Data integrity verification method and system based on multi-function verification

Abstract

The invention relates to a data integrity verification method and system based on multi-function verification, and the method comprises the steps: executing a data fragmentation operation on target data to generate a plurality of mutually independent first data fragments, generating a second data fragment by using the first data fragments, and executing a verification operation by using different verification functions to generate corresponding verification values, the composite verification value is used for executing integrity verification operation on the transmission backup data of the target data, the accuracy of data integrity verification is enhanced, the situations of misjudgment and missed judgment are reduced, the confidentiality and integrity of the data in the multi-platform document transmission process are greatly improved, the risk that the data are tampered or damaged is reduced, and the data transmission efficiency is improved. The stability and safety of the multi-platform document transmission system are enhanced, the risk that the system is attacked or paralyzed is reduced, meanwhile, the working efficiency and the data processing speed are improved, and the transmission time and the processing time are shortened.

Description

Technical Field

[0001] The present invention relates to the technical field of document data transmission and data security protection, and particularly to a data integrity verification method and system based on multi-function verification. Background Art

[0002] During the transmission of multi-platform document data, data integrity verification is an important technical means to ensure that the transmitted data has not been tampered with or damaged. Data integrity verification can be achieved through various methods, and the most common ones are using checksum and integrity hash function.

[0003] Checksum is a simple but effective data integrity verification method. The sender calculates the checksum of the data and attaches it to the data and sends it to the receiver together. After receiving the data, the receiver recalculates the checksum and compares the calculated checksum with the received checksum. If the two checksums are equal, it means the data has not been tampered with or damaged; if the checksums are not equal, it means the data has changed.

[0004] Integrity hash function is a more powerful data integrity verification method. The sender uses the integrity hash function to calculate the hash of the data to obtain a hash value with a fixed length, and attaches it to the data and sends it to the receiver together. After receiving the data, the receiver uses the same integrity hash function to calculate the hash of the data to obtain a new hash value. Then, the receiver compares the received hash value with the calculated hash value. If the two hash values are equal, it means the data has not been tampered with or damaged; if the hash values are not equal, it means the data has changed.

[0005] However, there are still deficiencies in performing data integrity verification under the existing technology: different hash functions have different properties and security levels. Selecting a suitable hash function is the key to data integrity verification. If the selected hash function has weaknesses or is compromised, an attacker may forge the hash value by tampering with the data, resulting in the failure of data integrity verification; during the multi-platform document transmission process, how to judge the integrity of the data is an important issue. If the judgment criterion is too loose, some tampered data may still be regarded as complete data, thus bringing risks to data security. On the contrary, if the judgment criterion is too strict, some normal data may be misjudged as incomplete data, thus affecting the availability of the data; during the multi-platform document transmission process, an attacker may take various means to tamper with the data or interfere with the integrity verification process. For example, an attacker may intercept the data during the transmission process, tamper with it, and then send it to the receiver. In addition, an attacker may also create false results or perform a denial-of-service attack by interfering with the integrity verification process. Summary of the Invention

[0006] To solve the deficiencies of the prior art, the present invention proposes a data integrity verification method and system based on multi-function verification, which enhances the accuracy of data integrity verification, reduces the situations of misjudgment and missed judgment, greatly improves the confidentiality and integrity of data during the transmission of multi-platform documents, reduces the risk of data being tampered with or damaged, enhances the stability and security of the multi-platform document transmission system, reduces the risk of the system being attacked or paralyzed, and at the same time helps to improve work efficiency and data processing speed, and reduces transmission time and processing time.

[0007] To achieve the above objectives, the technical solutions adopted by the present invention include:

[0008] A data integrity verification method based on multi-function verification, characterized by including:

[0009] S1. Obtain target data, and perform data sharding operation on the target data to generate a number of mutually independent first data segments;

[0010] S2. Use the first data segments to generate second data segments, where the second data segments include at least two different first data segments;

[0011] S3. Use a first verification function to perform a first verification operation on one or more first data segments to generate a first verification value;

[0012] S4. Use a second verification function to perform a second verification operation on the first data segments that have not undergone the first verification operation to generate a second verification value;

[0013] S5. Use a third verification function to perform a third verification operation on the second data segments to generate a third verification value;

[0014] S6. Use the first verification value, the second verification value, and the third verification value to combine and generate a composite verification value;

[0015] S7. Use the composite verification value to perform an integrity verification operation on the transmission backup data of the target data.

[0016] Further, the method further includes:

[0017] Adding feature tags to the first data segments used to generate the second data segments.

[0018] Further, the method further includes:

[0019] Performing a first verification operation on the first data segments added with feature tags,

[0020] and, performing a second verification operation on the first data segments added with feature tags.

[0021] Further, the method further includes:

[0022] Judging whether the second data segment is complete by matching the first check value and the second check value according to the third check value;

[0023] When it is judged that the second data segment is complete, a composite check value is generated by using the combination of the first check value, the second check value and the third check value.

[0024] Further, the execution of the data sharding operation includes:

[0025] Configuring a sharding key according to a preset sharding strategy;

[0026] The target data is segmented into a plurality of independent first data segments according to the sharding key.

