Safety protection method based on financial service data

Abstract

The invention provides a security protection method based on financial service data, and belongs to the technical field of data security. In the method, management equipment obtains financial service data requested to be stored by a user; the management equipment divides the financial service data into M sections of financial service sub-data and determines M domain nodes capable of storing the financial service data from a domain node cluster, and M is an integer greater than 2; the management equipment encrypts the i-th section of financial service sub-data in the M sections of financial service sub-data to obtain i-th ciphertext data, M pieces of ciphertext data are obtained under the condition that i is an integer traversing from 1 to M, and therefore the M pieces of ciphertext data are correspondingly stored in the i-th domain node in the M domain nodes, the secret key used when the i-th section of financial service subdata is encrypted is the secret key of other domain nodes, the other domain nodes are the domain nodes except the i-th domain node in the M domain nodes, and the secret keys of any two domain nodes in the M domain nodes are different.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a security protection method based on financial service data. Background Art

[0002] With the rapid development of financial technology, businesses such as electronic payments, cross-border transactions, and digital assets have shown exponential growth. Financial data transmission, as a core link, involves highly sensitive content such as user account information, transaction instructions, and risk assessment data. Existing technologies mainly ensure security through SSL / TLS encrypted transmission, VPN channel isolation, static key authentication, etc., but there are still significant defects in practical applications: Limitations of encryption protocols: Traditional SSL / TLS protocols have known vulnerabilities (such as POODLE and BEAST attacks), and the development of quantum computing has put asymmetric encryption algorithms such as RSA at risk of being cracked. Weak identity authentication: Authentication methods based on fixed keys or one-way biometrics are susceptible to man-in-the-middle attacks (MITM) and replay attacks. Insufficient adaptability to dynamic environments: The popularity of mobile terminals and IoT devices has complicated data transmission scenarios.

[0003] Therefore, how to further improve the security of financial data storage is a current research issue. Summary of the invention

[0004] The embodiment of the present application provides a security protection method based on financial service data, so as to improve the security of financial data storage.

[0005] In order to achieve the above objectives, this application adopts the following technical solutions: In a first aspect, an embodiment of the present application provides a security protection method based on financial service data, which is applied to a management device, and the management device is used to manage a distributed domain node cluster. The method includes: the management device obtains the financial service data requested to be stored by the user; the management device divides the financial service data into M segments of financial service sub-data, and determines M domain nodes that can store the financial service data from the domain node cluster, where M is an integer greater than 2; the management device encrypts the i-th segment of financial service sub-data in the M segments of financial service sub-data to obtain the i-th ciphertext data, and when i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, so that the M ciphertext data are stored in the i-th domain node in the M domain nodes, wherein the key used when the i-th segment of financial service sub-data is encrypted is the key of other domain nodes, and the other domain nodes are domain nodes other than the i-th domain node in the M domain nodes, and the keys of any two domain nodes in the M domain nodes are different.

[0006] Optionally, the management device obtains financial service data requested to be stored by the user, including: the management device receives a data cloud storage request from the user, the data cloud storage request includes data encrypted by the user; the management device uses the user's key to decrypt the data encrypted by the user to obtain the financial service data, and when the management device and the user are located in the first trusted domain, the management device and the user share the user's key.

[0007] Optionally, the management device divides the financial service data into M segments of financial service sub-data, and determines M domain nodes that can store the financial service data from the domain node cluster, including: the management device divides the financial service data into M segments of financial service sub-data according to the data volume of the financial service data; in response to the financial service data being divided into M segments of financial service sub-data, the financial service data is determined from the domain node cluster to be located in a second trusted domain according to the type of financial service data indicated by the data cloud storage request, and the security level of the second trusted domain matches the type of the financial service data.

[0008] Optionally, the management device divides the financial service data into M segments of financial service sub-data according to the data volume of the financial service data, including: the management device determines that the number of segments corresponding to the data volume interval is M according to the data volume interval in which the data volume of the financial service data is located, thereby determining that the financial service data needs to be divided into M segments; when the financial service data contains N characters, N is greater than or equal to 2*M, the management device extracts the 1st character, the M+1th character, the 2*M+1th character... and so on from the N characters in sequence, and determines them as the 1st segment of financial service sub-data, and the management device extracts the 2nd character, the M+2th character, the 2*M+2th character... and so on from the N characters in sequence, and determines them as the 2nd segment of financial service sub-data, and the management device extracts the 3rd character, the M+3th character, the 2*M+3th character... and so on from the N characters in sequence, and determines them as the 3rd segment of financial service sub-data, and so on, until the Mth segment of financial service sub-data is obtained, and a total of M segments of financial service sub-data are obtained.

