Information updating method and device, storage medium and program product

Abstract

Embodiments of the present application provide an information updating method and device, a storage medium and a program product, relate to the field of information security, and can update information of a user according to a user demand, meet a security demand of the user, and guarantee the security of a cloud service system. The method comprises the following steps: obtaining information updating periods corresponding to respective terminals, and then updating to-be-updated information of each terminal according to the information updating period corresponding to the terminal.

Description

Technical Field

[0001] This application relates to the field of information security, and in particular to an information updating method, apparatus, storage medium, and program product. Background Technology

[0002] In a multi-cloud environment, the cloud service partner (CSN) can utilize key mechanisms to authenticate users (such as cloud service customers (CSCs)) and thus ensure the security of the cloud service system. However, existing key mechanisms primarily use fixed keys for encryption and decryption to authenticate users. While this simplifies key management to some extent, it presents significant security vulnerabilities. Long-term use of the same key is prone to security breaches; once the key is leaked or stolen, the cloud service system can be vulnerable to malicious attacks, failing to guarantee its security and failing to meet user security needs. Summary of the Invention

[0003] This application provides an information updating method, apparatus, storage medium, and program product, which can update information based on user needs, meet user security requirements, and ensure the security of cloud service systems.

[0004] To achieve the above objectives, this application adopts the following technical solution:

[0005] Firstly, this application provides an information updating method applied to a server, the method comprising:

[0006] Obtain the information update cycle for each terminal, and then update the information to be updated for each terminal according to the information update cycle corresponding to the terminal.

[0007] Based on the above technical solution, the server can update the information to be updated for each terminal according to the corresponding information update cycle. This allows for periodic updates of the terminal's information, reducing the risk of terminal information theft, thereby meeting the security needs of different users and ensuring the security of the cloud service system.

[0008] Optionally, updating the terminal's information to be updated according to the terminal's corresponding information update cycle can specifically include: determining a timing mechanism, and then updating the terminal's information to be updated based on the timing mechanism and the terminal's corresponding information update cycle.

[0009] Among them, the timing mechanism refers to the method used to measure the passage of time.

[0010] Optionally, the server is equipped with a shift register, and the timing mechanism includes a shift register timing mechanism. Based on this, the above-mentioned information to be updated on the terminal is updated according to the information update cycle corresponding to the terminal based on the timing mechanism. Specifically, it may include: determining the first shift duration of the shift register, then determining the target number of shifts based on the information update cycle and the first shift duration, and finally running the shift register based on the first shift duration, and updating the information to be updated on the terminal when the number of data sequence shifts in the shift register is a multiple of the target number of shifts.

[0011] The first shift duration refers to the time required for the data sequence in the shift register to move one position.

[0012] Optionally, the server is equipped with a shift register, and the timing mechanism includes a shift register timing mechanism. Based on this, the above-mentioned information to be updated on the terminal is updated according to the information update cycle corresponding to the terminal based on the timing mechanism. Specifically, it may also include: determining the cycle period of the shift register, then determining the second shift duration of the shift register based on the information update cycle and the cycle period, and finally running the shift register based on the cycle period and the second shift duration, and updating the information to be updated on the terminal after detecting that the shift register has entered a new cycle period.

[0013] The cycle period refers to the number of shifts that occur in the data sequence of the shift register within one cycle of the shift register's operation.

[0014] Optionally, the information to be updated for each terminal includes the user identifier, encryption key, and decryption key. In addition, the above method may also include sending a new user identifier and a new decryption key to the terminal.

[0015] The new user identifier is the updated user identifier, and the new decryption key is the updated decryption key.

[0016] Optionally, the above method may further include: receiving a target request carrying a new user identifier sent by a terminal, encrypting the new user identifier with a new encryption key to obtain encrypted data, then sending the encrypted data to the terminal so that the terminal can decrypt the encrypted data with a new decryption key to obtain decrypted data, finally receiving the decrypted data sent by the terminal, verifying the decrypted data, and responding to the target request if the verification is successful.

