Information updating method and device, storage medium and program product

Abstract

The embodiment of the invention provides an information updating method and device, a storage medium and a program product, relates to the field of information security, and can update user information according to user requirements, meet the security requirements of users and guarantee the security of a cloud service system. The method comprises the following steps: acquiring an information updating period corresponding to each terminal, and then updating to-be-updated information of each terminal according to the information updating period corresponding to the terminal.

Description

Technical Field

[0001] The present application relates to the field of information security, and in particular to an information updating method, device, storage medium and program product. Background Art

[0002] In a multi-cloud environment, a cloud service partner (CSN) can use a key mechanism to authenticate users (such as cloud service customers (CSCs)) to ensure the security of the cloud service system. However, the existing key mechanism mainly uses fixed keys for encryption and decryption to authenticate users. Although this key mechanism simplifies the complexity of key management to a certain extent, it has obvious security risks. Long-term use of the same key is prone to security vulnerabilities. Once the key is leaked or stolen, the cloud service system will be subject to malicious attacks. Not only can the security of the cloud service system not be guaranteed, but it is also difficult to meet the security needs of users. Summary of the invention

[0003] The present application provides an information updating method, device, storage medium and program product, which can update information based on user needs, meet user security needs, and ensure the security of cloud service systems.

[0004] In order to achieve the above objectives, this application adopts the following technical solutions:

[0005] In a first aspect, the present application provides an information updating method, applied to a server, the method comprising:

[0006] The information update cycle corresponding to each terminal is obtained, and then for each terminal, the information to be updated of the terminal is updated according to the information update cycle corresponding to the terminal.

[0007] Based on the above technical solution, the server can update the information to be updated of each terminal according to the information update cycle corresponding to each terminal. In this way, the information to be updated of the terminal can be updated regularly, reducing the risk of terminal information being stolen, thereby meeting the security needs of different users and ensuring the security of the cloud service system.

[0008] Optionally, updating the information to be updated of the terminal according to the information update cycle corresponding to the terminal may specifically include: determining a timing mechanism, and then updating the information to be updated of the terminal according to the information update cycle corresponding to the terminal based on the timing mechanism.

[0009] Among them, timing mechanism refers to the method used to measure the passage of time.

[0010] Optionally, the server is deployed with a shift register, and the timing mechanism includes a shift register timing mechanism. On this basis, the above-mentioned timing mechanism is based on the information update cycle corresponding to the terminal to update the terminal's information to be updated, which can specifically include: determining the first shift duration of the shift register, and then determining the target shift times based on the information update cycle and the first shift duration, and finally running the shift register based on the first shift duration, and updating the terminal's information to be updated when the number of times the data sequence in the shift register moves is a multiple of the target shift times.

[0011] The first shift duration refers to the duration required for the data sequence in the shift register to move one position.

[0012] Optionally, the server is deployed with a shift register, and the timing mechanism includes a shift register timing mechanism. On this basis, the above-mentioned timing mechanism is based on the information update cycle corresponding to the terminal, and the terminal's information to be updated is updated. Specifically, it can also include: determining the cycle period of the shift register, and then determining the second shift duration of the shift register based on the information update cycle and the cycle period, and finally running the shift register based on the cycle period and the second shift duration, and updating the terminal's information to be updated after detecting that the shift register enters a new cycle period.

[0013] The cycle period refers to the number of times the data sequence in the shift register is shifted during one cycle of the shift register.

[0014] Optionally, the information to be updated corresponding to each terminal includes a user identifier, an encryption key and a decryption key. On this basis, the above method may further include: sending a new user identifier and a new decryption key to the terminal.

[0015] The new user identifier is the updated user identifier, and the new decryption key is the updated decryption key.

[0016] Optionally, the above method may also include: receiving a target request carrying a new user identifier sent by a terminal, and encrypting the new user identifier using a new encryption key to obtain encrypted data, then sending the encrypted data to the terminal so that the terminal decrypts the encrypted data using a new decryption key to obtain decrypted data, and finally receiving the decrypted data sent by the terminal, verifying the decrypted data, and responding to the target request if the verification is successful.

[0017] Optionally, after encrypting the new user identifier by the new encryption key to obtain the encrypted data, the method may further include: sending the encrypted data to the terminal so that the terminal decrypts the encrypted data by the new decryption key to obtain the decrypted data, and signs the decrypted data by the new decryption key to obtain the signed data, and then receives the signed data and decrypted data sent by the terminal, verifies the signed data and decrypted data by the new encryption key, and responds to the target request if the verification passes.

