Data processing method, control device, image forming device and system

Abstract

The embodiment of the invention provides a data processing method, control equipment, and an image forming device and system. The method comprises the following steps: displaying a multi-level adjustment interaction item and a security policy interaction item; determining a target adjustment item from the multi-level adjustment interaction items in response to a first interaction signal; determining N target security policy items from the security policy interaction items in response to a second interaction signal; and storing the target adjustment item and the N target security policy items so as to perform data processing on to-be-processed data based on the target adjustment item and the N target security policy items, N being greater than or equal to 1. According to the embodiment of the invention, the selectable adjustment item and the plurality of security policy items can be provided on the interactive interface, and the to-be-processed data is processed based on the selected adjustment item and the N security policy items, so that one piece of data can use a plurality of security policies, and the security of data transmission is ensured while flexible matching of the security policies is realized.

Description

Technical Field

[0001] The present application relates to the field of security technology, and specifically to a data processing method, a control device, an image forming apparatus and a system. Background Art

[0002] Peripheral devices are devices that can be connected to a computer to collaboratively process data. Existing peripheral devices such as printers and copiers have certain requirements for information security. The existing technology generally configures security function parameters through the computer's web interactive interface after the peripheral device is connected to the computer. In the configuration of security function parameters, the user can choose to enable a certain security protocol on the configuration interface so that the peripheral device can transmit data with the computer through the security protocol.

[0003] However, currently only relatively simple security function configurations can be performed through the web interactive interface, such as only being able to choose to turn on or off a certain protocol, or selecting an authentication method from several preset authentication methods. However, due to the processing power or storage space limitations of peripheral devices, it is difficult for peripheral devices to store multiple security programs like computers, so they cannot provide users with more functional options in terms of information security. Summary of the invention

[0004] In view of this, the present application provides a data processing method, a control device, an image forming apparatus and a system for providing more and more flexible security policy configurations, thereby giving users more choices in terms of secure transmission functions.

[0005] In a first aspect, an embodiment of the present application provides a data processing method, which is applied to a control device, including: Display multi-level mediation interaction terms and security policy interaction terms; determining a target adjustment item from the multiple levels of adjustment interaction items in response to a first interaction signal; determining N target security policy items from the security policy interaction items in response to a second interaction signal; The target adjustment item and the N target security policy items are stored to facilitate data processing based on the target adjustment item and the N target security policy items, wherein N≥1.

[0006] In a possible implementation manner, the performing data processing based on the target adjustment item and the N target security policy items includes: Responding to the data transmission signal, acquiring data to be processed; Perform data segmentation processing on the data to be processed according to the target adjustment item to obtain M data segments; Data security processing is performed on the M data segments according to the N target security policy items to obtain first data, where M≥1.

[0007] In a possible implementation, the multi-level adjustment interaction item includes a plurality of adjustment items, and each of the adjustment items corresponds to a segmentation item for performing data segmentation processing on the data.

[0008] In a possible implementation, performing data segmentation processing on the to-be-processed data according to the target adjustment item to obtain M data segments includes: Confirming a segmentation item corresponding to the target adjustment item for performing data segmentation processing on the data; Data segmentation processing is performed on the data to be processed according to the segmentation item for performing data segmentation processing on the data corresponding to the target adjustment item, so as to obtain M data segments.

[0009] In a possible implementation, performing data security processing on the M data segments according to the N target security policy items to obtain first data includes: Determine a target security policy item corresponding to each data segment in the M data segments among the N target security policy items; Data security processing is performed on each data segment according to the target security policy item corresponding to each data segment to obtain first data.

[0010] In a possible implementation manner, determining the target security policy item corresponding to each data segment in the M data segments in the N target security policy items includes: Determining a first arrangement order of the M data segments and a second arrangement order of the N target security policy items; The target security policy item corresponding to each data segment in the M data segments among the N target security policy items is determined according to the first arrangement order and the second arrangement order.

[0011] In a possible implementation, when M≤N, determining, according to the first arrangement order and the second arrangement order, a target security policy item corresponding to each data segment in the M data segments among the N target security policy items includes: According to the first arrangement order and the second arrangement order, the target security policy item corresponding to the mth data segment among the M data segments is determined to be the nth target security policy item among the N target security policy items, where m=n, m≤M, n≤N.

[0012] In a possible implementation, when M>N, determining, according to the first arrangement order and the second arrangement order, a target security policy item corresponding to each data segment in the M data segments among the N target security policy items includes: Determine, according to the first arrangement order and the second arrangement order, that the target security policy item corresponding to the mth data segment among the M data segments is the nth target security policy item among the N target security policy items, where m=n, m≤N, n≤N; According to the first arrangement order and the second arrangement order, the target security policy item corresponding to the mth data segment among the M data segments is determined to be the i-th target security policy item among the N target security policy items, where m=k·t+i, t=N, k≥1, i≤N.

[0013] In a possible implementation manner, before storing the target adjustment item and the N target security policy items, the method further includes: The second arrangement order of the N target security policy items is adjusted in response to the third interaction signal.

[0014] In a possible implementation, the N target security policy items include X target authentication algorithms and / or Y target encryption algorithms; The performing data security processing on the M data segments according to the N target security policy items includes: Performing authentication processing on the M data segments according to the X target authentication algorithms to obtain M digest values, wherein each data segment corresponds to one digest value; and / or The M data segments are encrypted according to the Y target encryption algorithms.

[0015] In a possible implementation, performing authentication processing on the M data segments according to the X target authentication algorithms to obtain M digest values ​​includes: Determine a target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms; Each data segment is authenticated according to the target authentication algorithm corresponding to each data segment to obtain M summary values.

[0016] In a possible implementation manner, determining the target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms includes: Determining a first arrangement order of the M data segments and a third arrangement order of the X target authentication algorithms; The target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms is determined according to the first arrangement order and the third arrangement order.

[0017] In a possible implementation, when M≤X, determining, according to the first arrangement order and the third arrangement order, a target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms includes: The target authentication algorithm corresponding to the mth data segment among the M data segments is determined to be the xth target authentication algorithm among the X target authentication algorithms according to the first arrangement order and the third arrangement order, wherein m=x, m≤M, x≤X.

[0018] In a possible implementation, when M>X, determining, according to the first arrangement order and the third arrangement order, a target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms includes: Determining, according to the first arrangement order and the third arrangement order, that the target authentication algorithm corresponding to the mth data segment among the M data segments is the xth target authentication algorithm among the X target authentication algorithms, wherein m=x, m≤X, x≤X; The target authentication algorithm corresponding to the mth data segment among the M data segments is determined to be the ith target authentication algorithm among the X target authentication algorithms according to the first arrangement order and the third arrangement order, wherein m=k·t+i, t=X, k≥1, i≤X.

[0019] In a possible implementation, performing encryption processing on the M data segments according to the Y target encryption algorithms includes: Determine a target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms; Each data segment is encrypted according to the target encryption algorithm corresponding to each data segment.

[0020] In a possible implementation, determining the target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms includes: Determining a first arrangement order of the M data segments and a fourth arrangement order of the Y target encryption algorithms; The target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms is determined according to the first arrangement order and the fourth arrangement order.

[0021] In a possible implementation, when M≤Y, determining, according to the first arrangement order and the fourth arrangement order, a target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms includes: According to the first arrangement order and the fourth arrangement order, the target encryption algorithm corresponding to the mth data segment among the M data segments is determined to be the yth target encryption algorithm among the Y target encryption algorithms, where m=y, m≤M, y≤Y.

