0041] In a second aspect, the present application provides a data processing device, comprising:

[0042] A receiving module, configured to receive a target access request sent by a target device, wherein the target access request is used by the target device to transmit the acquired target data to the cloud server for storage;

[0043] a determination module, configured to determine, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device;

[0044] The determination module is further configured to determine a target number of encryption times required for the cloud server to process the target data based on the target security level;

[0045] The processing module is used to respond to the target access request, so as to encrypt the target data according to the target encryption times when the target device transmits the target data, and store the encrypted target data.

[0046] In a third aspect, the present application provides a cloud server comprising: a processor and a memory, wherein the processor is configured to execute a data processing program stored in the memory to implement the data processing method as described above.

[0047] In a fourth aspect, the present application provides a data processing system, comprising: a cloud server and a plurality of target devices connected to the server;

[0048] Each of the target devices is used to send a target access request to the cloud server;

[0049] The cloud server is used to execute the data processing method described above after receiving the target access request.

[0050] The above technical solution provided by the embodiment of the present application has the following advantages over the prior art: the data processing method provided by the embodiment of the present application is applied to a cloud server, comprising: receiving a target access request sent by a target device, the target access request being used by the target device to transmit the acquired target data to the cloud server for storage; determining, according to the target access request, the target security level corresponding to the target data to be transmitted by the target device; determining, according to the target security level, the target number of encryptions required for the cloud server to process the target data; responding to the target access request, so that when the target device transmits the target data, the target data is encrypted according to the target number of encryptions, and the encrypted target data is stored. In the above manner, when the present application receives the target access request sent by the target device, the target security level of the target data transmitted by the target device is first determined according to the target access request, thereby determining the target number of encryptions for processing the target data according to the determined target security level, and then encrypting the target data according to the target number of encryptions when the target device transmits the target data, and storing the encrypted target data, which not only reduces the storage space of the encrypted data, but also improves the efficiency of data processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0052] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0053] One or more embodiments are exemplarily illustrated by pictures in the corresponding drawings. These exemplifications do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings are represented as similar elements. Unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0054] Figure 1 A flowchart of a data processing method provided in an embodiment of the present application;

[0055] Figure 2 A flowchart of another data processing method provided in an embodiment of the present application;

[0056] Figure 3 A flowchart of another data processing method provided in an embodiment of the present application;

[0057] Figure 4 A flowchart of another data processing method provided in an embodiment of the present application;

[0058] Figure 5 A schematic diagram of the distribution of a process of processing target data by a cloud server provided in an embodiment of the present application;

[0059] Figure 6 A schematic diagram of the structure of a data processing device provided in an embodiment of the present application;

[0060] Figure 7 A schematic diagram of the structure of a data processing system provided in an embodiment of the present application;

[0061] Figure 8 A schematic diagram of the structure of a cloud server provided in an embodiment of the present application;

[0062] In the above attached figures:

[0063] 10. Receiving module; 20. Determining module; 30. Processing module;

[0064] 701, target device; 702, cloud server;

[0065] 800, cloud server; 801, processor; 802, memory; 8021, operating system; 8022, application; 803, user interface; 804, network interface; 805, bus system. DETAILED DESCRIPTION

[0066] To make the purpose, technical solutions, and advantages of the embodiments of this application more clear, the technical solutions in the embodiments of this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the described embodiments are part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this application.

[0067] The disclosure below provides many different embodiments or examples for implementing different configurations of the present invention. To simplify the disclosure of the present invention, the components and configurations of specific examples are described below. Of course, these are merely examples and are not intended to limit the present invention. In addition, the present invention may repeat reference numerals and / or letters in different examples. Such repetition is for the purpose of simplicity and clarity and does not in itself indicate the relationship between the various embodiments and / or configurations discussed.

[0068] refer to Figure 1 , Figure 1 A data processing method provided in an embodiment of the present application is provided in a flowchart. A data processing method provided in an embodiment of the present application comprises the following steps:

[0069] S101: Receive a target access request sent by a target device.

[0070] In this embodiment, a target access request is used by the target device to transmit acquired target data to a cloud server for storage. The method is performed by a cloud server, which is connected to the target device, which is actually a building system. To transmit acquired data to the cloud server for storage, the target device sends a target access request to the cloud server. Upon receiving the target access request, the cloud server performs a series of encryption operations on the target data to be transmitted, completing the target data processing and then storing the processed target data.

[0071] The target data to be transmitted by the target device may include environmental data, security data, energy management data, device status data, and access control data.

[0072] S102: Determine, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device.