[0018] In a second aspect, the present application provides an information updating device, comprising:

[0019] The acquisition unit is used to acquire the information update period corresponding to each terminal.

[0020] The updating unit is used to update the to-be-updated information of each terminal according to the information updating cycle corresponding to the terminal.

[0021] Optionally, the updating unit is further configured to update the to-be-updated information of the terminal based on a timing mechanism and in accordance with an information update cycle corresponding to the terminal.

[0022] Optionally, the updating unit is further configured to operate the shift register based on the first shift duration, and update the to-be-updated information of the terminal when the number of shifts of the data sequence in the shift register is a multiple of the target shift number.

[0023] Optionally, the updating unit is further configured to operate the shift register based on the cycle period and the second shift duration, and update the to-be-updated information of the terminal after detecting that the shift register enters a new cycle period.

[0024] In a third aspect, the present application provides an information updating device, the device comprising: a processor and a communication interface. The communication interface is coupled to the processor, and the processor is used to run a computer program or instruction to implement the information updating method described in any one of the first aspect and any possible implementation of the first aspect.

[0025] In a fourth aspect, the present application provides a computer-readable storage medium, which stores instructions. When the instructions are executed on a terminal, the terminal executes an information updating method as described in any one of the first aspect and any possible implementation of the first aspect.

[0026] In a fifth aspect, the present application provides a computer program product, which includes computer instructions. When the computer instructions are executed on a computer, the computer executes an information updating method as described in any one of the first aspect and any possible implementation of the first aspect.

[0027] It can be understood that the beneficial effects that can be achieved by the second to fifth aspects provided above can refer to the beneficial effects of any possible design method of the information updating method described in any one of the first aspect and any possible implementation method of the first aspect, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 An architectural diagram of a cloud service system provided in an embodiment of the present application;

[0029] Figure 2 An architecture diagram of an information updating system provided in an embodiment of the present application;

[0030] Figure 3 A flowchart of an information updating method provided in an embodiment of the present application;

[0031] Figure 4 A structural diagram of a shift register provided in an embodiment of the present application;

[0032] Figure 5 An interactive process of an information verification method provided in an embodiment of the present application Figure 1 ;

[0033] Figure 6 An interactive process of an information verification method provided in an embodiment of the present application Figure 2 ;

[0034] Figure 7 An interactive process of an information verification method provided in an embodiment of the present application Figure 3 ;

[0035] Figure 8 A schematic diagram of the structure of an information updating device provided in an embodiment of the present application;

[0036] Fig. 9 A schematic diagram of the structure of another information updating device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0037] The following is a detailed description of an information updating method, device, storage medium and program product provided by an embodiment of the present application in conjunction with the accompanying drawings.

[0038] The term "and / or" in this article is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone.

[0039] The terms "first" and "second" and the like in the specification and drawings of this application are used to distinguish different objects, or to distinguish different processing of the same object, rather than to describe a specific order of objects.

[0040] In addition, the terms "including" and "having" and any variations thereof mentioned in the description of the present application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but may optionally include other steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0041] It should be noted that, in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0042] With the rapid development of information technology, cloud computing technology has become the core force driving digital transformation. Cloud computing uses virtualization technology to encapsulate computing resources, storage resources, and network resources into services and provide them to CSCs for on-demand use. In recent years, the cloud computing market has shown explosive growth, and many cloud computing service providers (CSPs) have emerged. These CSPs can provide CSCs with cloud services in multiple fields such as elastic computing, database services, big data processing, and security services, effectively meeting the diverse needs of CSCs in different business scenarios.

[0043] In order to make full use of the advantages of these CSPs, CSN came into being. CSN is a platform that can connect to multiple CSPs. It allows CSCs to flexibly choose suitable cloud services according to their business needs, which not only improves resource utilization but also avoids the risk of vendor lock-in. For example, Figure 1 The architecture diagram of the cloud service system is shown, in which the CSN can combine, manage, monitor and configure the cloud services provided by different CSPs to meet the business needs of the CSC.