[0017] Optionally, after encrypting the new user identifier with the new encryption key to obtain encrypted data, the above method may further include: sending encrypted data to the terminal so that the terminal can decrypt the encrypted data with the new decryption key to obtain decrypted data, and signing the decrypted data with the new decryption key to obtain signed data, then receiving the signed data and decrypted data sent by the terminal, verifying the signed data and decrypted data with the new encryption key, and responding to the target request if the verification is successful.

[0018] Secondly, this application provides an information updating device, comprising:

[0019] The acquisition unit is used to acquire the information update cycle corresponding to each terminal.

[0020] The update unit is used to update the information to be updated for each terminal according to the information update cycle corresponding to the terminal.

[0021] Optionally, the update unit is also used to update the terminal's information to be updated based on a timing mechanism and according to the terminal's corresponding information update cycle.

[0022] Optionally, the update unit is also used to run the shift register based on the first shift duration, and update the terminal's information to be updated when the number of shifts in the data sequence in the shift register is a multiple of the target shift number.

[0023] Optionally, the update unit is also used to run the shift register based on the cycle period and the second shift duration, and to update the terminal's information to be updated after detecting that the shift register has entered a new cycle period.

[0024] Thirdly, this application provides an information updating apparatus, which includes a processor and a communication interface. The communication interface is coupled to the processor, which is used to run computer programs or instructions to implement the information updating method as described in any one of the first aspects and any possible implementations of the first aspect.

[0025] Fourthly, this application provides a computer-readable storage medium storing instructions that, when executed on a terminal, cause the terminal to perform an information update method as described in any one of the first aspects and any possible implementations of the first aspect.

[0026] Fifthly, this application provides a computer program product comprising computer instructions that, when executed on a computer, cause the computer to perform an information updating method as described in any one of the first aspects and any possible implementation thereof.

[0027] It is understood that the beneficial effects that can be achieved by the second to fifth aspects provided above can be referred to the beneficial effects in any possible design of the information updating method as described in any one of the first aspects and any possible implementation of the first aspect, which will not be repeated here. Attached Figure Description

[0028] Figure 1 An architecture diagram of a cloud service system provided in this application embodiment;

[0029] Figure 2 An architecture diagram of an information update system provided in this application embodiment;

[0030] Figure 3 A flowchart illustrating an information updating method provided in an embodiment of this application;

[0031] Figure 4 A structural diagram of a shift register provided in an embodiment of this application;

[0032] Figure 5 Interaction flow of an information verification method provided in this application embodiment Figure 1 ;

[0033] Figure 6 Interaction flow of an information verification method provided in this application embodiment Figure 2 ;

[0034] Figure 7 Interaction flow of an information verification method provided in this application embodiment Figure 3 ;

[0035] Figure 8 This is a schematic diagram of the structure of an information updating device provided in an embodiment of this application;

[0036] Figure 9 This is a schematic diagram of another information updating device provided in an embodiment of this application. Detailed Implementation

[0037] The following description, in conjunction with the accompanying drawings, details an information updating method, apparatus, storage medium, and program product provided in the embodiments of this application.

[0038] In this article, the term "and / or" is merely a description of the relationship between related objects, indicating that there can be three relationships. For example, A and / or B can represent three situations: A exists alone, A and B exist simultaneously, and B exists alone.

[0039] The terms "first" and "second," etc., used in the specification and drawings of this application are used to distinguish different objects or to distinguish different treatments of the same object, rather than to describe a specific order of objects.

[0040] Furthermore, the terms "comprising" and "having," and any variations thereof, used in the description of this application are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the steps or units listed, but may optionally include other steps or units not listed, or may optionally include other steps or units inherent to such process, method, product, or apparatus.

