Information processing method, information processing device and electronic equipment
By decrypting and security verification of the target object after encryption processing of the signature server, the problem that the signature server cannot verify the security of the file to be signed is solved, and the authenticity and security of the signature are realized.
Patent Information
- Application Number
- CN202510045339.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-01-10
- Publication Date
- 2025-04-25
AI Technical Summary
Existing signature servers cannot verify the security of signed files, resulting in abuse of signatures and affecting the security of file usage.
By obtaining the target object after encryption and its corresponding identifier, decryption processing and security verification are performed, ensuring the authenticity and integrity of the file before signing.
Effectively prevent signatures from being abused, improve the security of file usage, and ensure the authenticity and credibility of signatures.
Smart Images
Figure CN119892371A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of information technology processing, and in particular to an information processing method, an information processing device and an electronic device. Background Art
[0002] For client files, such as software and documents, they can be signed by a signature server to facilitate users' use of various files. However, the signature server will perform signature operations on various files. The signature server cannot verify the security of the signed files. If the signed file is tampered with, the signature will be abused and the security of the file will be affected. Summary of the invention
[0003] Embodiments of the present application provide an information processing method, an information processing device, and an electronic device.
[0004] On the one hand, an embodiment of the present application provides an information processing method, which is applied to a first electronic device, and the method includes:
[0005] Based on the target signature instruction, obtain a first target object and a first identifier corresponding to the first target object, where the first target object is obtained through encryption processing;
[0006] Decrypting the first target object based on the target processing strategy to obtain a second target object;
[0007] Sending a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction;
[0008] When the second target object passes the security verification, the first identifier is signed to obtain corresponding signature data.
[0009] Optionally, the decrypting the first target object based on the target processing strategy to obtain the second target object includes:
[0010] Acquire a first private key associated with the first target object from the second electronic device;
[0011] When the first private key matches the first public key included in the first target object, the first target object is decrypted to obtain the second target object.
[0012] Optionally, the decrypting the first target object based on the target processing strategy to obtain the second target object further includes:
[0013] The first target object is sent to the second electronic device, so that the second electronic device matches the first public key contained in the first target object with the first private key associated with the first target object to decrypt the first target object and obtain the second target object.
[0014] Optionally, the sending a verification instruction to the second electronic device so that the second electronic device performs security verification on the second target object based on the verification instruction includes:
[0015] The second target object is sent to the second electronic device, so that the second electronic device compares the first configuration information corresponding to the second target object with the second configuration information in the second electronic device based on the verification instruction.
[0016] Optionally, the first target object is obtained by encrypting the second target object using a target algorithm by the second electronic device, and the first target object includes a first public key obtained by the encryption calculation, and a first private key matching the first public key is stored in the first electronic device and / or the second electronic device.
[0017] Optionally, before the second electronic device performs encryption calculation on the second target object using the target algorithm, the second electronic device backs up the first configuration information corresponding to the second target object to form second configuration information.
[0018] Optionally, the second target object includes at least one of the following:
[0019] The name of the first software associated with the second target object, the build information of the first software associated with the second target object, the version number of the first software associated with the second target object, and the production information of the first software.
[0020] Optionally, the performing signature processing on the first identifier to obtain corresponding signature data includes:
[0021] Using the second private key to sign and encrypt the first identifier to obtain first signature data corresponding to the second target object;
[0022] The second private key is different from the first private key.
[0023] The present application also provides an information processing device, including:
[0024] An acquisition module, configured to acquire a first target object and a first identifier corresponding to the first target object based on a target signature instruction, wherein the first target object is obtained by encryption processing;
[0025] A decryption module, configured to perform decryption processing on the first target object based on a target processing strategy to obtain a second target object;
[0026] A processing module, configured to send a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction;
[0027] The signature module is used to sign the first identifier to obtain corresponding signature data when the second target object passes the security verification.
