A method and device for data transmission of a storage device

Abstract

The present application discloses a data transmission method and device for a storage device, and relates to the field of data storage. The method is executed by a terminal device, and the method includes: obtaining a data transmission instruction, obtaining target data corresponding to the identifier of the data to be uploaded from a mobile storage device by setting an application; obtaining an encryption policy corresponding to the target data, and doubly encrypting the target data according to the encryption policy to obtain the data to be uploaded, and the encryption policy includes a key value and a secret key; uploading the data to be uploaded to the target server through a set network, and generating an upload report after the upload is successful, so that the management personnel can manage the data to be uploaded according to the upload report. In the present application, the target data is doubly encrypted according to the encryption policy and then uploaded to the target server, that is, the data is encrypted twice during the data transmission process, which effectively ensures the security of the mobile storage data during the upload process and meets the user's needs for secure data transmission in different scenarios.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of data storage, and more particularly to a data transmission method and apparatus for a storage device. Background Art

[0002] With the widespread popularity of smart phones and the extensive use of mobile storage devices (such as USB flash drives, mobile hard drives, etc.), people often need to transfer data between different devices in their daily work, study and life to facilitate access to data at any time.

[0003] However, in the process of data transmission, existing technologies usually transmit data directly between different devices, which makes it easy for data to be stolen, tampered with or maliciously used, leading to serious consequences such as personal privacy leakage and damage to commercial secrets. Especially when uploading data through public networks or untrusted network environments, the security of data will face huge challenges. Summary of the invention

[0004] The purpose of this application is to solve at least one of the above-mentioned technical deficiencies.

[0005] On the one hand, an embodiment of the present application provides a data transmission method of a storage device, the method is executed by a terminal device, and the method includes:

[0006] Obtaining a data transmission instruction, wherein the data transmission instruction includes an identifier of the data to be uploaded;

[0007] Acquire target data corresponding to the identifier of the data to be uploaded from the mobile storage device by setting the application program;

[0008] Obtain the encryption strategy corresponding to the target data, and double-encrypt the target data according to the encryption strategy to obtain the data to be uploaded. The encryption strategy includes a key value and a secret key.

[0009] The data to be uploaded is uploaded to the target server through the set network, and an upload report is generated after the upload is successful, so that the administrator can manage the data to be uploaded according to the upload report.

[0010] Optionally, the target data is double encrypted according to the encryption policy to obtain the data to be uploaded, including:

[0011] Double encrypt the target data according to the key value and the secret key to obtain the initial data to be uploaded;

[0012] Calculate the hash value of the target data to obtain the hash value corresponding to the target data;

[0013] The hash values ​​corresponding to the initial data to be uploaded and the target data are used as the data to be uploaded.

[0014] Optionally, the target data is doubly encrypted according to the key value and the secret key to obtain the initial data to be uploaded, including:

[0015] Based on the key value, the target data is encrypted by using the RSA algorithm to obtain the first data to be uploaded;

[0016] Based on the secret key, the first data to be uploaded is encrypted by using the AES algorithm to obtain the second data to be uploaded;

[0017] The second data to be uploaded and the secret key are used as the initial data to be uploaded.

[0018] Optionally, after uploading the data to be uploaded to the target server through the set network, the method further includes:

[0019] receiving a data re-upload instruction, where the data re-upload instruction includes an identifier of the re-uploaded data;

[0020] Acquire the corresponding first data and the encryption policy corresponding to the first data according to the identifier of the re-uploaded data;

[0021] The first data is doubly encrypted according to the encryption policy corresponding to the first data, and the encrypted first data is uploaded to the target server through a set network.

[0022] Optionally, the target server to re-upload data is determined by:

[0023] The target server decrypts the received data using a double decryption function to obtain decrypted data, where the decrypted data includes the first hash value and the uploaded data;

[0024] The target server calculates a hash value based on the uploaded data to obtain a second hash value;

[0025] Compare the first hash value and the second hash value, if the first hash value and the second hash value are different, treat the uploaded data as re-uploaded data, and send a data re-upload instruction including an identifier of the uploaded data to the terminal device;

[0026] If the first hash value and the second hash value are the same, the uploaded specific data will not be regarded as re-uploaded data.