[0022] In a possible implementation, when M>Y, determining, according to the first arrangement order and the fourth arrangement order, a target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms includes: Determining, according to the first arrangement order and the fourth arrangement order, that the target encryption algorithm corresponding to the mth data segment among the M data segments is the yth target encryption algorithm among the Y target encryption algorithms, wherein m=y, m≤Y, y≤Y; According to the first arrangement order and the fourth arrangement order, the target encryption algorithm corresponding to the mth data segment among the M data segments is determined to be the i-th target encryption algorithm among the Y target encryption algorithms, where m=k·t+i, t=Y, k≥1, i≤Y.

[0023] In a possible implementation manner, before storing the target adjustment item and the N target security policy items, the method further includes: The third arrangement order of the X target authentication algorithms and / or the fourth arrangement order of the Y target encryption algorithms are adjusted in response to the third interaction signal.

[0024] In a possible implementation manner, obtaining the first data includes: Add a segment data header in front of each data segment after data security processing, wherein the segment data header includes a target security policy item number corresponding to each data segment and data security processing information, wherein the target security policy item number is used to indicate the target security policy item corresponding to the data segment among the N target security policy items; The data segments with the segmented data headers are concatenated according to the first arrangement order of the M data segments to obtain first data.

[0025] In a second aspect, an embodiment of the present application provides a data processing method, which is applied to an image forming device, comprising: Store N target security policy items; Receiving first data sent by the control device; The first data is subjected to data security processing according to the N target security policy items to obtain second data.

[0026] In a possible implementation manner, performing data security processing on the first data according to the N target security policy items to obtain second data includes: Obtain a segment data header of each data segment in the first data, wherein the segment data header includes a target security policy item number and data security processing information corresponding to each data segment, wherein the target security policy item number is used to indicate a target security policy item corresponding to the data segment among the N target security policy items; The first data is subjected to data security processing according to the N target security policy items and the segmented data header of each data segment to obtain second data.

[0027] In a possible implementation, performing data security processing on the first data according to the N target security policy items and the segment data header of each data segment includes: Determine the target security policy item for each data segment according to the N target security policy items and the target security policy item number corresponding to each data segment; Data security processing is performed on each data segment according to the target security policy item of each data segment and the data security processing information corresponding to each data segment.

[0028] In a possible implementation, when the N target security policy items include X target authentication algorithms, the segmented data header includes a target authentication algorithm number and a digest value corresponding to each data segment, and the target authentication algorithm number is used to indicate the target authentication algorithm corresponding to the data segment among the X target authentication algorithms; The performing data security processing on the first data according to the N target security policy items and the segmented data header of each data segment includes: Determine the target authentication algorithm for each data segment according to the X target authentication algorithms and the target authentication algorithm number corresponding to each data segment; Each data segment is authenticated according to a target authentication algorithm for each data segment and a digest value corresponding to each data segment.

[0029] In a possible implementation, when the N target security policy items include Y target encryption algorithms, the segment data header includes a target encryption algorithm number and an encryption key corresponding to each data segment, and the target encryption algorithm number is used to indicate a target encryption algorithm corresponding to the data segment among the Y target encryption algorithms; The performing data security processing on the first data according to the N target security policy items and the segmented data header of each data segment includes: Determine a decryption algorithm for each data segment according to the Y target encryption algorithms and the target encryption algorithm number corresponding to each data segment; Using the encryption key corresponding to each data segment as the decryption key of each data segment; Each data segment is decrypted according to the decryption algorithm of each data segment and the decryption key of each data segment.

[0030] In a possible implementation, when the N target security policy items include X target authentication algorithms and Y target encryption algorithms, the segment data header includes a target authentication algorithm number, a target encryption algorithm number, and a digest value corresponding to each data segment; The performing data security processing on the first data according to the N target security policy items and the segmented data header of each data segment includes: Determine a decryption algorithm for each data segment according to the Y target encryption algorithms and the target encryption algorithm number corresponding to each data segment; Using the digest value corresponding to each data segment as the decryption key for each data segment; Decrypting each data segment according to the decryption algorithm of each data segment and the decryption key of each data segment; Determine the target authentication algorithm for each data segment according to the X target authentication algorithms and the target authentication algorithm number corresponding to each data segment; Each data segment after decryption is authenticated according to a target authentication algorithm for each data segment and a digest value corresponding to each data segment.

[0031] In a possible implementation manner, obtaining the second data includes: If each of the data segments passes the data security processing, each of the data segments after passing the data security processing is spliced ​​according to the order of each data segment in the first data to obtain the second data.

[0032] In a third aspect, an embodiment of the present application provides a control device, including: A display unit, used for displaying multi-level adjustment interaction items and security policy interaction items; A first determining unit, configured to determine a target adjustment item from the multi-level adjustment interaction items in response to a first interaction signal; A second determining unit, configured to determine N target security policy items from the security policy interaction items in response to a second interaction signal; A storage unit is used to store the target adjustment item and the N target security policy items, so as to facilitate data processing on the data to be processed based on the target adjustment item and the N target security policy items, wherein N≥1.

[0033] In a fourth aspect, an embodiment of the present application provides an image forming device, including: A storage unit, used to store N target security policy items; A receiving unit, configured to receive first data sent by the control device; A data security processing unit is used to perform data security processing on the first data according to the N target security policy items to obtain second data.

[0034] In a fifth aspect, an embodiment of the present application provides an image forming system, comprising a control device as described in any one of the third aspect and an image forming apparatus as described in any one of the fourth aspect, wherein the image forming apparatus and the control device are communicatively connected.

[0035] Compared with the prior art, the embodiment of the present application can provide selectable adjustment items and multiple security policy items on the interactive interface, and process the data to be processed based on the selected adjustment items and N security policy items, so that one data can use multiple security policies, while achieving flexible matching of security policies and ensuring the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0037] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application; Figure 2 It is a schematic diagram of a web interaction interface in the related technology; Figure 3 A schematic diagram of a data processing method provided in an embodiment of the present application; Figure 4 A schematic diagram of a security configuration interaction interface provided in an embodiment of the present application; Figure 5 A schematic diagram of a data interaction process provided in an embodiment of the present application; Figure 6 A flowchart of another data processing method provided in an embodiment of the present application; Figure 7A schematic diagram of first data provided in an embodiment of the present application; Figure 8 A schematic diagram of a segmented data header provided in an embodiment of the present application; Fig. 9 A schematic diagram of the structure of a control device provided in an embodiment of the present application; Fig.10 A schematic diagram of the structure of an image forming device provided in an embodiment of the present application; Fig.11 A schematic diagram of the structure of an image forming system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0038] In order to better understand the technical solution of the present application, the embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0039] It should be clear that the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0040] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0041] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0042] See also Figure 1 , is a schematic diagram of an application scenario provided by an embodiment of the present application. Figure 1 As shown, the application scenario includes: a control device 110 and an image forming apparatus 120, wherein the control device 110 and the image forming apparatus 120 are interconnected through a wired or wireless communication network to transmit information. During the image forming process, the control device 110 encrypts the print data and sends the encrypted print data to the image forming apparatus 120, which decrypts the print data and then performs the image forming operation.