[0028] On the other hand, an embodiment of the present application further provides an electronic device, including:
[0029] The memory is used to store the executable program; the processor is used to execute the executable program to implement the following steps:
[0030] Based on the target signature instruction, obtain a first target object and a first identifier corresponding to the first target object, where the first target object is obtained through encryption processing;
[0031] Decrypting the first target object based on the target processing strategy to obtain a second target object;
[0032] Sending a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction;
[0033] When the second target object passes the security verification, the first identifier is signed to obtain corresponding signature data. BRIEF DESCRIPTION OF THE DRAWINGS
[0034] Figure 1 A flowchart of an information processing method according to an embodiment of the present application;
[0035] Figure 2 For the embodiments of this application Figure 1 A flowchart of an embodiment of step S200;
[0036] Figure 3 A flowchart of an embodiment of the information processing method of the present application;
[0037] Figure 4 A flowchart of another embodiment of the information processing method of the embodiment of the present application;
[0038] Figure 5 A flowchart of a process of verifying a first target object according to an embodiment of the present application;
[0039] Figure 6 is a structural block diagram of an information processing device according to an embodiment of the present application;
[0040] Figure 7 This is a structural block diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION
[0041] Various aspects and features of the present application are described herein with reference to the accompanying drawings.
[0042] It should be understood that various modifications may be made to the embodiments of the present application. Therefore, the above description should not be considered as limiting, but only as an example of an embodiment. Other modifications within the scope and spirit of the present application will occur to those skilled in the art.
[0043] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the present application and, together with the general description of the present application given above and the detailed description of the embodiments given below, serve to explain the principles of the present application.
[0044] These and other characteristics of the present application will become apparent from the following description of a preferred form of embodiment given as a non-limiting example with reference to the accompanying drawings.
[0045] It should also be understood that although the present application has been described with reference to some specific examples, those skilled in the art will be able to readily implement many other equivalent forms of the present application.
[0046] The above and other aspects, features and advantages of the present application will become more apparent in view of the following detailed description when taken in conjunction with the accompanying drawings.
[0047] Specific embodiments of the present application are described hereinafter with reference to the accompanying drawings; however, it should be understood that the embodiments applied for are merely examples of the present application, which may be implemented in a variety of ways. Well-known and / or repeated functions and structures are not described in detail to avoid unnecessary or redundant details that obscure the present application. Therefore, the specific structural and functional details applied for herein are not intended to be limiting, but merely serve as a basis and representative basis for the claims to teach those skilled in the art to use the present application in a variety of ways with substantially any suitable detailed structure.
[0048] This specification may use the phrases "in one embodiment," "in another embodiment," "in yet another embodiment," or "in other embodiments," all of which may refer to one or more of the same or different embodiments according to the present application.
[0049] Figure 1 1 shows a flowchart of an information processing method according to an embodiment of the present application. Figure 1 As shown, including:
[0050] S100, based on the target signature instruction, obtaining a first target object and a first identifier corresponding to the first target object, wherein the first target object is obtained by encryption processing;
[0051] The information processing method of this embodiment is applied to a first electronic device, and the first electronic device may be a signature server, for example, the first electronic device may be an HSM (Hardware Security Module) server, which may perform digital signature. In this embodiment, when the client needs to sign the first target object through the first electronic device, the target signature instruction is first sent to the first electronic device. The first electronic device may obtain the first target object to be signed and the first identifier corresponding to the first target object based on the target signature instruction, and the first target object is obtained by encryption processing. The first target object may be an encrypted document, software, or data packet; the first identifier is a unique identifier corresponding to the first target object, for example, the first identifier may be a hash value or a unique code corresponding to the first target object. For example, the first target object may be an encrypted SBOM document, which is a list containing software configuration information, and the hash value may be attached to the SBOM document. When the user needs to sign the SBOM document, the SBOM document may be sent to the HSM server, and the SBOM document may be digitally signed by the HSM server. The first target object may also be an encrypted file, and the hash value may be attached to the encrypted file. When the user needs to sign the software, the software can be sent to the HSM server, and the HSM server will digitally sign the encrypted file.
[0052] S200, decrypting the first target object based on a target processing strategy to obtain a second target object;
[0053] In this embodiment, after obtaining the first target object and the first identifier corresponding to the first target object, since the first target object is obtained through encryption processing, the first electronic device needs to decrypt the first target object, and the operation of decrypting the first target object can be performed based on the target processing strategy. Based on the target processing strategy, the first electronic device can directly decrypt the first target object to obtain the second target object; based on the target processing strategy, the first electronic device can also send the first target object to the second electronic device, and the first target object is decrypted by the second electronic device to obtain the second target object; the second electronic device can be an SBOM (Software Bill of Materials) server, and the first electronic device and the second electronic device can perform trusted data transmission interaction. The first target object can be obtained by the second electronic device through encryption processing, and the second electronic device saves the data decrypted from the first target object after encryption processing.