[0027] Optionally, before obtaining the data transmission instruction, the following is also included:

[0028] Establish a connection with the mobile storage device through the setting interface;

[0029] Automatically detect and identify mobile storage devices, and obtain a list of data files stored in the mobile storage devices;

[0030] The target data corresponding to the identifier of the data to be uploaded is obtained from the mobile storage device by setting the application program, including:

[0031] The target data corresponding to the identifier of the data to be uploaded is obtained from the data file list by setting the application.

[0032] Optionally, the upload report includes at least one of the upload time of the data to be uploaded, the number of files of the data to be uploaded, and the upload flow of the data to be uploaded;

[0033] After the upload report is generated after a successful upload, it also includes:

[0034] The upload report is sent to a target path, which includes at least one of a user-specified mailbox, a storage module of a terminal device, and a specified message notification platform.

[0035] Optionally, after uploading the data to be uploaded to the target server through the set network, the method further includes:

[0036] Obtain the data policy corresponding to the data to be uploaded, where the data policy includes a retention data policy or a deletion data policy;

[0037] If the data policy corresponding to the data to be uploaded is a reserved data policy, the data to be uploaded is stored in the storage module;

[0038] If the data policy corresponding to the data to be uploaded is a data deletion policy, the data to be uploaded is overwritten by overwriting random data.

[0039] Optionally, obtain the encryption policy corresponding to the target data, including:

[0040] Obtaining the target data file type corresponding to the target data, and the mapping relationship between the data file type and the encryption strategy;

[0041] Determine the encryption strategy corresponding to the target data file type according to the mapping relationship;

[0042] The encryption policy corresponding to the target data file type is used as the encryption policy corresponding to the target data.

[0043] On the other hand, an embodiment of the present application provides a data transmission device of a storage device, including:

[0044] An instruction acquisition module is used to acquire a data transmission instruction, wherein the data transmission instruction includes an identifier of the data to be uploaded;

[0045] A data acquisition module, used to acquire target data corresponding to the identifier of the data to be uploaded from a mobile storage device by setting an application program;

[0046] The data encryption module is used to obtain the encryption strategy corresponding to the target data, and double encrypt the target data according to the encryption strategy to obtain the data to be uploaded. The encryption strategy includes a key value and a secret key;

[0047] The data transmission module is used to upload the data to be uploaded to the target server through the set network, and generate an upload report after the upload is successful, so that the management personnel can manage the data to be uploaded according to the upload report.

[0048] On the other hand, an embodiment of the present application provides an electronic device, including a processor and a memory:

[0049] The memory is configured to store machine-readable instructions, which, when executed by the processor, cause the processor to perform any one of the data transmission methods of a storage device.

[0050] The beneficial effects brought by the technical solution provided in the embodiments of the present application include at least:

[0051] In the embodiment of the present application, when the mobile storage device transmits data to the target server, it is no longer just to transmit the data, but to obtain the encryption policy corresponding to the target data, and then double encrypt the target data according to the encryption policy before uploading it to the target server through the set network. In this process, the data is encrypted twice, which effectively guarantees the security of the mobile storage data during the upload process, prevents the data from being stolen, tampered or leaked, and meets the user's needs for secure data transmission in different scenarios.

[0052] In an embodiment of the present application, by setting a mapping relationship between data file types and encryption policies, and then based on the mapping relationship, using the encryption policy corresponding to the file type of the target data as the encryption policy corresponding to the target data, compared to setting a corresponding encryption policy for each type of data, the amount of data processing can be effectively reduced and the data processing efficiency can be improved.

[0053] In the embodiment of the present application, after uploading the data to be uploaded to the target server, an upload report can be generated and sent to the target path, so that the management personnel can better monitor the progress of data upload in real time. And when the upload status of the data is to be known later, the upload report can be directly obtained from the target path, and then the data to be uploaded can be managed based on the upload report.

[0054] In an embodiment of the present application, after receiving the data, the target server uses a double decryption function to decrypt the received data, and performs a hash value verification comparison on the decrypted data again. If the hash value verification comparison is unsuccessful, it means that the received data is inaccurate or incomplete. At this time, the terminal device will retransmit the data, ensuring the accuracy and integrity of the data, and further improving the security of data transmission.