[0009] Optionally, the management device encrypts the i-th segment of the financial service sub-data in the M segments of the financial service sub-data to obtain the i-th ciphertext data, and when i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, so that the M ciphertext data are correspondingly stored in the i-th domain node in the M domain nodes, including: when i+2 is less than or equal to M, the management device uses the key of the i+1-th domain node in the M domain nodes to encrypt the i-th segment of the financial service sub-data in the M segments of the financial service sub-data and the key of the i+2-th domain node in the M domain nodes to obtain the i-th ciphertext data in the M ciphertext data; or, when i+1 is equal to M, the management device uses the key of the M domain nodes The management device uses the key of the Mth domain node in the M domain nodes to encrypt the i-th financial service sub-data in the M segments of financial service sub-data and the key of the management device to obtain the i-th ciphertext data in the M ciphertext data; or, when i is equal to M, the management device uses the key of the management device to encrypt the i-th financial service sub-data in the M segments of financial service sub-data to obtain the i-th ciphertext data in the M ciphertext data; wherein the management device manages the keys of the M domain nodes respectively; the management device sends the i-th ciphertext data and the information indicating the data size of the i-th ciphertext data to the i-th domain node in the M domain nodes, so that the i-th domain node stores the i-th ciphertext data and the information indicating the i-th ciphertext data; Optionally, among the M domain nodes, the shortest data routing path from the 1st domain node to the 2nd domain node, from the 2nd domain node to the 3rd domain node, and so on, until the M-1th domain node to the Mth domain node is used for data reading, and the management device determines the serial numbers of the M domain nodes by traversing the shortest data routing path for data reading.

[0010] Optionally, the method further includes: the management device receives a data reading request from a user, the data reading request is used to request to read financial service data; the management device sends a data routing request to the first domain node among the M domain nodes according to the data reading request, the data routing request includes routing information of each of the M domain nodes and information indicating the M ciphertext data; through the data routing executed in sequence by the M domain nodes, the management device receives the M financial ciphertext data sent by the Mth domain node among the M domain nodes; the management device decrypts the first financial ciphertext data among the M financial ciphertext data using the key of the management device to obtain M segments of financial The first segment of financial service sub-data in the service sub-data, and the management device uses the key of the management device to decrypt the second financial ciphertext data in the M financial ciphertext data, to obtain the second segment of financial service sub-data in the M segments of financial service sub-data, and so on, the management device uses the key of the management device to decrypt the Mth financial ciphertext data in the M financial ciphertext data, to obtain the Mth segment of financial service sub-data in the M segments of financial service sub-data, so far, a total of M segments of financial service sub-data are obtained; the management device splices the M segments of financial service sub-data into financial service data, and uses the user's key to encrypt the financial service data and sends it to the user.

[0011] Optionally, the method is also applied to M domain nodes, and the method also includes: when i+1 is less than or equal to M: if i is equal to 1, the i-th domain node receives a data routing request from the management device, and routes the i-th ciphertext data to the i+1-th domain node according to the data routing request; if i is equal to 2, the i-th domain node receives a data routing request from the i-1-th domain node among the M domain nodes and the i-1-th ciphertext data among the M ciphertext data; on this basis, in response to the data routing request, the i-th domain node uses the key of the i-th domain node to decrypt the i-1-th ciphertext data, and obtains the i-1-th segment of financial service sub-data and the i+1-th segment of financial service sub-data among the M segments. The key of the domain node, the i-th domain node uses the key of the i+1th domain node to encrypt the i-1th segment of financial service sub-data, obtains the i-1th financial ciphertext data, and routes the i-th ciphertext data and the i-1th financial ciphertext data to the i+1th domain node; if i is greater than 2, the i-th domain node receives the data routing request from the i-1th domain node among the M domain nodes, the i-1th ciphertext data among the M ciphertext data, and the first i-2 financial ciphertext data. On this basis, in response to the data routing request, the i-th domain node uses the key of the i-th domain node to decrypt the i-1th ciphertext data, obtains the i-1th segment of financial service sub-data and the key of the i+1th domain node, and using the key of the i-th domain node to decrypt the first i-2 financial ciphertext data to obtain the first i-2 segments of financial service sub-data in the M segments of financial service sub-data; the i-th domain node uses the key of the i+1-th domain node to encrypt the first i-1 segments of financial service sub-data in the M segments of financial service sub-data and routes them to the i+1-th domain node, and the i-th domain node routes the i-th ciphertext data to the i+1-th domain node; when i is equal to M: the i-th domain node receives a data routing request from the i-1-th domain node in the M domain nodes, the i-1-th ciphertext data in the M ciphertext data, and the first i-2 financial ciphertext data, and on this basis, in response to the data routing request, the i-th domain node The domain node uses the key of the i-th domain node to decrypt the i-1th ciphertext data to obtain the i-1th segment of financial service sub-data and the key of the management device, and uses the key of the i-th domain node to decrypt the first i-2 financial ciphertext data to obtain the first i-2 segments of financial service sub-data in the M segments of financial service sub-data; the i-th domain node uses the key of the management device to encrypt the first i-1 segments of financial service sub-data in the M segments of financial service sub-data and routes them to the management device, and the i-th domain node routes the i-th ciphertext data to the management device. At this time, the management device receives M financial ciphertext data, and the i-th ciphertext data in the case of i=M is ​​the i-th financial ciphertext data in the M financial ciphertext data.

[0012] Optionally, any two domain nodes among the M domain nodes are domain nodes with physically isolated resources.