[0054] like Figure 5 As shown, if the first electronic device directly decrypts the first target object, it needs to obtain the data for decrypting the first target object from the second electronic device, and decrypt the first target object through the decrypted data to obtain the second target object. For example, the first target object is an encrypted SBOM document. After the HSM server obtains the encrypted SBOM document, it can obtain the data for decrypting the SBOM document from the SBOM server, and then use the decrypted data to decrypt the encrypted SBOM document to obtain the SBOM document.
[0055] If the first target object is decrypted by the second electronic device, the first target object needs to be sent to the second electronic device, and the second electronic device can use the decryption data saved when the first target object is encrypted to decrypt the first target object to obtain the second target object. For example, the first target object is an encrypted SBOM document. After the HSM server obtains the encrypted SBOM document, it can send the encrypted SBOM document to the SBOM server, which stores the data for decrypting the SBOM document. The SBOM server can use the decryption data to decrypt the encrypted SBOM document to obtain the SBOM document.
[0056] S300, sending a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction;
[0057] In this embodiment, after the first target object is decrypted to obtain the second target object, the second target object needs to be verified to determine whether the second target object is a credible file. The first electronic device sends a verification instruction to the second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction; if the second target object passes the security verification of the second electronic device, it indicates that the second target object is a credible file. The first target object is obtained by the second electronic device encrypting the second target object. Before the second electronic device encrypts the second target object, it backs up the configuration information corresponding to the second target object.
[0058] During the process of the second electronic device performing security verification on the second target object based on the verification instruction, the configuration information corresponding to the current second target object can be compared and analyzed with the configuration information corresponding to the second target object backed up in the second electronic device. When the configuration information corresponding to the current second target object is the same as the configuration information corresponding to the second target object backed up in the second electronic device, it indicates that the current second target object is a credible file and the second target object can be signed.
[0059] S400: When the second target object passes the security verification, the first identifier is signed to obtain corresponding signature data.
[0060] In this embodiment, when the second target object passes the security verification of the second electronic device, it indicates that the second target object is a credible file, and the first electronic device can sign the first identifier to obtain the corresponding signature data. Specifically, the hash value corresponding to the first target object can be digitally signed by the HSM server to obtain the signature data corresponding to the second target object. For example, the first target object is an encrypted SBOM document. After the encrypted SBOM document is decrypted and passes the security verification, the HSM server can digitally sign the hash value corresponding to the decrypted SBOM document to obtain the signature data corresponding to the SBOM document.
[0061] In the above manner, the present application first decrypts the first target object to obtain the second target object, and then performs security verification on the second target object through the second electronic device. When the second target object passes the security verification, the first electronic device signs the first identifier to obtain corresponding signature data. For files that need to be signed, the present application sends the files to the SBOM server for security verification after decryption. When the files pass the security verification, the HSM server signs the identifier corresponding to the files, thereby avoiding signature abuse and improving the security of software use.
[0062] In one embodiment of the present application, Figure 2 As shown, the decryption processing of the first target object based on the target processing strategy to obtain the second target object includes:
[0063] S210, obtaining a first private key associated with the first target object from the second electronic device;
[0064] S220: When the first private key matches the first public key included in the first target object, decrypt the first target object to obtain the second target object.
[0065] In this embodiment, in the process of decrypting the first target object based on the target processing strategy, if the first target object is directly decrypted by the first electronic device, it is necessary to obtain data for decrypting the first target object from the second electronic device, and the data for decrypting the first target object may be the first private key associated with the first target object. The first target object is obtained by encrypting the second target object by the second electronic device. After the second electronic device encrypts the second target object, it will generate corresponding encryption information. The encryption information may be a key pair, the key pair includes a first public key and a first private key, the first public key and the first private key match, the first target object contains the first public key, and the first private key may be stored in the second electronic device. The first electronic device may obtain the first private key associated with the first target object from the second electronic device, and decrypt the first target object by using the first private key.
[0066] After the first electronic device obtains the first private key associated with the first target object from the second electronic device, the first private key can be matched with the first public key contained in the first target object. When the first private key matches the first public key contained in the first target object, the first target object can be decrypted to obtain the second target object. For example, the first target object is an encrypted SBOM document, and the encrypted SBOM document contains the first public key. After the HSM server obtains the encrypted SBOM document, the first private key associated with the SBOM document can be obtained from the SBOM server, and then the first private key can be paired with the first public key contained in the encrypted SBOM document, and the encrypted SBOM document can be decrypted to obtain the SBOM document.