[0041] It should be noted that in the embodiments of this application, the words "exemplary" or "for example" are used to indicate examples, illustrations, or explanations. Any embodiment or design scheme described as "exemplary" or "for example" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or design schemes. Specifically, the use of the words "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0042] With the rapid development of information technology, cloud computing has become a core driving force for digital transformation. Cloud computing, through virtualization technology, encapsulates computing, storage, and network resources into services, providing them to cloud service providers (CSCs) for on-demand use. In recent years, the cloud computing market has experienced explosive growth, giving rise to numerous cloud service providers (CSPs). These CSPs can provide CSCs with cloud services in multiple areas, including elastic computing, database services, big data processing, and security services, effectively meeting the diverse needs of CSCs in different business scenarios.

[0043] To fully leverage the advantages of these CSPs, CSN was developed. CSN is a platform capable of connecting to multiple CSPs, allowing CSPs to flexibly select suitable cloud services based on their business needs. This not only improves resource utilization but also avoids the risk of vendor lock-in. For example, Figure 1 The diagram illustrates the architecture of a cloud service system, where the CSN can combine, manage, monitor, and configure cloud services provided by different CSPs to meet the business needs of the CSC.

[0044] In a multi-cloud environment, CSNs can leverage key mechanisms to authenticate CSCs, thereby ensuring the security of cloud service systems. However, existing key mechanisms primarily use fixed keys for encryption and decryption to authenticate CSCs. While this simplifies key management to some extent, it presents significant security vulnerabilities. Long-term use of the same key is prone to security breaches; once the key is leaked or stolen, the cloud service system becomes vulnerable to malicious attacks, failing to guarantee the security of the cloud service system and failing to meet the security requirements of CSCs.

[0045] Furthermore, when CSN integrates multiple CSPs, the independence and inconsistency of each CSP's identity authentication system increases the complexity of key updates. When CSC switches between different CSPs, it often needs to repeat registration, login, and verification operations in different identity authentication systems. This process not only reduces the CSC's experience but also increases the difficulty of key management and updates.

[0046] To address the aforementioned technical problems, this application provides an information update method. The server can obtain the information update cycle corresponding to each terminal, and then update the information to be updated for each terminal according to that cycle. This method allows for the periodic updating of terminal information, reducing the risk of terminal information theft, thereby meeting the security needs of different users and ensuring the security of the cloud service system.

[0047] Figure 2 An architecture diagram of an information update system provided in this application embodiment is shown below. Figure 2 As shown, the system framework includes: terminal 201 and server 202.

[0048] The terminal 201 may be a device that provides voice and / or data connectivity to a user, a device with wireless connectivity, or other devices connected to a wireless modem. The terminal device may be at least one of a desktop computer, laptop, wireless terminal, or laptop computer. In one embodiment, the electronic device has communication capabilities and can access a wired or wireless network.

[0049] This application embodiment does not limit the number of terminals 201 in the system for determining the optimization scheme, and may include a ratio of... Figure 2 More or fewer terminals 201.

[0050] Server 202 can be a high-performance server providing various services on the internet. It can be a standalone physical server, a server cluster consisting of multiple physical servers, or at least one of the following cloud servers providing basic cloud computing services: cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks, and big data or artificial intelligence platforms. This application embodiment does not limit this. Of course, the server can also include other functions to provide more comprehensive and diversified services.

[0051] In this embodiment, terminal 201 can send its corresponding information update cycle to server 202. Accordingly, after receiving the information update cycle corresponding to terminal 201, server 202 can update the information to be updated of terminal 201 according to the information update cycle corresponding to terminal 201.

[0052] Figure 3 This is a flowchart illustrating an information update method provided in an embodiment of this application, as shown below. Figure 3 As shown, the method is composed of Figure 2 The server shown executes a method that includes:

[0053] S301, obtain the information update cycle corresponding to each terminal.

[0054] S302 updates the information to be updated for each terminal according to the terminal's corresponding information update cycle.