[0073] In this embodiment, the target access request carries the target data type corresponding to the target data. The target data type can be a sensor data type, a control data type, a privacy data type, etc. After receiving the target access request from the target device, the cloud server can parse the target access request to obtain the target data type corresponding to the target data to be transmitted by the target device from the target access request. Furthermore, based on the correspondence between the target data type and the security level, the cloud server can determine the target security level corresponding to the target data to be transmitted by the target device.

[0074] S103: Determine the target number of encryption times required for the cloud server to process the target data according to the target security level.

[0075] In this embodiment, after determining the target security level corresponding to the target data to be transmitted by the target device according to the target access request, the target encryption times required for the cloud server to process the target data can be determined based on the correspondence between the security level and the number of encryptions. The target encryption times include one, two, and three times. When the target encryption times is one (i.e., the corresponding target security level is the third security level), the target data to be transmitted by the target device is only encrypted once, and the encrypted target data is stored; when the target encryption times is two (i.e., the corresponding target security level is the second security level), the target data to be transmitted by the target device is encrypted once, and then the encrypted target data is encrypted twice, and the encrypted target data is stored; when the target encryption times is three (i.e., the corresponding target security level is the first security level), the target data to be transmitted by the target device is encrypted once, and then the encrypted target data is encrypted twice, and then the encrypted target data is encrypted three times, and the encrypted target data is stored.

[0076] S104: Responding to the target access request, encrypting the target data according to the target encryption times when the target device transmits the target data, and storing the encrypted target data.

[0077] In this embodiment, after determining the target number of encryption cycles required for the cloud server to store the target data based on the target security level, the cloud server can respond to the target access request, allowing the target device to begin transmitting the target data. When the target device begins transmitting the target data, the cloud server can encrypt the target data according to the target number of encryption cycles to obtain the encrypted target data, and then store the encrypted target data, thereby completing the data processing of the target data pending transmission.

[0078] This embodiment provides a data processing method that, upon receiving a target access request sent by a target device, first determines a target security level for target data transmitted by the target device based on the target access request, thereby determining a target number of encryptions for processing the target data based on the determined target security level. Furthermore, when the target device transmits the target data, the target data is encrypted according to the target number of encryptions, and the encrypted target data is stored. This not only reduces the storage space of the encrypted data, but also improves the efficiency of data processing.

[0079] refer to Figure 2 , Figure 2 A data processing method provided in an embodiment of the present application is provided in a flowchart. A data processing method provided in an embodiment of the present application comprises the following steps:

[0080] S201: Receive a target access request sent by a target device.

[0081] In this embodiment, the cloud server corresponds to multiple communication channels, and the target device communicates with the cloud server through a first communication channel among the multiple communication channels.

[0082] The step S201 of receiving the target access request sent by the target device includes:

[0083] When the target device needs to send a target access request to the cloud server, the target device determines the target data volume corresponding to the target data to be transmitted and the target channel information corresponding to the first communication channel;

[0084] The target device determines a target congestion level corresponding to the first communication channel according to the target data volume and the target channel information;

[0085] When the target device determines that the target congestion level is less than a preset congestion level threshold, the target device sends a target access request to the cloud server through the first communication channel, so that the cloud server receives the target access request sent by the target device.

[0086] The preset congestion level threshold is used as the lower limit of the target congestion level corresponding to the communication channel switching. The preset congestion level threshold can be set according to actual needs. In this embodiment, the specific value of the preset congestion level threshold is not limited.

[0087] Specifically, the target channel information includes channel bandwidth, channel delay rate, and channel packet loss rate. After determining the target data volume and target channel information, the target data volume and target channel information can be input into a congestion prediction model, so that the congestion prediction model outputs the target congestion level corresponding to the first communication channel. The congestion prediction model can be trained as follows: obtaining a training sample set, the training sample set including multiple training samples, each of which represents a correspondence between data volume, channel bandwidth, channel delay rate, channel packet loss rate, and congestion level; and training a preset machine learning model based on the training sample set to obtain a congestion prediction model.

