Data processing method, device and equipment and computer readable storage medium

Abstract

The invention discloses a data processing method, device and equipment and a computer readable storage medium, and belongs to the field of data security. The method is applied to a processing terminal, and comprises the following steps: firstly, receiving encrypted data sent by a data storage device and a first security score of the data storage device; the encrypted data is obtained by encrypting the target data by the data storage device based on the first security score, a second security score of the processing terminal, a security parameter of the processing terminal and a public key of the processing terminal; determining an adjustment value according to the first security score, a second security score of the processing terminal and a security parameter of the processing terminal; and decrypting the encrypted data according to the adjustment value and the public key of the processing terminal to obtain target data. According to the embodiment of the invention, the secret keys decrypted each time are ensured to be different, and the encrypted data cannot be directly decrypted even if the public key of the processing terminal is leaked, so that the risk of data leakage is reduced, and the security of the data is improved.

Description

Technical Field

[0001] The present application belongs to the field of data security, and in particular, relates to a data processing method, apparatus, device, computer-readable storage medium, and computer program product. Background Art

[0002] With the continuous development of the digital economy led by emerging technologies such as big data, cloud computing, the Internet of Things, blockchain, artificial intelligence, and 5G communications, data security has gradually become an issue of particular concern to all walks of life. If a large amount of centrally stored data or information is leaked or improperly used, it will cause immeasurable losses to national security, corporate information security, and even personal property and personal safety. In order to solve data security problems, the industry has also proposed a series of methods and measures.

[0003] The existing methods for securely acquiring data are mainly based on encryption. During data transmission, data is encrypted and then decrypted at the data receiving end to ensure the security of the data transmission process. However, when the key is stolen, the encrypted data may be leaked, posing a threat to data security. Therefore, the existing methods for securely acquiring data have the problem of low data security. Summary of the invention

[0004] Embodiments of the present application provide a data processing method, apparatus, device, computer-readable storage medium, and computer program product, which can improve data security.

[0005] In a first aspect, an embodiment of the present application provides a data processing method applied to a processing terminal, the method comprising:

[0006] Receiving encrypted data sent by the data storage device and a first security score of the data storage device; the encrypted data is obtained by the data storage device encrypting the target data based on the first security score, the second security score of the processing terminal, the security parameter of the processing terminal and the public key of the processing terminal;

[0007] determining an adjustment value based on the first security score, the second security score of the processing terminal, and a security parameter of the processing terminal;

[0008] Decrypting the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data. In one practicable implementation, determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal includes:

[0009] determining a degree of adjustment based on the first safety score and the second safety score;

[0010] An adjustment value is determined based on the safety parameter and the degree of adjustment.

[0011] In one possible implementation, the security parameter includes a network security degree and a data transmission security degree; and determining the adjustment value based on the security parameter and the adjustment degree includes:

[0012] Based on the ratio of the network security and the adjustment degree and the data transmission security, the adjustment value is obtained through logical operation.

[0013] In an achievable implementation, before determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal, the method further includes:

[0014] Obtain network connection information of the processing terminal;

[0015] Building a topology map based on network connection information, where nodes in the topology map represent processing terminals, and edges in the topology map represent associations between processing terminals;

[0016] The node corresponding to the processing terminal is taken as the central node, and all nodes are grouped according to the depth from each node to the central node to obtain multiple node groups. The nodes with the same depth from each node to the central node are grouped into one group.

[0017] Determine the degree of each node, and calculate the average degree of all nodes in each node group to obtain the average degree of each node group;

[0018] The network security is determined based on the average degree of all node groups, the number of nodes in the topology graph, and the number of edges.

[0019] In an achievable implementation, before determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal, the method further includes:

[0020] Obtain the IP address information of the processing terminal within the target time period;

[0021] The network security is determined based on the number of connections between each IP address in the IP address information and the processing terminal.

[0022] In an achievable implementation, before determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal, the method further includes:

[0023] Obtain data transmission information in the network log of the processing terminal in the target time window of each day within the target number of days;

[0024] sorting each transmission data in the daily data transmission information according to the transmission time of each transmission data in the data transmission information;

[0025] Constructing a first difference set for each day based on the difference in data packet sizes of adjacent transmission data in the daily data transmission information as an element, and constructing a second difference set for each day based on the difference in transmission time of adjacent transmission data in the daily data transmission information as an element;

[0026] Determine the daily fluctuation value based on the standard deviation of all elements in the first difference set and the standard deviation of all elements in the second difference set for each day;

[0027] The data transmission security is determined based on the fluctuation value of the target number of days.

[0028] In one practicable implementation, decrypting the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data includes:

[0029] generating a decryption key based on the adjustment value and a public key of the processing terminal;

[0030] Use the decryption key to decrypt the encrypted data to obtain the target data.

[0031] In an achievable implementation, the encrypted data is the encrypted data obtained by encrypting the target data by the data storage device based on the first security score, the second security score of the processing terminal, the security parameter of the processing terminal and the public key of the processing terminal, and encrypting the initial encrypted data using the public key of the processing terminal; the method further includes:

[0032] Decrypting the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data includes:

[0033] The target data is obtained by decrypting the initial encrypted data according to the adjustment value and the public key of the processing terminal. In a second aspect, an embodiment of the present application provides a data processing method, which is applied to a data storage device, and the method includes:

[0034] receiving a second security score and security parameters of the processing terminal sent by the processing terminal;

[0035] determining an adjustment value based on a first security score and a second security score and a security parameter of the data storage device;

[0036] encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data;

[0037] The encrypted data and the first security score of the data storage device are sent to the processing terminal, so that the processing terminal generates a decryption key based on the first security score, the second security score, the security parameter and the public key of the processing terminal, and uses the decryption key to decrypt the encrypted data to obtain the target data.

[0038] In an achievable implementation, determining the adjustment value based on the first security score, the second security score, and the security parameter of the data storage device includes:

[0039] determining a degree of adjustment based on the first safety score and the second safety score;

[0040] An adjustment value is determined based on the safety parameter and the degree of adjustment.

[0041] In one possible implementation, the security parameters include network security and data transmission security;

[0042] The adjustment value is determined based on the safety parameter and the adjustment degree, including:

[0043] Based on the ratio of the network security and the adjustment degree and the data transmission security, the adjustment value is obtained through logical operation.

[0044] In one practicable implementation, encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain the encrypted data includes:

[0045] generating an encryption key based on the adjustment value and a public key of the processing terminal;

[0046] The target data is encrypted based on the encryption key to obtain encrypted data.