[0055] This application does not specifically limit the information to be updated in the embodiments. For example, the information to be updated for each terminal may include at least one of the following: the encryption key, decryption key, or user identifier corresponding to the terminal.

[0056] Specifically, for each terminal, after receiving the information update cycle input by the user, the terminal can send the information update cycle to the server. After receiving the information update cycles corresponding to each terminal, the server can update the information to be updated for each terminal according to the information update cycle corresponding to that terminal, and obtain the updated information.

[0057] Based on the above technical solution, the server can periodically update the information to be updated for each terminal according to the information update cycle corresponding to each terminal. This can not only meet the security needs of different users, but also reduce the risk of information theft.

[0058] In one optional implementation, updating the terminal's information to be updated according to the terminal's corresponding information update cycle may specifically include: determining a timing mechanism, and then updating the terminal's information to be updated according to the terminal's corresponding information update cycle based on the timing mechanism.

[0059] Among them, the timing mechanism refers to the method used to measure the passage of time.

[0060] This application does not limit the type of timing mechanism. The timing mechanism may include, but is not limited to: clock timing mechanism, shift register timing mechanism, and software timing mechanism.

[0061] The following explanation uses a shift register timing mechanism as an example.

[0062] In one optional implementation, a shift register may be deployed in the server. Accordingly, the timing mechanism described above may include a shift register timing mechanism. Based on this, the above-described updating of the terminal's information to be updated according to the terminal's corresponding information update cycle based on the timing mechanism may include the following two methods.

[0063] The first method: The server can determine the first shift duration of the shift register, then determine the target number of shifts based on the information update cycle and the first shift duration, and finally run the shift register based on the first shift duration. If the number of data sequence shifts in the shift register is N times the target number of shifts, the server can update the information to be updated on the terminal.

[0064] Where N is an integer greater than 0.

[0065] The first shift duration refers to the time required for the data sequence in the shift register to move one position.

[0066] This application does not limit the value of the first shift duration in its embodiments. For example, the first shift duration can be 1 second, 10 seconds, or 20 seconds. Assume the initial data sequence in the shift register is 101, and the first shift duration is 1 second. Based on this, the initial data sequence 101 can shift one position to the right every second. For example, after the initial data sequence 101 shifts one position to the right in the first second, the data sequence becomes 010, and after shifting one position to the right in the second second, the data sequence becomes 001.

[0067] Specifically, when the timing mechanism is a shift register timing mechanism, the server can determine a first shift duration that is less than or equal to the information update period. Then, the server can use the ratio between the information update period and the first shift duration as the target shift number. After determining the first shift duration and the target shift number, the server can trigger a run operation on the shift register, causing the data sequence in the shift register to shift bit by bit according to the first shift duration. During the shift register operation, the server can use a built-in counter to record the number of data sequence shifts in the shift register, and update the terminal's information to be updated when the number of data sequence shifts recorded by the counter is N times the target shift number.

[0068] For example, assume the initial value of the server's built-in counter is 0. The information update cycle for the terminal is 20 seconds. Accordingly, the server can use a value less than or equal to the information update cycle (20 seconds) as the first shift duration (e.g., 5 seconds). Then, the server can determine the target number of shifts as 4 based on the ratio between the information update cycle (20 seconds) and the first shift duration (5 seconds). On this basis, the server's built-in counter increments by 1 each time the data sequence in the shift register moves to the right according to the first shift duration. When the counter value is a multiple of the target number of shifts (4) (e.g., 4, 8, or 12), the server can update the terminal's information to be updated.

[0069] The second method: The server can determine the cycle period of the shift register, then determine the second shift duration of the shift register based on the information update cycle and the cycle period, and finally run the shift register based on the cycle period and the second shift duration. After detecting that the shift register has entered a new cycle period, the server updates the information to be updated on the terminal.

[0070] The cycle period refers to the number of shifts that occur in the data sequence of the shift register within one cycle of the shift register's operation.

