Equipment data security processing method and system

Abstract

The invention relates to a device data security processing method and system, and belongs to the technical field of data processing.The method comprises the steps that a target data storage request of a target device is received, and the target data storage request carries a data identifier and storage time; acquiring historical data transmission information of the target equipment, wherein the historical data transmission information comprises transmission time, data characteristics and data accessed characteristics; according to the historical data transmission information and the target data storage request, storage parameters are generated, and the storage parameters comprise random parameters and encryption parameters; and sending the storage parameter to the target device, so that the target device encrypts the target data based on the storage parameter under the condition of receiving the storage parameter, and stores the encrypted target data. According to the method, the customized storage parameters are generated by comprehensively considering the historical data transmission information and the current data storage requirement of the target equipment, and the parameters are applied in the data encryption and storage process, so that the data security is improved.

Description

Technical Field

[0001] The present invention belongs to the technical field of data processing, and in particular, relates to a method and system for securely processing device data. Background Art

[0002] With the development of network technology and smart terminals, video is currently the main form of information, such as work site videos recorded by mobile phone cameras, surveillance videos recorded by surveillance cameras, etc. Since the video can restore the actual situation at the time of recording, it greatly reduces the doubts about the scene in the later stage, helps to review the situation on the scene, and reduces the loss of the monitored object. Therefore, after the camera data is recorded, it will be stored or transmitted. This process may be stolen and leaked. In order to ensure the security of the camera data, it will be encrypted.

[0003] In the prior art, encryption is performed using a pre-obtained key. Although the existing encryption scheme can ensure the storage or transmission security of camera data, the same key is used for each encryption. If the key is stolen, the subsequent encrypted camera data will be subject to the security risk of being decrypted and leaked. Therefore, how to better achieve data security processing has become an urgent problem to be solved. Summary of the invention

[0004] In view of the above shortcomings of the prior art, the purpose of the invention is to provide a device data security processing method and system. The method improves data security.

[0005] In a first aspect of the present invention, a device data security processing method is proposed, comprising: S1, receiving a target data storage request of a target device, the target data storage request carrying a data identifier and a storage time; S2, obtaining historical data transmission information of the target device, the historical data transmission information including transmission time, data characteristics, and data access characteristics; S3, generating storage parameters according to the historical data transmission information and the target data storage request, the storage parameters including random parameters and encryption parameters; S4, sending the storage parameters to the target device, so that the target device, when receiving the storage parameters, encrypts the target data based on the storage parameters and stores the encrypted target data.

[0006] Further, storage parameters are generated according to the historical data transmission information and the target data storage request, including: generating the random parameters according to the historical data transmission information and the target data storage request, the random parameters being less than m*n, wherein m*n is the resolution of the target data of the target device, wherein m represents the number of pixels in the horizontal direction, and n represents the number of pixels in the vertical direction.

[0007] Further, generating storage parameters according to the historical data transmission information and the target data storage request includes: calculating the standard deviation of all transmission time differences of the target device according to the transmission time, wherein according to Calculate the standard deviation of all transmission time differences, where n represents the number of data transmissions, δ i represents all transmission time differences, μ represents the mean of all transmission time differences, where, Determine the data security value according to the data characteristics and the data access characteristics; The encryption parameter is determined, wherein a represents the standard deviation of all transmission time differences, b represents the data security value, and c represents the encryption parameter.

[0008] Furthermore, determining a data security value based on the data features and the data access features includes: determining similar devices to the target device; forming a first data vector with each of the data features of the historical data in the target device, and forming a second data vector with each of the data features of the historical data in the similar devices; calculating a data Euclidean distance, which is the Euclidean distance between the first data vector and the second data vector; forming a first behavior vector with each of the data access features of the historical data in the target device, and forming a second behavior vector with each of the data access features of the historical data in the similar devices; calculating a behavior Euclidean distance, which is the Euclidean distance between the first behavior vector and the second behavior vector; and taking the ratio of the standard deviation of the data Euclidean distance to the standard deviation of the behavior Euclidean distance as the data security value.

[0009] Further, determining similar devices to the target device includes: forming a data vector from each of the data features of the historical data in the target device, calculating the Euclidean distance between any two of the data vectors, taking the two data vectors with the smallest mean of the Euclidean distance as the first standard data of the historical data of the target device, and merging the two data vectors of the first standard data to form a first standard data vector; forming a data vector from each of the data features of the historical data in multiple first devices, calculating the Euclidean distance between any two of the data vectors, taking the two data vectors with the smallest mean of the Euclidean distance as the second standard data of the historical data of the multiple first devices, and merging the two data vectors of the second standard data to form multiple second standard data vectors; calculating multiple Euclidean distances between the first standard data vector and the multiple second standard data vectors, and determining the minimum Euclidean distance among the multiple Euclidean distances, and classifying the second standard data corresponding to the minimum Euclidean distance into one category with the first standard data, and taking the first device corresponding to the second standard data as a similar device to the target device.