[0047] In one practicable implementation, encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain the encrypted data includes:

[0048] encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain initial encrypted data;

[0049] The initial encrypted data is encrypted based on the public key of the processing terminal to obtain encrypted data.

[0050] In a third aspect, an embodiment of the present application provides a device for acquiring data, the device being applied to a processing terminal, the device comprising:

[0051] A receiving module, configured to receive encrypted data sent by a data storage device and a first security score of the data storage device; the encrypted data is obtained by encrypting the target data by the data storage device based on the first security score, the second security score of the processing terminal, the security parameter of the processing terminal and the public key of the processing terminal;

[0052] a determination module, configured to determine an adjustment value according to the first security score, the second security score of the processing terminal, and a security parameter of the processing terminal;

[0053] A decryption module is used to decrypt the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data. In a fourth aspect, an embodiment of the present application provides a device for acquiring data, which is applied to a data storage device, and the device includes:

[0054] A receiving module, used for receiving a second security score and a security parameter of the processing terminal sent by the processing terminal;

[0055] A determination module, configured to determine an adjustment value based on a first security score and a second security score and a security parameter of the data storage device;

[0056] An encryption module is used to encrypt the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data; a sending module is used to send the encrypted data and the first security score of the data storage device to the processing terminal, so that the processing terminal generates a decryption key based on the first security score, the second security score, the security parameter and the public key of the processing terminal, and uses the decryption key to decrypt the encrypted data to obtain the target data.

[0057] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising: a processor, and a memory storing computer program instructions; the processor reads and executes the computer program instructions to implement a method for data processing as in any one of the embodiments of the first aspect and the second aspect.

[0058] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium having computer program instructions stored thereon. When the computer program instructions are executed by a processor, a method for data processing as in any one of the embodiments of the first aspect and the second aspect is implemented.

[0059] In a seventh aspect, an embodiment of the present application provides a computer program product. When instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes a data processing method as described in any one of the embodiments of the first aspect and the second aspect.

[0060] The data processing method, apparatus, device, computer-readable storage medium and computer program product of the embodiment of the present application. The method is applied to a processing terminal, first receiving encrypted data sent by a data storage device and a first security score of the data storage device, wherein the encrypted data is obtained by encrypting the target data by the data storage device based on the first security score, the second security score of the processing terminal, the security parameters of the processing terminal and the public key of the processing terminal; then determining an adjustment value according to the first security score, the second security score of the processing terminal and the security parameters of the processing terminal, and generating a decryption key according to the adjustment value and the public key of the processing terminal; finally decrypting the encrypted data using the decryption key to obtain the target data. An adjustment value is determined by combining the security score and security parameters of the processing terminal with the security score of the data storage device, and then the adjustment value is combined with the public key of the processing terminal to generate a decryption key locally in real time and dynamically for decrypting the encrypted data, ensuring that the key for each decryption is different. Even if the terminal public key is leaked, the encrypted data cannot be directly cracked, thereby reducing the risk of data leakage and improving data security. At the same time, encryption and decryption parameters can be flexibly configured in different scenarios, and the security level can be dynamically adjusted according to different scenarios. The data processing method can be applied to various application scenarios, increasing the applicability of the data processing method; compared with traditional encryption methods, there is no need to regularly replace keys to ensure security, which can simplify key distribution and update operations and reduce management costs and potential risks caused by frequent key changes. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0062] Figure 1 This is a signaling interaction diagram of a data processing method provided by an embodiment of the present application;

[0063] Figure 2 This is the process intention of a method for determining network security provided by an embodiment of the present application;

[0064] Figure 3 A topology diagram with a user terminal as a central node provided by an embodiment of the present application;

[0065] Figure 4 This is the process intention of a method for determining network security provided by another embodiment of the present application;

[0066] Figure 5 This is the process intention of a method for determining network security provided by an embodiment of the present application;

[0067] Figure 6 It is a structural schematic diagram of a data processing device provided by an embodiment of the present application;

[0068] Figure 7 is a structural schematic diagram of a data processing device provided by another embodiment of the present application;

[0069] Figure 8 It is a schematic diagram of the hardware structure of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0070] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0071] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0072] With the continuous development of the digital economy led by emerging technologies such as big data, cloud computing, the Internet of Things, blockchain, artificial intelligence, and 5G communications, data security has gradually become an issue of particular concern to all walks of life. If a large amount of centrally stored data or information is leaked or improperly used, it will cause immeasurable losses to national security, corporate information security, and even personal property and personal safety. In order to solve data security problems, the industry has also proposed a series of methods and measures.

[0073] The existing methods for securely acquiring data are mainly based on encryption. During data transmission, data is encrypted and then decrypted after being acquired at the data receiving end, to ensure the security of the data transmission process. The existing keys are predetermined. For example, when a user registers, the relevant organization or personnel configures keys for the user, such as private keys and public keys. The public key is broadcast and the private key is saved by the user. When transmitting data, the data storage device encrypts the data with the public key and transmits it to the data receiving end. The data receiving end decrypts the data with the user's private key to obtain the data. However, when the key is stolen, the existing methods for securely acquiring data may cause the encrypted data to be leaked, posing a threat to data security. Therefore, the existing methods for securely acquiring data have the problem of low data security.

[0074] In order to solve the problems of the prior art, the embodiments of the present application provide a data processing method, device, equipment, computer storage medium and computer program product. The data processing method provided by the embodiments of the present application is first introduced below.

[0075] Figure 1 A schematic diagram of signaling interaction of a data processing method provided by an embodiment of the present application is shown. Figure 1 As shown, the method is applied to a processing terminal and a data storage device, and the processing terminal may be a user terminal. The method includes specific steps S110 to S180.

[0076] S110: The data storage device receives a second security score and a security parameter of the processing terminal sent by the processing terminal.

[0077] The data storage device receives the security score SC of the user terminal sent by the user terminal r and safety parameters. Safety Score SC r The security score is obtained by scanning the user terminal through the security program on the user terminal. r It is a quantitative representation of the overall security status of the user terminal, which can reflect the possibility of the user terminal being attacked or having vulnerabilities. Exemplarily, the security program may be a firewall, etc., and the user terminal has unrepaired security vulnerabilities. The security score obtained by scanning the user terminal through the firewall may be low, for example, 30 / 100. The security parameters of the user terminal are obtained by characterizing the network node distribution in the area where the user terminal is located and the network data characterizing the stability of data transmission of the user terminal. The security parameters are mainly used to describe the characteristics of the network environment in which the user terminal is located, including but not limited to the distribution of network nodes and the stability of data transmission, identify potential risk factors, such as the presence of malicious nodes, network congestion, etc., and can make a more comprehensive evaluation of the security of the user terminal. Exemplarily, the security parameters may include network node distribution information and data transmission stability information of the user terminal.