[0088] More specifically, when the target device determines that the target congestion level is less than the preset congestion level threshold, it indicates that the first communication channel is not congested, and the target device will not cause congestion of the first communication channel when transmitting data with the cloud server through the first communication channel. Therefore, the target device can send a target access request to the cloud server through the first communication channel; when the target device determines that the target congestion level is greater than or equal to the preset congestion level threshold, it indicates that congestion occurs in the first communication channel, and the target device will cause congestion of the first communication channel when transmitting data with the cloud server through the first communication channel. Therefore, the target device cannot send a target access request to the cloud server through the first communication channel. At this time, it is necessary to determine the target communication channel from multiple communication channels so that the target device can send a target access request to the cloud server through the target communication channel. The target communication channel can be determined by: determining the channel information corresponding to each communication channel; for each communication channel, inputting the target data volume and the channel information corresponding to the communication channel into a congestion prediction model so that the congestion prediction model outputs the congestion level corresponding to the communication channel; comparing the congestion levels corresponding to multiple communication channels to select the communication channel corresponding to the minimum congestion level from the multiple communication channels; and determining the communication channel corresponding to the minimum congestion level as the target communication channel. In this embodiment, when a target device transmits data to a cloud server, the target congestion level of the first communication channel corresponding to the target device is determined to determine whether the target device can transmit data to the cloud server based on the target congestion level, thereby ensuring smooth data transmission between the cloud server and the target device and improving the reliability of data processing.

[0089] It should be noted that the target data volume and target channel information can be determined according to existing technologies and will not be described in detail in this embodiment. The specific type of the preset machine learning model can be selected according to actual needs and is not limited in this embodiment.

[0090] S202: Acquire a target data type corresponding to the target data from the target access request.

[0091] S203: Determine a target data type set to which the target data type belongs from a plurality of preset data type sets.

[0092] S204: Determine a preset security level corresponding to the target data type set from the first association relationship.

[0093] S205: Determine the preset security level corresponding to the target data type set as the target security level corresponding to the target data.

[0094] With respect to the above-mentioned steps S202 to S205, the target access request carries the target data type corresponding to the target data, and the first association relationship stores the correspondence between multiple sets of preset data types and preset security levels.

[0095] Among them, the target access request carries the target data type corresponding to the target data. After the cloud server receives the target access request sent by the target device, it parses the target access request to obtain the target data type corresponding to the target data from the target access request. And according to the target data type, the target data type set to which the target data type belongs is determined from multiple preset data types, so as to query the first association relationship using the target data type set to determine the preset security level corresponding to the target data type set from the first association relationship, and then determine the preset security level corresponding to the target data security type set as the target security level corresponding to the target data, so as to implement encryption processing of the target data according to the target security level. This embodiment determines the target security level corresponding to the target data by the target data type corresponding to the target data, thereby implementing encryption processing of the target data according to the determined target security level, which not only reduces the storage space of the encrypted data, but also improves the efficiency of data processing.

[0096] In this embodiment, after executing step S201, the data processing method provided by this embodiment further includes the following steps:

[0097] When the target security level corresponding to the target data to be transmitted by the target device is not determined according to the target access request, the target access request is not responded to, and a target interface corresponding to the target data type is generated according to the target data type corresponding to the target data carried in the target access request, the target interface being used to configure the target security level corresponding to the target data type;

[0098] Display the target interface on the target terminal;

[0099] Obtain target configuration information corresponding to the target interface, and determine the target security level corresponding to the target data from the target configuration information;

[0100] Updating the first association relationship according to the determined target security level to complete the update of the first association relationship;

[0101] A target retry request is sent to the target device, so that the target device resends the target access request according to the target retry request, thereby executing the step of receiving the target access request sent by the target device.

[0102] After receiving a target access request sent by a target device, the target access request is parsed to obtain a target data type corresponding to the target data. Based on the target data type, it is determined whether a target data type set to which the target data type belongs exists in multiple preset data type sets. If so, it is determined whether a preset security level corresponding to the target data type set exists in the first association relationship. If not, it is determined that the target security level corresponding to the target data to be transmitted by the target device has not been determined based on the target access request. If the target data type set to which the target data type belongs does not exist in multiple preset data type sets, it is determined that the target security level corresponding to the target data to be transmitted by the target device has not been determined based on the target access request.