[0010] Furthermore, the target data is encrypted based on the storage parameters, including: obtaining each frame data of the target data, and determining each channel sequence of each frame data; exchanging each frame data based on the encrypted interference value to obtain an exchange sequence of each channel of each frame data; determining an adjustment value of each channel based on a dotted decimal system, and adjusting each element in the exchange sequence of each channel based on the adjustment value to obtain an adjustment sequence of each channel of each frame data; merging the adjustment sequences of each channel to obtain encrypted pixel values ​​of each frame data.

[0011] Further, determining the encryption interference value includes: taking a ratio of the random parameter to the encryption parameter as the encryption interference value.

[0012] According to a second aspect of the present invention, a device data security processing system is proposed, comprising: a receiving module for receiving a target data storage request of a target device, the target data storage request carrying a data identifier and a storage time; an acquiring module for acquiring historical data transmission information of the target device, the historical data transmission information including transmission time, data characteristics, and data access characteristics; a generating module for generating storage parameters according to the historical data transmission information and the target data storage request, the storage parameters including random parameters and encryption parameters; and a sending module for sending the storage parameters to the target device, so that the target device, when receiving the storage parameters, encrypts the target data based on the storage parameters and stores the encrypted target data.

[0013] According to a third aspect of the present invention, an electronic device is proposed, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute any of the methods described in the first aspect of the present invention.

[0014] According to a fourth aspect of the present invention, a non-transitory computer-readable storage medium storing computer instructions is provided, wherein the computer instructions are used to enable the computer to execute any one of the methods according to the first aspect of the present invention.

[0015] The beneficial effects of the present invention are as follows:

[0016] The device data security processing method and system described in the present invention receive a target data storage request from a target device, the target data storage request carries a data identifier and storage time; obtain historical data transmission information of the target device, the historical data transmission information includes transmission time, data characteristics, and data access characteristics; generate storage parameters based on the historical data transmission information and the target data storage request, the storage parameters include random parameters and encryption parameters; send the storage parameters to the target device, so that the target device encrypts the target data based on the storage parameters when receiving the storage parameters, and stores the encrypted target data. The method generates customized storage parameters by comprehensively considering the historical data transmission information of the target device and the current data storage requirements, and applies these parameters in the data encryption and storage process, thereby improving data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The accompanying drawings are only used to illustrate specific embodiments and are not considered to limit the present invention. In the entire drawings, the same reference symbols represent the same components. Obviously, the drawings described below are only some embodiments recorded in the embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings.

[0018] Figure 1 is a flow chart of a method for securely processing device data according to an embodiment of the present invention;

[0019] Figure 2 is a flow chart of a method for securely processing device data according to a specific embodiment of the present invention;

[0020] Figure 3 is a flow chart of a method for encrypting target data based on storage parameters according to an embodiment of the present invention;

[0021] Figure 4is a structural block diagram of a device data security processing system according to an embodiment of the present invention;

[0022] Figure 5 It is a structural block diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0023] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present invention, the technical solutions of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of the embodiments. It should be understood that these descriptions are only exemplary and are not intended to limit the scope of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in the field without making creative work should fall within the scope of protection of the present invention.

[0024] Furthermore, in the following description, descriptions of well-known structures and technologies are omitted to avoid unnecessarily obscuring the concepts disclosed in the present invention.

[0025] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the orientation or position relationship indicated by the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inside", "outside", etc. is based on the orientation or position relationship shown in the drawings, which is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation of the present invention. In addition, the terms "first", "second", and "third" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance. The terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be a connection between the two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0026] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are merely examples of methods and systems consistent with some aspects of the present invention as detailed in the appended claims.

[0027] The present invention proposes a device data security processing method, system and related equipment. Specifically, the device data security processing method, system and related equipment of an embodiment of the present invention are described below with reference to the accompanying drawings.

[0028] Figure 1 : is a flowchart of a device data security processing method according to an embodiment of the present invention. It should be noted that the device data security processing method of the embodiment of the present invention can be applied to the device data security processing system of the embodiment of the present invention. The device data security processing system can be configured on an electronic device or in a server. This embodiment of the application is not limited to this.

[0029] like Figure 1 As shown, the device data security processing method includes:

[0030] S110, receiving a target data storage request from a target device, where the target data storage request carries a data identifier and a storage time.