[0013] In a second aspect, an embodiment of the present application provides a security protection system based on financial service data, the system includes a management device, the management device is used to manage a distributed domain node cluster, the management device is configured as follows: the management device obtains the financial service data requested to be stored by the user; the management device determines M domain nodes that can store the financial service data from the domain node cluster, and divides the financial service data into M segments of financial service sub-data, where M is an integer greater than 2; the management device encrypts the i-th segment of financial service sub-data in the M segments of financial service sub-data to obtain the i-th ciphertext data, and when i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, thereby storing the M ciphertext data in the i-th domain node among the M domain nodes, wherein the key used when the i-th segment of financial service sub-data is encrypted is the key of other domain nodes, and the other domain nodes are domain nodes other than the i-th domain node among the M domain nodes, and the keys of any two domain nodes among the M domain nodes are different.

[0014] In a third aspect, an embodiment of the present application provides a computer-readable storage medium having program code stored thereon. When the program code is executed by the computer, the method described in the first aspect is executed.

[0015] In summary, the above method and system have the following technical effects: When a user requests to store financial service data in the cloud, the management device in the cloud can divide it into M segments of financial service sub-data and then perform security protection on them separately to obtain M ciphertext data, thereby storing the M ciphertext data in M ​​domain nodes accordingly. At this time, for any segment of financial service sub-data, such as the i-th segment of financial service sub-data, the key used when it is securely protected is the key of other domain nodes, that is, the domain nodes other than the i-th domain node among the M domain nodes. In this way, even if an attacker steals the i-th ciphertext data from the i-th domain node, it will not be able to decrypt the i-th ciphertext data because it cannot obtain the keys of other domain nodes, thereby improving the security of financial data storage. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 A schematic diagram of the architecture of a financial service system provided in an embodiment of the present application; Figure 2 A flowchart of a security protection method based on financial service data provided in an embodiment of the present application; Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0017] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0018] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0019] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0020] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or an electronic device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or an electronic device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0021] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol in a reliable access method system for future Internet of Things devices, and the embodiments of the present invention do not specifically limit this.

[0022] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0023] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present invention, in the embodiments of the present invention, the words "first" and "second" are used to distinguish the same or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0024] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0025] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0026] See also Figure 2 , an embodiment of the present application provides a financial service system, which may include: a management device and a domain node.

[0027] The domain node may be in the form of a terminal, also known as a terminal device, which may also be referred to as a user equipment (UE), an access terminal, a user unit, a user station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a terminal, a wireless communication device, a user agent or a user device. The terminal device in the embodiment of the present application may be a mobile phone, a tablet computer, a computer with a wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, and a wireless terminal in smart home.

[0028] Management devices can be service devices, such as servers, server clusters, virtual servers, virtual service clusters, etc., such as network functions virtualization (NFV). NFV includes: network functions virtualization infrastructure (NFVI), virtual network function (VNF), element management system (EMS), management, automation and network orchestration (MANO), etc.

[0029] The management device can be accessed by the user, and the user can refer to the device used by the user, such as a terminal. The management device and the user can be located in the same trusted domain, that is, the security level is the same, such as recorded as the first trusted domain. For example, the first trusted domain can be the operator network accessed by the user device, such as a mobile public land network (PLMN). The management device can be a third-party management device connected to the PLMN, or a third-party management device permitted by the PLMN, which can also be considered to be located in the first trusted domain. When the management device and the user are located in the first trusted domain, the management device and the user share the user's key, that is, when the user is registered with the management device, the management device and the user can derive the same key, that is, the user's key. The keys of different users are different.

[0030] There can be multiple domain nodes, and multiple domain nodes can be deployed in a distributed manner, that is, a distributed domain node cluster. The management device is used to manage the domain node cluster. Any two domain nodes in the domain node cluster are physically isolated from each other, such as any two domain nodes are distributed on different physical hardware devices, or are located in different computer rooms to ensure security. The domain nodes in the domain node cluster can be distributed in different trusted domains, such as different domain nodes can be distributed in different distributed subnets or private networks. Since these distributed subnets or private networks have different security capabilities, they can also be considered as different trusted domains.

[0031] The following will describe in detail the interaction between the domain node and the management device in the above system in combination with the method.

[0032] See also Figure 2 , the embodiment of the present application provides a security protection method based on financial service data. The method can be applied to the communication between the user device and the data management center. The process of the method includes: S201, a management device obtains financial service data requested to be stored by a user.

[0033] The management device may receive a data cloud storage request from a user (a user registered to the management device), the data cloud storage request including data encrypted by the user, and also including the user's identification and information indicating financial service data, such as the data identification. In the case where the management device and the user are located in the first trusted domain, the management device and the user share the user's key. In this way, the management device may obtain the user's key based on the user's identification. The management device uses the user's key to decrypt the data encrypted by the user to obtain the financial service data.

[0034] S202, the management device divides the financial service data into M segments of financial service sub-data, and determines M domain nodes that can store the financial service data from the domain node cluster, where M is an integer greater than 2.

[0035] The management device may divide the financial service data into M segments of financial service sub-data according to the data volume of the financial service data. For example, the management device determines that the number of segments corresponding to the data volume interval is M according to the data volume interval in which the data volume of the financial service data is located, thereby determining that the financial service data needs to be divided into M segments. The larger the data volume, the larger M is.