[0055] In an embodiment of the present application, after the data to be uploaded is uploaded to the target server through a set network, the data to be uploaded can be selected to be stored in a storage module. If the data needs to be obtained again, it can be directly obtained from the storage module without having to read it from a mobile storage device again, thereby improving the storage efficiency of the data. At the same time, after the data to be uploaded is uploaded to the target server through a set network, the data to be uploaded can be overwritten by writing random data, thereby freeing up storage space of the terminal device, ensuring that deleted data cannot be recovered, and reducing the risk of data leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0057] Figure 1 A schematic diagram of a data transmission method of a storage device provided in an embodiment of the present application;

[0058] Figure 2 A schematic diagram of a code for double encryption of target data provided in an embodiment of the present application;

[0059] Figure 3 A schematic diagram of a code for decrypting received data provided in an embodiment of the present application;

[0060] Figure 4 A schematic diagram of a code for implementing comparison verification provided in an embodiment of the present application;

[0061] Figure 5 A system architecture diagram of a data transmission method applicable to a storage device provided in an embodiment of the present application;

[0062] Figure 6 A schematic diagram of the structure of a data transmission device of a storage device provided in an embodiment of the present application;

[0063] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0064] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and cannot be interpreted as limiting the present invention.

[0065] It will be understood by those skilled in the art that, unless expressly stated, the singular forms "one", "said", and "the" used herein may also include plural forms. It should be further understood that the term "comprising" used in the specification of the present application refers to the presence of the features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof. It should be understood that when we refer to an element as being "connected" or "coupled" to another element, it may be directly connected or coupled to the other element, or there may be an intermediate element. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The term "and / or" used herein includes all or any unit and all combinations of one or more associated listed items.

[0066] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below with reference to the accompanying drawings.

[0067] With the widespread popularity of smart phones and the extensive use of mobile storage devices (such as USB flash drives, mobile hard drives, etc.), people often need to transfer data between different devices in their daily work, study and life. However, during the data transmission process, especially when uploading data through public networks or untrusted network environments, data security faces huge challenges. Traditional data uploading methods often lack effective encryption methods, making data easy to be stolen, tampered with or maliciously used, resulting in serious consequences such as personal privacy leakage and damage to commercial secrets.

[0068] Based on this, the present application provides a data transmission method for a storage device, aiming to solve the above technical problems in the prior art.

[0069] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0070] Specifically, Figure 1 As shown, the method is executed by a terminal device, and the method may include:

[0071] Step S101: obtaining a data transmission instruction, wherein the data transmission instruction includes an identifier of data to be uploaded.

[0072] Optionally, the data to be uploaded refers to the data that needs to be uploaded to the server, the data to be uploaded identifier is used to identify the data, and the data transmission instruction refers to the instruction used to inform the terminal device that data needs to be transmitted. The data transmission instruction includes the data to be uploaded identifier. Therefore, when the terminal device receives the data transmission instruction, it can know which specific data needs to be uploaded to the server based on the data to be uploaded identifier included therein.

[0073] The specific form of the identifier of the data to be uploaded can be set according to actual needs, and the embodiment of the present application does not limit this. For example, different Arabic numerals can be used to identify different data, and different English letter combinations can be used to identify different data. The data transmission instruction can be triggered by the administrator through the display screen of the terminal device, or a fixed time node can be set to automatically trigger the data transmission instruction, etc. The embodiment of the present application does not limit the triggering method of the data transmission instruction.

[0074] Step S102: acquiring target data corresponding to the identifier of the data to be uploaded from the mobile storage device by setting the application program.

[0075] Among them, the specific type of the mobile storage device is not limited in the embodiment of the present application, such as a USB flash drive, a mobile hard disk, etc. Optionally, when the terminal device receives a data transmission instruction, the target data corresponding to the data identifier to be uploaded can be obtained from the mobile storage device through a set application. The set application can be pre-downloaded to the terminal device, or it can be re-downloaded when the data transmission instruction is received. This is not limited in the embodiment of the present application. In actual applications, in order to save memory space of the terminal device, the set application can be uninstalled and deleted after the data transmission, and the application can be re-downloaded when the data transmission is needed again. Among them, the specific type of the application is not limited in the embodiment of the present application. Any application with data acquisition and transmission can be used as the set application. For example, the application can be the ResAssist APP.

[0076] In an optional embodiment of the present application, obtaining an encryption policy corresponding to the target data includes:

[0077] Obtaining the target data file type corresponding to the target data, and the mapping relationship between the data file type and the encryption strategy;

[0078] Determine the encryption strategy corresponding to the target data file type according to the mapping relationship;

[0079] The encryption policy corresponding to the target data file type is used as the encryption policy corresponding to the target data.