[0067] In one embodiment of the present application, Figure 3 As shown, the decryption processing of the first target object based on the target processing strategy to obtain the second target object also includes:
[0068] S20, sending the first target object to the second electronic device, so that the second electronic device matches the first public key contained in the first target object with the first private key associated with the first target object, so as to decrypt the first target object and obtain the second target object.
[0069] In this embodiment, in the process of decrypting the first target object based on the target processing strategy, if the first target object is decrypted by the second electronic device, the first target object needs to be sent to the second electronic device, and the first target object is decrypted by the data for decrypting the first target object stored in the second electronic device, and the data for decrypting the first target object can be the first private key associated with the first target object. The first target object is obtained by the second electronic device encrypting the second target object, and after the second electronic device encrypts the second target object, it will generate corresponding encryption information, and the encryption information can be a key pair, the key pair includes a first public key and a first private key, the first public key and the first private key match, the first target object contains the first public key, and the first private key can be stored in the second electronic device.
[0070] The first electronic device can send the first target object to the second electronic device, and the second electronic device can retrieve the first private key associated with the first target object and decrypt the first target object using the first private key. The second electronic device can match the first private key with the first public key contained in the first target object, and when the first private key matches the first public key contained in the first target object, the first target object can be decrypted to obtain the second target object. For example, the first target object is an encrypted SBOM document, and the encrypted SBOM document contains the first public key. After the HSM server obtains the encrypted SBOM document, it can send the encrypted SBOM document to the SBOM server, and the SBOM server can pair the first private key associated with the SBOM document with the first public key contained in the encrypted SBOM document, decrypt the encrypted SBOM document, and obtain the SBOM document.
[0071] In one embodiment of the present application, Figure 4 As shown, the sending of a verification instruction to the second electronic device so that the second electronic device performs security verification on the second target object based on the verification instruction includes:
[0072] S103: Send the second target object to the second electronic device, so that the second electronic device compares the first configuration information corresponding to the second target object with the second configuration information in the second electronic device based on the verification instruction.
[0073] In this embodiment, after the first target object is decrypted and the second target object is obtained, the first electronic device sends a verification instruction to the second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction. During the process of the second electronic device performing security verification on the second target object based on the verification instruction, the first configuration information corresponding to the second target object can be compared with the second configuration information in the second electronic device to determine whether the first configuration information corresponding to the second target object is the same as the second configuration information in the second electronic device, and then the second target object can be securely verified.
[0074] Before the second electronic device performs encryption processing on the second target object, it will back up the configuration information corresponding to the second target object, obtain the second configuration information, and save the second configuration information in the second electronic device. After comparing the first configuration information corresponding to the second target object with the second configuration information in the second electronic device, if the first configuration information corresponding to the second target object is different from the second configuration information in the second electronic device, it indicates that the second target object has not passed the security verification of the second electronic device, the second target object may be tampered with, and there is a risk of information security. In this case, the signing operation for the second target object is not performed.
[0075] After comparing the first configuration information corresponding to the second target object with the second configuration information in the second electronic device, if the first configuration information corresponding to the second target object is the same as the second configuration information in the second electronic device, it indicates that the second target object has passed the security verification of the second electronic device and the second target object is a credible file. In this case, the signing operation for the second target object can be performed. For example, the first target object is an encrypted SBOM document. After decrypting the encrypted SBOM document, the decrypted SBOM document is sent to the SBOM server for security verification. The SBOM server can compare the configuration information corresponding to the SBOM document with the configuration information backed up in the SBOM server. If the configuration information corresponding to the decrypted SBOM document is the same as the configuration information backed up in the SBOM server, it indicates that the decrypted SBOM document is a credible file and the decrypted SBOM document can be signed.
[0076] In one embodiment of the present application, the first target object is obtained by encrypting the second target object by the second electronic device using a target algorithm, the first target object includes a first public key obtained by the encryption calculation, and a first private key matching the first public key is stored in the first electronic device and / or the second electronic device.
[0077] In this embodiment, the first target object is obtained by the second electronic device using the target algorithm to perform encryption calculation on the second target object. The target algorithm can be an asymmetric encryption algorithm. After the second electronic device performs encryption calculation on the second target object, a key pair will be generated. The key pair includes a first public key and a first private key, and the first public key matches the first private key. The first target object includes the first public key obtained by encryption calculation, and the first private key matching the first public key is stored in the second electronic device. The second electronic device can also send the first private key to the first electronic device through trusted transmission, and the first private key can also be stored in the first electronic device. For example, the SBOM server performs encryption calculation on the document to obtain the first public key and the first private key associated with the document. The document and the first public key form an encrypted document, and the first private key is used to pair with the first public key to decrypt the encrypted document. The first private key is stored in the SBOM server, and the first private key can also be sent to the HSM server through the SBOM server, and the first private key can also be stored in the HSM server.