[0031] In an embodiment of the present invention, the target device may send a target data storage request to the server, so that the server receives the target data storage request sent by the target device.

[0032] S120, obtaining historical data transmission information of the target device, where the historical data transmission information includes transmission time, data characteristics, and data access characteristics.

[0033] In the embodiment of the present invention, for example, the data summary is a data feature, and the data access feature may be composed of an accessed device identifier, an accessed user level, and an access time.

[0034] The level of the user being accessed is set by the relevant security personnel when the user registers. It can be set based on the user's position, level, etc. The higher the level, the more sensitive data can be accessed. When the user logs in, the level can be determined based on the user's login information. The data access characteristics can reflect the sensitivity of the data collected by the target device. If the sensitivity of historical data is high, the sensitivity of the target data this time may also be high.

[0035] S130, generating storage parameters according to historical data transmission information and target data storage request, the storage parameters including random parameters and encryption parameters.

[0036] In an embodiment of the present invention, a random parameter is generated based on historical data transmission information and a target data storage request, and the random parameter is less than m*n, where m*n is the resolution of the target data of the target device, where m represents the number of pixels in the horizontal direction (i.e., width), and n represents the number of pixels in the vertical direction (i.e., height).

[0037] Among them, the random parameter is an integer.

[0038] In an embodiment of the present invention, storage parameters are generated based on historical data transmission information and target data storage requests. The standard deviation of all transmission time differences of the target device is calculated based on the transmission time, wherein the standard deviation of all transmission time differences of the target device is calculated based on the transmission time. Calculate the standard deviation of all transmission time differences, where n represents the number of data transmissions, δ i represents all transmission time differences, μ represents the mean of all transmission time differences, where, Determine the data security value based on the data characteristics and data access characteristics; Determine the encryption parameter, where a represents the standard deviation of all transmission time differences, b represents the data security value, and c represents the encryption parameter. For specific implementation methods, please refer to the subsequent embodiments.

[0039] In an embodiment of the present invention, when the storage parameters are generated, the corresponding relationship between the data identifier, the storage time, and the storage parameters may be stored.

[0040] S140, sending the storage parameters to the target device, so that the target device encrypts the target data based on the storage parameters when receiving the storage parameters, and stores the encrypted target data.

[0041] In an embodiment of the present invention, when a storage parameter is generated, the storage parameter can be sent to a target device, so that when the target device receives the storage parameter, it encrypts the target data based on the storage parameter and stores the encrypted target data. For specific implementation methods, please refer to the subsequent embodiments.

[0042] According to the device data security processing method of the embodiment of the present invention, a target data storage request of a target device is received, and the target data storage request carries a data identifier and a storage time; historical data transmission information of the target device is obtained, and the historical data transmission information includes transmission time, data characteristics, and data access characteristics; storage parameters are generated according to the historical data transmission information and the target data storage request, and the storage parameters include random parameters and encryption parameters; the storage parameters are sent to the target device, so that the target device encrypts the target data based on the storage parameters when receiving the storage parameters, and stores the encrypted target data. The method generates customized storage parameters by comprehensively considering the historical data transmission information of the target device and the current data storage requirements, and applies these parameters in the data encryption and storage process, thereby improving data security.

[0043] In order to make it easier for those skilled in the art to understand the present invention, Figure 2 is a device data security processing method according to a specific embodiment of the present invention, such as Figure 2As shown, the device data security processing method includes:

[0044] S210, receiving a target data storage request from a target device, where the target data storage request carries a data identifier and a storage time.

[0045] S220, obtaining historical data transmission information of the target device, where the historical data transmission information includes transmission time, data characteristics, and data access characteristics.

[0046] S230: Generate random parameters according to historical data transmission information and target data storage request.

[0047] S240: Generate encryption parameters according to historical data transmission information and target data storage request.

[0048] In an embodiment of the present invention, generating encryption parameters according to historical data transmission information and target data storage request includes:

[0049] 31, calculate the standard deviation of all transmission time differences of the target device based on the transmission time.

[0050] In the embodiment of the present invention, the time difference between two adjacent transmissions in the target device may be determined based on the transmission time.

[0051] Among them, for the last historical transmission, the time difference is the difference between the current time and the last transmission time.

[0052] Among them, according to Calculate the standard deviation of all transmission time differences, where n represents the number of data transmissions, δ i represents all transmission time differences, μ represents the mean of all transmission time differences, where, The time of each transmission is t1, t2, ..., t n , calculate all transmission time differences as δ1=t2-t1, ..., δ n-1 =t n -t n-1 .