[0078] S120: The data storage device determines an adjustment value based on the first security score of the data storage device and the second security score and security parameter of the processing terminal.

[0079] Data storage device based on the security score of the data storage device SC s , user terminal security score SC r The security parameters of the user terminal can generate an adjustment value. The security score SC of the data storage device s The data storage device is obtained by scanning the data storage device through a security program on the data storage device. For example, the security program may be a firewall, etc. The adjustment value is used to generate an encryption key and dynamically adjust the encryption key. The larger the adjustment value, the greater the adjustment of the encryption key.

[0080] S130: Encrypt the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data.

[0081] The data storage device encrypts the target data based on the adjustment value and the public key of the user terminal to obtain encrypted data.

[0082] The public key and private key of the user terminal are generated by existing methods. For example, when the user terminal registers with the CA (Security Certification Center), a public key and a private key are allocated to the user terminal. The private key of the user terminal is saved by the user terminal, and the public key of the user terminal will be broadcast. The data storage device can obtain the public key of the user terminal.

[0083] S140: The data storage device sends the encrypted data and the first security score of the data storage device to the processing terminal.

[0084] The data storage device symmetrically encrypts the target transmission data based on the adjustment value and the public key of the processing terminal to obtain the encrypted data, and then sends the encrypted data and the security score SC of the data storage device to the user terminal. s .

[0085] S150: The processing terminal determines an adjustment value according to the first security score of the data storage device and the second security score and security parameter of the processing terminal.

[0086] The user terminal can score the security of the data storage device according to SC s , user terminal security score SC r and the security parameters of the user terminal to generate an adjustment value. s , user terminal security score SC r The calculation process of generating the adjustment value based on the security parameters of the user terminal may be consistent with the process of generating the adjustment value in step S120.

[0087] S160: Decrypt the initial encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data.

[0088] The user terminal can use the obtained adjustment value and the public key of the processing terminal to symmetrically decrypt the encrypted data to obtain the target transmission data.

[0089] The method, device, equipment, computer-readable storage medium and computer program product for obtaining data in the embodiments of the present application. The method is applied to a processing terminal, first receiving encrypted data sent by a data storage device and a first security score of the data storage device, wherein the encrypted data is obtained by encrypting the target data by the data storage device based on the first security score, the second security score of the processing terminal, the security parameters of the processing terminal and the public key of the processing terminal; then determining an adjustment value according to the first security score, the second security score of the processing terminal and the security parameters of the processing terminal, and generating a decryption key according to the adjustment value and the public key of the processing terminal; finally decrypting the encrypted data using the decryption key to obtain the target data. An adjustment value is determined by combining the security score and security parameters of the processing terminal with the security score of the data storage device, and then combining the adjustment value with the public key of the processing terminal to generate a decryption key locally in real time and dynamically for decrypting the encrypted data, thereby ensuring that the decryption key is different each time, and even if the public key of the processing terminal is leaked, the encrypted data cannot be directly cracked, thereby reducing the risk of data leakage and improving the security of the data.

[0090] As another implementation of the present application, before step S110: the data storage device receives the second security score and security parameter of the processing terminal sent by the processing terminal, the method may further include:

[0091] The data storage device receives a data acquisition request sent by a user terminal;

[0092] After the data storage device authenticates the user terminal user identity based on the data acquisition request sent by the user terminal, it sends a security request to the user terminal;

[0093] When the user terminal receives the security request sent by the data storage device, the security score SC of the user terminal sent to the data storage device r and safety parameters.

[0094] This embodiment further ensures the legitimacy of the identities of both parties in data exchange and enhances data security through the interactive process of user identity authentication and security request.

[0095] As another implementation of the present application, step S120: the data storage device determines the adjustment value according to the first security score, the second security score of the processing terminal and the security parameter of the processing terminal, specifically including:

[0096] The data storage device determines an adjustment degree based on the first security score and the second security score; the data storage device determines an adjustment value based on the security parameter and the adjustment degree.

[0097] The data storage device may be based on the security score SC of the data storage device. s and the security score SC of the user terminal r An adjustment degree SC is calculated. For example, the specific method of calculating the adjustment degree can be shown in the following formula:

[0098]

[0099] in, is a ceiling function, and SC is the adjustment degree. The adjustment degree indicates the security level of the user terminal compared with the data storage device. The larger the value of the adjustment degree, the higher the security of the user terminal, and the adjustment range of the public key of the user terminal is relatively reduced.

[0100] The data storage device can generate an adjustment value based on the obtained adjustment degree and the security parameter of the user terminal. The adjustment value is used to dynamically adjust the public key of the user terminal to generate an encryption key. The larger the adjustment value, the greater the adjustment of the public key of the user terminal.

[0101] This embodiment can dynamically adjust the encryption strategy by evaluating the security status of the user terminal and the data storage device in real time, adapt to the ever-changing security environment, and improve the effectiveness of data encryption.

[0102] As another implementation of the present application, step S150: the processing terminal determines the adjustment value according to the first security score, the second security score of the processing terminal and the security parameter of the processing terminal, specifically including:

[0103] The user terminal determines an adjustment degree based on the first security score and the second security score; the user terminal determines an adjustment value based on the security parameter and the adjustment degree.

[0104] The user terminal can be based on the security score SC of the data storage device s and the security score SC of the user terminal r An adjustment degree is calculated. Exemplarily, the specific method of calculating the adjustment degree can be shown in the following formula (1). The adjustment degree indicates the security level of the user terminal compared with the data storage device. The larger the value of the adjustment degree, the higher the security of the user terminal, and the adjustment range of the public key of the user terminal is relatively reduced.

[0105] The user terminal can generate an adjustment value based on the obtained adjustment degree and the security parameter of the user terminal. The adjustment value is used to dynamically adjust the public key of the user terminal to generate an encryption key. The larger the adjustment value, the greater the adjustment of the public key of the user terminal.

[0106] This embodiment can dynamically adjust the decryption strategy by evaluating the security status of the user terminal and the data storage device in real time, adapt to the ever-changing security environment, and improve the effectiveness of data decryption.