[0078] In one embodiment of the present application, before the second electronic device performs encryption calculation on the second target object using the target algorithm, the second electronic device backs up the first configuration information corresponding to the second target object to form second configuration information.
[0079] In this embodiment, the second target object has first configuration information, and the first configuration information may be software configuration information associated with the second target object. The second electronic device uses the target algorithm to perform encryption calculations on the second target object. Before obtaining the encrypted first target object, the first configuration information corresponding to the second target object is backed up to form the second configuration information, that is, the software configuration information associated with the second target object is backed up for security verification of the second target object. For example, before the SBOM server performs encryption calculations on the document, the configuration information corresponding to the document may be backed up, and the backed-up configuration information may be saved. If the HSM server needs to sign the encrypted document, the document may be sent to the SBOM server, and the configuration information backed up by the SBOM server may be compared with the configuration information corresponding to the document to determine whether the document is a credible document.
[0080] In one embodiment of the present application, the second target object includes at least one of the following: the name of the first software associated with the second target object, the build information of the first software associated with the second target object, the version number of the first software associated with the second target object, and the production information of the first software.
[0081] In this embodiment, the second target object is generated by the second electronic device based on the first software associated with the second target object. The first software is a commonly used software in the electronic device. For example, the first software may be an EXE software. The second electronic device may generate the second target object based on the relevant configuration information of the first software. The second target object may be a document containing the relevant configuration information of the first software. The second target object may specifically include: the name of the first software associated with the second target object, the build information of the first software associated with the second target object, the version number of the first software associated with the second target object, and the production information of the first software associated with the second target object. For example, the SBOM server may generate an SBOM document containing the relevant configuration information of the first software based on the first software. The SBOM document is a list of all components, libraries, and dependencies used in the construction process of the first software in detail. The SBOM document may contain the name, version number, license information, and third-party library associated with the first software.
[0082] In one embodiment of the present application, the step of performing signature processing on the first identifier to obtain corresponding signature data includes:
[0083] Using the second private key to sign and encrypt the first identifier to obtain first signature data corresponding to the second target object;
[0084] The second private key is different from the first private key.
[0085] In this embodiment, when the second target object is confirmed as a trusted file through the security verification of the second electronic device, the first identification is signed by the first electronic device to obtain the corresponding signature data. Specifically, the first identification can be signed and encrypted by a digital signature algorithm, the second private key is used to perform signature encryption calculation on the first identification, and the first electronic device uses the second private key to sign and encrypt the first identification to obtain the first signature data corresponding to the second target object. For example, based on the digital signature algorithm, the HSM server can use the second private key to digitally sign the hash value corresponding to the SBOM document to obtain the signature data corresponding to the SBOM document, and the signature data can be attached to the SBOM document. When verifying the signature data, the public key corresponding to the second private key can be used to decrypt the signature data to confirm the authenticity of the signature data.
[0086] Based on the same inventive concept, the second aspect of the present application also provides an information processing device corresponding to an information processing method. Since the principle of solving the problem by the information processing device in the present application is similar to the above-mentioned information processing method of the present application, the implementation of the information processing device can refer to the implementation of the method, and the repeated parts will not be repeated.
[0087] Figure 6The structure diagram of the information processing device provided by the embodiment of the present application is shown, which specifically includes:
[0088] An acquisition module, configured to acquire a first target object and a first identifier corresponding to the first target object based on a target signature instruction, wherein the first target object is obtained by encryption processing;
[0089] A decryption module, configured to perform decryption processing on the first target object based on a target processing strategy to obtain a second target object;
[0090] A processing module, configured to send a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction;
[0091] The signature module is used to sign the first identifier to obtain corresponding signature data when the second target object passes the security verification.
[0092] In one embodiment of the present application, the decryption module is further configured as follows:
[0093] Acquire a first private key associated with the first target object from the second electronic device;
[0094] When the first private key matches the first public key included in the first target object, the first target object is decrypted to obtain the second target object.
[0095] In one embodiment of the present application, the processing module is further configured to:
[0096] The first target object is sent to the second electronic device, so that the second electronic device matches the first public key contained in the first target object with the first private key associated with the first target object to decrypt the first target object and obtain the second target object.