[0080] Optionally, in actual applications, each data may be set to correspond to an encryption policy, or each type of data may be set to correspond to an encryption policy, that is, there will be a mapping relationship between the data file type and the encryption policy. At this time, when the encryption policy corresponding to the target data is determined, the mapping relationship between the data file type and the encryption policy may be obtained first, and then the encryption policy corresponding to the file type of the target data may be determined based on the mapping relationship, and then the encryption policy corresponding to the file type of the target data may be used as the encryption policy corresponding to the target data. For example, the encryption policy of the picture type may be set to A, the encryption policy of the text type may be set to B, and the encryption policy of the video type may be set to C. At this time, if a picture is uploaded, the encryption policy A of the picture type may be used as the encryption policy of the picture.

[0081] In an embodiment of the present application, by setting a mapping relationship between data file types and encryption policies, and then based on the mapping relationship, using the encryption policy corresponding to the file type of the target data as the encryption policy corresponding to the target data, compared to setting a corresponding encryption policy for each type of data, the amount of data processing can be effectively reduced and the data processing efficiency can be improved.

[0082] Step S103, obtaining an encryption strategy corresponding to the target data, and doubly encrypting the target data according to the encryption strategy to obtain data to be uploaded, wherein the encryption strategy includes a key value and a secret key.

[0083] Optionally, after knowing the encryption policy corresponding to the target data, the target data may be doubly encrypted based on the encryption policy, that is, the target data may be doubly encrypted using the key value and the secret key to obtain the data to be uploaded.

[0084] In an optional embodiment of the present application, the target data is double encrypted according to the encryption strategy to obtain the data to be uploaded, including:

[0085] Double encrypt the target data according to the key value and the secret key to obtain the initial data to be uploaded;

[0086] Calculate the hash value of the target data to obtain the hash value corresponding to the target data;

[0087] The hash values ​​corresponding to the initial data to be uploaded and the target data are used as the data to be uploaded.

[0088] Optionally, the target data is first doubly encrypted according to the obtained key value and secret key to obtain the initial data to be uploaded, and then a hash value is calculated based on the obtained target data to obtain the corresponding hash value. At this time, the obtained hash value and the initial data to be uploaded can be used together as the data to be uploaded.

[0089] In an optional embodiment of the present application, the target data is doubly encrypted according to the key value and the secret key to obtain the initial data to be uploaded, including:

[0090] Based on the key value, the target data is encrypted by RSA (asymmetric encryption) algorithm to obtain the first data to be uploaded;

[0091] Based on the secret key, the first data to be uploaded is encrypted by an AES (Advanced Encryption Standard) algorithm to obtain the second data to be uploaded;

[0092] The second data to be uploaded and the secret key are used as the initial data to be uploaded.

[0093] Optionally, in an embodiment of the present application, a 16-bit random key value can be obtained through the generateRandomKey method, and the specified key and iv are obtained by concatenating the head and tail, and then the target data is encrypted through the RSA algorithm based on the specified key and iv to obtain the first data to be uploaded. Furthermore, the corresponding secret key can be used to encrypt the first data to be uploaded through the AES algorithm to obtain the second data to be uploaded, and then the second data to be uploaded and the secret key are used together as the initial data to be uploaded. The initial data to be uploaded at this time is doubly encrypted data, and the data will not be easily cracked during subsequent data transmission, the security of the data is improved, and the data is guaranteed not to be damaged. In practical applications, it can be based on Figure 2 The code shown in implements double encryption of target data.

[0094] Step S104, uploading the data to be uploaded to the target server through the set network, and generating an upload report after the upload is successful, so that the administrator can manage the data to be uploaded according to the upload report.

[0095] Optionally, after obtaining the data to be uploaded, the data to be uploaded can be uploaded to a target server by setting a network, and the target server can be a pre-set server or a cloud server, etc., which is not limited in the embodiments of the present application. The set network can be a currently used public network or a pre-defined network, such as a network with a required network speed.

[0096] In an optional embodiment of the present application, the upload report includes at least one of the upload time of the data to be uploaded, the number of files of the data to be uploaded, and the upload flow of the data to be uploaded;

[0097] After the upload report is generated after a successful upload, it also includes:

[0098] The upload report is sent to a target path, which includes at least one of a user-specified mailbox, a storage module of a terminal device, and a specified message notification platform.