[0103] Specifically, when the target security level corresponding to the target data to be transmitted by the target device is not determined according to the target access request, it indicates that the target security level for the target data type corresponding to the target data has not been pre-set. In order to reduce the storage space of the encrypted data and improve the data processing efficiency, the target security level for the target data type corresponding to the target data can be set, so that the target data to be transmitted by the target device is re-encrypted according to the set target security level to achieve storage of the encrypted data. When the target security level corresponding to the target data to be transmitted by the target device is not determined according to the target access request, the cloud server does not respond to the target access request sent by the target device, and in order to achieve the setting of the target security level corresponding to the target data type, a target interface for configuring the target security level corresponding to the target data type is generated according to the target data type, and the target interface is displayed on the target terminal, so that the user of the target terminal configures the target security level corresponding to the target data type based on the target interface, and the target configuration information is obtained based on the target interface to determine the target security level corresponding to the target data from the target configuration information. After obtaining the target security level corresponding to the target data based on the target interface, the target security type set to which the target data belongs is determined from a plurality of preset security type sets, thereby updating the first association relationship according to the target security level corresponding to the target security type set to complete the update of the first association relationship. After completing the update of the first association relationship, the cloud server may send a target retry request to the target device. After receiving the target retry request, the target device may resend a target access request to the cloud server, so that after the cloud server receives the target access request, it may re-determine the target security level corresponding to the target data according to the updated first association relationship, and then implement encryption processing of the target data according to the determined target security level. In this embodiment, when the target security level corresponding to the target data to be transmitted by the target device is not determined according to the target access request, the target security level corresponding to the target data is configured to implement encryption processing of the target data, and to reduce the storage space of the encrypted data and improve data processing efficiency.

[0104] S206: Determine the target number of encryption times required for the cloud server to process the target data according to the target security level.

[0105] In this embodiment, step S206 is consistent with the above-mentioned step S103. For details, please refer to the above-mentioned step S103, which will not be described in detail in this embodiment.

[0106] S207: Responding to the target access request, encrypting the target data according to the target encryption times when the target device transmits the target data, and storing the encrypted target data.

[0107] In this embodiment, reference Figure 5 As shown, the process of the cloud server processing target data includes the target data transmission encryption process, the cloud server encryption process and the target data storage encryption process.

[0108] The step S207 encrypts the target data according to the target encryption times and stores the encrypted target data, specifically including:

[0109] When the target encryption number is one, encrypting the target data according to the target data transmission encryption process and storing the encrypted target data;

[0110] When the target encryption times is two, the target data is encrypted in accordance with the target data transmission encryption process and the cloud server encryption process, and the encrypted target data is stored;

[0111] When the target encryption times are three times, the target data is encrypted in sequence according to the target data transmission encryption process, the cloud server encryption process and the target data storage encryption process, and the encrypted target data is stored.

[0112] Specifically, the target data transmission encryption process actually involves the cloud server encrypting the target data once when the target device transmits the target data to the cloud server, so that the target device transmits the once-encrypted target data to the cloud server. The cloud server encryption process actually involves the cloud server performing a second encryption on the once-encrypted target data after receiving the once-encrypted target data sent by the target device. The target data storage encryption process actually involves the cloud server performing a third encryption on the second-encrypted target data after the cloud server encrypts the target data twice, so that the third-encrypted target data is stored. The first-encrypted target data, the second-encrypted target data, and the third-encrypted target data are all encrypted using MD5. In this embodiment, the target number of encryptions required for the cloud server to store the target data is determined, and the target data of each process of the cloud server processing the target data is encrypted according to the target number of encryptions, thereby achieving encryption of the target data, reducing the storage space of the encrypted data, and improving data processing efficiency.

[0113] It should be noted that after each encryption of target data, the key information of the target data is stored in the data identity record library for verification when the data is read.

[0114] This embodiment provides a data processing method that, upon receiving a target access request sent by a target device, first determines a target security level for target data transmitted by the target device based on the target access request, thereby determining a target number of encryptions for processing the target data based on the determined target security level. Furthermore, when the target device transmits the target data, the target data is encrypted according to the target number of encryptions, and the encrypted target data is stored. This not only reduces the storage space of the encrypted data, but also improves the efficiency of data processing.

[0115] refer to Figure 3 , Figure 3 A data processing method provided in an embodiment of the present application is provided in a flowchart. A data processing method provided in an embodiment of the present application comprises the following steps:

[0116] S301: Receive a target access request sent by a target device.

[0117] In this embodiment, step S301 is consistent with the above-mentioned step S101. For details, please refer to the above-mentioned step S101, and this embodiment will not be described in detail here.

[0118] S302: Acquire the target data type corresponding to the target data and the target device information corresponding to the target device from the target access request.

[0119] S303: Determine a first security level corresponding to the target data type and a second security level corresponding to the target device information.

[0120] S304: Determine a target security level corresponding to target data to be transmitted by the target device according to the first security level and the second security level.

[0121] With respect to the above-mentioned steps S302 to S304, in order to further improve the security of the data, this embodiment obtains the target data type corresponding to the target data and the target device information corresponding to the target device, and jointly determines the target security level corresponding to the target data through the target data type and the target device information, thereby implementing data encryption processing according to the target security level to improve the security of the data.