[0107] As another implementation of the present application, the security parameters include network security and data transmission security; the data storage device determines the adjustment value based on the security parameters and the adjustment degree, which may include:

[0108] The data storage device obtains the adjustment value through logical operation based on the ratio of the network security and the adjustment and the data transmission security.

[0109] Security parameters may include network security ND and data transmission security SD. Among them, network security ND represents the distribution of network nodes in the area where the user terminal is located. The larger the value, the denser the node distribution and the greater the security risk. Data transmission security SD represents the stability of data transmission of the user terminal. The larger the value, the greater the fluctuation and the greater the security risk.

[0110] The data storage device can obtain the adjustment value through logical operation based on the ratio of the network security degree ND and the adjustment degree and the data transmission security degree SD. For example, the specific method of calculating the adjustment value can be shown in the following formula:

[0111]

[0112] Where Δ is the adjustment value, is the ceiling rounding function, bin() is the binary conversion function, ND indicates the security of the network where the user terminal is located. The larger the ND value, the more complex the network where the user terminal is located, the less secure the network environment, and the larger the adjustment range of the user public key when generating the encryption key.

[0113] This embodiment comprehensively considers the security score of the user terminal, the network security, the data transmission security and the security score of the data storage device. The generated adjustment value more comprehensively reflects the security status of the current data transmission environment, making the generated encryption key more complex and difficult to crack, thereby improving the security of data transmission.

[0114] As another implementation of the present application, the security parameter includes a network security degree and a data transmission security degree; the user terminal determines the adjustment value based on the security parameter and the adjustment degree, which may include:

[0115] The user terminal obtains the adjustment value through logical operation based on the ratio of the network security and the adjustment degree and the data transmission security degree.

[0116] The user terminal can obtain the adjustment value through logical operation based on the ratio of the network security ND and the adjustment degree and the data transmission security SD. For example, the specific method of calculating the adjustment value can be shown in the following formula (2), where ND indicates the security status of the network where the user terminal is located. The larger the ND value, the more complex the network where the user terminal is located, the less secure the network environment, and the larger the adjustment range of the user public key when generating the encryption key.

[0117] This embodiment comprehensively considers the security score of the user terminal, the network security, the data transmission security and the security score of the data storage device. The generated adjustment value more comprehensively reflects the security status of the current data transmission environment, making the generated decryption key more complex and difficult to crack, thereby improving the security of data transmission.

[0118] As another implementation of this application, Figure 2 The flowchart of a method for determining network security provided by an embodiment of the present application is shown. Figure 2 As shown, before S120: the data storage device determines the adjustment value based on the first security score, the second security score, and the security parameter of the data storage device, the method may further include steps S210 to S250.

[0119] S210: The processing terminal obtains network connection information of the processing terminal.

[0120] The user terminal obtains the network connection information of the user terminal. The network connection information may include communication terminals in the network where the user terminal is located and data transmission relationships between communication terminals. The communication terminals include the user terminal.

[0121] S220: The processing terminal constructs a topology graph based on the network connection information. The nodes in the topology graph represent the processing terminals, and the edges in the topology graph represent the association relationships between the processing terminals.

[0122] The user terminal constructs a topology graph based on the communication terminals in the network where the user terminal is located and the data transmission relationship between the communication terminals. The nodes in the topology graph represent the terminals, and the edges in the topology graph represent the data transmission relationship between the terminals.

[0123] In one embodiment, a topology map can be constructed based on the communication terminals in the network where the user terminal is located and the data transmission relationship between the communication terminals by using an existing network topology discovery method, such as a network topology discovery method based on SNMP, a network topology discovery method based on a general protocol, or a network topology discovery method based on a routing protocol. Exemplarily, a subnet topology within three hops (including 3 hops) where the node corresponding to the user terminal is the central node can be obtained. Figure 3 A topology diagram with a user terminal as a central node provided by an embodiment of the present application is shown.

[0124] S230: The processing terminal takes the node corresponding to the processing terminal as the central node, groups all nodes according to the depth from each node to the central node to obtain multiple node groups, and groups nodes with the same depth from each node to the central node into one group.

[0125] like Figure 3 As shown, the user terminal takes the node corresponding to the user terminal as the central node, and groups all nodes according to the depth from each node to the central node in the topology map to obtain multiple node groups, and the nodes with the same depth from each node to the central node are grouped into one group. For example, Figure 3 All one-hop nodes in the topology belong to the same node group. The depth of a node refers to the path length from the central node to the target node in the topology graph, and the path length refers to the number of edges passed from the central node to the target node.

[0126] S240: The terminal determines the degree of each node, and calculates the average value of the degrees of all nodes in each node group to obtain the average degree of each node group.

[0127] like Figure 3 As shown, the user terminal determines the degree of each node in the topology graph. The degree of a node refers to the number of edges connected to the node in the topology graph, and can also be regarded as the number of nodes directly connected to the node in the topology graph. For example, the other nodes directly connected to the node corresponding to the user terminal are one-hop node 1, one-hop node 2, and one-hop node 3, then the number of nodes corresponding to the user terminal nL is 3, then the nL of the user terminal node = 3, in this way, the nL of all one-hop nodes and the nL of all two-hop nodes can be calculated until the nL of all nodes in the topology graph are calculated.

[0128] The user terminal can calculate the mean nL of the nodes in each node group based on the nL of all nodes in the node group, that is, the average degree. The mean nL0 of the node group where the user terminal node is located = 3, and the mean of the number of nodes directly connected to each node in each node group is calculated respectively, for example, the mean of the node group where all one-hop nodes are located is The mean of the node group where all two-hop nodes belong Etc., that is, calculate the average degree of each node group.

[0129] S250: The processing terminal determines the network security based on the average degree of all node groups, the number of nodes and the number of edges in the topology graph.

[0130] The user terminal calculates the network security ND based on the standard deviation of the average degree of all node groups, the mean of the average degree of all node groups, the number of all nodes in the topology graph, and the number of all edges. For example, the specific method of calculating the network security ND can be shown in the following formula:

[0131]

[0132] Where e is the total number of edges in the topology graph, n is the total number of nodes in the topology graph, σ is the standard deviation of the average degree of all node groups, and μ is the mean of the average degree of all node groups.