[0044] In a multi-cloud environment, CSN can use the key mechanism to authenticate the CSC to ensure the security of the cloud service system. However, the existing key mechanism mainly uses fixed keys for encryption and decryption to authenticate the CSC. Although this key mechanism simplifies the complexity of key management to a certain extent, it has obvious security risks. Long-term use of the same key is prone to security vulnerabilities. Once the key is leaked or stolen, the cloud service system will be subject to malicious attacks. Not only can the security of the cloud service system not be guaranteed, but it is also difficult to meet the security requirements of the CSC.

[0045] In addition, when CSN integrates multiple CSPs, the independence and inconsistency of the identity authentication systems of each CSP increase the complexity of key updates. When CSC switches between different CSPs, it often needs to repeat registration, login, and verification operations in different identity authentication systems. This process not only reduces the CSC experience, but also increases the difficulty of key management and updates.

[0046] In order to solve the above technical problems, the embodiment of the present application provides an information update method, whereby the server can obtain the information update cycle corresponding to each terminal, and then update the information to be updated of each terminal according to the information update cycle corresponding to each terminal. In this way, the information to be updated of the terminal can be updated regularly, reducing the risk of the terminal information being stolen, thereby meeting the security needs of different users and ensuring the security of the cloud service system.

[0047] Figure 2 An architecture diagram of an information update system provided in an embodiment of the present application, such as Figure 2 As shown, the system framework includes: a terminal 201 and a server 202.

[0048] The terminal 201 may be a device that provides voice and / or data connectivity to a user, a device with wireless connection function, or other device connected to a wireless modem. The terminal device may be at least one of a desktop computer, a laptop, a wireless terminal, and a laptop computer. In one embodiment, the electronic device has a communication function and can access a wired network or a wireless network.

[0049] The embodiment of the present application does not limit the number of terminals 201 in the optimization solution determination system, and may include Figure 2 More or fewer terminals 201.

[0050] The server 202 may be a high-performance server that provides various services online, an independent physical server, a server cluster composed of multiple physical servers, or at least one of cloud servers that provide basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content distribution networks, and big data or artificial intelligence platforms, etc. The embodiments of the present application do not limit this. Of course, the server can also include other functions to provide more comprehensive and diverse services.

[0051] In the embodiment of the present application, the terminal 201 may send its corresponding information update cycle to the server 202. Accordingly, after receiving the information update cycle corresponding to the terminal 201, the server 202 may update the to-be-updated information of the terminal 201 according to the information update cycle corresponding to the terminal 201.

[0052] Figure 3 A flowchart of an information updating method provided in an embodiment of the present application is shown as follows: Figure 3 As shown, this method is Figure 2 The server shown executes the method, comprising:

[0053] S301, obtaining the information update period corresponding to each terminal.

[0054] S302: for each terminal, update the to-be-updated information of the terminal according to the information update cycle corresponding to the terminal.

[0055] The embodiment of the present application does not specifically limit the information to be updated. For example, the information to be updated of each terminal may include at least one of the information such as an encryption key, a decryption key or a user identification corresponding to the terminal.

[0056] Specifically, for each terminal, the terminal may send the information update cycle to the server after receiving the information update cycle input by the user. After the server receives the information update cycle corresponding to each terminal, for each terminal, the server may update the information to be updated of the terminal according to the information update cycle corresponding to the terminal to obtain the updated information.

[0057] Based on the above technical solution, the server can regularly update the information to be updated of each terminal according to the information update cycle corresponding to each terminal. This can not only meet the security needs of different users, but also reduce the risk of information theft.

[0058] In an optional implementation, updating the information to be updated of the terminal according to the information update cycle corresponding to the terminal may specifically include: determining a timing mechanism, and then updating the information to be updated of the terminal according to the information update cycle corresponding to the terminal based on the timing mechanism.

[0059] Among them, timing mechanism refers to the method used to measure the passage of time.

[0060] The embodiment of the present application does not limit the type of timing mechanism. The timing mechanism may include but is not limited to: a clock timing mechanism, a shift register timing mechanism, and a software timing mechanism.

[0061] The following description takes the timing mechanism of a shift register as an example.

[0062] In an optional implementation, a shift register may be deployed in the server. Accordingly, the timing mechanism may include a shift register timing mechanism. On this basis, the timing mechanism is based on the information update cycle corresponding to the terminal to update the terminal information to be updated, which may include the following two methods.

[0063] The first method: the server can determine the first shift duration of the shift register, and then determine the target shift times based on the information update cycle and the first shift duration. Finally, based on the first shift duration, the shift register is run, and when the number of times the data sequence in the shift register moves is N times the target shift times, the terminal's information to be updated is updated.