[0122] When the target device sends a target access request to the cloud server, the target access request carries the target data type corresponding to the target data and the target device information corresponding to the target device. The target device information includes the target level of the target device. The level of each device connected to the cloud server is pre-set, and the level is used to represent the importance of the device. The higher the level, the more important the device. After obtaining the target data type and target device information, the first security level corresponding to the target data type can be determined based on the correspondence between the data type and the security level. The second security level corresponding to the target device information can be determined based on the correspondence between the device information and the security level. After obtaining the first security level and the second security level, the target security level corresponding to the target data is determined based on the first security level and the second security level. The target data is then encrypted according to the determined target security level to reduce the storage space of the encrypted data and improve data processing efficiency.

[0123] Specifically, in step S304, determining the target security level corresponding to the target data to be transmitted by the target device according to the first security level and the second security level includes:

[0124] When the first security level is higher than the second security level, determining the first security level as a target security level corresponding to the target data to be transmitted by the target device;

[0125] When the second security level is higher than the first security level, determining the second security level as a target security level corresponding to the target data to be transmitted by the target device;

[0126] When the first security level is consistent with the second security level, the first security level or the second security level is determined as the target security level corresponding to the target data to be transmitted by the target device.

[0127] More specifically, when the first security level is higher than the second security level, the target data to be transmitted is relatively important, so the first security level is determined as the target security level corresponding to the target data. When the second security level is higher than the first security level, the target device is relatively important. In this case, although the importance of the target data is lower than that of the target device, in order to characterize the security of the data of the target device, the highest security level is still used as the target security level corresponding to the target data. When the first security level and the second security level are consistent, either the first security level or the second security level can be selected as the target security level corresponding to the target data. This embodiment provides a method for determining the target security level corresponding to target data based on the first security level and the second security level to further improve data security.

[0128] S305: Determine the target number of encryption times required for the cloud server to process the target data according to the target security level.

[0129] S306: Responding to the target access request, encrypting the target data according to the target encryption times when the target device transmits the target data, and storing the encrypted target data.

[0130] Regarding the above-mentioned steps S305 and S306, step S305 is consistent with the above-mentioned step S103, and step S306 is consistent with the above-mentioned step S104. For details, please refer to the above-mentioned steps S103 and S104, which will not be described in detail in this embodiment.

[0131] This embodiment provides a data processing method that, upon receiving a target access request sent by a target device, first determines a target security level for target data transmitted by the target device based on the target access request, thereby determining a target number of encryptions for processing the target data based on the determined target security level. Furthermore, when the target device transmits the target data, the target data is encrypted according to the target number of encryptions, and the encrypted target data is stored. This not only reduces the storage space of the encrypted data, but also improves the efficiency of data processing.

[0132] As an example, refer to Figure 4 , let’s introduce the entire data processing process in detail, as follows:

[0133] The cloud server receives the target access request from the target device and analyzes it to determine the target security level for the target data to be transmitted by the target device. If the target security level is level 3, the target data is encrypted once; if the target security level is level 2, the target data is encrypted once and then needs to be encrypted twice. Similarly, if the target security level is level 1, the target data is encrypted once and then encrypted twice and three times. After data encryption, the data identity record library will save the encrypted key information along with the data for verification when the data is read.

[0134] refer to Figure 6 , Figure 6A structural diagram of a data processing device provided in an embodiment of the present application. A data processing device provided in an embodiment of the present application includes a receiving module 10, a determining module 20, and a processing module 30; wherein the receiving module 10 is used to receive a target access request sent by a target device, and the target access request is used for the target device to transmit the acquired target data to the cloud server for storage; the determining module 20 is used to determine, based on the target access request, the target security level corresponding to the target data to be transmitted by the target device; the determining module 20 is also used to determine, based on the target security level, the target number of encryptions required for the cloud server to process the target data; the processing module 30 is used to respond to the target access request, so as to encrypt the target data according to the target number of encryptions when the target device transmits the target data, and to store the encrypted target data.

[0135] In this embodiment, the target access request carries the target data type corresponding to the target data; the determination module 20 is further configured to:

[0136] Acquire the target data type corresponding to the target data from the target access request;

[0137] Determining a target data type set to which the target data type belongs from a plurality of preset data type sets;

[0138] Determining the preset security level corresponding to the target data type set from a first association relationship, wherein the first association relationship stores a plurality of corresponding relationships between the preset data type sets and preset security levels;

[0139] The preset security level corresponding to the target data type set is determined as the target security level corresponding to the target data.