[0043] The communication network between the control device 110 and the image forming device 120 may be a local area network or a wide area network transferred through a relay device. When the communication network is a local area network, exemplarily, the communication network may be a short-distance communication network such as a wifi hotspot network, a wifi P2P network, a Bluetooth network, a zigbee network or a near field communication (NFC) network. When the communication network is a wide area network, exemplarily, the communication network may be a third-generation wireless telephone technology (3G) network, a fourth-generation mobile communication technology (4G) network, a fifth-generation mobile communication technology (5G) network, a future-evolved public land mobile network (PLMN) or the Internet.

[0044] It should be pointed out that Figure 1 This is only an exemplary description and should not be used as a limitation on the scope of protection of this application. For example, the image forming device 120 includes but is not limited to a printer, a copier, a fax machine, a multi-function image making and copying device, an electrostatic printing device, and any other similar device. The control device 110 includes but is not limited to a computer, a mobile phone, a tablet computer, an enterprise internal server, a cloud server, and other electronic devices that can communicate with the image forming device 120.

[0045] In some possible implementations, the control device 110 may also be referred to as a host computer, a host, a terminal device, etc.

[0046] Taking the control device as a PC as an example, after the image forming device is connected to the PC, the user can enter the IP address of the image forming device in the address bar of the PC's web browser to access the web interaction interface provided by the image forming device. In this interface, the user can configure some functional parameters of the image forming device, such as the security function parameters of the image forming device. For example, the EWS (embedded web server) service provided by a company has a security configuration interface on its web interaction interface such as Figure 2 As shown, the user can choose to enable a certain security function on this interface. After enabling, the image forming device and the PC use the encryption protocol selected by the user to transmit data.

[0047] However, currently only relatively simple security function configurations can be performed through the web interactive interface, such as only being able to choose to turn on or off a certain protocol, or selecting an authentication method from several preset authentication methods. As an information processing device, image forming devices have higher requirements for information security, and due to the limitations of processing power and storage space, image forming devices are difficult to have multiple security programs built in like PCs. Therefore, it is even more necessary to give users more choices in terms of secure transmission functions.

[0048] In view of the above problems, the present application proposes a data processing method, a control device, an image forming apparatus and a system to provide more and more flexible security policy configurations, thereby giving users more choices in terms of security transmission functions. Detailed description is given below in conjunction with the accompanying drawings.

[0049] See also Figure 3 , is a flow chart of a data processing method provided in an embodiment of the present application. The method can be applied to Figure 1 In the control device of the application scenario shown, Figure 3 As shown, it mainly includes the following steps.

[0050] S301: Displaying multi-level adjustment interaction items and security policy interaction items; S302: determining a target adjustment item from multiple levels of adjustment interaction items in response to a first interaction signal; S303: Determine N target security policy items from the security policy interaction items in response to the second interaction signal; S304: Storing the target adjustment item and N target security policy items to facilitate data processing based on the target adjustment item and the N target security policy items, where N≥1.

[0051] In one embodiment, the control device is further used to send N target security policy items to the image forming apparatus, so that the image forming apparatus performs corresponding data security processing after receiving the data processed by the control device.

[0052] Specifically, the embodiment of the present application is provided with a security configuration interaction interface on the web interaction interface, and a multi-level adjustment interaction item and a security policy interaction item are provided on the interface, wherein the multi-level adjustment interaction item includes a plurality of adjustment items, each adjustment item corresponds to a segmentation item for performing data segmentation processing on the data, and the security policy interaction item includes a plurality of security policy items, each security policy item corresponds to an algorithm for performing security protection on the data, such as Figure 4Therefore, through the multi-level adjustment interaction items, the user can configure the data segmentation, and through the security policy interaction items, the user can configure the data security policy, and after the configuration is completed, the corresponding configuration results are stored in the control device and the image forming device, so that the subsequent control device and the image forming device can use the configured parameters to ensure the security of the data when processing the data.

[0053] In a possible implementation, the specific process of the user configuring the multi-level adjustment interaction item and the security policy interaction item in the security configuration interaction interface is as follows: Open the security configuration interactive interface, input a first interactive signal on the multi-level adjustment interactive item on the interface, determine the target adjustment item through the first interactive signal, that is, determine the segmentation item for data segmentation processing, wherein the first interactive signal can be a click operation and / or a sliding operation, and the segmentation item for data segmentation processing can be the amount of data in each data segment during segmentation, or the number of paragraphs during segmentation. For example, Figure 4 As shown, when the segmentation item is the amount of data in each data segment during segmentation, the amount of data can be 4K, 8K, 16K, etc., that is, the data is divided into multiple paragraphs of 4K size, or multiple paragraphs of 8K size, or multiple paragraphs of 16K size; when the segmentation item is the number of paragraphs during segmentation, the number of paragraphs can be M, that is, the data is divided into M segments, and at this time, the M paragraphs can be equal or unequal in size. A second interaction signal is input on the security policy interaction item on the interface, and N target security policy items are determined by the second interaction signal, that is, N target security algorithms are determined, wherein the second interaction signal can be a click operation and / or a sliding operation, and the N target security algorithms can include X target authentication algorithms and / or Y target encryption algorithms. After the user completes the operation on the security interaction interface, the target adjustment item and the N target security policy items selected by the user are automatically stored in the control device, and the N target security policy items are sent to the image forming device through the control device.

[0054] In a specific implementation, the determination of N target security policy items through the second interactive signal can be achieved through an established security algorithm library and a security chain list. Specifically, the established security algorithm library and the security chain list are displayed on the security configuration interactive interface, and the user selects the required security algorithm from the displayed security algorithm library and adds it to the security chain list, and removes the unnecessary security algorithms from the security chain list. The security algorithms that finally remain in the security chain list are the required N target security policy items.

[0055] For example, Figure 4As shown, when the security policy interaction items include authentication algorithms and encryption algorithms, the established authentication algorithm library, authentication chain list, encryption algorithm library and encryption chain list can be displayed on the security configuration interaction interface, and the authentication algorithms contained in the authentication chain list can be added and / or removed through the authentication algorithm library, and the encryption algorithms contained in the encryption chain list can be added and / or removed through the encryption algorithm library, and finally the required X target authentication algorithms and Y target encryption algorithms are obtained. In a specific implementation, the user can add the selected authentication algorithm to the authentication chain list through the horizontal arrow between the authentication algorithm library and the authentication chain list, and remove the authentication algorithm that is not needed in the authentication chain list, and add the selected encryption algorithm to the encryption chain list through the horizontal arrow between the encryption algorithm library and the encryption chain list, and remove the encryption algorithm that is not needed in the encryption chain list. For example, after the user selects an authentication algorithm in the authentication algorithm library, click the horizontal arrow pointing to the authentication chain list to add the selected authentication algorithm to the authentication chain list, and after selecting an authentication algorithm in the authentication chain list, click the horizontal arrow pointing to the authentication algorithm library to remove the selected authentication algorithm from the authentication chain list. In actual applications, since the authentication algorithm just added to the authentication chain list and the encryption algorithm just added to the encryption chain list are both arranged at the bottom or top of the corresponding chain list, and the arrangement order of the authentication algorithms in the authentication chain list and the arrangement order of the encryption algorithms in the encryption chain list are closely related to the calling order of subsequent algorithms, the embodiment of the present application also provides up and down arrows on the sides of the authentication chain list and the encryption chain list to adjust the arrangement order of the authentication algorithms in the authentication chain list and the arrangement order of the encryption algorithms in the encryption chain list.