[0099] In actual applications, in order to facilitate managers to better monitor the progress of data upload in real time and manage the data later, an upload report can be generated after uploading the data to be uploaded to the target server. Specifically, the upload report may include at least one of the upload time of the data to be uploaded, the number of files of the data to be uploaded, and the upload flow of the data to be uploaded. After the upload report is generated after the upload is successful, the upload report can be sent to the target path. The target path includes at least one of a user-specified mailbox, a storage module of a terminal device, and a specified message notification platform. If the manager wants to know the upload status of the data later, he can obtain the upload report from the target path and then manage the data to be uploaded based on the upload report.

[0100] In an optional embodiment of the present application, the target server determines whether to re-upload the data by:

[0101] The target server decrypts the received data using a double decryption function to obtain decrypted data, where the decrypted data includes the first hash value and the uploaded data;

[0102] The target server calculates a hash value based on the uploaded data to obtain a second hash value;

[0103] Compare the first hash value and the second hash value, if the first hash value and the second hash value are different, treat the uploaded data as re-uploaded data, and send a data re-upload instruction including an identifier of the uploaded data to the terminal device;

[0104] If the first hash value and the second hash value are the same, the uploaded specific data will not be regarded as re-uploaded data.

[0105] Optionally, after receiving the data uploaded by the terminal device, the target server may call a re-decryption function to decrypt the received data to obtain the first hash value and the uploaded data, and then perform a hash value calculation on the uploaded data to obtain the second hash value in order to ensure the integrity and accuracy of the uploaded data. Figure 3 The code in decrypts the received data.

[0106] Furthermore, the target server can perform a comparison check based on the first hash value and the second hash value. If the first hash value and the second hash value are different, it means that the received data is inaccurate or incomplete. At this time, a data re-upload instruction including an identifier of the uploaded data can be sent to the terminal device, so that the terminal device retransmits the data after receiving the data re-upload instruction. Figure 4 The code in performs the comparison check.

[0107] In an optional embodiment of the present application, after uploading the data to be uploaded to the target server through the set network, the method further includes:

[0108] receiving a data re-upload instruction, where the data re-upload instruction includes an identifier of the re-uploaded data;

[0109] Acquire the corresponding first data and the encryption policy corresponding to the first data according to the identifier of the re-uploaded data;

[0110] The first data is doubly encrypted according to the encryption policy corresponding to the first data, and the encrypted first data is uploaded to the target server through a set network.

[0111] Optionally, after receiving the data re-upload instruction sent by the target server, the terminal device can re-acquire data (i.e., first data) from the mobile storage device according to the identifier in the data re-upload instruction, and then double-encrypt the first data according to the encryption policy corresponding to the first data, and upload the encrypted first data to the target server again through the set network, so as to ensure that it can be accurately and completely transmitted to the target server.

[0112] In an optional embodiment of the present application, before obtaining the data transmission instruction, the method further includes:

[0113] Establish a connection with the mobile storage device through the setting interface;

[0114] Automatically detect and identify mobile storage devices, and obtain a list of data files stored in the mobile storage devices;

[0115] The target data corresponding to the identifier of the data to be uploaded is obtained from the mobile storage device by setting the application program, including:

[0116] The target data corresponding to the identifier of the data to be uploaded is obtained from the data file list by setting the application.

[0117] Optionally, before data transmission, it is necessary to establish a connection between the terminal device and the mobile storage device through a set interface. For example, a smart phone can establish a connection with the mobile storage device through an interface it supports (such as an OTG (On The Go) interface). Furthermore, after the connection is successful, the system of the terminal device can automatically detect and identify the mobile storage device, and obtain a list of data files stored in the mobile storage device. Accordingly, when obtaining the target data corresponding to the identifier of the data to be uploaded from the mobile storage device, the target data corresponding to the identifier of the data to be uploaded can be found from the obtained data file list.

[0118] In an optional embodiment of the present application, after uploading the data to be uploaded to the target server through the set network, the following steps are included:

[0119] Obtain the data policy corresponding to the data to be uploaded, where the data policy includes a retention data policy or a deletion data policy;

[0120] If the data policy corresponding to the data to be uploaded is a reserved data policy, the data to be uploaded is stored in the storage module;

[0121] If the data policy corresponding to the data to be uploaded is a data deletion policy, the data to be uploaded is overwritten by overwriting random data.