[0097] In one embodiment of the present application, the processing module is further configured to:
[0098] The second target object is sent to the second electronic device, so that the second electronic device compares the first configuration information corresponding to the second target object with the second configuration information in the second electronic device based on the verification instruction.
[0099] In one embodiment of the present application, the signature module is further configured as follows:
[0100] The first identifier is signed and encrypted using a second private key to obtain first signature data corresponding to the second target object; wherein the second private key is different from the first private key.
[0101] Based on the same inventive concept, Figure 7 As shown, this embodiment also includes an electronic device, including:
[0102] The memory is used to store the executable program; the processor is used to execute the executable program to implement the following steps:
[0103] Based on the target signature instruction, obtain a first target object and a first identifier corresponding to the first target object, where the first target object is obtained through encryption processing;
[0104] Decrypting the first target object based on the target processing strategy to obtain a second target object;
[0105] Sending a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction;
[0106] When the second target object passes the security verification, the first identifier is signed to obtain corresponding signature data.
[0107] The above embodiments are only exemplary embodiments of the present application and are not intended to limit the present application. The protection scope of the present application is defined by the claims. Those skilled in the art may make various modifications or equivalent substitutions to the present application within the essence and protection scope of the present application, and such modifications or equivalent substitutions shall also be deemed to fall within the protection scope of the present application.
Claims
1. An information processing method, applied to a first electronic device, the method comprising: Based on the target signature instruction, obtain a first target object and a first identifier corresponding to the first target object, where the first target object is obtained by encryption processing; Decrypting the first target object based on the target processing strategy to obtain a second target object; Sending a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction; When the second target object passes the security verification, the first identifier is signed to obtain corresponding signature data.
2. The method according to claim 1, wherein the decrypting the first target object based on the target processing strategy to obtain the second target object comprises: Acquire a first private key associated with the first target object from the second electronic device; When the first private key matches the first public key included in the first target object, the first target object is decrypted to obtain the second target object.
3. The method according to claim 1, wherein the decrypting the first target object based on the target processing strategy to obtain the second target object further comprises: The first target object is sent to the second electronic device, so that the second electronic device matches the first public key contained in the first target object with the first private key associated with the first target object to decrypt the first target object and obtain the second target object.
4. The method according to claim 1, wherein sending a verification instruction to the second electronic device so that the second electronic device performs security verification on the second target object based on the verification instruction comprises: The second target object is sent to the second electronic device, so that the second electronic device compares the first configuration information corresponding to the second target object with the second configuration information in the second electronic device based on the verification instruction.
5. The method according to claim 1, wherein: The first target object is obtained by encrypting the second target object by the second electronic device using a target algorithm. The first target object includes a first public key obtained by encryption calculation, and a first private key matching the first public key is stored in the first electronic device and / or the second electronic device.
6. The method according to claim 5, wherein: Before the second electronic device performs encryption calculation on the second target object using the target algorithm, the second electronic device backs up the first configuration information corresponding to the second target object to form second configuration information.
7. The method according to claim 6, wherein the second target object comprises at least one of the following: The name of the first software associated with the second target object, the build information of the first software associated with the second target object, the version number of the first software associated with the second target object, and the production information of the first software.
8. According to the method of claim 1, the step of performing signature processing on the first identifier to obtain corresponding signature data comprises: Using the second private key to sign and encrypt the first identifier to obtain first signature data corresponding to the second target object; The second private key is different from the first private key.
9. An information processing device, comprising: An acquisition module, configured to acquire a first target object and a first identifier corresponding to the first target object based on a target signature instruction, wherein the first target object is obtained by encryption processing; A decryption module, configured to perform decryption processing on the first target object based on a target processing strategy to obtain a second target object; A processing module, configured to send a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction; The signature module is used to sign the first identifier to obtain corresponding signature data when the second target object passes the security verification.
10. An electronic device comprising: A memory for storing executable programs; The processor is used to execute the executable program to implement the following steps: Based on the target signature instruction, obtain a first target object and a first identifier corresponding to the first target object, where the first target object is obtained by encryption processing; Decrypting the first target object based on the target processing strategy to obtain a second target object; Sending a verification instruction to a second electronic device, so that the second electronic device performs security verification on the second target object based on the verification instruction; When the second target object passes the security verification, the first identifier is signed to obtain corresponding signature data.