[0133] This embodiment obtains network connection information through the terminal and constructs a network topology map with itself as the central node, further groups the nodes by depth and calculates the average degree of each group, and finally calculates the network security based on the average degree, standard deviation, number of nodes and number of edges of all node groups. This not only enhances the accurate assessment of the security status of the network environment, but also provides more reliable security protection for data transmission, improving the security and reliability of data transmission.

[0134] As another implementation of this application, Figure 4 FIG. 2 shows the process of a method for determining network security provided by another embodiment of the present application. Figure 4 As shown, before S120: the data storage device determines the adjustment value based on the first security score, the second security score, and the security parameter of the data storage device, the method may further include steps S410 to S420.

[0135] S410: The processing terminal obtains the IP address information of the processing terminal within the target time period.

[0136] The user terminal obtains the IP address information that establishes a connection with the user terminal within the user terminal target time period.

[0137] S420: The processing terminal determines the network security according to the number of connections between each IP address in the IP address information and the processing terminal.

[0138] The user terminal determines the number of times each IP address establishes a connection with the user terminal within the target time period, and determines the network security degree ND according to the number of connections between each IP address and the terminal in the IP address information. The specific method for calculating the network security degree ND can be shown in the following formula:

[0139] ND=nIP1 / nIP2 (4)

[0140] Among them, nIP1 is the maximum number of times each IP address establishes a connection with the user terminal within the target time period, and nIP2 is the total number of times each IP address establishes a connection with the user terminal within the target time period.

[0141] This embodiment obtains IP address information that establishes a connection with a user terminal during a target time period through a terminal, and determines the network security based on the number of connections between each IP address and the terminal. This can not only more accurately assess the security status of the network environment, but also provide more reliable security protection for data transmission, thereby improving the security and reliability of data transmission.

[0142] As another implementation of this application, Figure 5 FIG. 2 shows the process of a method for determining network security provided by another embodiment of the present application. Figure 5 As shown, before S120: the data storage device determines the adjustment value based on the first security score, the second security score, and the security parameter of the data storage device, the method may further include steps S510 to S550.

[0143] S510: The processing terminal obtains data transmission information in the network log of the processing terminal in the target time window of each day within the target number of days.

[0144] The user terminal obtains the data transmission information of the network log of the user terminal within the target number of days. The network log contains the data transmission information of each data transmission, such as timestamp, source IP and port, destination IP and port, data packet size, data packet summary, protocol type, etc. A target time window is determined, which can be the time window corresponding to the current moment. The length of the time window can be flexibly determined, such as one hour, so that each day will be divided into 24 time periods. If the current time is 9:05, then the time window corresponding to the current moment is the window between 9:00-10:00. The data transmission information of the network log of the user terminal within the target number of days that has been obtained is filtered out for the data transmission information of the network log within the target time window of each day.

[0145] S520: The processing terminal sorts each transmission data in the daily data transmission information according to the transmission time of each transmission data in the data transmission information.

[0146] The user terminal sorts each transmission data in the data transmission information corresponding to each day according to the transmission time of each transmission data in the data transmission information corresponding to each day. Exemplarily, the user terminal can sort each transmission data in the data transmission information corresponding to each day from far to near according to the timestamp according to the transmission time of each transmission data in the data transmission information corresponding to each day to obtain a sequence of the data transmission information of each day, and each transmission data in the sequence is an element.

[0147] S530: The processing terminal constructs a first difference set for each day based on the difference in data packet sizes of adjacent transmission data in the daily data transmission information as an element, and constructs a second difference set for each day based on the difference in transmission time of adjacent transmission data in the daily data transmission information as an element.

[0148] The user terminal constructs a first difference set for each day based on the difference in packet sizes of adjacent transmission data in the sequence of daily data transmission information as a difference element, and constructs a second difference set for each day based on the difference in transmission time of adjacent transmission data in the sequence of daily data transmission information as a difference element.

[0149] For example, the data size difference d1 between the next element and the previous element in the sequence of data transmission information of each day is calculated. i,i+1 =|nI i -nI i+1 |, forming the first difference set; calculating the data time difference d2 between the next element and the previous element in the sequence of daily data transmission information i,i+1 =t i+1 -t i , forming the second difference set. Among them, d1 i,i+1 is the difference element of the first difference set, d2 i,i+1 is the difference element of the second difference set, i is the element identifier in the sequence, nI i is the packet size of the ith element in the sequence, nI i+1 is the packet size of the i+1th element in the sequence, t i is the timestamp of the i-th element in the sequence, t i+1 The timestamp of the i+1th element in the sequence.

[0150] S540: The processing terminal determines the daily fluctuation value according to the standard deviation of all elements in the first difference set and the standard deviation of all elements in the second difference set.

[0151] The user terminal calculates all difference elements d1 in the first difference set of each day i,i+1 The standard deviation of the data size difference is obtained by the user terminal; the user terminal calculates all the difference elements d2 in the second difference set of each day i,i+1 The standard deviation of the data time difference is obtained by the standard deviation of d2.

[0152] The standard deviation reflects the distance between the difference value of each element in the difference set and the mean of the set difference value. The larger the standard deviation, the larger the distance, which means that the element values ​​in the difference set fluctuate greatly. The greater the fluctuation, the greater the fluctuation of the data point size and data time in data transmission. The fluctuation must be caused by external factors, such as network security, that is, there are unsafe factors in data transmission. Therefore, the data size difference standard deviation d1 and the data time difference standard deviation d2 can be used to reflect the security of data transmission.

[0153] The user terminal calculates the daily fluctuation value based on the daily data size difference standard deviation d1 and the data time difference standard deviation d2. The specific method of calculating the fluctuation value can be shown in the following formula:

[0154]

[0155] Among them, j is the day identifier of the historical data within the target number of days, f j is the fluctuation value of the jth day, bin() is the conversion function to binary, It is the AND operation.

[0156] S550: The processing terminal determines the data transmission security according to the fluctuation value of the target number of days.

[0157] The user terminal determines the data transmission security SD of the target days according to the fluctuation value of each day of the target days. The specific method of calculating the data transmission security SD can be shown in the following formula:

[0158]

[0159] in, is an XOR operation, J is the total number of target days, f j is the fluctuation value on the jth day, 1≤j≤J.

[0160] This embodiment obtains network log data transmission information in the target time window of each day within the target days through the processing terminal, calculates the data packet size difference and transmission time difference of adjacent transmission data after sorting by timestamp, constructs a difference set and calculates the fluctuation value of each day, and finally determines the data transmission security of the target days through XOR operation. This process can more accurately evaluate the security status of data transmission, identify potential abnormal behavior, and provide reliable security protection for data encryption and decryption.