[0122] Optionally, after uploading the data to be uploaded to the target server via the set network, the terminal device can process the uploaded data based on the data policy pre-set by the user. For example, in order to obtain the uploaded data conveniently and quickly in the future, the data policy can be set to retain the data policy, and then after uploading the data to be uploaded to the target server via the set network, the data to be uploaded is stored in the storage module; conversely, in order to free up the storage space of the terminal device, the data policy can be set to delete the data policy, at this time, after uploading the data to be uploaded to the target server via the set network, the data to be uploaded is overwritten by writing random data to ensure that the deleted data cannot be recovered.

[0123] In summary, if Figure 5 As shown, the embodiment of the present application provides a system architecture diagram for a data transmission method for a storage device. In this example, the method is applied to the scenario of medical data management, and the terminal device has a built-in ResAssist APP ( Figure 5 It is referred to as APP (application) in the code, and the target server is the cloud server ( Figure 5The mobile storage device is the device SD card (Secure Digital, memory card). In actual applications, the terminal device establishes a connection with the device SD card through a universal card reader, and automatically detects and identifies the SD card to obtain a list of data files stored in it (i.e. Figure 5 Then, the ResAssist APP obtains data from the SD card, and then double-encrypts the data based on the corresponding encryption strategy, and uploads the encrypted data to the cloud (i.e. Figure 5 parse data and upload it to the cloud and upload data to the cloud). Correspondingly, the APP can also obtain data from the cloud and render and display the data (i.e. Figure 5 Get data from the cloud and render it on the app to achieve data interaction.

[0124] The present application embodiment provides a data transmission device of a storage device, such as Figure 6 As shown, the device may include: an instruction acquisition module 601, a data acquisition module 602, a data encryption module 603 and a data transmission module 604, wherein:

[0125] An instruction acquisition module is used to acquire a data transmission instruction, wherein the data transmission instruction includes an identifier of the data to be uploaded;

[0126] A data acquisition module, used to acquire target data corresponding to the identifier of the data to be uploaded from a mobile storage device by setting an application program;

[0127] The data encryption module is used to obtain the encryption strategy corresponding to the target data, and double encrypt the target data according to the encryption strategy to obtain the data to be uploaded. The encryption strategy includes a key value and a secret key;

[0128] The data transmission module is used to upload the data to be uploaded to the target server through the set network, and generate an upload report after the upload is successful, so that the management personnel can manage the data to be uploaded according to the upload report.

[0129] Optionally, when the data encryption module performs double encryption on the target data according to the encryption policy to obtain the data to be uploaded, it is specifically used for:

[0130] Double encrypt the target data according to the key value and the secret key to obtain the initial data to be uploaded;

[0131] Calculate the hash value of the target data to obtain the hash value corresponding to the target data;

[0132] The hash values ​​corresponding to the initial data to be uploaded and the target data are used as the data to be uploaded.

[0133] Optionally, when the data encryption module performs double encryption on the target data according to the key value and the secret key to obtain the initial data to be uploaded, it is specifically used for:

[0134] Based on the key value, the target data is encrypted by using the RSA algorithm to obtain the first data to be uploaded;

[0135] Based on the secret key, the first data to be uploaded is encrypted by using the AES algorithm to obtain the second data to be uploaded;

[0136] The second data to be uploaded and the secret key are used as the initial data to be uploaded.

[0137] Optionally, after uploading the data to be uploaded to the target server through the set network, the data transmission module is further used to:

[0138] receiving a data re-upload instruction, where the data re-upload instruction includes an identifier of the re-uploaded data;

[0139] Acquire the corresponding first data and the encryption policy corresponding to the first data according to the identifier of the re-uploaded data;

[0140] The first data is doubly encrypted according to the encryption policy corresponding to the first data, and the encrypted first data is uploaded to the target server through a set network.

[0141] Optionally, the target server to re-upload data is determined by:

[0142] The target server decrypts the received data using a double decryption function to obtain decrypted data, where the decrypted data includes the first hash value and the uploaded data;

[0143] The target server calculates a hash value based on the uploaded data to obtain a second hash value;

[0144] Compare the first hash value and the second hash value, if the first hash value and the second hash value are different, treat the uploaded data as re-uploaded data, and send a data re-upload instruction including an identifier of the uploaded data to the terminal device;

[0145] If the first hash value and the second hash value are the same, the uploaded specific data will not be regarded as re-uploaded data.