[0053] 32. Determine the data security value based on the data characteristics and the data access characteristics.

[0054] In an embodiment of the present invention, similar devices to a target device are determined; each data feature of historical data in the target device is formed into a first data vector, and each data feature of historical data in a similar device is formed into a second data vector; a data Euclidean distance is calculated, wherein the data Euclidean distance is the Euclidean distance between the first data vector and the second data vector; each data access feature of historical data in the target device is formed into a first behavior vector, and each data access feature of historical data in a similar device is formed into a second behavior vector; a behavior Euclidean distance is calculated, wherein the behavior Euclidean distance is the Euclidean distance between the first behavior vector and the second behavior vector; and a ratio of a standard deviation of the data Euclidean distance to a standard deviation of the behavior Euclidean distance is used as a data safety value.

[0055] In the embodiment of the present invention, similar devices to the target device may be determined in the following manner:

[0056] Each data feature of the historical data in the target device is formed into a data vector, and the Euclidean distance between any two data vectors is calculated, and the two data vectors with the smallest mean of the Euclidean distance are used as the first standard data of the historical data of the target device, and the two data vectors of the first standard data are merged to form a first standard data vector;

[0057] Each data feature of the historical data in the plurality of first devices is formed into a data vector, and the Euclidean distance between any two data vectors is calculated, and the two data vectors with the smallest mean of the Euclidean distance are used as the second standard data of the historical data of the plurality of first devices, and the two data vectors of the second standard data are merged to form a plurality of second standard data vectors;

[0058] A plurality of Euclidean distances between the first standard data vector and the plurality of second standard data vectors are calculated, and the minimum Euclidean distance among the plurality of Euclidean distances is determined, and the second standard data corresponding to the minimum Euclidean distance and the first standard data are classified into one category, and the first device corresponding to the second standard data is used as a similar device of the target device. The second standard data corresponding to the minimum Euclidean distance and the first standard data mean that they are relatively close in feature space, and therefore classified into one category.

[0059] 33, according to Determine encryption parameters.

[0060] In the embodiment of the present invention, when the standard deviation of all transmission time differences and the data security value are obtained, the following can be used based on Determine the encryption parameter, where a represents the standard deviation of all transmission time differences, b represents the data security value, and c represents the encryption parameter.

[0061] It can be seen that the above process is a process for determining the encryption parameter when the target device is not transmitting data for the first time. If the data of the target device is transmitted for the first time, the encryption parameter is a preset decimal.

[0062] This not only ensures that the random parameters are different each time, but also ensures that the encryption parameters are different each time. The encryption parameters also reflect the abnormality of the target device's encryption this time. The larger the value, the more abnormal it is. Therefore, after obtaining the encryption parameters, they can also be compared with the encryption parameter threshold. If it is greater than the encryption parameter threshold, it is considered that the data transmission is abnormal and an early warning can be issued.

[0063] S250, sending the storage parameters to the target device, so that the target device encrypts the target data based on the storage parameters when receiving the storage parameters, and stores the encrypted target data.

[0064] In an embodiment of the present invention, when storage parameters are generated, the storage parameters can be sent to a target device. When the target device receives the storage parameters, it encrypts the target data based on the storage parameters. After the encryption is completed, the encrypted target data can be stored.

[0065] Among them, Figure 3 As shown, the target data is encrypted based on the storage parameters, including:

[0066] S310, acquiring each frame data of the target data, and determining each channel sequence of each frame data.

[0067] In an embodiment of the present invention, the first frame data of the target data is used as the initial frame data, and the first frame data includes the red channel value, green channel value and blue channel value of each pixel. According to the pixel identification, a sequence of three channel values ​​can be obtained, such as the red channel value sequence of the first frame data is R0 = {r0(1), r0(2), ..., r0(m*n)}, the green channel value sequence is G0 = {g0(1), g0(2), ..., g0(m*n)}, and the blue channel value sequence is B0 = {b0(1), b0(2), ..., b0(m*n)}.

[0068] For the non-first frame of the target data, the difference between the red channel value, green channel value and blue channel value of each frame and the red channel value, green channel value and blue channel value of the initial frame is taken as its channel value, thereby forming three channel value sequences of the non-first frame, such as the red channel value sequence of the i-th frame is Ri = {ri(1), ri(2), ..., ri(m*n)}, the green channel value sequence is Gi = {gi(1), gi(2), ..., gi(m*n)}, and the blue channel value sequence is Bi = {bi(1), bi(2), ..., bi(m*n)}.