[0056] It should be noted that Figure 4 This is only an exemplary description and is not intended to limit the scope of protection of this application. For example, other methods may be set to add and remove algorithms, and this embodiment of the application does not make specific requirements for this.

[0057] For the target adjustment items and N target security policy items configured by the user in advance in the security interaction interface, the control device monitors the configuration information of the image forming device through the status monitor, and stores the latest target adjustment items and N target security policy items when changes are detected, so that the image forming driver can encapsulate the data to be processed according to the latest target adjustment items and N target security policy items, and transmit the encapsulated data to the image forming device through the USB interface or the network. The image forming device parses the encapsulated data according to the latest N target security policy items, and then performs image forming operations, such as Figure 5 shown.

[0058] The embodiments of the present application can change the size of data segments through a secure interactive interface, add and / or remove authentication algorithms from an authentication linked list, add and / or remove encryption algorithms from an encryption linked list, and adjust the order of algorithms in the linked list. That is, the secure interactive interface provided by the embodiments of the present application can increase the flexibility of security policies and the diversity of security policy combinations, providing users with higher security requirements with an interactive method that is easier to use.

[0059] The following describes a process of processing the data to be processed according to the target adjustment item and N target security policy items in conjunction with the accompanying drawings.

[0060] See also Figure 6 , is a flow chart of another data processing method provided in an embodiment of the present application. The method can be applied to Figure 1 In the application scenario shown, Figure 6 As shown, it mainly includes the following steps.

[0061] S601: In response to a data transmission signal, the control device obtains data to be processed.

[0062] When a user uploads data to be processed on a control device and needs to perform an image forming operation, in response to the user triggering a data transmission signal, the control device obtains the data to be processed uploaded by the user, where the data to be processed may also be an image forming operation.

[0063] S602: The control device performs data segmentation processing on the data to be processed according to the target adjustment item to obtain M data segments.

[0064] After the control device obtains the data to be processed, it will first perform data segmentation processing on the data to be processed according to the target adjustment item to obtain M data segments, where M≥1. Specifically, after the control device obtains the data to be processed, it will first confirm the segmentation item corresponding to the target adjustment item for data segmentation processing of the data, and perform data segmentation processing on the data to be processed according to the segmentation item corresponding to the target adjustment item for data segmentation processing of the data, to obtain M data segments. Among them, when the segmentation item is the data amount of each data segment, the data size of each data segment is equal. If the data amount corresponding to the target adjustment item for data segmentation of the data is 8K, M 8K data segments will be obtained. If the data amount is found to be insufficient when dividing the last data segment, the data can be supplemented by adding 0 to ensure that the size of each data segment is equal, and no error will occur when each data segment is subsequently processed securely and transmitted. When the segmentation item is the number of paragraphs, the data size of each data segment can be equal or unequal.

[0065] S603: The control device performs data security processing on the M data segments according to the N target security policy items to obtain first data.

[0066] After dividing the data to be processed into M data segments, the control device performs data security processing on the M data segments according to the N target security policy items to obtain the first data. Specifically, for the M data segments, the control device first determines the target security policy item corresponding to each data segment in the M data segments among the N target security policy items, and then performs data security processing on each data segment according to the target security policy item corresponding to each data segment to obtain the first data.

[0067] In a possible implementation, the target security policy item corresponding to each data segment in the M data segments in the N target security policy items can be determined according to the first arrangement order of the M data segments and the second arrangement order of the N target security policy items, wherein the second arrangement order of the N target security policy items is the arrangement order of the security algorithms included in the security chain list. Specifically, if M≤N, then according to the first arrangement order and the second arrangement order, it can be determined that the target security policy item corresponding to the mth data segment in the M data segments is the nth target security policy item in the N target security policy items, wherein m=n, m≤M, n≤N. That is, the first data segment in the first arrangement order corresponds to the first target security policy item in the second arrangement order, the second data segment in the first arrangement order corresponds to the second target security policy item in the second arrangement order..., and so on, to obtain the target security policy item corresponding to each data segment.

[0068] If M>N, for the first N data segments among the M data segments, the target security policy item corresponding to the mth data segment among the M data segments can be determined as the nth target security policy item among the N target security policy items according to the first arrangement order and the second arrangement order, where m=n, m≤N, n≤N, and for the data segments after N, the target security policy item corresponding to the mth data segment among the M data segments is determined as the i-th target security policy item among the N target security policy items according to the first arrangement order and the second arrangement order, where m=k·t+i, t=N, k≥1, i≤N. That is, when it is confirmed that the target security policy item corresponding to the mth data segment is the last target security policy item among the N target security policy items, the target security policy item corresponding to the subsequent data segments will start from the first one among the N target security policy items, where k can be the number of cycles. In the embodiment of the present application, when the number of data segments is greater than the number of target security policy items, the target security policy item corresponding to each data segment will be first confirmed in the manner of M≤N, and when it is confirmed that the target security policy item corresponding to the mth data segment is the last target security policy item among the N target security policy items, t is determined to be N, and the target security policy item corresponding to the next mth data segment (i.e., the t+1th data segment, at this time k=1) is reconfirmed as the first target security policy item, and the cycle is repeated, and the values ​​of i and k are continuously adjusted until the target security policy item corresponding to the last data segment is obtained. Exemplarily, if M=5 and N=2, the first data segment corresponds to the first target security policy item, the second data segment corresponds to the second target security policy item, the third data segment corresponds to the first target security policy item, the fourth data segment corresponds to the second target security policy item, and the fifth data segment corresponds to the first target security policy item.

[0069] Of course, in a specific implementation, the user may also confirm the target security policy item corresponding to each data segment in the M data segments among the N target security policy items according to the comparison relationship between the first arrangement order and the second arrangement order, such as the first data segment in the first arrangement order corresponds to the penultimate target security policy item in the second arrangement order, the second data segment in the first arrangement order corresponds to the penultimate target security policy item in the second arrangement order... etc. The embodiment of the present application does not make specific requirements for this.

[0070] In one possible implementation, an embodiment of the present application can adjust the second arrangement order of N target security policy items based on a third interaction signal input by the user, that is, adjust the arrangement order of the security algorithms in the security list, thereby adjusting the target security policy items corresponding to each data segment, wherein the third interaction signal can be a click and / or drag operation.

[0071] In one possible implementation, the method for securely processing data may include authentication and / or encryption, that is, the N target security policy items may include X target authentication algorithms and / or Y target encryption algorithms. Of course, in actual applications, the N target security policy items may also include other data security processing methods, such as data marking, data shielding, etc., which are not specifically required in the embodiments of the present application. The following is an illustration using authentication and encryption as an example.

[0072] At this time, data security processing is performed on the M data segments according to the N target security policy items, specifically including: performing authentication processing on the M data segments according to the X target authentication algorithms to obtain M summary values, wherein each data segment corresponds to a summary value, and / or performing encryption processing on the M data segments according to the Y target encryption algorithms. In a specific implementation, if the security processing method includes both authentication and encryption, the authentication process can be performed first, and then the encryption process, and in the encryption process, the summary value obtained in the authentication process can be used as an encryption key to perform encryption processing on the data segment.