[0064] Wherein, N is an integer greater than 0.

[0065] The first shift duration refers to the duration required for a data sequence in the shift register to shift one position.

[0066] The embodiment of the present application does not limit the value of the first shift duration. For example, the first shift duration can be 1 second, 10 seconds or 20 seconds. Assume that the initial data sequence in the shift register is 101 and the first shift duration is 1 second. On this basis, the initial data sequence 101 can be shifted to the right by one position every 1 second. For example, after the initial data sequence 101 shifts to the right by one position in the first second, the data sequence becomes 010, and after the initial data sequence 101 shifts to the right by one position in the second second, the data sequence becomes 001.

[0067] Specifically, when the timing mechanism is a shift register timing mechanism, the server can determine a first shift duration that is less than or equal to the information update period. Afterwards, the server can use the ratio between the information update period and the first shift duration as the target shift number. After determining the first shift duration and the target shift number of the shift register, the server can trigger an operation on the shift register so that the data sequence in the shift register can be moved bit by bit according to the first shift duration. During the operation of the shift register, the server can use a built-in counter to record the number of times the data sequence in the shift register moves, and when the number of times the data sequence moves recorded by the counter is N times the target shift number, update the information to be updated of the terminal.

[0068] Exemplarily, it is assumed that the initial value of the built-in counter of the server is 0. The information update cycle corresponding to the terminal is 20 seconds. Accordingly, the server can use a value less than or equal to the information update cycle (20 seconds) as the first shift duration (such as 5 seconds). Afterwards, the server can determine that the target number of shifts is 4 times based on the ratio between the information update cycle (20 seconds) and the first shift duration (5 seconds). On this basis, the data sequence in the shift register moves to the right once according to the first shift duration, and the built-in counter of the server is increased by 1. When the value of the counter is a multiple of the target number of shifts (4) (such as 4, 8 or 12, etc.), the server can update the information to be updated of the terminal.

[0069] The second method: The server can determine the cycle period of the shift register, and then determine the second shift duration of the shift register based on the information update cycle and the cycle period, and finally run the shift register based on the cycle period and the second shift duration, and after detecting that the shift register enters a new cycle period, update the terminal's information to be updated.

[0070] The cycle period refers to the number of times the data sequence in the shift register is shifted during one cycle of the shift register.

[0071] Specifically, when the timing mechanism is a shift register timing mechanism, the server can randomly set the number of stages of the shift register and determine the cycle period of the shift register based on the number of stages of the shift register. In addition, the server can also determine the initial data sequence (also referred to as the initial state) of the shift register based on the number of stages of the shift register. Afterwards, the server can use the ratio between the information update period and the cycle period of the shift register as the second shift duration of the shift register. On the basis of the above, the server can trigger the operation of the shift register so that the data sequence in the shift register can be moved bit by bit according to the second shift duration. During the operation of the shift register, when the server detects that the data sequence in the shift register is consistent with the initial data sequence (that is, the shift register enters a new cycle), it updates the information to be updated of the terminal.

[0072] The embodiment of the present application does not limit the number of stages of the shift register. For example, the number of stages of the shift register may be 2, 3, or 4.

[0073] When the number of shift register stages is n, the cycle period of the shift register is 2 n .

[0074] Exemplarily, the longest linear feedback shift register (hereinafter referred to as shift register) is taken as an example. Figure 4 The structure diagram of the shift register is shown, a0a2…a n-2 a n-1 It constitutes the data sequence in the shift register.

[0075] Assume that the initial data sequence in the shift register is a0a2…a n-2 a n-1 , c0=c1=1. After the data sequence in the shift register is shifted once (i.e. output a0), the data sequence in the shift register becomes a1a2…a n-1 a n , a n The expression of can refer to the following formula 1.

[0076]

[0077] in, is the exclusive OR operator. n-i Represents the data in the shift register, a n-i The value is 0 or 1. i represents the feedback coefficient, when c i When it is 0, it indicates feedback connection (i.e., participation in feedback). i When it is 1, it means disconnecting the feedback line (i.e. not participating in feedback).

[0078] Based on the above, assuming that the number of stages of the shift register is 2, the server can determine that the cycle period of the shift register is 4. In addition, the server also determines that the initial data sequence in the shift register is 10, and the feedback coefficients c0=c1=1, c2=0.