[0069] Among them, ri(1) = the red channel value of the first pixel of the i-th frame - r0(1), gi(1) = the green channel value of the first pixel of the i-th frame - g0(1), bi(1) = the blue channel value of the first pixel of the i-th frame - b0(1), and other values ​​are similar and are not calculated one by one. Then, through this step, the data of each frame can be obtained, specifically including the three channel value sequences of each frame.

[0070] S320, exchanging each frame data based on the encrypted interference value to obtain an exchange sequence of each channel of each frame data.

[0071] In the embodiment of the present invention, the ratio of the random parameter to the encryption parameter can be used as the encryption interference value, wherein the encryption interference value is a ceiling function.

[0072] That is, for each channel sequence of each frame data, each element is exchanged with the next INR-th element once to form an exchange sequence of three channels.

[0073] For example, the red channel value sequence of the i-th frame exchanges ri(1) and ri(encrypted interference value), exchanges ri(2) and ri(1+encrypted interference value), ..., exchanges ri(a*b) and ri(encrypted interference value-1).

[0074] That is to say, if the number of the element to be exchanged is greater than a*b, the accumulation calculation will start again from the 1st element. For example, a*b=10, and now you want to exchange the 6th and 11th elements, then after the 10th element, the accumulation will start from the 1st element, and the 6th and 1st elements will actually be exchanged.

[0075] Based on the above, each channel sequence of each frame of data is exchanged as described above.

[0076] S330, determining an adjustment value of each channel based on a dotted decimal format, and adjusting each element in a switching sequence of each channel based on the adjustment value to obtain an adjustment sequence of each channel of each frame data.

[0077] It should be noted that the dotted decimal format can be understood as the form of (abcd). Regardless of the data of which frame, the adjustment value of the red channel is the rightmost bit of the rightmost byte of the IP address of the target device (that is, the rightmost bit of d), the adjustment value of the green channel is the rightmost bit of the second rightmost byte of the IP address of the target device (that is, the rightmost bit of c), and the adjustment value of the blue channel is the rightmost bit of the third rightmost byte of the IP address of the target device (that is, the rightmost bit of b).

[0078] For example, if the IP address is (100.4.5.16), the adjustment value of the red channel is 6, the adjustment value of the green channel is 5, and the adjustment value of the blue channel is 4.

[0079] In the embodiment of the present invention, when the adjustment value of each channel is determined, each element value in the exchange sequence of each channel is adjusted to (its - adjustment value) / 256 to form adjustment sequences of three channels.

[0080] For example, if any element value in the exchange sequence of the red channel is ri(j), and the adjustment value of the red channel is 6, the adjusted value is (ri(j)-6) / 256, that is, ri(j)=(ri(j)-6) / 256. Then the adjustment sequence of the red channel is obtained. The adjustment sequences of the green channel and the blue channel can refer to the adjustment sequence of the red channel.

[0081] S340, merging the adjustment sequences of each channel to obtain encrypted pixel values ​​of each frame data.

[0082] In an embodiment of the present invention, when the adjustment sequence of each channel of each frame data is obtained, the adjustment sequence of each channel may be merged to obtain the encrypted pixel value of each frame data.

[0083] In the embodiment of the present invention, when the encrypted pixel value of each frame data is obtained, the encrypted pixel value of each pixel can be stored as the final storage data, thereby achieving the safe processing of the target device data.

[0084] In the embodiment of the present invention, a unique encrypted interference value is determined for each target data to be stored, and the target data of the target device is processed by the encrypted interference value, so that the processed data of the target data of the target device is different each time, thereby avoiding the leakage of subsequent data due to the leakage of one encrypted interference value, and improving the security of the camera data.

[0085] In an embodiment of the present invention, when data needs to be sent, the target device can transmit the encrypted target data to the server, for example, encrypt the stored target data using an existing encryption method, send the encrypted data to the server, and send the data identifier and storage time of the data at the same time. After the server decrypts the received target data, it processes it to obtain the original target data.

[0086] The device data security processing method according to the embodiment of the present invention has the following advantages:

[0087] Dynamic and adaptable encryption parameters: 1) This scheme does not simply use a fixed mode to determine encryption parameters, but comprehensively considers the historical data transmission information of the target device (covering transmission time, data characteristics, data access characteristics) and the target data storage request to generate encryption parameters. For example, by calculating the standard deviation of the transmission time difference, the regularity and fluctuation of the device data transmission in the time dimension can be reflected; the data security value determined based on the data characteristics and access characteristics, and the security is measured from the perspective of the data itself and the usage behavior, so that the encryption parameters can be dynamically changed according to the data situation at different stages of the device, which is more in line with the actual usage scenario and more adaptable. 2) Different methods are used to determine the encryption parameters for the first transmission of data and non-first transmission of data by the target device. For non-first transmission, the encryption parameters are carefully calculated based on the multiple factors mentioned above, and the first transmission uses a preset decimal as the encryption parameter. This differentiated design not only ensures basic encryption protection for the first transmission, but also makes full use of the device's past data to optimize the encryption parameters in subsequent transmissions, improving the flexibility and rationality of the overall encryption.