[0146] Optionally, before acquiring the data transmission instruction, the instruction acquisition module is further used to:

[0147] Establish a connection with the mobile storage device through the setting interface;

[0148] Automatically detect and identify mobile storage devices, and obtain a list of data files stored in the mobile storage devices;

[0149] When the data acquisition module acquires the target data corresponding to the identifier of the data to be uploaded from the mobile storage device by setting the application program, it is specifically used to:

[0150] The target data corresponding to the identifier of the data to be uploaded is obtained from the data file list by setting the application.

[0151] Optionally, the upload report includes at least one of the upload time of the data to be uploaded, the number of files of the data to be uploaded, and the upload flow of the data to be uploaded;

[0152] After the upload report is generated after a successful upload, the data transfer module is also used to:

[0153] The upload report is sent to a target path, which includes at least one of a user-specified mailbox, a storage module of a terminal device, and a specified message notification platform.

[0154] Optionally, after uploading the data to be uploaded to the target server through the set network, the data transmission module is further used to:

[0155] Obtain the data policy corresponding to the data to be uploaded, where the data policy includes a retention data policy or a deletion data policy;

[0156] If the data policy corresponding to the data to be uploaded is a reserved data policy, the data to be uploaded is stored in the storage module;

[0157] If the data policy corresponding to the data to be uploaded is a data deletion policy, the data to be uploaded is overwritten by overwriting random data.

[0158] Optionally, when acquiring the encryption policy corresponding to the target data, the data acquisition module is specifically used to:

[0159] Obtaining the target data file type corresponding to the target data, and the mapping relationship between the data file type and the encryption strategy;

[0160] Determine the encryption strategy corresponding to the target data file type according to the mapping relationship;

[0161] The encryption policy corresponding to the target data file type is used as the encryption policy corresponding to the target data.

[0162] The data transmission device of the storage device of this embodiment can execute the data transmission method of the storage device shown in the embodiment of the present application. The implementation principle is similar and will not be repeated here.

[0163] An embodiment of the present application provides an electronic device, and the electronic device in the embodiment of the present application includes: a processor; and a memory, the memory is configured to store machine-readable instructions, and when the instructions are executed by the processor, the processor executes the data transmission method of the storage device.

[0164] The present application embodiment provides an electronic device, such as Figure 7 As shown, Figure 7 The electronic device shown includes: a processor 2001 and a memory 2003. The processor 2001 and the memory 2003 are connected, such as through a bus 2002. Optionally, the electronic device 2000 may also include a transceiver 2004. It should be noted that in actual applications, the transceiver 2004 is not limited to one, and the structure of the electronic device 2000 does not constitute a limitation on the embodiments of the present application.

[0165] Processor 2001 may be a CPU, a general-purpose processor, a DSP, an ASIC, an FPGA or other programmable logic device, a transistor logic device, a hardware component or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. Processor 2001 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0166] The bus 2002 may include a path to transmit information between the above components. The bus 2002 may be a PCI bus or an EISA bus, etc. The bus 2002 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 7 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0167] The memory 2003 may be a ROM or other type of static storage device that can store static information and instructions, a RAM or other type of dynamic storage device that can store information and instructions, or an EEPROM, a CD-ROM or other optical disk storage, an optical disk storage (including a compressed optical disk, a laser disk, an optical disk, a digital versatile disk, a Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to these.

[0168] The memory 2003 is used to store the application code for executing the solution of the present application, and the execution is controlled by the processor 2001. The processor 2001 is used to execute the application code stored in the memory 2003 to implement Figure 6 The illustrated embodiment provides the operation of the data transmission device of the storage device.

[0169] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0170] The above is only part of the embodiments of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be regarded as the protection scope of the present invention.

Claims

1. A data transmission method for a storage device, characterized in that: The method is performed by a terminal device, and the method includes: Obtaining a data transmission instruction, wherein the data transmission instruction includes an identifier of data to be uploaded; Acquire target data corresponding to the identifier of the data to be uploaded from the mobile storage device by setting an application program; Acquire an encryption strategy corresponding to the target data, and perform double encryption on the target data according to the encryption strategy to obtain data to be uploaded, wherein the encryption strategy includes a key value and a secret key; The data to be uploaded is uploaded to the target server through a set network, and an upload report is generated after the upload is successful, so that the management personnel can manage the data to be uploaded according to the upload report.