[0036] In the case where the financial service data contains N characters, N is greater than or equal to 2*M, the management device will extract the 1st character, the M+1st character, the 2*M+1st character, and so on from the N characters in sequence, and determine them as the 1st segment of financial service sub-data, and the management device will extract the 2nd character, the M+2nd character, the 2*M+2nd character, and so on from the N characters in sequence, and determine them as the 2nd segment of financial service sub-data, and the management device will extract the 3rd character, the M+3rd character, the 2*M+3rd character, and so on from the N characters in sequence, and determine them as the 3rd segment of financial service sub-data, and so on, until the Mth segment of financial service sub-data is obtained, and a total of M segments of financial service sub-data are obtained. In other words, segmentation is not direct segmentation, but extracting characters from different positions to form financial service sub-data, so as to improve data security. Even if a certain financial service sub-data is stolen, since its data are all discrete characters, the attacker cannot obtain valid information. For example, the financial services data is A1A2A3A4B2B2B3B4C1C2C3C4D1D2D3D4. If M=4, the first segment of financial services sub-data is A1B1C1D1, the second segment of financial services sub-data is A2B2C2D2, the third segment of financial services sub-data is A3B3C3D3, and the fourth segment of financial services sub-data is A4B4C4D4.

[0037] In response to the financial service data being divided into M segments of financial service sub-data, the financial service data determines M domain nodes located in the second trusted domain from the domain node cluster according to the type of financial service data indicated by the data cloud storage request, and the security level of the second trusted domain matches the type of financial service data. For example, the type can indicate whether the financial service data contains user privacy data. The security level of the data containing user privacy data is higher than that of the data not containing user privacy data. If the data contains user privacy data, it is necessary to select a domain node from a trusted domain with a higher security level. A trusted domain with a higher security level means that the security capabilities of the domain nodes therein are stronger, such as using more complex encryption algorithms to further improve security. The M domain nodes can be selected based on the storage situation of the domain nodes, such as selecting the M domain nodes with the least amount of stored data. Any two of the M domain nodes are domain nodes with physical resource isolation.

[0038] S203, the management device encrypts the i-th segment of financial service sub-data among the M segments of financial service sub-data to obtain the i-th ciphertext data, and when i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, and the M ciphertext data are correspondingly stored in the i-th domain node among the M domain nodes.

[0039] Among them, the key used when encrypting the i-th segment of financial service sub-data is the key of other domain nodes, and the other domain nodes are the domain nodes other than the i-th domain node among the M domain nodes, and the keys of any two domain nodes among the M domain nodes are different.

[0040] For example, when i+2 is less than or equal to M, the management device uses the key of the i+1th domain node among the M domain nodes to encrypt the i-th financial service sub-data in the M-segments of financial service sub-data and the key of the i+2th domain node among the M domain nodes to obtain the i-th ciphertext data in the M ciphertext data; or, when i+1 is equal to M, the management device uses the key of the M-th domain node among the M domain nodes to encrypt the i-th financial service sub-data in the M-segments of financial service sub-data and the key of the management device to obtain the i-th ciphertext data in the M ciphertext data; or, when i is equal to M, the management device uses the key of the management device to encrypt the i-th financial service sub-data in the M-segments of financial service sub-data to obtain the i-th ciphertext data in the M ciphertext data; wherein the management device manages the keys of each of the M domain nodes. On this basis, the management device sends the i-th ciphertext data and information indicating the data size of the i-th ciphertext data to the i-th domain node among the M domain nodes, so that the i-th domain node stores the i-th ciphertext data and information indicating the i-th ciphertext data (such as the identifier of the i-th ciphertext data).

[0041] That is to say, the i-th ciphertext data stored in the i-th domain node is not encrypted using the key of the i-th domain node. Even if an attack is launched on the i-th domain node and the key of the i-th domain node and the i-th ciphertext data are stolen from the i-th domain node, the plaintext data cannot be decrypted, thereby further improving data security.

[0042] It should be understood that for the respective serial numbers of the M domain nodes, that is, the serial number can indicate the nth domain node of a certain domain node among the M domain nodes, such as the 1st domain node, the 2nd domain node, etc., the respective serial numbers of the M domain nodes are determined by the management device according to the shortest data routing path when data is read, that is, among the M domain nodes, the 1st domain node to the 2nd domain node, the 2nd domain node to the 3rd domain node, and so on, until the M-1th domain node to the Mth domain node is the shortest data routing path when data is read. The management device determines the respective serial numbers of the M domain nodes by traversing the shortest data routing path when reading data. For example, M=4, M domain nodes include domain node A, domain node B, domain node C, and domain node D. The management device determines that when data is read, the data is routed from domain node B to domain node C through other domain nodes, and then from domain node C to domain node A through other domain nodes, and finally from domain node A to domain node D through other domain nodes, and then sent directly to the management device by domain node D. In this case, the number of other domain nodes participating in the above routing is the least, then the path of the above routing is the shortest data routing path, domain node B is the first domain node, domain node C is the second domain node, domain node A is the third domain node, and domain node D is the fourth domain node. In other words, what key the management device uses, or which domain node D / management device key is used, to encrypt each segment of financial service sub-data is determined based on the shortest data routing path, and is strongly related to (or bound to) the data routing.