[0161] As another implementation of the present application, step S130: encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data includes:

[0162] S131: The data storage device generates an encryption key based on the adjustment value and the public key of the processing terminal.

[0163] The data storage device can generate an encryption key based on the adjustment value and the public key of the user terminal. The data storage device can generate an encryption key through a logical operation based on the adjustment value and the public key of the user terminal. For example, the encryption key = the public key of the user terminal in, is the XOR operation, and Δ is the adjustment value.

[0164] In one embodiment, the data storage device may receive the dynamic security score SC of the user terminal in real time.r and security parameters, and combined with the dynamic security score SC of the data storage device s The adjustment value is generated dynamically in real time, and then the public key of the user terminal is adjusted dynamically in real time to generate a dynamic encryption key.

[0165] S132: The data storage device encrypts the target data based on the encryption key to obtain encrypted data.

[0166] The data storage device may encrypt the target data based on the encryption key, and the data storage device may symmetrically encrypt the target transmission data based on the obtained encryption key to obtain encrypted data.

[0167] In this embodiment, an encryption key is generated by a data storage device based on an adjustment value and a public key of a processing terminal, and then target data is encrypted based on the encryption key to obtain encrypted data. The encryption key is generated by a dynamic adjustment value and used to encrypt data, thereby improving the security of data encryption.

[0168] As another implementation of the present application, step S130: encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain initial encrypted data, includes: the data storage device encrypts the target data based on the adjustment value and the public key of the processing terminal to obtain initial encrypted data; the data storage device encrypts the initial encrypted data based on the public key of the processing terminal to obtain encrypted data. The data storage device can encrypt the initial encrypted data based on the obtained public key based on the processing terminal to obtain initial encrypted data, and then the data storage device asymmetrically encrypts the initial encrypted data based on the public key of the user terminal to obtain encrypted data, further ensuring the security of the data.

[0169] In this embodiment, the data storage device first uses the adjustment value and the public key of the processing terminal to symmetrically encrypt the target data to obtain initial encrypted data, and then uses the public key of the user terminal to asymmetrically encrypt the initial encrypted data to obtain final encrypted data. This double encryption mechanism significantly enhances the security of the data, improves the ability to resist attacks, and ensures the integrity and authenticity of the data.

[0170] As another implementation of the present application, the encrypted data is the encrypted data obtained by encrypting the target data based on the first security score, the second security score of the processing terminal, the security parameters of the processing terminal and the public key of the processing terminal, and encrypting the initial encrypted data using the public key of the processing terminal; the method also includes: the processing terminal decrypts the encrypted data using the private key of the processing terminal to obtain the initial encrypted data; S160: the processing terminal decrypts the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data, including: the user processing terminal decrypts the initial encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data.

[0171] Encrypted data is stored in a data storage device based on the security score of the data storage device SC s , user terminal security score SC r The adjustment value is generated based on the security parameter of the user terminal, and then the target transmission data is symmetrically encrypted based on the adjustment value and the public key of the user terminal to obtain the initial encrypted data, and finally the initial encrypted data is asymmetrically encrypted based on the public key of the terminal to obtain the encrypted data.

[0172] The user terminal uses the private key of the user terminal to asymmetrically decrypt the encrypted data to obtain initial encrypted data, and then uses the generated adjustment value and the public key of the user terminal to decrypt the initial encrypted data to obtain transmission data.

[0173] After receiving the encrypted data through the user terminal, this embodiment first uses the private key to asymmetrically decrypt the encrypted data to obtain the initial encrypted data, and then uses the adjustment value and the public key of the user terminal to symmetrically decrypt the initial encrypted data to obtain the target data. This dual encryption and decryption mechanism significantly enhances the security of the data, improves the anti-attack capability, and ensures the integrity and authenticity of the data.

[0174] As another implementation of the present application, S160: decrypting the initial encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data includes:

[0175] S161: The processing terminal generates a decryption key according to the adjustment value and the public key of the processing terminal.

[0176] The user terminal may generate a decryption key through a logical operation based on the adjustment value and the public key of the user terminal. For example, the decryption key = the public key of the user terminal in It is an XOR operation.

[0177] S162: The processing terminal uses the decryption key to decrypt the encrypted data to obtain the target data.

[0178] The user terminal can use the obtained decryption key to symmetrically decrypt the encrypted data to obtain the target transmission data.

[0179] In this embodiment, a data storage device generates a confidential key based on an adjustment value and a public key of a processing terminal, and then decrypts the encrypted data based on the decryption key to obtain target data. A decryption key corresponding to the encryption key is generated through a dynamic adjustment value to decrypt the data, thereby further improving data security.

[0180] Based on the same concept, the present application embodiment provides a data processing device, as shown below: Figure 6 The data processing device provided in the embodiments of the present application is described in detail.

[0181] Figure 6 It is a structural block diagram of a data processing device provided in one embodiment of the present application.

[0182] like Figure 6 As shown, the device is applied to a processing terminal, and the data processing device may include:

[0183] The receiving module 610 is used to receive the encrypted data sent by the data storage device and the first security score of the data storage device; the encrypted data is obtained by the data storage device encrypting the target data based on the first security score, the second security score of the processing terminal, the security parameter of the processing terminal and the public key of the processing terminal;

[0184] A determination module 620, configured to determine an adjustment value according to the first security score, the second security score of the processing terminal, and a security parameter of the processing terminal;

[0185] The decryption module 630 is used to decrypt the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data.

[0186] In one embodiment, the determination module 620 is specifically configured to determine an adjustment degree based on the first safety score and the second safety score; and determine an adjustment value based on the safety parameter and the adjustment degree.

[0187] In one embodiment, the security parameters include network security and data transmission security; the determination module 620 is specifically used to obtain the adjustment value through logical operation based on the ratio of network security and adjustment degree and data transmission security.

[0188] In one embodiment, before determining the adjustment value based on the first security score, the second security score of the processing terminal and the security parameter of the processing terminal, the receiving module 610 is also used to obtain the network connection information of the processing terminal; construct a topology map based on the network connection information, the nodes in the topology map represent the processing terminals, and the edges in the topology map represent the association relationship between the processing terminals; take the node corresponding to the processing terminal as the central node, group all nodes according to the depth of each node to the central node to obtain multiple node groups, and group each node with the same depth to the central node into one group; determine the degree of each node, and calculate the average value of the degree of all nodes in each node group to obtain the average degree of each node group; determine the network security based on the average degree of all node groups, the number of nodes in the topology map, and the number of edges.