[0071] Specifically, when the timing mechanism is a shift register timing mechanism, the server can randomly set the number of stages in the shift register and determine the cycle period of the shift register based on the number of stages. Furthermore, the server can also determine the initial data sequence (also called the initial state) of the shift register based on the number of stages. Then, the server can use the ratio between the information update cycle and the cycle period of the shift register as the second shift duration of the shift register. Based on the above, the server can trigger a running operation on the shift register, causing the data sequence in the shift register to move bit by bit according to the second shift duration. During the operation of the shift register, when the server detects that the data sequence in the shift register is consistent with the initial data sequence (i.e., the shift register enters a new cycle), it updates the information to be updated on the terminal.

[0072] This application does not limit the number of stages of the shift register. For example, the number of stages of the shift register can be 2, 3, or 4.

[0073] When the number of stages in the shift register is n, the cycle period of the shift register is 2. n .

[0074] For example, the longest linear feedback shift register (hereinafter referred to as the shift register) is used. Figure 4 The diagram shows the structure of the shift register, a0a2…a n-2 a n-1 This constitutes the data sequence in the shift register.

[0075] Assume the initial data sequence in the shift register is a0a2…a n-2 a n-1 c0 = c1 = 1. After the data sequence in the shift register is shifted once (i.e., output a0), the data sequence in the shift register becomes a1a2…a n-1 a n a n The expression can be found in Formula 1 below.

[0076]

[0077] in, This is the XOR operator. n-i This represents the data in the shift register, a n-i The value can be 0 or 1. i Represents the feedback coefficient, when c i When c is 0, it indicates a feedback connection (i.e., participation in feedback); when c... i When the value is 1, it indicates that the feedback line is disconnected (i.e., it does not participate in the feedback).

[0078] Based on the above, assuming the shift register has 2 stages, the server can determine that the shift register's cycle period is 4. Furthermore, the server also determines that the initial data sequence in the shift register is 10, and the feedback coefficients c0 = c1 = 1, c2 = 0.

[0079] Based on the above, the server can trigger the operation of the shift register, so that the initial data sequence in the shift register can be shifted to the right sequentially according to the second shift duration. During the operation of the shift register, the data sequence in the shift register changes from 10 to 11, 01, and 10 sequentially. When the server detects that the data sequence in the shift register is 10, it can update the terminal's information to be updated.

[0080] Based on the above scheme, the server can dynamically adjust the shift duration and / or cycle period of the shift register according to the needs of different users, so as to update the information to be updated on the terminal. This not only meets the needs of users, but also improves the flexibility of information updates.

[0081] In some embodiments, the information to be updated for each terminal includes a user identifier, an encryption key, and a decryption key. Accordingly, after updating the user identifier, encryption key, and decryption key of the terminal according to the information update cycle corresponding to the terminal, the server can send the new user identifier and new decryption key to the terminal and store the new user identifier, new decryption key, and new encryption key of the terminal accordingly.

[0082] The new user identifier is the updated user identifier, and the new decryption key is the updated decryption key.

[0083] For example, Table 1 shows the new user ID, new decryption key, and new encryption key for each terminal stored internally on the server.

[0084] Table 1. New user ID, new decryption key, and new encryption key for each terminal.

[0085] Terminal 2 User ID 2 Decryption key 2 Encryption key 2 ¨¨ ¨¨ ¨¨ ¨¨ Terminal n User ID n Decryption key n Encryption key n

[0086] In some embodiments, taking the terminal as CSC and the server as CSN as an example, after the terminal receives the new user identifier and new decryption key sent by the server, as follows: Figure 5 As shown, the above method may include:

[0087] S501, CSC sends a target request carrying the new user identifier N to CSN.

[0088] S502, CSN uses the new encryption key corresponding to the new user identifier N to encrypt the new user identifier N, and obtains the encrypted data SN.

[0089] S503, CSN sends encrypted data SN to CSC.

[0090] S504, CSC decrypts the encrypted data SN using the new decryption key to obtain the decrypted data N'.