[0079] On the basis of the above, the server can trigger the operation of the shift register so that the initial data sequence in the shift register can be shifted to the right in sequence according to the second shift time. During the operation of the shift register, the data sequence in the shift register changes from 10 to 11, 01, and 10 in sequence. When it is detected that the data sequence in the shift register is 10, the server can update the terminal's information to be updated.

[0080] Based on the above scheme, the server can dynamically adjust the shift duration of the shift register and / or the cycle period of the shift register according to the needs of different users to update the terminal's information to be updated. This not only meets the needs of users, but also improves the flexibility of information updating.

[0081] In some embodiments, the information to be updated of each terminal includes a user identifier, an encryption key, and a decryption key. Accordingly, after the server updates the user identifier, encryption key, and decryption key of the terminal according to the information update cycle corresponding to the terminal, it can send the new user identifier and new decryption key to the terminal, and store the new user identifier, new decryption key, and new encryption key of the terminal accordingly.

[0082] The new user identifier is the updated user identifier, and the new decryption key is the updated decryption key.

[0083] Exemplarily, Table 1 shows the new user identification, new decryption key and new encryption key of each terminal stored in the server.

[0084] Table 1 New user identification, new decryption key and new encryption key of each terminal

[0085] Terminal 1 User ID 1 Decryption Key 1 Encryption Key 1 Terminal 2 User ID 2 Decryption Key 2 Encryption Key 2 ¨¨ ¨¨ ¨¨ ¨¨ Terminal User ID Decryption key n Encryption Key n

[0086] In some embodiments, taking the terminal as CSC and the server as CSN as an example, after the terminal receives the new user identifier and the new decryption key sent by the server, Figure 5 As shown, the above method may include:

[0087] S501, the CSC sends a target request carrying a new user identity N to the CSN.

[0088] S502, CSN encrypts the new user identifier N by using the new encryption key corresponding to the new user identifier N to obtain encrypted data SN.

[0089] S503, CSN sends encrypted data SN to CSC.

[0090] S504, the CSC decrypts the encrypted data SN using the new decryption key to obtain decrypted data N'.

[0091] S505, the CSC sends the decrypted data N' to the CSN.

[0092] S506, CSN verifies the decrypted data N' and responds to the target request if the verification passes.

[0093] Specifically, the CSN may compare the new user identifier N and the decrypted data N' to obtain a comparison result, and respond to the target request if the comparison result indicates that the new user identifier N and the decrypted data N' are consistent.

[0094] In some embodiments, Figure 6 As shown, the above S504-S506 can also be implemented as follows:

[0095] S601, the CSC decrypts the encrypted data SN using a new decryption key to obtain decrypted data N', and signs the decrypted data N' using the decryption key to obtain signed data GN'.

[0096] S602, CSC sends decrypted data N' and signed data GN' to CSN.

[0097] S603, CSN verifies the signature data GN' and the decrypted data N' by using the new encryption key, and responds to the target request if the verification passes.

[0098] Specifically, the CSC can decrypt the encrypted data SN using the new decryption key to obtain the decrypted data N'. Afterwards, the CSC can determine the data summary H(N') of the decrypted data N' through a hash algorithm, and sign the data summary H(N') using the decryption key to obtain the signature data GN', and send the decrypted data N' and the signature data GN' to the CSN. Correspondingly, after receiving the decrypted data N' and the signature data GN', the CSN can decrypt the signature data GN' using the encryption key to obtain the data summary H'(N'). The CSN can also determine the data summary H(N') of the decrypted data N' using the same hash algorithm. Afterwards, the CSN can compare the data summary H'(N') with the data summary H(N'). When the data summary H'(N') and the data summary H(N') are consistent, the CSN can respond to the target request.

[0099] In some embodiments, when a new user identity of a first CSC is acquired by a second CSC, such as Figure 7 As shown, the above method may also include:

[0100] S701: The second CSC obtains a new user identifier N of the first CSC.

[0101] S702: The second CSC sends a target request carrying a new user identifier N to the CSN.

[0102] S703, CSN encrypts the new user identifier N by using the new encryption key corresponding to the new user identifier N to obtain encrypted data SN.

[0103] S704, the CSN sends the encrypted data SN to the second CSC.

[0104] S705: The second CSC decrypts the encrypted data SN using the second decryption key to obtain decrypted data N".