[0140] In this embodiment, the process of the cloud server processing the target data includes: a transmission encryption process of the target data, an encryption process of the cloud server, and a storage encryption process of the target data; the processing module 30 is further configured to:

[0141] When the target encryption number is one, encrypting the target data according to the transmission encryption process of the target data, and storing the encrypted target data;

[0142] When the target encryption number is two, encrypting the target data in accordance with the target data transmission encryption process and the cloud server encryption process, and storing the encrypted target data;

[0143] When the target encryption times is three times, the target data is encrypted in sequence according to the target data transmission encryption process, the cloud server encryption process and the target data storage encryption process, and the encrypted target data is stored.

[0144] In this embodiment, the target access request carries the target data type corresponding to the target data and the target device information corresponding to the target device; the determination module 20 is further configured to:

[0145] Acquire the target data type corresponding to the target data and the target device information corresponding to the target device from the target access request;

[0146] Determining a first security level corresponding to the target data type and a second security level corresponding to the target device information;

[0147] A target security level corresponding to the target data to be transmitted by the target device is determined according to the first security level and the second security level.

[0148] In this embodiment, the determining module 20 is further configured to:

[0149] When the first security level is higher than the second security level, determining the first security level as a target security level corresponding to the target data to be transmitted by the target device;

[0150] When the second security level is higher than the first security level, determining the second security level as a target security level corresponding to the target data to be transmitted by the target device;

[0151] When the first security level is consistent with the second security level, the first security level or the second security level is determined as the target security level corresponding to the target data to be transmitted by the target device.

[0152] In this embodiment, the receiving module 10 is further configured to:

[0153] When the target security level corresponding to the target data to be transmitted by the target device is not determined according to the target access request, not responding to the target access request, and generating a target interface corresponding to the target data type according to the target data corresponding to the target data carried in the target access request, the target interface being used to configure the target security level corresponding to the target data type;

[0154] Displaying the target interface on the target terminal;

[0155] Obtaining target configuration information corresponding to the target interface, and determining the target security level corresponding to the target data from the target configuration information;

[0156] Updating the first association relationship according to the determined target security level to complete the update of the first association relationship;

[0157] A target retry request is sent to the target device, so that the target device resends the target access request according to the target retry request, so as to receive the target access request sent by the target device.

[0158] In this embodiment, the cloud server corresponds to multiple communication channels, and the target device communicates with the cloud server through a first communication channel among the multiple communication channels; the receiving module 10 is further configured to:

[0159] When the target device needs to send the target access request to the cloud server, the target device determines the target data volume corresponding to the target data to be transmitted and the target channel information corresponding to the first communication channel;

[0160] The target device determines a target congestion level corresponding to the first communication channel according to the target data volume and the target channel information;

[0161] When the target device determines that the target congestion level is less than a preset congestion level threshold, the target device sends the target access request to the cloud server through the first communication channel, so that the cloud server receives the target access request sent by the target device. The preset congestion level threshold is used as the lower limit value of the target congestion level corresponding to the switching of the communication channel.

[0162] A data processing device provided in this embodiment, upon receiving a target access request sent by a target device, first determines a target security level for target data transmitted by the target device based on the target access request, thereby determining a target number of encryptions for processing the target data based on the determined target security level. Then, when the target device transmits the target data, the target data is encrypted according to the target number of encryptions, and the encrypted target data is stored, which not only reduces the storage space of the encrypted data but also improves the efficiency of data processing.

[0163] refer to Figure 7 , Figure 7 This is a structural diagram of a data processing system provided in an embodiment of the present application. A data processing system provided in this embodiment includes multiple target devices 701 and a cloud server 702 , and the multiple target devices 701 are all connected to the cloud server 702 .

[0164] Each target device 501 is used to send a target access request to the cloud server. Each target device 701 can be a building system. When a target device 701 needs to transmit the acquired target data to the cloud server 702 for storage, the target device 701 can send a target access request to the cloud server 702.

[0165] After receiving the target access request sent by the target device 701, the cloud server 702 executes the data processing method described above to achieve storage of the target data to be transmitted by the target device 701.

[0166] The present embodiment provides a data processing system that, upon receiving a target access request sent by a target device, first determines a target security level for target data transmitted by the target device based on the target access request, thereby determining a target number of encryptions for processing the target data based on the determined target security level. Furthermore, when the target device transmits the target data, the target data is encrypted according to the target number of encryptions, and the encrypted target data is stored. This not only reduces the storage space of the encrypted data, but also improves the efficiency of data processing.