[0088] Abnormal detection and early warning function: The encryption parameter can reflect the abnormal degree of the target device's encryption and can be compared with the encryption parameter threshold. Once the encryption parameter is greater than the threshold, it means that there may be abnormalities in the data transmission, such as illegal access to the device, malicious tampering of data, etc. The system can issue an early warning in time to help relevant personnel quickly detect and deal with potential data security issues, enhancing the monitoring ability of the entire data processing process for abnormal situations.

[0089] The meticulousness and comprehensiveness of the encryption process: 1) When encrypting the target data, first obtain the data by frame, and further determine each channel sequence of each frame data, carefully distinguish the first frame data and non-first frame data to form different channel value sequences, covering the information from the beginning to the subsequent parts of the data to ensure that there is no omission. Then carry out subsequent encryption operations for each channel sequence. This processing method starting from the frame and channel level can more deeply and comprehensively protect data security than simply encrypting the entire data uniformly. 2) The encryption of data is realized through multiple encryption steps. First, the channel sequence of each frame data is exchanged based on the encryption interference value (determined by the ratio of the random parameter and the encryption parameter), and then the adjustment value of each channel is determined in dotted decimal form according to the IP address of the target device to further adjust the exchanged elements. Finally, the adjusted channel sequences are merged to obtain the encrypted pixel value. Multiple steps cooperate with each other and progress layer by layer to transform and encrypt the data in an all-round way, which greatly improves the complexity and confidentiality of encryption and makes the data more difficult to crack and restore.

[0090] Security assurance of data storage and transmission: 1) After receiving the storage parameters, the target device can encrypt the target data based on them, and then store the encrypted data, so that the data stored locally is in an encrypted state. Even if the device itself has a security vulnerability or is illegally obtained from access rights, the stored data will not be easily stolen and interpreted, ensuring the security of the data during the storage stage. 2) When data needs to be sent to the server, the target device transmits the encrypted target data, and attaches key information such as data identification and storage time. After receiving it, the server can decrypt and restore the original target data, which not only ensures the confidentiality of the data during transmission, but also ensures that the data can be used correctly after reaching the destination, realizing the secure processing of the entire link from data storage to transmission.

[0091] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods of each embodiment of the present application.

[0092] According to one aspect of an embodiment of the present invention, a device data security processing system is also provided. Figure 4 is a schematic diagram of a device data security processing system according to an embodiment of the present invention; Figure 4 As shown, including:

[0093] The receiving module 410 is used to receive a target data storage request from a target device, wherein the target data storage request carries a data identifier and a storage time;

[0094] An acquisition module 420 is used to acquire historical data transmission information of the target device, wherein the historical data transmission information includes transmission time, data characteristics, and data access characteristics;

[0095] A generating module 430, configured to generate storage parameters according to the historical data transmission information and the target data storage request, wherein the storage parameters include random parameters and encryption parameters;

[0096] The sending module 440 is used to send the storage parameter to the target device, so that the target device, when receiving the storage parameter, encrypts the target data based on the storage parameter and stores the encrypted target data.

[0097] According to the device data security processing system of the embodiment of the present invention, a target data storage request of a target device is received, the target data storage request carries a data identifier and a storage time; historical data transmission information of the target device is obtained, the historical data transmission information includes transmission time, data characteristics, and data access characteristics; storage parameters are generated according to the historical data transmission information and the target data storage request, the storage parameters include random parameters and encryption parameters; the storage parameters are sent to the target device, so that the target device encrypts the target data based on the storage parameters when receiving the storage parameters, and stores the encrypted target data. Thus, by comprehensively considering the historical data transmission information of the target device and the current data storage requirements, customized storage parameters are generated, and these parameters are applied in the data encryption and storage process, thereby improving data security.

[0098] Optionally, the generation module 430 is specifically used to generate the random parameter based on the historical data transmission information and the target data storage request, and the random parameter is less than m*n, wherein m*n is the resolution of the target data of the target device, wherein m represents the number of pixels in the horizontal direction, and n represents the number of pixels in the vertical direction.