[0105] S706: The second CSC sends decrypted data N" to the CSN.

[0106] S707, CSN verifies the decrypted data N" and obtains a verification result.

[0107] S708: When the verification result indicates that the verification fails, the CSN sends an error prompt message to the second CSC.

[0108] Specifically, the CSN may compare the new user identifier N and the decrypted data N" to obtain a comparison result. Afterwards, when the comparison result indicates that the new user identifier N and the decrypted data N" are inconsistent, the CSN sends an error prompt message to the second CSC.

[0109] In the above scheme, the server can verify the legitimacy of the terminal through encryption, decryption, signing and signature verification processes, and if the verification is successful, it can respond to the terminal's target request and allow the user to access the cloud service system, which can effectively ensure and enhance the security of cloud service system interaction.

[0110] In some embodiments, the target request may include the service resource requirements of the terminal, and the server stores the permissions of each terminal to each service resource. On this basis, the above server verifies the decrypted data and / or signature data, and after the verification is passed, it can also query whether the service resource requirements of the terminal have permissions in the stored permissions of the terminal to each service resource based on the service resource requirements of the terminal. If there is permission, the server can respond to the target request of the terminal, and if there is no permission, the server can send a denial of service message to the terminal.

[0111] The embodiment of the present application does not limit the type of service resources. For example, the service resources may be computing resources, storage resources, or network resources.

[0112] Exemplarily, as shown in Table 2, the access control list stores the rights of each terminal to the service resources provided by the second server (such as CSP). For example, terminal 1 has the right to use service resource 1 provided by CSP1, and terminal 2 has no right to use service resource 1 provided by CSP1.

[0113] Table 2 Access Control List

[0114] terminal CSP1 CSP2 ¨¨ CSP Terminal 1 Service resources 1 Service resources 2 ¨¨ Service Resources Terminal 2 x Service resources 2 ¨¨ ¨¨ ¨¨ ¨¨ ¨¨ ¨¨ ¨¨ Terminal Service resources 1 Service resources 2 ¨¨ x

[0115] Figure 8 A schematic diagram of the structure of an information updating device provided in an embodiment of the present application is shown in FIG. Figure 8 As shown, the device comprises:

[0116] The acquisition unit 801 is used to acquire the information update period corresponding to each terminal.

[0117] The updating unit 802 is used to update the to-be-updated information of each terminal according to the information updating cycle corresponding to the terminal.

[0118] Optionally, the updating unit 802 is further configured to update the to-be-updated information of the terminal based on a timing mechanism and according to an information update cycle corresponding to the terminal.

[0119] Optionally, the updating unit 802 is further configured to run the shift register based on the first shift duration, and update the to-be-updated information of the terminal when the number of shifts of the data sequence in the shift register is a multiple of the target shift number.

[0120] Optionally, the updating unit 802 is further configured to operate the shift register based on the cycle period and the second shift duration, and update the to-be-updated information of the terminal after detecting that the shift register enters a new cycle period.

[0121] Fig. 9 Another possible structural diagram of the information updating device involved in the above embodiment is shown. The information updating device includes: a processor 901 and a communication interface 902. The processor 901 is used to control and manage the actions of the information updating device, and the communication interface 902 is used to support the communication between the information updating device and other network entities. The information updating device may also include a memory 903 and a bus 904, and the memory 903 is used to store program codes and data of the information updating device.

[0122] Among them, the memory 903 can be a memory in an information updating device, etc. The memory can include a volatile memory, such as a random access memory; the memory can also include a non-volatile memory, such as a read-only memory, a flash memory, a hard disk or a solid-state drive; the memory can also include a combination of the above types of memory.

[0123] The processor 901 may be a processor that implements or executes various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of the present application. The processor may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field programmable gate array, or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. The processor may be a processor that implements or executes various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of the present application. The processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and the like.

[0124] The bus 904 may be an extended industry standard architecture (EISA) bus, etc. The bus 904 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig. 9 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0125] Through the description of the above implementation methods, technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. The specific working process of the system, device and unit described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0126] An embodiment of the present application provides a computer program product including instructions. When the computer program product is run on a computer, the computer is enabled to execute the information updating method in the above method embodiment.

[0127] An embodiment of the present application also provides a computer-readable storage medium, in which instructions are stored. When the instructions are executed on a computer, the computer executes the information updating method in the method flow shown in the above method embodiment.