[0167] Figure 8 A schematic diagram of the structure of a cloud server provided in an embodiment of the present application is provided. Figure 8 The cloud server 800 shown includes: at least one processor 801, memory 802, at least one network interface 804, and other user interfaces 803. The various components in the cloud server 800 are coupled together via a bus system 805. It is understood that the bus system 805 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 805 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, the bus system 805 is not described in detail. Figure 8 Various buses are labeled as bus system 805.

[0168] The user interface 803 may include a display, a keyboard, or a pointing device (eg, a mouse, a trackball, a touchpad, or a touch screen).

[0169] It is understood that the memory 802 in the embodiment of the present invention can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct RAM bus random access memory (DRRAM). The memory 802 described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0170] In some embodiments, the memory 802 stores the following elements, executable units, or data structures, or a subset thereof, or an extended set thereof: an operating system 8021 and application programs 8022 .

[0171] The operating system 8021 includes various system programs, such as a framework layer, a core library layer, and a driver layer, for implementing various basic services and handling hardware-based tasks. Application programs 8022 include various application programs, such as a media player and a browser, for implementing various application services. Programs implementing the methods of the embodiments of the present invention may be included in application programs 8022.

[0172] In an embodiment of the present invention, by calling the program or instructions stored in the memory 802, specifically, the program or instructions stored in the application 8022, the processor 801 is used to execute the method steps provided by each method embodiment, for example, including: receiving a target access request sent by the target device, the target access request is used for the target device to transmit the acquired target data to the cloud server for storage; determining the target security level corresponding to the target data to be transmitted by the target device according to the target access request; determining the target number of encryptions required for the cloud server to process the target data according to the target security level; responding to the target access request, so as to encrypt the target data according to the target number of encryptions when the target device transmits the target data, and storing the encrypted target data.

[0173] The methods disclosed in the above embodiments of the present invention can be applied to or implemented by processor 801. Processor 801 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method can be completed by hardware integrated logic circuits in processor 801 or by software instructions. The above processor 801 may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. The methods, steps, and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in conjunction with the embodiments of the present invention can be directly implemented and executed by a hardware decoding processor, or by a combination of hardware and software units in the decoding processor. The software units can be located in storage media well-known in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, etc. The storage medium is located in the memory 802 , and the processor 801 reads the information in the memory 802 and completes the steps of the above method in combination with its hardware.

[0174] It is understood that the embodiments described herein may be implemented using hardware, software, firmware, middleware, microcode, or a combination thereof. For hardware implementation, the processing unit may be implemented in one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), general-purpose processors, controllers, microcontrollers, microprocessors, other electronic units for performing the functions described herein, or a combination thereof.

[0175] For software implementation, the technology described herein can be implemented by a unit that performs the functions described herein. The software code can be stored in a memory and executed by a processor. The memory can be implemented in the processor or outside the processor.

[0176] The cloud server provided in this embodiment can be Figure 8 The cloud server shown in , can execute Figures 1 to 4 All steps of the data processing method in Figures 1 to 4 For details on the technical effects of the data processing method shown, please refer to Figures 1 to 4 For the sake of brevity, the relevant description will not be repeated here.

[0177] An embodiment of the present invention further provides a storage medium (computer-readable storage medium). The storage medium stores one or more programs. The storage medium may include volatile memory, such as random access memory; the memory may also include non-volatile memory, such as read-only memory, flash memory, hard disk, or solid-state drive; and the memory may also include a combination of the aforementioned types of memory.

[0178] When one or more programs in the storage medium can be executed by one or more processors, the data processing method executed on the data processing device side can be implemented.

[0179] The processor is used to execute a data processing program stored in the memory to implement the following steps of a data processing method performed on the data processing device side: receiving a target access request sent by a target device, the target access request being used for the target device to transmit the acquired target data to a cloud server for storage; determining, based on the target access request, a target security level corresponding to the target data to be transmitted by the target device; determining, based on the target security level, a target number of encryptions required for the cloud server to process the target data; responding to the target access request, so as to encrypt the target data according to the target number of encryptions when the target device transmits the target data, and storing the encrypted target data.

[0180] Professionals should also be further aware that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0181] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0182] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A data processing method, characterized in that: Applied to a cloud server, the method comprises: Receiving a target access request sent by a target device, wherein the target access request is used by the target device to transmit the acquired target data to the cloud server for storage; Determining, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device; Determining a target number of encryption times required for the cloud server to process the target data according to the target security level; In response to the target access request, when the target device transmits the target data, the target data is encrypted according to the target encryption times, and the encrypted target data is stored.