[0189] In one embodiment, before determining the adjustment value based on the first security score, the second security score of the processing terminal and the security parameter of the processing terminal, the receiving module 610 is also used to obtain the IP address information of the processing terminal within the target time period; and determine the network security based on the number of connections between each IP address in the IP address information and the processing terminal.

[0190] In one embodiment, before determining the adjustment value based on the first security score, the second security score of the processing terminal and the security parameter of the processing terminal, the receiving module 610 is also used to obtain the data transmission information in the network log of the processing terminal in the target time window of each day within the target number of days; sort each transmission data in the daily data transmission information according to the transmission time of each transmission data in the data transmission information; construct a first difference set for each day based on the difference in packet sizes of adjacent transmission data in the daily data transmission information as elements, and construct a second difference set for each day based on the difference in transmission time of adjacent transmission data in the daily data transmission information as elements; determine the daily fluctuation value based on the standard deviation of all elements in the first difference set and the standard deviation of all elements in the second difference set; determine the data transmission security based on the fluctuation value of the target number of days.

[0191] In one embodiment, the decryption module 630 is specifically used to generate a decryption key according to the adjustment value and the public key of the processing terminal; and use the decryption key to decrypt the encrypted data to obtain the target data.

[0192] In one embodiment, the encrypted data is the encrypted data obtained by encrypting the target data by the data storage device based on the first security score, the second security score of the processing terminal, the security parameters of the processing terminal and the public key of the processing terminal, and the initial encrypted data is encrypted using the public key of the processing terminal; the decryption module 630 is also used to decrypt the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data, including: decrypting the initial encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data.

[0193] Figure 6 Each module in the device shown has the function of realizing Figure 1 , Figure 2 , Figure 4 and Figure 5 The functions of each step in the process can achieve the corresponding technical effects, which will not be described in detail here for the sake of brevity.

[0194] Based on the same concept, the present application embodiment provides a data processing device, as shown below: Figure 7 The data processing device provided in the embodiments of the present application is described in detail.

[0195] Figure 7 It is a structural block diagram of a data processing device provided in another embodiment of the present application.

[0196] like Figure 7 As shown, the device is applied to a data storage device, and the data processing device may include:

[0197] The receiving module 710 is used to receive a second security score and a security parameter of the processing terminal sent by the processing terminal;

[0198] A determination module 720, configured to determine an adjustment value based on a first security score and a second security score and a security parameter of the data storage device;

[0199] The encryption module 730 is used to encrypt the target data based on the adjustment value and the public key of the processing terminal to obtain the encrypted data; the sending module 740 is used to send the encrypted data and the first security score of the data storage device to the processing terminal, so that the processing terminal can generate a decryption key based on the first security score, the second security score, the security parameter and the public key of the processing terminal, and use the decryption key to decrypt the encrypted data to obtain the target data.

[0200] In one embodiment, the determination module 720 is specifically configured to determine an adjustment degree based on the first safety score and the second safety score; and determine an adjustment value based on the safety parameter and the adjustment degree.

[0201] In one embodiment, the security parameters include network security and data transmission security; the determination module 720 is specifically used to obtain the adjustment value through logical operation based on the ratio of network security and adjustment degree and data transmission security.

[0202] In one embodiment, the encryption module 730 is specifically configured to generate an encryption key based on the adjustment value and a public key of the processing terminal; and encrypt the target data based on the encryption key to obtain encrypted data.

[0203] In one embodiment, the encryption module 730 is specifically configured to encrypt the target data based on the adjustment value and the public key of the processing terminal to obtain initial encrypted data; and encrypt the initial encrypted data based on the public key of the processing terminal to obtain encrypted data.

[0204] Figure 7 Each module in the device shown has the function of realizing Figure 1 The functions of each step in the process can achieve the corresponding technical effects, which will not be described in detail here for the sake of brevity.

[0205] Figure 8 A schematic diagram of the hardware structure of an electronic device provided in one embodiment of the present application is shown.

[0206] The electronic device may include a processor 810 and a memory 820 storing computer program instructions.

[0207] Specifically, the processor 810 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0208] The memory 820 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 820 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In appropriate cases, the memory 820 may include a removable or non-removable (or fixed) medium. In appropriate cases, the memory 820 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 820 is a non-volatile solid-state memory.

[0209] The memory may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage medium device, an optical storage medium device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Therefore, generally, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to the first aspect of the present disclosure.

[0210] The processor 810 implements any one of the data processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 820 .

[0211] In one example, the electronic device may further include a communication interface 830 and a bus 840. Figure 8 As shown, the processor 810, the memory 820, and the communication interface 830 are connected via a bus 840 and communicate with each other.

[0212] The communication interface 830 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0213] Bus 840 includes hardware, software or both, and the parts of online data flow billing equipment are coupled to each other. For example, but not limitation, bus may include accelerated graphics port (AGP) or other graphics bus, enhanced industrial standard architecture (EISA) bus, front side bus (FSB), hypertransport (HT) interconnection, industrial standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 840 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the present application considers any suitable bus or interconnection.

[0214] The electronic device can execute the data processing method in the embodiment of the present application, thereby realizing the combination Figure 1 , Figure 2 , Figure 4 and Figure 5 Describe the methods of data processing.

[0215] In addition, in combination with the data processing method in the above embodiments, the present application embodiment can provide a computer-readable storage medium for implementation. The computer-readable storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the data processing methods in the above embodiments is implemented.

[0216] An embodiment of the present application also provides a computer program product, including a computer program, which implements any one of the data processing methods in the above embodiments when the computer program is processed and executed.

[0217] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0218] The functional blocks shown in the above-described block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application specific integrated circuit (ASIC), appropriate firmware, a plug-in, a function card, etc. When implemented in software, the elements of the present application are programs or code segments that are used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0219] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0220] The above reference is according to the method of the embodiment of the present application, the flow chart of the device (system) and the computer program product and / or the block diagram described various aspects of the present application.It should be understood that each square box in the flow chart and / or the block diagram and the combination of each square box in the flow chart and / or the block diagram can be realized by computer program instructions.These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the realization of the function / action specified in one or more square boxes of the flow chart and / or the block diagram.Such a processor can be but is not limited to a general-purpose processor, a special-purpose processor, a special application processor or a field programmable logic circuit.It can also be understood that each square box in the block diagram and / or the flow chart and the combination of the square boxes in the block diagram and / or the flow chart can also be realized by the dedicated hardware that performs the specified function or action, or can be realized by the combination of dedicated hardware and computer instructions.