[0099] Optionally, the generating module 430 is specifically configured to calculate the standard deviation of all transmission time differences of the target device according to the transmission time, wherein according to Calculate the standard deviation of all transmission time differences, where n represents the number of data transmissions, δ i represents all transmission time differences, μ represents the mean of all transmission time differences, where, Determine the data security value according to the data characteristics and the data access characteristics; The encryption parameter is determined, wherein a represents the standard deviation of all transmission time differences, b represents the data security value, and c represents the encryption parameter.

[0100] Optionally, generation module 430 is specifically used to determine similar devices to the target device; form a first data vector with each data feature of the historical data in the target device, and form a second data vector with each data feature of the historical data in the similar device; calculate the data Euclidean distance, which is the Euclidean distance between the first data vector and the second data vector; form a first behavior vector with each data access feature of the historical data in the target device, and form a second behavior vector with each data access feature of the historical data in the similar device; calculate the behavior Euclidean distance, which is the Euclidean distance between the first behavior vector and the second behavior vector; and use the ratio of the standard deviation of the data Euclidean distance to the standard deviation of the behavior Euclidean distance as the data safety value.

[0101] Optionally, the generation module 430 is specifically used to form a data vector from each of the data features of the historical data in the target device, and calculate the Euclidean distance between any two of the data vectors, use the two data vectors with the smallest mean of the Euclidean distance as the first standard data of the historical data of the target device, and merge the two data vectors of the first standard data to form a first standard data vector; form a data vector from each of the data features of the historical data in multiple first devices, and calculate the Euclidean distance between any two of the data vectors, use the two data vectors with the smallest mean of the Euclidean distance as the second standard data of the historical data of the multiple first devices, and merge the two data vectors of the second standard data to form multiple second standard data vectors; calculate multiple Euclidean distances between the first standard data vector and the multiple second standard data vectors, and determine the minimum Euclidean distance among the multiple Euclidean distances, and classify the second standard data corresponding to the minimum Euclidean distance into the same category as the first standard data, and use the first device corresponding to the second standard data as a similar device to the target device.

[0102] Optionally, the sending module 440 is specifically used to obtain each frame data of the target data, and determine each channel sequence of each frame data; exchange each frame data based on the encrypted interference value to obtain the exchange sequence of each channel of each frame data; determine the adjustment value of each channel based on the dotted decimal method, and adjust each element in the exchange sequence of each channel based on the adjustment value to obtain the adjustment sequence of each channel of each frame data; merge the adjustment sequence of each channel to obtain the encrypted pixel value of each frame data.

[0103] Optionally, the sending module 440 is specifically configured to use a ratio of the random parameter to the encryption parameter as the encryption interference value.

[0104] According to one aspect of an embodiment of the present invention, an electronic device is provided.

[0105] Figure 5 Schematic diagram of the structure of an electronic device according to an embodiment of the present invention. Figure 5 As shown, the electronic device may include one or more ( Figure 5Only one is shown in the figure) processor 102 (processor 102 may include but is not limited to a microprocessor (Microprocessor Unit, referred to as MPU) or a programmable logic device (Programmable logic device, referred to as PLD)) and a memory 104 for storing data. In an exemplary embodiment, the electronic device may also include a transmission device 106 and an input / output device 108 for communication functions. It can be understood by those skilled in the art that Figure 5 The structure shown is for illustration only and does not limit the structure of the above terminal device. Figure 5 More or fewer components as shown, or with Figure 5 Equivalent functions or comparisons shown Figure 5 A different configuration with more features is shown.

[0106] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the device data security processing method in the embodiment of the present invention. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, to implement the above method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the terminal device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0107] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the switching device. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0108] The present invention provides a non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to enable the computer to execute a device data security processing method.

[0109] The applicant of the present invention has made a detailed explanation and description of the implementation examples of the present invention in conjunction with the drawings in the specification. However, those skilled in the art should understand that the above implementation examples are only preferred implementation schemes of the present invention, and the detailed description is only to help readers better understand the spirit of the present invention, but not to limit the scope of protection of the present invention. On the contrary, any improvements or modifications based on the inventive spirit of the present invention should fall within the scope of protection of the present invention.

[0110] In addition, each functional unit in each embodiment of the present invention may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0111] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present invention have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present invention. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present invention.

[0112] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the embodiments of the present invention, rather than to limit them. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions recorded in the above embodiments, or replace some of the technical features therein by equivalents; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention. Any changes or replacements that can be easily thought of by those skilled in the art within the technical scope disclosed in the present invention should be covered within the protection scope of the present invention.