[0128] Among them, the computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read only memory (EPROM), a register, a hard disk, an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above, or any other form of computer-readable storage medium known in the art. An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). In the embodiments of the present application, a computer-readable storage medium may be any tangible medium that contains or stores a program, which may be used by or in conjunction with an instruction execution system, apparatus, or device.

[0129] An embodiment of the present invention provides a computer program product including instructions, which, when executed on a computer, enables the computer to execute the information updating method described in the embodiment of the present application.

[0130] Since the information updating device, computer-readable storage medium, and computer program product in the embodiments of the present invention can be applied to the above method, the technical effects that can be obtained can also refer to the above method embodiments, and the embodiments of the present invention will not be repeated here.

[0131] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0132] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0133] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0134] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. An information updating method, characterized in that: Applied to a server, the method comprises: Obtain the information update cycle corresponding to each terminal; For each of the terminals, the to-be-updated information of the terminal is updated according to the information update period corresponding to the terminal.

2. The method according to claim 1, characterized in that The updating of the to-be-updated information of the terminal according to the information update cycle corresponding to the terminal includes: determining a timing mechanism; wherein the timing mechanism is a method for measuring the passage of time; Based on the timing mechanism, the to-be-updated information of the terminal is updated according to the information update period corresponding to the terminal.

3. The method according to claim 2, characterized in that The server is deployed with a shift register; the timing mechanism comprises a shift register timing mechanism; The updating of the to-be-updated information of the terminal based on the timing mechanism and according to the information update period corresponding to the terminal includes: Determining a first shift duration of the shift register; the first shift duration refers to the duration required for a data sequence in the shift register to move one position; Determining a target shift number based on the information update cycle and the first shift duration; Based on the first shift duration, the shift register is operated, and when the number of shifts of the data sequence in the shift register is a multiple of the target shift number, the to-be-updated information of the terminal is updated.

4. The method according to claim 2, characterized in that: The server is deployed with a shift register; the timing mechanism comprises a shift register timing mechanism; The updating of the to-be-updated information of the terminal based on the timing mechanism and according to the information update period corresponding to the terminal includes: Determine the cycle period of the shift register; the cycle period refers to the number of shifts of the data sequence in the shift register during one cycle of the shift register; Determining a second shift duration of the shift register based on the information update period and the cycle period; Based on the cycle period and the second shift duration, the shift register is operated, and after detecting that the shift register enters a new cycle period, the to-be-updated information of the terminal is updated.

5. The method according to claim 1, characterized in that The information to be updated corresponding to each terminal includes a user identifier, an encryption key and a decryption key; After updating the to-be-updated information of the terminal according to the information update cycle corresponding to the terminal, the method further includes: A new user identifier and a new decryption key are sent to the terminal; the new user identifier is an updated user identifier; and the new decryption key is an updated decryption key.

6. The method according to claim 5, characterized in that: The method further comprises: Receiving a target request carrying a new user identifier sent by the terminal; Encrypting the new user ID by using the new encryption key to obtain encrypted data; Sending the encrypted data to the terminal, so that the terminal decrypts the encrypted data using the new decryption key to obtain decrypted data; The decrypted data sent by the terminal is received, the decrypted data is verified, and if the verification passes, the target request is responded to.

7. The method according to claim 6, characterized in that After encrypting the new user identifier by using the new encryption key to obtain encrypted data, the method further includes: Sending the encrypted data to the terminal, so that the terminal decrypts the encrypted data by using the new decryption key to obtain the decrypted data, and signs the decrypted data by using the new decryption key to obtain signed data; The signature data and the decrypted data sent by the terminal are received, the signature data and the decrypted data are verified by using the new encryption key, and when the verification passes, the target request is responded to.

8. An information updating device, characterized in that: The device comprises: An acquisition unit, used to acquire the information update period corresponding to each terminal; An updating unit is used to update the to-be-updated information of each terminal according to the information updating period corresponding to the terminal.

9. An information updating device, characterized in that: include: A processor and a communication interface; the communication interface is coupled to the processor, and the processor is used to run a computer program or instruction to implement the information updating method as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores instructions. When a computer executes the instructions, the computer executes the information updating method according to any one of claims 1 to 7.

11. A computer program product, characterized in that The computer program product comprises computer instructions, and when the computer instructions are executed on a computer, the computer is caused to execute the information updating method according to any one of claims 1 to 7.

Images