[0043] Exemplarily, the management device uses the key of the second domain node to encrypt the first segment of financial service sub-data with the key of the third domain node to obtain the first ciphertext data, which is then sent to the first domain node for storage. The management device uses the key of the third domain node to encrypt the second segment of financial service sub-data with the key of the fourth domain node to obtain the second ciphertext data, which is then sent to the second domain node for storage. The management device uses the key of the fourth domain node to encrypt the third segment of financial service sub-data with the key of the management device to obtain the third ciphertext data, which is then sent to the third domain node for storage. The management device uses the key of the management device to encrypt the fourth segment of financial service sub-data to obtain the fourth ciphertext data, which is then sent to the fourth domain node for storage.

[0044] After S203, the method further includes: Step 1: The management device receives a data read request from a user.

[0045] The data read request is used to request to read financial service data, such as including information indicating financial service data, so that the management device can determine that the financial service data is data that has been divided into M segments and encrypted and saved in advance based on the information indicating the financial service data and the records of previous data storage, so that M domain nodes can be determined.

[0046] Step 2: The management device sends a data routing request to the first domain node among the M domain nodes according to the data reading request.

[0047] The data routing request includes routing information of each of the M domain nodes (such as the identification of each of the M domain nodes) and information indicating the M ciphertext data (such as the identification of each of the M ciphertext data and the identification of the management device set in sequence according to the routing order).

[0048] Step 3: Through the data routing executed in sequence by the M domain nodes, the management device receives M financial ciphertext data sent by the Mth domain node among the M domain nodes.

[0049] For example, the method is also applied to M domain nodes, and the method further includes: When i+1 is less than or equal to M: If i is equal to 1, the i-th domain node receives the data routing request from the management device and routes the i-th ciphertext data to the i+1-th domain node according to the data routing request; If i is equal to 2, the i-th domain node receives a data routing request from the i-1-th domain node among the M domain nodes and the i-1-th ciphertext data among the M ciphertext data; on this basis, in response to the data routing request, the i-th domain node uses the key of the i-th domain node to decrypt the i-1-th ciphertext data, obtains the i-1-th segment of financial service sub-data among the M segments of financial service sub-data and the key of the i+1-th domain node, the i-th domain node uses the key of the i+1-th domain node to encrypt the i-1-th segment of financial service sub-data, obtains the i-1-th financial ciphertext data, and routes the i-th ciphertext data and the i-1-th financial ciphertext data to the i+1-th domain node; If i is greater than 2, the i-th domain node receives a data routing request from the i-1-th domain node among the M domain nodes, the i-1-th ciphertext data among the M ciphertext data, and the first i-2 financial ciphertext data. On this basis, in response to the data routing request, the i-th domain node decrypts the i-1-th ciphertext data using the key of the i-th domain node to obtain the i-1-th segment of financial service sub-data and the key of the i+1-th domain node, and decrypts the first i-2 financial ciphertext data using the key of the i-th domain node to obtain the first i-2 segments of financial service sub-data among the M segments of financial service sub-data; the i-th domain node encrypts the first i-1 segments of financial service sub-data among the M segments of financial service sub-data using the key of the i+1-th domain node and routes them to the i+1-th domain node, and the i-th domain node routes the i-th ciphertext data to the i+1-th domain node; When i is equal to M: The i-th domain node receives a data routing request from the i-1-th domain node among the M domain nodes, the i-1-th ciphertext data among the M ciphertext data, and the first i-2 financial ciphertext data. On this basis, in response to the data routing request, the i-th domain node uses the key of the i-th domain node to decrypt the i-1-th ciphertext data to obtain the i-1-th segment of financial service sub-data and the key of the management device, and uses the key of the i-th domain node to decrypt the first i-2 financial ciphertext data to obtain the first i-2 segments of financial service sub-data among the M segments of financial service sub-data; the i-th domain node uses the key of the management device to encrypt the first i-1 segments of financial service sub-data among the M segments of financial service sub-data and routes them to the management device, and the i-th domain node routes the i-th ciphertext data to the management device. At this time, the management device receives M financial ciphertext data, and the i-th ciphertext data in the case of i=M is ​​the i-th financial ciphertext data among the M financial ciphertext data.

[0050] Step 4: The management device uses the key of the management device to decrypt the first financial ciphertext data among the M financial ciphertext data, and obtains the first segment of financial service sub-data among the M segments of financial service sub-data, and the management device uses the key of the management device to decrypt the second financial ciphertext data among the M financial ciphertext data, and obtains the second segment of financial service sub-data among the M segments of financial service sub-data. Similarly, the management device uses the key of the management device to decrypt the Mth financial ciphertext data among the M financial ciphertext data, and obtains the Mth segment of financial service sub-data among the M segments of financial service sub-data. So far, a total of M segments of financial service sub-data are obtained.

[0051] Step 5: The management device assembles the M segments of financial service sub-data into financial service data, and encrypts the financial service data using the user's key and sends it to the user.