[0073] In a specific implementation, when performing authentication processing on M data segments according to X target authentication algorithms, it is necessary to first determine the target authentication algorithm corresponding to each data segment in the M data segments in the X target authentication algorithms, and then perform authentication processing on each data segment according to the target authentication algorithm corresponding to each data segment to obtain the digest value of each data segment. Specifically, the target authentication algorithm corresponding to each data segment in the M data segments in the X target authentication algorithms can be determined according to the first arrangement order of the M data segments and the third arrangement order of the X target authentication algorithms, wherein the third arrangement order of the X target authentication algorithms is the arrangement order of the authentication algorithms included in the authentication chain list.

[0074] Specifically, if M≤X, then according to the first arrangement order and the third arrangement order, it can be determined that the target authentication algorithm corresponding to the mth data segment among the M data segments is the xth target authentication algorithm among the X target authentication algorithms, where m=x, m≤M, x≤X. That is, the first data segment in the first arrangement order corresponds to the first target authentication algorithm in the third arrangement order, the second data segment in the first arrangement order corresponds to the second target authentication algorithm in the third arrangement order, and so on, to obtain the target authentication algorithm corresponding to each data segment.

[0075] If M>X, for the first N data segments among the M data segments, the target authentication algorithm corresponding to the mth data segment among the M data segments is determined to be the xth target authentication algorithm among the X target authentication algorithms according to the first arrangement order and the third arrangement order, where m=x, m≤X, x≤X; for the data segments after N, the target authentication algorithm corresponding to the mth data segment among the M data segments is determined to be the i-th target authentication algorithm among the X target authentication algorithms according to the first arrangement order and the third arrangement order, where m=k·t+i, t=X, k≥1, i≤X. That is, when it is confirmed that the target authentication algorithm corresponding to the tth (t=m=X) data segment is the last target authentication algorithm among the X target authentication algorithms, the target authentication algorithm corresponding to the subsequent data segments will start from the first one among the X target authentication algorithms, where k can be the number of cycles. That is, the first data segment of the first arrangement order corresponds to the first target authentication algorithm of the third arrangement order,..., the tth data segment of the first arrangement order corresponds to the last target authentication algorithm of the third arrangement order, the t+1th data segment of the first arrangement order corresponds to the first target authentication algorithm of the third arrangement order, the t+2th data segment of the first arrangement order corresponds to the second target authentication algorithm of the third arrangement order,..., the 2t+1th data segment of the first arrangement order corresponds to the first target authentication algorithm of the third arrangement order, the 2t+2th data segment of the first arrangement order corresponds to the second target authentication algorithm of the third arrangement order,... and so on, to obtain the target authentication algorithm corresponding to each data segment.

[0076] Of course, in a specific implementation, the user may also confirm the target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms according to the comparison relationship between the first arrangement order and the third arrangement order. This embodiment of the application does not make specific requirements for this.

[0077] In the embodiment of the present application, authenticating a data segment is to perform hash calculation on the data segment. The digest value obtained after the hash calculation may also be referred to as a hash value or a hash value. Commonly used authentication algorithms include MD5 (Message-Digest Algorithm 5) and SHA1 (Secure Hash Algorithm 1).

[0078] In a specific implementation, when performing encryption processing on M data segments according to Y target encryption algorithms, it is necessary to first determine the target encryption algorithm corresponding to each data segment in the M data segments in the Y target encryption algorithms, and then encrypt each data segment according to the target encryption algorithm corresponding to each data segment to obtain the ciphertext of each data segment. Specifically, the target encryption algorithm corresponding to each data segment in the M data segments in the Y target encryption algorithms can be determined according to the first arrangement order of the M data segments and the fourth arrangement order of the Y target encryption algorithms, wherein the fourth arrangement order of the Y target encryption algorithms is the arrangement order of the encryption algorithms included in the encryption linked list.

[0079] Specifically, if M≤Y, then according to the first and fourth order of arrangement, it can be determined that the target encryption algorithm corresponding to the mth data segment among the M data segments is the yth target encryption algorithm among the Y target encryption algorithms, where m=y, m≤M, y≤Ym=x. That is, the first data segment in the first order of arrangement corresponds to the first target encryption algorithm in the fourth order of arrangement, the second data segment in the first order of arrangement corresponds to the second target encryption algorithm in the fourth order of arrangement, and so on, to obtain the target encryption algorithm corresponding to each data segment.

[0080] If M>Y, for the first N data segments among the M data segments, the target encryption algorithm corresponding to the mth data segment among the M data segments is determined to be the yth target encryption algorithm among the Y target encryption algorithms according to the first arrangement order and the fourth arrangement order, where m=y, m≤Y, y≤Y; for the data segments after N, the target encryption algorithm corresponding to the mth data segment among the M data segments is determined to be the i-th target encryption algorithm among the Y target encryption algorithms according to the first arrangement order and the fourth arrangement order, where m=k·t+i, t=Y, k≥1, i≤Y. That is, when it is confirmed according to the above method that the target encryption algorithm corresponding to the tth (t=m=Y) data segment is the last target encryption algorithm among the Y target encryption algorithms, the target encryption algorithms corresponding to the subsequent data segments will start from the first one among the Y target encryption algorithms, where k can be the number of cycles. That is, the first data segment of the first arrangement order corresponds to the first target encryption algorithm of the fourth arrangement order,..., the tth data segment of the first arrangement order corresponds to the last target encryption algorithm of the fourth arrangement order, the t+1th data segment of the first arrangement order corresponds to the first target encryption algorithm of the fourth arrangement order, the t+2th data segment of the first arrangement order corresponds to the second target encryption algorithm of the fourth arrangement order,..., the 2t+1th data segment of the first arrangement order corresponds to the first target encryption algorithm of the fourth arrangement order, the 2t+2th data segment of the first arrangement order corresponds to the second target encryption algorithm of the fourth arrangement order,... and so on, to obtain the target encryption algorithm corresponding to each data segment.

[0081] Of course, in a specific implementation, the user may also confirm the target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms according to the comparison relationship between the first arrangement order and the fourth arrangement order. The embodiment of the present application does not make specific requirements for this.

[0082] In an embodiment of the present application, when the encryption key is a summary value after authentication processing, since each data segment corresponds to a summary value, when each data segment is encrypted according to the target encryption algorithm corresponding to each data segment, the summary value corresponding to each data segment can be used as the encryption key of each data segment. At this time, the summary value corresponding to each data segment is also the decryption key for the subsequent decryption calculation of each data segment.

[0083] In a possible implementation, the embodiment of the present application can adjust the third arrangement order of the X target authentication algorithms and / or the fourth arrangement order of the Y target encryption algorithms based on the third interaction signal input by the user, that is, adjust the arrangement order of the authentication algorithms in the authentication chain list and / or the arrangement order of the encryption algorithms in the encryption chain list, thereby adjusting the target authentication algorithm and / or the target encryption algorithm corresponding to each data segment, wherein the third interaction signal can be a click and / or drag operation.

[0084] The embodiment of the present application can make different data segments correspond to different encryption algorithms or different authentication algorithms by segmenting data, so that one image forming operation can use multiple encryption strategies to increase data security. The embodiment of the present application can reduce the risk of algorithm collision by setting such a unique and complex encryption authentication strategy.