2. The method according to claim 1, characterized in that The target access request carries a target data type corresponding to the target data; The determining, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device includes: Acquire the target data type corresponding to the target data from the target access request; Determine a target data type set to which the target data type belongs from a plurality of preset data type sets; Determining the preset security level corresponding to the target data type set from a first association relationship, wherein the first association relationship stores a plurality of corresponding relationships between the preset data type sets and preset security levels; The preset security level corresponding to the target data type set is determined as the target security level corresponding to the target data.

3. The method according to claim 1, characterized in that: The process of the cloud server processing the target data includes: a transmission encryption process of the target data, an encryption process of the cloud server, and a storage encryption process of the target data; The step of encrypting the target data according to the target encryption times and storing the encrypted target data comprises: When the target encryption number is one, encrypting the target data according to the transmission encryption process of the target data, and storing the encrypted target data; When the target encryption times is two, encrypting the target data in accordance with the transmission encryption process of the target data and the cloud server encryption process, and storing the encrypted target data; When the target encryption times is three times, the target data is encrypted in sequence according to the target data transmission encryption process, the cloud server encryption process and the target data storage encryption process, and the encrypted target data is stored.

4. The method according to claim 1, characterized in that The target access request carries a target data type corresponding to the target data and target device information corresponding to the target device; The determining, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device includes: Acquire the target data type corresponding to the target data and the target device information corresponding to the target device from the target access request; Determine a first security level corresponding to the target data type and a second security level corresponding to the target device information; A target security level corresponding to the target data to be transmitted by the target device is determined according to the first security level and the second security level.

5. The method according to claim 4, characterized in that The determining, according to the first security level and the second security level, a target security level corresponding to the target data to be transmitted by the target device includes: When the first security level is higher than the second security level, determining the first security level as a target security level corresponding to the target data to be transmitted by the target device; When the second security level is higher than the first security level, determining the second security level as a target security level corresponding to the target data to be transmitted by the target device; When the first security level is consistent with the second security level, the first security level or the second security level is determined as the target security level corresponding to the target data to be transmitted by the target device.

6. The method according to claim 2, characterized in that After executing the step of receiving the target access request sent by the target device, the method further includes: When the target security level corresponding to the target data to be transmitted by the target device is not determined according to the target access request, the target access request is not responded to, and according to the target data type corresponding to the target data carried in the target access request, a target interface corresponding to the target data type is generated, and the target interface is used to configure the target security level corresponding to the target data type; Displaying the target interface on the target terminal; Acquire target configuration information corresponding to the target interface, and determine the target security level corresponding to the target data from the target configuration information; Updating the first association relationship according to the determined target security level to complete the updating of the first association relationship; A target retry request is sent to the target device, so that the target device resends the target access request according to the target retry request, so as to execute the step of receiving the target access request sent by the target device.

7. The method according to claim 1, characterized in that The cloud server corresponds to a plurality of communication channels, and the target device communicates with the cloud server through a first communication channel among the plurality of communication channels; The receiving a target access request sent by a target device includes: When the target device needs to send the target access request to the cloud server, the target device determines the target data volume corresponding to the target data to be transmitted and the target channel information corresponding to the first communication channel; The target device determines a target congestion degree corresponding to the first communication channel according to the target data volume and the target channel information; When the target device determines that the target congestion level is less than a preset congestion level threshold, the target device sends the target access request to the cloud server through the first communication channel, so that the cloud server receives the target access request sent by the target device. The preset congestion level threshold is used as the lower limit value of the target congestion level corresponding to the switching of the communication channel.

8. A data processing device, characterized in that: include: A receiving module, used to receive a target access request sent by a target device, wherein the target access request is used by the target device to transmit the acquired target data to the cloud server for storage; A determination module, configured to determine, according to the target access request, a target security level corresponding to the target data to be transmitted by the target device; The determination module is further used to determine a target number of encryption times required for the cloud server to process the target data according to the target security level; The processing module is used to respond to the target access request, so as to encrypt the target data according to the target encryption times when the target device transmits the target data, and store the encrypted target data.

9. A cloud server, comprising: A processor and a memory, wherein the processor is used to execute a data processing program stored in the memory to implement the data processing method according to any one of claims 1 to 7.

10. A data processing system, characterized in that: include: A cloud server and a plurality of target devices connected to the server; Each of the target devices is used to send a target access request to the cloud server; The cloud server is used to execute the data processing method according to any one of claims 1 to 7 after receiving the target access request.

Images