[0052] Continuing with the above example, the first domain node receives the data routing request, obtains the first ciphertext data saved this time according to the identifier of the first domain node and the identifier of the first ciphertext data, and then sends the first ciphertext data and the data routing request to the second domain node according to the identifier of the second domain node. The second domain node receives the data routing request, obtains the second ciphertext data saved this time according to the identifier of the second domain node and the identifier of the second ciphertext data.

[0053] The second domain node uses the key of the second domain node to decrypt the first ciphertext data and obtain the first segment of financial service sub-data and the key of the third domain node. The second domain node uses the key of the third domain node to encrypt the first segment of financial service sub-data and obtain the first financial ciphertext data. The second domain node sends the second ciphertext data, the first financial ciphertext data and the data routing request to the second domain node based on the identifier of the third domain node.

[0054] The third domain node uses the key of the third domain node to decrypt the second ciphertext data, and obtains the second segment of financial service sub-data and the key of the fourth domain node. The third domain node uses the key of the third domain node to decrypt the first financial ciphertext data, and obtains the first segment of financial service sub-data. The third domain node uses the key of the fourth domain node to encrypt the first segment of financial service sub-data and the second segment of financial service sub-data, and obtains the second financial ciphertext data. The third domain node sends the third ciphertext data, the second financial ciphertext data, and the data routing request to the fourth domain node according to the identifier of the fourth domain node.

[0055] The 4th domain node uses the key of the 4th domain node to decrypt the 3rd ciphertext data and obtain the 3rd segment of financial service sub-data and the key of the management device. The 4th domain node uses the key of the 4th domain node to decrypt the 2nd financial ciphertext data and obtain the 1st segment of financial service sub-data and the 2nd segment of financial service sub-data. The 3rd domain node uses the key of the management device to encrypt the 1st to 3rd segments of financial service sub-data and obtain the 3rd financial ciphertext data. The 4th domain node sends the 4th ciphertext data and the 3rd financial ciphertext data to the management node according to the identification of the management node.

[0056] The management node uses the management node's key to decrypt the fourth ciphertext data and the third financial ciphertext data to obtain the first to fourth segments of financial service sub-data. The management node performs the reverse process of the above segmentation on the first to fourth segments of financial service sub-data to obtain financial service data. The management node uses the user's key to encrypt the financial service data and send it to the user.

[0057] In summary, when a user requests to store financial service data in the cloud, the management device in the cloud can divide it into M segments of financial service sub-data and then perform security protection on them separately to obtain M ciphertext data, thereby storing the M ciphertext data in M ​​domain nodes accordingly. At this time, for any segment of financial service sub-data, such as the i-th segment of financial service sub-data, the key used when it is securely protected is the key of other domain nodes, that is, the domain nodes other than the i-th domain node among the M domain nodes. In this way, even if an attacker steals the i-th ciphertext data from the i-th domain node, it will not be able to decrypt the i-th ciphertext data because it cannot obtain the keys of other domain nodes, thereby improving the security of financial data storage.

[0058] Combination of the above Figure 2 The method provided by the embodiment of the present application is described in detail. The following introduces a security protection system based on financial service data for executing the method provided by the embodiment of the present application.

[0059] The system includes a management device, which is used to manage a distributed domain node cluster. The management device is configured as follows: the management device obtains financial service data requested to be stored by a user; the management device determines M domain nodes that can store the financial service data from the domain node cluster, and divides the financial service data into M segments of financial service sub-data, where M is an integer greater than 2; the management device encrypts the i-th segment of financial service sub-data in the M segments of financial service sub-data to obtain the i-th ciphertext data, and when i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, so that the M ciphertext data are correspondingly stored in the i-th domain node in the M domain nodes, wherein the key used when the i-th segment of financial service sub-data is encrypted is the key of other domain nodes, and the other domain nodes are domain nodes other than the i-th domain node in the M domain nodes, and the keys of any two domain nodes in the M domain nodes are different.

[0060] The specific implementation of the system can refer to the above method and will not be described in detail here.

[0061] Combine the following Figure 3 The components of the electronic device 500 are described in detail: The processor 501 is the control center of the electronic device 500, and may be a processor or a general term for multiple processing elements. For example, the processor 501 is one or more central processing units (CPUs), or may be application specific integrated circuits (ASICs), or may be one or more integrated circuits configured to implement the embodiments of the present application, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0062] Optionally, the processor 501 can execute various functions of the electronic device 500 by running or executing the software program stored in the memory 502 and calling the data stored in the memory 502, as described above. Figure 3 Functionality in the method shown.

[0063] In a specific implementation, as an embodiment, the processor 501 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0064] In a specific implementation, as an embodiment, the electronic device 500 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (such as computer program instructions).

[0065] Among them, the memory 502 is used to store the software program for executing the solution of the present application, and the execution is controlled by the processor 501. The specific implementation method can refer to the above method embodiment and will not be repeated here.

[0066] Optionally, the memory 502 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or Other types of dynamic storage devices that can store information and instructions may also be electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to these. The memory 502 may be integrated with the processor 501, or it may exist independently and be stored in the electronic device 500. The interface circuit ( Figure 3 (not shown) is coupled to the processor 501, which is not specifically limited in this embodiment of the present application.