[0085] In a possible implementation, after data security processing is performed on a data segment, first data can be obtained based on the data segment after security processing. Specifically, a segmentation data header is added in front of each data segment after data security processing, and the segmentation data header includes a target security policy item number and data security processing information corresponding to each data segment, wherein the target security policy item number is used to indicate the target security policy item corresponding to the target security policy item adopted by each data segment in N target security policy items, such as the target security policy item number can indicate the arrangement order of the target security policy item adopted by each data segment in N target security policy items, that is, the arrangement order of the target security policy item in the security linked list, and the data security processing information can include some numerical values ​​used for data security processing or the results obtained after data security processing, and then the data segments with the segmentation data header are spliced ​​according to the first arrangement order of the M data segments to obtain the first data.

[0086] Exemplarily, when the security processing method only includes authentication, a segmented data header may be added in front of each data segment after the authentication processing, and the segmented data header includes a target authentication algorithm number and a digest value corresponding to each data segment, wherein the target authentication algorithm number is used to indicate the target authentication algorithm corresponding to the target authentication algorithm adopted by each data segment in the X target authentication algorithms, such as the target authentication algorithm number may indicate the arrangement order of the target authentication algorithm adopted by each data segment in the X target authentication algorithms, that is, the arrangement order of the target authentication algorithm in the authentication linked list, and then the data segments with the segmented data header are spliced ​​according to the first arrangement order of the M data segments to obtain the first data; when the security processing method only includes encryption processing, a segmented data header may be added in front of each data segment after the encryption processing, and the segmented data header includes the target authentication algorithm corresponding to each data segment. An encryption algorithm number and an encryption key, wherein the target encryption algorithm number is used to indicate the target encryption algorithm used by each data segment and corresponds to the target encryption algorithm among Y target encryption algorithms. For example, the target encryption algorithm number can indicate the arrangement order of the target encryption algorithm used by each data segment among Y target encryption algorithms, that is, the arrangement order of the target encryption algorithm in the encryption linked list, and then the data segments with the segmented data headers are spliced ​​according to the first arrangement order of the M data segments to obtain the first data; when the security processing method includes authentication processing and encryption processing, a segmented data header can be added in front of each data segment after the encryption processing, and the segmented data header includes the authentication algorithm number, encryption algorithm number and summary value corresponding to each data segment, and then the data segments with the segmented data headers are spliced ​​according to the first arrangement order of the M data segments to obtain the first data.

[0087] For example, the first data obtained after encryption is as follows: Figure 7 As shown, the authentication algorithm number, encryption algorithm number and digest value contained in the segment data header may be arranged in the following order: Figure 8 shown.

[0088] S604: The control device sends first data to the image forming apparatus.

[0089] After obtaining the first data, the control device sends the first data to the image forming apparatus.

[0090] S605: The image forming apparatus performs data security processing on the first data according to N target security policy items to obtain second data.

[0091] After receiving the first data, the image forming device first obtains the segmentation data header of each data segment in the first data, and checks the content included in the segmentation data header, wherein the segmentation data header may include the target security policy item number and data security processing information corresponding to each data segment. Specifically, according to the process of obtaining the first data, the segmentation data header may include the target authentication algorithm number and summary value corresponding to each data segment, or the target encryption algorithm number and encryption key corresponding to each data segment, or the authentication algorithm number, encryption algorithm number and summary value corresponding to each data segment.

[0092] The image forming device performs data security processing on the first data based on the N target security policy items and the segmented data header of each data segment to obtain the second data. Specifically, the image forming device determines the target security policy item adopted by each data segment based on the N target security policy items and the target security policy item number corresponding to each data segment, and then performs data security processing on each data segment based on the target security policy item adopted by each data segment and the data security processing information corresponding to each data segment. If there is no problem with each data segment after the data security processing, the data segments after the data security processing are spliced ​​according to the arrangement order of the data segments in the first data to obtain the second data.

[0093] In actual applications, since the security processing methods included in the N target security policy items are different, the contents included in the segmented data header are different. Therefore, the image forming device needs to use different methods to perform data security processing on the first data according to different situations to obtain the second data.

[0094] Specifically, when the N target security policy items include X target authentication algorithms, and the content contained in the segmented data header is the target authentication algorithm number and the digest value corresponding to each data segment, the image forming device can determine the target authentication algorithm used by each data segment based on the X target authentication algorithms and the target authentication algorithm number corresponding to each data segment, and then perform authentication processing on each data segment based on the target authentication algorithm used by each data segment and the digest value corresponding to each data segment. The specific process of the authentication processing is: hash calculation is performed on each data segment based on the target authentication algorithm used by each data segment to obtain a new digest value for each data segment, and the new digest value of each data segment is compared with the digest value in the segmented data header of each data segment. If the two digest values ​​are consistent, it means that the data of the data segment has integrity and authenticity, and the data segment passes the authentication. Otherwise, it is considered that the data of the data segment does not have integrity and authenticity, may be tampered with or damaged, or the job data is not sent by a legitimate user, and the data segment does not pass the authentication. If all the data segments pass the authentication, the data segments are spliced ​​according to the arrangement order of the data segments in the first data to obtain the second data.

[0095] Specifically, when the N target security policy items include Y target encryption algorithms, and the content contained in the segmented data header is the target encryption algorithm number and encryption key corresponding to each data segment, the image forming device can determine the target encryption algorithm used by each data segment based on the Y target encryption algorithms and the target encryption algorithm number corresponding to each data segment, and then decrypt each data segment based on the target encryption algorithm used by each data segment and the encryption key corresponding to each data segment. The specific process of the decryption process is: determine the decryption algorithm of each data segment based on the target encryption algorithm used by each data segment, use the encryption key of each data segment as the decryption key of each data segment, and decrypt each data segment based on the decryption algorithm of each data segment and the decryption key of each data segment. After each data segment is decrypted, the decrypted data segments are spliced ​​according to the arrangement order of the data segments in the first data to obtain the second data.

[0096] Specifically, when the N target security policy items include X target authentication algorithms and Y target encryption algorithms, and the content contained in the segmented data header is the authentication algorithm number, encryption algorithm number and summary value corresponding to each data segment, the image forming device can determine the target encryption algorithm used by each data segment based on the Y target encryption algorithms and the target encryption algorithm number corresponding to each data segment, and then decrypt each data segment based on the target encryption algorithm used by each data segment and the summary value corresponding to each data segment. And based on the X target authentication algorithms and the target authentication algorithm number corresponding to each data segment, determine the target authentication algorithm used by each data segment, and then authenticate each decrypted data segment based on the target authentication algorithm used by each data segment and the summary value corresponding to each data segment. Among them, the specific process of decryption processing, the specific process of authentication processing and the specific process of obtaining the second data can refer to the above-mentioned authentication and decryption embodiments. For the sake of simplicity, the embodiments of this application will not be repeated here. However, it should be noted that the decryption key when decrypting each data segment is the summary value corresponding to each data segment.

[0097] In an embodiment of the present application, if there is a data segment that has not passed security processing (i.e., a data segment that has not passed authentication), the data segment number and related error information can be recorded in the log together, so that the user can understand the specific circumstances of the error by viewing the log information and take corresponding measures to resolve it.

[0098] S606: The image forming apparatus performs an image forming operation.

[0099] After obtaining the second data, the image forming device performs an image forming operation based on the second data.