[0091] S505, CSC sends decrypted data N' to CSN.

[0092] S506, CSN verifies the decrypted data N' and responds to the target request if the verification is successful.

[0093] Specifically, the CSN can compare the new user identifier N and the decrypted data N' to obtain a comparison result, and respond to the target request if the comparison result indicates that the new user identifier N and the decrypted data N' are consistent.

[0094] In some embodiments, such as Figure 6 As shown, S504-S506 above can also be implemented as follows:

[0095] S601, CSC decrypts the encrypted data SN using the new decryption key to obtain decrypted data N', and signs the decrypted data N' using the decryption key to obtain signed data GN'.

[0096] S602, CSC sends decryption data N' and signature data GN' to CSN.

[0097] S603, CSN verifies the signature data GN' and decrypted data N' using the new encryption key, and responds to the target request if the verification is successful.

[0098] Specifically, the CSC can decrypt the encrypted data SN using the new decryption key to obtain decrypted data N'. Then, the CSC can determine the data digest H(N') of the decrypted data N' using a hash algorithm, and sign the data digest H(N') using the decryption key to obtain signed data GN', and send the decrypted data N' and signed data GN' to the CSN. Correspondingly, after receiving the decrypted data N' and signed data GN', the CSN can decrypt the signed data GN' using the encryption key to obtain data digest H'(N'). The CSN can also determine the data digest H(N') of the decrypted data N' using the same hash algorithm. Then, the CSN can compare the data digest H'(N') with the original data digest H(N'). If the data digest H'(N') matches, the CSN can respond to the target request.

[0099] In some embodiments, where the new user identifier of the first CSC is obtained by the second CSC, such as Figure 7 As shown, the above method may further include:

[0100] S701, the second CSC obtains the new user identifier N from the first CSC.

[0101] S702, the second CSC sends a target request carrying the new user identifier N to the CSN.

[0102] S703, CSN uses the new encryption key corresponding to the new user identifier N to encrypt the new user identifier N, and obtains the encrypted data SN.

[0103] S704, CSN sends encrypted data SN to the second CSC.

[0104] S705, the second CSC decrypts the encrypted data SN using the second decryption key to obtain the decrypted data N.

[0105] S706, the second CSC sends decrypted data N to CSN.

[0106] S707, CSN verifies the decrypted data N” and obtains the verification result.

[0107] S708, if the verification result indicates that the verification fails, the CSN sends an error message to the second CSC.

[0108] Specifically, the CSN can compare the new user identifier N and the decrypted data N” to obtain a comparison result. Then, if the comparison result indicates that the new user identifier N and the decrypted data N” are inconsistent, the CSN sends an error message to the second CSC.

[0109] In the above scheme, the server can verify the legitimacy of the terminal through processes such as encryption, decryption, signing, and signature verification. If the verification is successful, the server can respond to the terminal's target request and allow the user to access the cloud service system, thus effectively ensuring and improving the security of cloud service system interactions.

[0110] In some embodiments, the target request may include the terminal's service resource requirements, and the server stores the permissions of each terminal for each service resource. Based on this, the server verifies the decrypted data and / or signed data, and after successful verification, it can also query the stored permissions of the terminal for each service resource to determine if the terminal has the necessary permissions. If permissions are granted, the server can respond to the terminal's target request; otherwise, the server can send a denial-of-service message to the terminal.

[0111] This application does not limit the type of service resource in its embodiments. For example, a service resource can be a computing resource, a storage resource, or a network resource.

[0112] For example, as shown in Table 2, the access control list stores the permissions of each terminal for the service resources provided by the second server (such as CSP). For instance, terminal 1 has permission to use service resource 1 provided by CSP1, while terminal 2 does not have permission to use service resource 1 provided by CSP1.