[0221] The above is only a specific implementation of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A method for data processing, characterized in that: Applied to a processing terminal, the method comprises: Receiving encrypted data sent by a data storage device and a first security score of the data storage device; the encrypted data is obtained by the data storage device encrypting target data based on the first security score, the second security score of the processing terminal, the security parameter of the processing terminal and the public key of the processing terminal; determining an adjustment value according to the first security score, the second security score of the processing terminal, and a security parameter of the processing terminal; The encrypted data is decrypted according to the adjustment value and the public key of the processing terminal to obtain the target data.

2. The method according to claim 1, characterized in that The determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal includes: determining a degree of adjustment based on the first safety score and the second safety score; The adjustment value is determined based on the safety parameter and the degree of adjustment.

3. The method according to claim 2, characterized in that The security parameters include network security and data transmission security; and determining the adjustment value based on the security parameters and the adjustment degree includes: The adjustment value is obtained through a logical operation based on the ratio of the network security degree to the adjustment degree and the data transmission security degree.

4. The method according to claim 3, characterized in that Before determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal, the method further includes: Acquiring network connection information of the processing terminal; Building a topology map based on the network connection information, wherein the nodes in the topology map represent terminals, and the edges in the topology map represent associations between terminals; Taking the node corresponding to the processing terminal as the central node, all nodes are grouped according to the depth from each node to the central node to obtain multiple node groups, and nodes with the same depth from each node to the central node are grouped into one group; Determine the degree of each node, and calculate the average value of the degrees of all nodes in each of the node groups to obtain the average degree of each of the node groups; The network security is determined based on the average degree of all the node groups, the number of nodes and the number of edges in the topological graph.

5. The method according to claim 3, characterized in that: Before determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal, the method further includes: Obtaining the IP address information of the processing terminal within the target time period; The network security is determined according to the number of connections between each IP address in the IP address information and the processing terminal.

6. The method according to claim 3, characterized in that Before determining the adjustment value according to the first security score, the second security score of the processing terminal, and the security parameter of the processing terminal, the method further includes: Obtaining data transmission information in a network log of the processing terminal in a target time window of each day within a target number of days; sorting each transmission data in the data transmission information of each day according to the transmission time of each transmission data in the data transmission information; Constructing a first difference set for each day based on the difference in data packet sizes of adjacent transmission data in the data transmission information of each day as an element, and constructing a second difference set for each day based on the difference in transmission time of adjacent transmission data in the data transmission information of each day as an element; Determine a daily fluctuation value according to the standard deviation of all elements in the first difference set and the standard deviation of all elements in the second difference set for each day; The data transmission security level is determined according to the fluctuation value of the target number of days.

7. The method according to claim 1, characterized in that The decrypting the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data includes: generating a decryption key according to the adjustment value and a public key of the processing terminal; The encrypted data is decrypted using the decryption key to obtain the target data.

8. The method according to claim 1, characterized in that The encrypted data is the encrypted data obtained by encrypting the target data by the data storage device based on the first security score, the second security score of the processing terminal, the security parameter of the processing terminal and the public key of the processing terminal, and encrypting the initial encrypted data using the public key of the processing terminal; the method further includes: Decrypting the encrypted data using the private key of the processing terminal to obtain initial encrypted data; The decrypting the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data includes: The target data is obtained by decrypting the initial encrypted data according to the adjustment value and the public key of the processing terminal.

9. A method of data processing, characterized in that: Applied to a data storage device, the method comprises: receiving a second security score and security parameters of the processing terminal sent by the processing terminal; determining an adjustment value based on a first security score of the data storage device, and the second security score and the security parameter; encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data; The encrypted data and the first security score of the data storage device are sent to a processing terminal, so that the processing terminal decrypts the encrypted data based on the first security score, the second security score, the security parameter and a public key of the processing terminal to obtain target data.

10. The method according to claim 9, characterized in that The determining of the adjustment value based on the first security score, the second security score, and the security parameter of the data storage device comprises: determining a degree of adjustment based on the first safety score and the second safety score; The adjustment value is determined based on the safety parameter and the degree of adjustment.

11. The method according to claim 10, characterized in that The security parameters include network security and data transmission security; The determining the adjustment value based on the safety parameter and the adjustment degree comprises: The adjustment value is obtained through a logical operation based on the ratio of the network security degree to the adjustment degree and the data transmission security degree.

12. The method according to claim 9, characterized in that The step of encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data includes: generating an encryption key based on the adjustment value and a public key of the processing terminal; The target data is encrypted based on the encryption key to obtain encrypted data.

13. The method according to claim 9, characterized in that The step of encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data includes: encrypting the target data based on the adjustment value and the public key of the processing terminal to obtain initial encrypted data; The encrypted data is obtained by encrypting the initial encrypted data based on the public key of the processing terminal.

14. A data processing device, characterized in that: The device is applied to a processing terminal, and the device comprises: a receiving module, configured to receive encrypted data sent by a data storage device and a first security score of the data storage device; the encrypted data is obtained by encrypting target data by the data storage device based on the first security score, the second security score of the processing terminal, the security parameter of the processing terminal and the public key of the processing terminal; a determination module, configured to determine an adjustment value according to the first security score, the second security score of the processing terminal, and a security parameter of the processing terminal; A decryption module is used to decrypt the encrypted data according to the adjustment value and the public key of the processing terminal to obtain the target data.

15. A data processing device, characterized in that: The device is applied to a data storage device, and comprises: A receiving module, configured to receive a second security score and a security parameter of the processing terminal sent by the processing terminal; a determination module, configured to determine an adjustment value based on a first security score of the data storage device, the second security score and the security parameter; an encryption module, used to encrypt the target data based on the adjustment value and the public key of the processing terminal to obtain encrypted data; a sending module, used to send the encrypted data and the first security score of the data storage device to the processing terminal, so that the terminal can decrypt the encrypted data based on the first security score, the second security score, the security parameter and the public key of the processing terminal to obtain the target data.

16. An electronic device, characterized in that: The device comprises: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, the method for data processing according to any one of claims 1 to 13 is implemented.

17. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the method for data processing according to any one of claims 1 to 13 is implemented.

18. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device executes the data processing method as described in any one of claims 1 to 13.

Images