[0100] The embodiment of the present application is based on the transmission principle of image forming job data, adopts the idea of ​​segmented encryption and decryption, segments the data when the job is encapsulated, and adopts different authentication algorithms and encryption algorithms for the segmented data. When parsing the data, each segmented data is decrypted and verified according to different encryption algorithms and authentication algorithms to ensure the security of the job data during transmission and storage within the control device and the image forming device. The embodiment of the present application encrypts the data using a high-intensity encryption algorithm to prevent the data from being illegally acquired. At the same time, the authentication technology can verify the integrity of the data and ensure that the image forming job data has not been tampered with or forged, which greatly improves the data security of the image forming job. This can effectively prevent data leakage for image forming jobs involving sensitive information or high confidentiality.

[0101] Corresponding to the above embodiment, the embodiment of the present application also provides a control device.

[0102] See also Fig. 9 , is a schematic diagram of the structure of a control device provided in an embodiment of the present application. Fig. 9 As shown, the control device 900 includes: a display unit 901, used to display multi-level adjustment interaction items and security policy interaction items; a first determination unit 902, used to determine a target adjustment item from the multi-level adjustment interaction items in response to a first interaction signal; a second determination unit 903, used to determine N target security policy items from the security policy interaction items in response to a second interaction signal; a storage unit 904, used to store the target adjustment item and the N target security policy items, so as to facilitate data processing based on the target adjustment item and the N target security policy items, wherein N≥1.

[0103] The specific contents of the embodiments of the present application can be found in the description of the above method embodiments, which will not be repeated here for the sake of brevity.

[0104] Corresponding to the above embodiment, the embodiment of the present application further provides an image forming device.

[0105] See also Fig.10 , is a schematic diagram of the structure of an image forming device provided in an embodiment of the present application. Fig.10 As shown, the image forming apparatus 1000 includes: a storage unit 1001 for storing N target security policy items; a receiving unit 1002 for receiving first data sent by a control device; and a data security processing unit 1003 for performing data security processing on the first data according to the N target security policy items to obtain second data.

[0106] The specific contents of the embodiments of the present application can be found in the description of the above method embodiments, which will not be repeated here for the sake of brevity.

[0107] Corresponding to the above embodiment, the embodiment of the present application further provides an image forming system, including: Fig. 9 The control device 900 shown and Fig.10 The image forming apparatus 1000 shown in FIG. 1 is a diagram in which the control device 900 is communicatively connected to the image forming apparatus 1000 .

[0108] In a specific implementation, the embodiment of the present application further provides a computer storage medium, wherein the computer storage medium may store a program, and when the program is executed, the program may include some or all of the steps in each embodiment of the data processing method provided in the embodiment of the present application. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

[0109] In a specific implementation, an embodiment of the present application also provides a computer program product, wherein the computer program product includes executable instructions, and when the executable instructions are executed on a computer, the computer executes part or all of the steps in each embodiment of the data processing method provided in the embodiment of the present application.

[0110] Those skilled in the art can clearly understand that the technology in the embodiments of the present application can be implemented by means of software plus a necessary general hardware platform. Based on this understanding, the technical solution in the embodiments of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which can be stored in a storage medium such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application or some parts of the embodiments.

[0111] In this specification, the same or similar parts between the various embodiments can be referred to each other. In particular, for the device embodiment and the terminal embodiment, since they are basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description in the method embodiment.

Claims

1. A data processing method, applied to a control device, characterized in that: include: Display multi-level mediation interaction terms and security policy interaction terms; determining a target adjustment item from the multiple levels of adjustment interaction items in response to a first interaction signal; determining N target security policy items from the security policy interaction items in response to a second interaction signal; The target adjustment item and the N target security policy items are stored to facilitate data processing based on the target adjustment item and the N target security policy items, wherein N≥1.

2. The data processing method according to claim 1, characterized in that: The performing data processing based on the target adjustment item and the N target security policy items includes: Responding to the data transmission signal, acquiring data to be processed; Perform data segmentation processing on the data to be processed according to the target adjustment item to obtain M data segments; Data security processing is performed on the M data segments according to the N target security policy items to obtain first data, where M≥1.

3. The data processing method according to claim 2, characterized in that: The multi-level adjustment interaction item includes a plurality of adjustment items, and each of the adjustment items corresponds to a segmentation item for performing data segmentation processing on the data.

4. The data processing method according to claim 2, characterized in that: The performing data segmentation processing on the data to be processed according to the target adjustment item to obtain M data segments includes: Confirming a segmentation item corresponding to the target adjustment item for performing data segmentation processing on the data; Data segmentation processing is performed on the data to be processed according to the segmentation item for performing data segmentation processing on the data corresponding to the target adjustment item, so as to obtain M data segments.

5. The data processing method according to claim 2, characterized in that: The performing data security processing on the M data segments according to the N target security policy items to obtain first data includes: Determine a target security policy item corresponding to each data segment in the M data segments among the N target security policy items; Data security processing is performed on each data segment according to the target security policy item corresponding to each data segment to obtain first data.

6. The data processing method according to claim 5, characterized in that: The determining of a target security policy item corresponding to each data segment in the M data segments in the N target security policy items includes: Determining a first arrangement order of the M data segments and a second arrangement order of the N target security policy items; The target security policy item corresponding to each data segment in the M data segments among the N target security policy items is determined according to the first arrangement order and the second arrangement order.

7. The data processing method according to claim 6, characterized in that: When M≤N, determining, according to the first arrangement order and the second arrangement order, a target security policy item corresponding to each data segment in the M data segments among the N target security policy items includes: According to the first arrangement order and the second arrangement order, the target security policy item corresponding to the mth data segment among the M data segments is determined to be the nth target security policy item among the N target security policy items, where m=n, m≤M, n≤N.

8. The data processing method according to claim 6, characterized in that: When M>N, determining, according to the first arrangement order and the second arrangement order, a target security policy item corresponding to each data segment in the M data segments among the N target security policy items includes: Determine, according to the first arrangement order and the second arrangement order, that the target security policy item corresponding to the mth data segment among the M data segments is the nth target security policy item among the N target security policy items, where m=n, m≤N, n≤N; According to the first arrangement order and the second arrangement order, the target security policy item corresponding to the mth data segment among the M data segments is determined to be the i-th target security policy item among the N target security policy items, where m=k·t+i, t=N, k≥1, i≤N.

9. The data processing method according to claim 1, characterized in that: Before storing the target adjustment item and the N target security policy items, the method further includes: The second arrangement order of the N target security policy items is adjusted in response to the third interaction signal.

10. The data processing method according to claim 2, characterized in that: The N target security policy items include X target authentication algorithms and / or Y target encryption algorithms; The performing data security processing on the M data segments according to the N target security policy items includes: Performing authentication processing on the M data segments according to the X target authentication algorithms to obtain M digest values, wherein each data segment corresponds to one digest value; and / or The M data segments are encrypted according to the Y target encryption algorithms.

11. The data processing method according to claim 10, characterized in that: The performing authentication processing on the M data segments according to the X target authentication algorithms to obtain M digest values ​​includes: Determine a target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms; Each data segment is authenticated according to the target authentication algorithm corresponding to each data segment to obtain M summary values.

12. The data processing method according to claim 11, characterized in that: The determining of a target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms comprises: Determining a first arrangement order of the M data segments and a third arrangement order of the X target authentication algorithms; The target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms is determined according to the first arrangement order and the third arrangement order.