[0113] Table 2 Access Control List

[0114] Terminal 1 Service Resource 1 Service Resource 2 ¨¨ Service Resources m Terminal 2 x Service Resource 2 ¨¨ ¨¨ ¨¨ ¨¨ ¨¨ ¨¨ ¨¨ Terminal n Service Resource 1 Service Resource 2 ¨¨ x

[0115] Figure 8 This is a schematic diagram of the structure of an information updating device provided in an embodiment of this application, as shown below. Figure 8 As shown, the device includes:

[0116] The acquisition unit 801 is used to acquire the information update cycle corresponding to each terminal.

[0117] The update unit 802 is used to update the information to be updated of each terminal according to the information update cycle corresponding to the terminal.

[0118] Optionally, the update unit 802 is also used to update the terminal's information to be updated based on a timing mechanism and according to the terminal's corresponding information update cycle.

[0119] Optionally, the update unit 802 is further configured to run the shift register based on the first shift duration, and update the terminal's information to be updated when the number of shifts in the data sequence in the shift register is a multiple of the target shift number.

[0120] Optionally, the update unit 802 is also used to run the shift register based on the cycle period and the second shift duration, and update the terminal's information to be updated after detecting that the shift register has entered a new cycle period.

[0121] Figure 9 A schematic diagram of another possible structure of the information updating device involved in the above embodiments is shown. The information updating device includes a processor 901 and a communication interface 902. The processor 901 is used to control and manage the operation of the information updating device, and the communication interface 902 is used to support communication between the information updating device and other network entities. The information updating device may also include a memory 903 and a bus 904, the memory 903 being used to store the program code and data of the information updating device.

[0122] The memory 903 may be a memory in an information updating device, and the memory may include volatile memory, such as random access memory; the memory may also include non-volatile memory, such as read-only memory, flash memory, hard disk or solid-state drive; the memory may also include a combination of the above types of memory.

[0123] The processor 901 described above can implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. The processor can be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It can implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. The processor can also be a combination that implements computing functions, such as including one or more microprocessor combinations, a combination of a DSP and a microprocessor, etc.

[0124] The 904 bus can be an extended industry standard architecture (EISA) bus, etc. The 904 bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 9 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0125] Through the above description of the embodiments, those skilled in the art will clearly understand that, for the sake of convenience and brevity, only the division of the above functional modules is used as an example. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above. The specific working process of the system, device, and unit described above can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0126] This application provides a computer program product containing instructions that, when run on a computer, cause the computer to execute the information update method described in the above method embodiments.

[0127] This application also provides a computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the information update method in the method flow shown in the above method embodiments.

[0128] The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples (a non-exhaustive list) of computer-readable storage media include: electrical connections having one or more wires; portable computer disks; hard disks; random access memory (RAM); read-only memory (ROM); erasable programmable read-only memory (EPROM); registers; hard disks; optical fibers; compact disc read-only memory (CD-ROM); optical storage devices; magnetic storage devices; or any suitable combination thereof; or any other form of computer-readable storage medium known in the art. An exemplary storage medium is coupled to a processor, enabling the processor to read information from and write information to the storage medium. Of course, the storage medium may also be a component of the processor. The processor and the storage medium may reside in an application-specific integrated circuit (ASIC). In the embodiments of this application, the computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0129] Embodiments of the present invention provide a computer program product containing instructions that, when executed on a computer, cause the computer to perform the information update method described in the embodiments of this application.

[0130] Since the information updating device, computer-readable storage medium, and computer program product in the embodiments of the present invention can be applied to the above method, the technical effects obtained can also be referred to the above method embodiments, and the embodiments of the present invention will not be repeated here.

[0131] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or units may be electrical, mechanical, or other forms.