Claims

1. A device data security processing method, characterized in that: include: S1, receiving a target data storage request from a target device, wherein the target data storage request carries a data identifier and a storage time; S2, obtaining historical data transmission information of the target device, wherein the historical data transmission information includes transmission time, data characteristics, and data access characteristics; S3, generating storage parameters according to the historical data transmission information and the target data storage request, wherein the storage parameters include random parameters and encryption parameters; S4, sending the storage parameter to the target device, so that the target device, upon receiving the storage parameter, encrypts the target data based on the storage parameter and stores the encrypted target data.

2. The device data security processing method according to claim 1, characterized in that: Generating storage parameters according to the historical data transmission information and the target data storage request includes: The random parameter is generated according to the historical data transmission information and the target data storage request, and the random parameter is less than m*n, wherein m*n is the resolution of the target data of the target device, wherein m represents the number of pixels in the horizontal direction, and n represents the number of pixels in the vertical direction.

3. The device data security processing method according to claim 1, characterized in that: Generating storage parameters according to the historical data transmission information and the target data storage request includes: The standard deviation of all transmission time differences of the target device is calculated based on the transmission time, wherein Calculate the standard deviation of all transmission time differences, where n represents the number of data transmissions, δ i represents all transmission time differences, μ represents the mean of all transmission time differences, where, Determine a data security value according to the data characteristics and the data access characteristics; according to The encryption parameter is determined, wherein a represents the standard deviation of all transmission time differences, b represents the data security value, and c represents the encryption parameter.

4. The device data security processing method according to claim 3, characterized in that: Determining the data security value according to the data characteristics and the data access characteristics includes: determining similar devices to the target device; Forming each of the data features of the historical data in the target device into a first data vector, and forming each of the data features of the historical data in the similar device into a second data vector; Calculating a data Euclidean distance, where the data Euclidean distance is a Euclidean distance between the first data vector and the second data vector; Forming each of the data access features of the historical data in the target device into a first behavior vector, and forming each of the data access features of the historical data in the similar device into a second behavior vector; Calculating a behavior Euclidean distance, where the behavior Euclidean distance is a Euclidean distance between the first behavior vector and the second behavior vector; The ratio of the standard deviation of the data Euclidean distance to the standard deviation of the behavior Euclidean distance is used as the data safety value.

5. The device data security processing method according to claim 4, characterized in that: Determine similar devices to the target device, including: Each of the data features of the historical data in the target device is formed into a data vector, and the Euclidean distance between any two of the data vectors is calculated, and the two data vectors with the smallest mean of the Euclidean distance are used as the first standard data of the historical data of the target device, and the two data vectors of the first standard data are merged to form a first standard data vector; Each of the data features of the historical data in the plurality of first devices is formed into a data vector, and the Euclidean distance between any two of the data vectors is calculated, and the two data vectors with the smallest mean of the Euclidean distance are used as the second standard data of the historical data of the plurality of first devices, and the two data vectors of the second standard data are merged to form a plurality of second standard data vectors; Calculate multiple Euclidean distances between the first standard data vector and the multiple second standard data vectors, determine the minimum Euclidean distance among the multiple Euclidean distances, classify the second standard data corresponding to the minimum Euclidean distance and the first standard data into one category, and use the first device corresponding to the second standard data as a similar device to the target device.

6. The device data security processing method according to claim 1, characterized in that: Encrypting the target data based on the storage parameter includes: Acquire each frame data of the target data, and determine each channel sequence of each frame data; The frames of data are exchanged based on the encrypted interference value to obtain an exchange sequence of each channel of the frames of data; Determine an adjustment value of each channel based on a dotted decimal system, and adjust each element in the exchange sequence of each channel based on the adjustment value to obtain an adjustment sequence of each channel of each frame data; The adjustment sequences of each channel are combined to obtain encrypted pixel values ​​of each frame data.

7. The device data security processing method according to claim 6, characterized in that: Determining the encrypted interference value includes: The ratio of the random parameter to the encryption parameter is used as the encryption interference value.

8. A device data security processing system, characterized in that: include: A receiving module, configured to receive a target data storage request from a target device, wherein the target data storage request carries a data identifier and a storage time; An acquisition module, used to acquire historical data transmission information of the target device, wherein the historical data transmission information includes transmission time, data characteristics, and data access characteristics; A generating module, configured to generate storage parameters according to the historical data transmission information and the target data storage request, wherein the storage parameters include random parameters and encryption parameters; The sending module is used to send the storage parameter to the target device, so that the target device encrypts the target data based on the storage parameter when receiving the storage parameter, and stores the encrypted target data.

9. An electronic device, characterized in that: include: at least one processor; as well as a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 7.

10. A non-transitory computer-readable storage medium storing computer instructions, characterized in that: The computer instructions are used to cause the computer to execute the method according to any one of claims 1 to 7.

Images