13. The data processing method according to claim 12, characterized in that: When M≤X, determining the target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms according to the first arrangement order and the third arrangement order includes: The target authentication algorithm corresponding to the mth data segment among the M data segments is determined to be the xth target authentication algorithm among the X target authentication algorithms according to the first arrangement order and the third arrangement order, wherein m=x, m≤M, x≤X.

14. The data processing method according to claim 12, characterized in that: When M>X, determining the target authentication algorithm corresponding to each data segment in the M data segments among the X target authentication algorithms according to the first arrangement order and the third arrangement order includes: Determining, according to the first arrangement order and the third arrangement order, that the target authentication algorithm corresponding to the mth data segment among the M data segments is the xth target authentication algorithm among the X target authentication algorithms, wherein m=x, m≤X, x≤X; The target authentication algorithm corresponding to the mth data segment among the M data segments is determined to be the ith target authentication algorithm among the X target authentication algorithms according to the first arrangement order and the third arrangement order, wherein m=k·t+i, t=X, k≥1, i≤X.

15. The data processing method according to claim 10, characterized in that: Performing encryption processing on the M data segments according to the Y target encryption algorithms includes: Determine a target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms; Each data segment is encrypted according to the target encryption algorithm corresponding to each data segment.

16. The data processing method according to claim 15, characterized in that: The determining of a target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms includes: Determining a first arrangement order of the M data segments and a fourth arrangement order of the Y target encryption algorithms; The target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms is determined according to the first arrangement order and the fourth arrangement order.

17. The data processing method according to claim 16, characterized in that: When M≤Y, determining the target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms according to the first arrangement order and the fourth arrangement order includes: According to the first arrangement order and the fourth arrangement order, the target encryption algorithm corresponding to the mth data segment among the M data segments is determined to be the yth target encryption algorithm among the Y target encryption algorithms, where m=y, m≤M, y≤Y.

18. The data processing method according to claim 16, characterized in that: When M>Y, determining the target encryption algorithm corresponding to each data segment in the M data segments among the Y target encryption algorithms according to the first arrangement order and the fourth arrangement order includes: Determining, according to the first arrangement order and the fourth arrangement order, that the target encryption algorithm corresponding to the mth data segment among the M data segments is the yth target encryption algorithm among the Y target encryption algorithms, wherein m=y, m≤Y, y≤Y; According to the first arrangement order and the fourth arrangement order, the target encryption algorithm corresponding to the mth data segment among the M data segments is determined to be the i-th target encryption algorithm among the Y target encryption algorithms, where m=k·t+i, t=Y, k≥1, i≤Y.

19. The data processing method according to claim 10, characterized in that: Before storing the target adjustment item and the N target security policy items, the method further includes: The third arrangement order of the X target authentication algorithms and / or the fourth arrangement order of the Y target encryption algorithms are adjusted in response to the third interaction signal.

20. The data processing method according to any one of claims 2 to 10, characterized in that: The obtaining of the first data comprises: Add a segment data header in front of each data segment after data security processing, wherein the segment data header includes a target security policy item number corresponding to each data segment and data security processing information, wherein the target security policy item number is used to indicate the target security policy item corresponding to the data segment among the N target security policy items; The data segments with the segmented data headers are concatenated according to the first arrangement order of the M data segments to obtain first data.

21. A data processing method, applied to an image forming device, characterized in that: include: Store N target security policy items; receiving first data sent by a control device; The first data is subjected to data security processing according to the N target security policy items to obtain second data.

22. The data processing method according to claim 21, characterized in that: The performing data security processing on the first data according to the N target security policy items to obtain second data includes: Obtain a segment data header of each data segment in the first data, wherein the segment data header includes a target security policy item number and data security processing information corresponding to each data segment, wherein the target security policy item number is used to indicate a target security policy item corresponding to the data segment among the N target security policy items; The first data is subjected to data security processing according to the N target security policy items and the segmented data header of each data segment to obtain second data.

23. The data processing method according to claim 22, characterized in that: Performing data security processing on the first data according to the N target security policy items and the segmented data header of each data segment includes: Determine the target security policy item for each data segment according to the N target security policy items and the target security policy item number corresponding to each data segment; Data security processing is performed on each data segment according to the target security policy item of each data segment and the data security processing information corresponding to each data segment.

24. The data processing method according to claim 23, characterized in that: When the N target security policy items include X target authentication algorithms, the segmented data header includes a target authentication algorithm number and a digest value corresponding to each data segment, and the target authentication algorithm number is used to indicate the target authentication algorithm corresponding to the data segment among the X target authentication algorithms; The performing data security processing on the first data according to the N target security policy items and the segmented data header of each data segment includes: Determine the target authentication algorithm for each data segment according to the X target authentication algorithms and the target authentication algorithm number corresponding to each data segment; Each data segment is authenticated according to a target authentication algorithm for each data segment and a digest value corresponding to each data segment.

25. The data processing method according to claim 23, characterized in that: When the N target security policy items include Y target encryption algorithms, the segment data header includes a target encryption algorithm number and an encryption key corresponding to each data segment, and the target encryption algorithm number is used to indicate the target encryption algorithm corresponding to the data segment among the Y target encryption algorithms; The performing data security processing on the first data according to the N target security policy items and the segmented data header of each data segment includes: Determine a decryption algorithm for each data segment according to the Y target encryption algorithms and the target encryption algorithm number corresponding to each data segment; Using the encryption key corresponding to each data segment as the decryption key of each data segment; Each data segment is decrypted according to the decryption algorithm of each data segment and the decryption key of each data segment.

26. The data processing method according to claim 23, characterized in that: When the N target security policy items include X target authentication algorithms and Y target encryption algorithms, the segmented data header includes a target authentication algorithm number, a target encryption algorithm number and a digest value corresponding to each data segment; The performing data security processing on the first data according to the N target security policy items and the segmented data header of each data segment includes: Determine a decryption algorithm for each data segment according to the Y target encryption algorithms and the target encryption algorithm number corresponding to each data segment; Using the digest value corresponding to each data segment as the decryption key for each data segment; Decrypting each data segment according to the decryption algorithm of each data segment and the decryption key of each data segment; Determine the target authentication algorithm for each data segment according to the X target authentication algorithms and the target authentication algorithm number corresponding to each data segment; Each data segment after decryption is authenticated according to a target authentication algorithm for each data segment and a digest value corresponding to each data segment.

27. The data processing method according to claim 22, characterized in that: The obtaining of the second data comprises: If each of the data segments passes the data security processing, each of the data segments after passing the data security processing is spliced ​​according to the order of each data segment in the first data to obtain the second data.

28. A control device, characterized in that: include: A display unit, used for displaying multi-level adjustment interaction items and security policy interaction items; A first determining unit, configured to determine a target adjustment item from the multi-level adjustment interaction items in response to a first interaction signal; A second determining unit, configured to determine N target security policy items from the security policy interaction items in response to a second interaction signal; A storage unit is used to store the target adjustment item and the N target security policy items, so as to facilitate data processing on the data to be processed based on the target adjustment item and the N target security policy items, wherein N≥1.

29. An image forming device, characterized in that: include: A storage unit, used to store N target security policy items; A receiving unit, configured to receive first data sent by a control device; A data security processing unit is used to perform data security processing on the first data according to the N target security policy items to obtain second data.

30. An image forming system, characterized in that: The invention comprises the control device according to claim 28 and the image forming apparatus according to claim 29, wherein the image forming apparatus and the control device are communicatively connected.

Images