[0132] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0133] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0134] The above are merely specific embodiments of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. An information updating method, characterized in that, The method is applied to a server, which is equipped with a shift register; the timing mechanism includes a shift register timing mechanism; the server is a multi-cloud manager (CSN) used to connect to multiple terminals, and the terminals are cloud computing consumers (CSCs); the method includes: The system receives update cycle configuration information reported by each of the multiple CSCs, which indicates the security requirements of the CSC itself, and stores it as an information update cycle specific to each CSC. For each of the terminals, a timing mechanism is determined; the timing mechanism refers to a method for measuring the passage of time. Based on the timing mechanism, the information to be updated of the terminal is updated according to the information update cycle corresponding to the terminal; The step of updating the information to be updated of the terminal according to the information update cycle corresponding to the terminal based on the timing mechanism includes: Determine the cycle period and the first shift duration of the shift register; the cycle period refers to the number of shifts that the data sequence in the shift register undergoes within one cycle of the shift register's operation; the first shift duration refers to the time required for the data sequence in the shift register to move one position. Based on the information update cycle and the loop cycle, the second shift duration of the shift register is determined; Based on the information update cycle and the first shift duration, the target number of shifts is determined; The shift register is executed based on the first shift duration, the loop period, and the second shift duration; The terminal's information to be updated is updated when the number of data sequence shifts in the shift register is a multiple of the target number of shifts, or when the shift register is detected to enter a new cycle.

2. The method according to claim 1, characterized in that, The information to be updated for each terminal includes the user identifier, encryption key, and decryption key; After updating the information to be updated of the terminal according to the information update cycle corresponding to the terminal, the method further includes: Send a new user identifier and a new decryption key to the terminal; the new user identifier is the updated user identifier; the new decryption key is the updated decryption key.

3. The method according to claim 2, characterized in that, The method further includes: Receive a target request carrying a new user identifier sent by the terminal; The new user identifier is encrypted using the new encryption key to obtain encrypted data; The encrypted data is sent to the terminal so that the terminal can decrypt the encrypted data using the new decryption key to obtain decrypted data; The system receives the decrypted data sent by the terminal, verifies the decrypted data, and responds to the target request if the verification is successful.

4. The method according to claim 3, characterized in that, After encrypting the new user identifier with the new encryption key to obtain encrypted data, the method further includes: The encrypted data is sent to the terminal so that the terminal can decrypt the encrypted data using the new decryption key to obtain the decrypted data, and then sign the decrypted data using the new decryption key to obtain signed data; The system receives the signature data and decryption data sent by the terminal, verifies the signature data and decryption data using the new encryption key, and responds to the target request if the verification is successful.

5. An information updating device, characterized in that, The device is applied to a server, which is equipped with a shift register; the timing mechanism includes a shift register timing mechanism; the server is a multi-cloud manager (CSN) used to connect to multiple terminals, which are cloud computing consumers (CSCs); the device includes: The acquisition unit is used to receive update cycle configuration information reported by each of the plurality of CSCs, which indicates the security requirements of the CSC itself, and store it as an information update cycle exclusive to each CSC. An update unit is configured to: determine a timing mechanism for each terminal; the timing mechanism being a method for measuring the passage of time; determine the cycle period and a first shift duration of the shift register; the cycle period being the number of shifts the data sequence in the shift register undergoes within one cycle of the shift register's operation; the first shift duration being the time required for the data sequence in the shift register to move one position; determine a second shift duration of the shift register based on the information update period and the cycle period; determine a target number of shifts based on the information update period and the first shift duration; run the shift register based on the first shift duration, the cycle period, and the second shift duration; and update the terminal's information to be updated after the number of shifts of the data sequence in the shift register is a multiple of the target number of shifts, or after detecting that the shift register has entered a new cycle period.

6. An information updating device, characterized in that, include: A processor and a communication interface; the communication interface is coupled to the processor, the processor being used to run computer programs or instructions to implement the information update method as described in any one of claims 1-4.

7. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores instructions that, when executed by a computer, perform the information update method as described in any one of claims 1-4.

8. A computer program product, characterized in that, The computer program product includes computer instructions that, when executed on a computer, cause the computer to perform the information update method as described in any one of claims 1-4.

Images