[0067] The transceiver 503 is used for communication with other devices. For example, if the multi-beam based positioning device is a terminal, the transceiver 503 can be used for communication with a network device or another terminal.

[0068] Optionally, the transceiver 503 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0069] Optionally, the transceiver 503 may be integrated with the processor 501, or may exist independently and communicate with the electronic device 500 through an interface circuit ( Figure 3(not shown) is coupled to the processor 501, which is not specifically limited in this embodiment of the present application.

[0070] It should be noted that Figure 3 The structure of the electronic device 500 shown in the figure does not constitute a limitation on the device, and the actual electronic device 500 may include more or less components than those shown in the figure, or combine certain components, or arrange the components differently.

[0071] In addition, the technical effects based on the electronic device 500 can refer to the technical effects of the method in the above method embodiment, which will not be repeated here.

[0072] It should be understood that the processor in the embodiments of the present application may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0073] It should also be understood that the memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0074] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When a computer instruction or computer program is loaded or executed on a computer, a process or function according to an embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. Computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0075] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0076] In this application, "at least one" means one or more, and "plurality" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0077] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0078] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0079] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0080] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some feature fields can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0081] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0082] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0083] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0084] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A security protection method based on financial service data, characterized in that: The method is applied to a management device, the management device is used to manage a distributed domain node cluster, and the method includes: The management device obtains the financial service data requested to be stored by the user; The management device divides the financial service data into M segments of financial service sub-data, and determines M domain nodes from the domain node cluster that can store the financial service data, where M is an integer greater than 2; The management device encrypts the i-th segment of financial service sub-data among the M segments of financial service sub-data to obtain the i-th ciphertext data, and when i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, so that the M ciphertext data are correspondingly stored in the i-th domain node among the M domain nodes, wherein the key used when the i-th segment of financial service sub-data is encrypted is the key of other domain nodes, and the other domain nodes are domain nodes among the M domain nodes except the i-th domain node, and the keys of any two domain nodes among the M domain nodes are different.

2. The method according to claim 1, characterized in that The management device obtains the financial service data requested to be stored by the user, including: The management device receives a data cloud storage request from the user, wherein the data cloud storage request includes data encrypted by the user; The management device uses the user's key to decrypt the data encrypted by the user to obtain the financial service data. When the management device and the user are located in the first trusted domain, the management device and the user share the user's key.

3. The method according to claim 2, characterized in that The management device divides the financial service data into M segments of financial service sub-data, and determines M domain nodes that can store the financial service data from the domain node cluster, including: The management device divides the financial service data into the M segments of financial service sub-data according to the data volume of the financial service data; In response to the financial service data being segmented into the M segments of financial service sub-data, the financial service data is stored from the domain node cluster according to the type of the financial service data indicated by the data cloud storage request, from the M domain nodes located in a second trusted domain, and the security level of the second trusted domain matches the type of the financial service data.

4. The method according to claim 3, characterized in that The management device divides the financial service data into the M segments of financial service sub-data according to the data volume of the financial service data, including: The management device determines, according to the data volume interval in which the data volume of the financial service data is located, that the number of segments corresponding to the data volume interval is M, thereby determining that the financial service data needs to be divided into M segments; In the case that the financial service data contains N characters, N is greater than or equal to 2*M, and the management device will extract the 1st character, the M+1th character, the 2*M+1th character... and so on from the N characters in sequence to determine them as the 1st segment of financial service sub-data, and the management device will extract the 2nd character, the M+2th character, the 2*M+2th character... and so on from the N characters in sequence to determine them as the 2nd segment of financial service sub-data, and the management device will extract the 3rd character, the M+3th character, the 2*M+3th character... and so on from the N characters in sequence to determine them as the 3rd segment of financial service sub-data, and so on, until the Mth segment of financial service sub-data is obtained, and a total of M segments of financial service sub-data are obtained.

5. The method according to any one of claims 1 to 4, characterized in that: The management device encrypts the i-th segment of financial service sub-data in the M segments of financial service sub-data to obtain the i-th ciphertext data, where i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, and the M ciphertext data are stored in the i-th domain node in the M domain nodes, including: When i+2 is less than or equal to M, the management device uses the key of the i+1th domain node among the M domain nodes to encrypt the i-th segment of financial service sub-data in the M segments of financial service sub-data and the key of the i+2th domain node among the M domain nodes to obtain the i-th ciphertext data in the M ciphertext data; Alternatively, when i+1 is equal to M, the management device uses the key of the Mth domain node among the M domain nodes to encrypt the i-th segment of the financial service sub-data in the M segments of the financial service sub-data and the key of the management device to obtain the i-th ciphertext data in the M ciphertext data; Alternatively, when i is equal to M, the management device uses the key of the management device to convert the i-th segment of financial service sub-data in the M segments of financial service sub-data to obtain the i-th ciphertext data in the M ciphertext data; Wherein, the management device manages the keys of the M domain nodes respectively; The management device sends the i-th ciphertext data and information indicating the data size of the i-th ciphertext data to the i-th domain node among the M domain nodes, so that the i-th domain node stores the i-th ciphertext data and the information indicating the i-th ciphertext data.