2. The method according to claim 1, characterized in that: The step of double encrypting the target data according to the encryption strategy to obtain data to be uploaded includes: Double encrypt the target data according to the key value and the secret key to obtain initial data to be uploaded; Performing hash value calculation on the target data to obtain a hash value corresponding to the target data; The hash value corresponding to the initial data to be uploaded and the target data is used as the data to be uploaded.

3. The method according to claim 2, characterized in that The step of double encrypting the target data according to the key value and the secret key to obtain initial data to be uploaded includes: Based on the key value, encrypt the target data by using an RSA algorithm to obtain first data to be uploaded; Based on the secret key, encrypting the first data to be uploaded by using an AES algorithm to obtain second data to be uploaded; The second data to be uploaded and the secret key are used as the initial data to be uploaded.

4. The method according to claim 1, characterized in that After uploading the data to be uploaded to the target server through the set network, the method further includes: receiving a data re-upload instruction, wherein the data re-upload instruction includes an identifier of the re-uploaded data; Acquire corresponding first data and an encryption policy corresponding to the first data according to the identifier of the re-uploaded data; The first data is doubly encrypted according to the encryption policy corresponding to the first data, and the encrypted first data is uploaded to the target server through a set network.

5. The method according to claim 4, characterized in that The re-uploaded data is determined by the target server in the following manner: The target server decrypts the received data using a double decryption function to obtain decrypted data, wherein the decrypted data includes the first hash value and the uploaded data; The target server performs hash value calculation according to the uploaded data to obtain a second hash value; Comparing the first hash value with the second hash value, if the first hash value and the second hash value are different, using the uploaded data as the re-uploaded data, and sending a data re-upload instruction including an identifier of the uploaded data to the terminal device; If the first Hash value and the second Hash value are the same, the uploaded specific data is not used as the re-uploaded data.

6. The method according to claim 1, characterized in that Before obtaining the data transmission instruction, the method further includes: Establishing a connection with the mobile storage device through a setting interface; Automatically detect and identify the mobile storage device, and obtain a list of data files stored in the mobile storage device; The step of acquiring target data corresponding to the identifier of the data to be uploaded from the mobile storage device by setting the application program includes: The target data corresponding to the identifier of the data to be uploaded is obtained from the data file list through the setting application.

7. The method according to claim 1, characterized in that The upload report includes at least one of the upload time of the data to be uploaded, the number of files of the data to be uploaded, and the upload flow of the data to be uploaded; After the upload report is generated after the upload is successful, the method further includes: The upload report is sent to a target path, wherein the target path includes at least one of a user-specified mailbox, a storage module of the terminal device, and a specified message notification platform.

8. The method according to claim 7, characterized in that After uploading the data to be uploaded to the target server through the set network, the method further includes: Obtaining a data policy corresponding to the data to be uploaded, wherein the data policy includes a data retention policy or a data deletion policy; If the data policy corresponding to the data to be uploaded is a reserved data policy, storing the data to be uploaded in a storage module; If the data policy corresponding to the data to be uploaded is a data deletion policy, the data to be uploaded is overwritten by overwriting random data.

9. The method according to claim 1, characterized in that: The obtaining of the encryption strategy corresponding to the target data includes: Obtaining a target data file type corresponding to the target data, and a mapping relationship between the data file type and the encryption strategy; Determine the encryption strategy corresponding to the target data file type according to the mapping relationship; The encryption policy corresponding to the target data file type is used as the encryption policy corresponding to the target data.

10. A data transmission device for a storage device, characterized in that: include: An instruction acquisition module, used to acquire a data transmission instruction, wherein the data transmission instruction includes an identifier of data to be uploaded; A data acquisition module, used to acquire target data corresponding to the identifier of the data to be uploaded from a mobile storage device by setting an application program; A data encryption module, used to obtain an encryption strategy corresponding to the target data, and double-encrypt the target data according to the encryption strategy to obtain data to be uploaded, wherein the encryption strategy includes a key value and a secret key; The data transmission module is used to upload the data to be uploaded to the target server through the set network, and generate an upload report after the upload is successful, so that the management personnel can manage the data to be uploaded according to the upload report.

Images