6. The method according to claim 5, characterized in that Among the M domain nodes, the 1st domain node to the 2nd domain node, the 2nd domain node to the 3rd domain node, and so on, until the M-1th domain node to the Mth domain node is the shortest data routing path when reading data, and the management device determines the respective serial numbers of the M domain nodes by traversing the shortest data routing path when reading data.

7. The method according to claim 6, characterized in that The method further comprises: The management device receives a data reading request from the user, where the data reading request is used to request to read the financial service data; The management device sends a data routing request to a first domain node among the M domain nodes according to the data reading request, wherein the data routing request includes routing information of each of the M domain nodes and information indicating the M ciphertext data; Through the data routing sequentially performed by the M domain nodes, the management device receives M financial ciphertext data sent by the Mth domain node among the M domain nodes; The management device uses the key of the management device to decrypt the first financial ciphertext data among the M financial ciphertext data to obtain the first segment of financial service sub-data among the M segments of financial service sub-data, and the management device uses the key of the management device to decrypt the second financial ciphertext data among the M financial ciphertext data to obtain the second segment of financial service sub-data among the M segments of financial service sub-data, and so on, the management device uses the key of the management device to decrypt the Mth financial ciphertext data among the M financial ciphertext data to obtain the Mth segment of financial service sub-data among the M segments of financial service sub-data, so far, a total of the M segments of financial service sub-data are obtained; The management device splices the M segments of financial service sub-data into the financial service data, and uses the user's key to encrypt the financial service data and then sends it to the user.

8. The method according to claim 7, characterized in that The method is also applied to the M domain nodes, and the method further comprises: When i+1 is less than or equal to M: If i is equal to 1, the i-th domain node receives the data routing request from the management device, and routes the i-th ciphertext data to the i+1-th domain node according to the data routing request; If i is equal to 2, the i-th domain node receives the data routing request from the i-1-th domain node among the M domain nodes and the i-1-th ciphertext data among the M ciphertext data; on this basis, in response to the data routing request, the i-th domain node decrypts the i-1-th ciphertext data using the key of the i-th domain node to obtain the i-1-th segment of financial service sub-data among the M segments of financial service sub-data and the key of the i+1-th domain node, the i-th domain node encrypts the i-1-th segment of financial service sub-data using the key of the i+1-th domain node to obtain the i-1-th financial ciphertext data, and routes the i-th ciphertext data and the i-1-th financial ciphertext data to the i+1-th domain node; If i is greater than 2, the i-th domain node receives the data routing request from the i-1-th domain node among the M domain nodes, the i-1-th ciphertext data among the M ciphertext data, and the first i-2 financial ciphertext data. On this basis, in response to the data routing request, the i-th domain node decrypts the i-1-th ciphertext data using the key of the i-th domain node to obtain the i-1-th segment of financial service sub-data and the key of the i+1-th domain node, and decrypts the first i-2 financial ciphertext data using the key of the i-th domain node to obtain the first i-2 segments of financial service sub-data among the M segments of financial service sub-data; the i-th domain node encrypts the first i-1 segments of financial service sub-data among the M segments of financial service sub-data using the key of the i+1-th domain node and routes them to the i+1-th domain node, and the i-th domain node routes the i-th ciphertext data to the i+1-th domain node; When i is equal to M: The i-th domain node receives the data routing request from the i-1-th domain node among the M domain nodes, the i-1-th ciphertext data among the M ciphertext data, and the first i-2 financial ciphertext data. On this basis, in response to the data routing request, the i-th domain node decrypts the i-1-th ciphertext data using the key of the i-th domain node to obtain the i-1-th segment of financial service sub-data and the key of the management device, and decrypts the first i-2 financial ciphertext data using the key of the i-th domain node to obtain the first i-2 segments of financial service sub-data among the M segments of financial service sub-data; the i-th domain node encrypts the first i-1 segments of financial service sub-data among the M segments of financial service sub-data using the key of the management device and routes them to the management device, and the i-th domain node routes the i-th ciphertext data to the management device. At this time, the management device receives the M financial ciphertext data, and the i-th ciphertext data in the case of i=M is ​​the i-th financial ciphertext data among the M financial ciphertext data.

9. The method according to claim 8, characterized in that Any two domain nodes among the M domain nodes are domain nodes with isolated physical resources.

10. A security protection system based on financial service data, characterized in that: The system includes a management device, which is used to manage a distributed domain node cluster, and the management device is configured to: The management device obtains the financial service data requested to be stored by the user; The management device determines M domain nodes from the domain node cluster that can store the financial service data, and divides the financial service data into M segments of financial service sub-data, where M is an integer greater than 2; The management device encrypts the i-th segment of financial service sub-data among the M segments of financial service sub-data to obtain the i-th ciphertext data, and when i is an integer traversing from 1 to M, a total of M ciphertext data are obtained, so that the M ciphertext data are correspondingly stored in the i-th domain node among the M domain nodes, wherein the key used when the i-th segment of financial service sub-data is encrypted is the key of other domain nodes, and the other domain nodes are domain nodes among the M domain nodes except the i-th domain node, and the keys of any two domain nodes among the M domain nodes are different.

Images