[0027] The present invention also relates to a data integrity verification system based on multi-function verification, which is characterized by including:

[0028] A sharding operation module, configured to perform a data sharding operation on target data to generate a plurality of independent first data segments;

[0029] A segment management module, configured to generate second data segments by using the first data segments;

[0030] A first verification execution module, configured to perform a first verification operation on one or more first data segments by using a first verification function to generate a first check value;

[0031] A second verification execution module, configured to perform a second verification operation on the first data segments that have not performed the first verification operation by using a second verification function to generate a second check value;

[0032] A third verification execution module, configured to perform a third verification operation on the second data segments by using a third verification function to generate a third check value;

[0033] A check value combination module, configured to generate a composite check value by using the combination of the first check value, the second check value and the third check value;

[0034] A verification module, configured to perform an integrity verification operation on the transmission backup data of the target data by using the composite check value.

[0035] The present invention also relates to a computer-readable storage medium, which is characterized in that a computer program is stored on the storage medium, and when the computer program is executed by a processor, the above-mentioned method is implemented.

[0036] The present invention also relates to an electronic device, which is characterized by including a processor and a memory;

[0037] The memory is used to store the first data segment and the second data segment;

[0038] The processor is used to execute the above method by calling the first data segment and the second data segment.

[0039] The present invention also relates to a computer program product, including a computer program and / or instructions, characterized in that when the computer program and / or instructions are executed by a processor, the steps of the above method are implemented.

[0040] The beneficial effects of the present invention are:

[0041] By adopting the data integrity verification method and system based on multi-function verification of the present invention, the accuracy of data integrity verification is enhanced, the situations of misjudgment and missed judgment are reduced, the confidentiality and integrity of data in the process of multi-platform document transmission are greatly improved, the risk of data being tampered with or damaged is reduced, the stability and security of the multi-platform document transmission system are enhanced, the risk of the system being attacked or paralyzed is reduced, and at the same time, it helps to improve work efficiency and data processing speed, and reduce transmission time and processing time. Detailed implementation manners

[0042] For a clearer understanding of the content of the present invention, it will be described in detail in combination with embodiments.

[0043] The first aspect of the present invention relates to a data integrity verification method based on multi-function verification, including:

[0044] S1. Obtain target data, and perform a data sharding operation on the target data to generate a number of independent first data segments.

[0045] Preferably, performing the data sharding operation includes: configuring a sharding key according to a preset sharding strategy; and splitting the target data into a number of independent first data segments according to the sharding key.

[0046] S2. Use the first data segments to generate second data segments, where the second data segments include at least two different first data segments.

[0047] Preferably, it further includes adding feature tags to the first data segments used to generate the second data segments.

[0048] S3. Use a first verification function to perform a first verification operation on one or more first data segments to generate a first verification value.

[0049] Preferably, it includes performing the first verification operation on the first data segments added with feature tags.

[0050] S4. Use a second verification function to perform a second verification operation on the first data segments that have not performed the first verification operation to generate a second verification value.

[0051] Preferably, it includes performing a second verification operation on the first data segment added with a feature label.

[0052] S5. Use a third verification function to perform a third verification operation on the second data segment to generate a third verification value.

[0053] S6. Use the first verification value, the second verification value, and the third verification value to generate a composite verification value in combination.

[0054] Preferably, determine whether the second data segment is complete by matching the first verification value and the second verification value according to the third verification value; when it is determined that the second data segment is complete, use the first verification value, the second verification value, and the third verification value to generate a composite verification value in combination.

[0055] S7. Use the composite verification value to perform an integrity verification operation on the transmission backup data of the target data.

[0056] On the other hand, the present invention also relates to a data integrity verification system based on multi-function verification, including:

[0057] A sharding operation module for performing a data sharding operation on the target data to generate a plurality of mutually independent first data segments;

[0058] A segment management module for generating a second data segment using the first data segment;

[0059] A first verification execution module for using a first verification function to perform a first verification operation on one or more first data segments to generate a first verification value;

[0060] A second verification execution module for using a second verification function to perform a second verification operation on the first data segment that has not performed the first verification operation to generate a second verification value;

[0061] A third verification execution module for using a third verification function to perform a third verification operation on the second data segment to generate a third verification value;

[0062] A verification value combination module for using the first verification value, the second verification value, and the third verification value to generate a composite verification value in combination;

[0063] A verification module for using the composite verification value to perform an integrity verification operation on the transmission backup data of the target data.

[0064] By using this system, the above arithmetic processing method can be executed and the corresponding technical effects can be achieved.

[0065] An embodiment of the present invention also provides a computer-readable storage medium capable of implementing all steps in the method in the above embodiment. A computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, all steps of the method in the above embodiment are implemented.

[0066] An embodiment of the present invention also provides an electronic device for executing the above method. As an implementation device of the method, the electronic device at least includes a processor and a memory. In particular, data and related computer programs required for executing the method are stored on the memory, such as a first data segment and a second data segment, etc. All steps of the method are implemented by the processor calling the data and programs in the memory, and corresponding technical effects are obtained.

[0067] Preferably, the electronic device may include a bus architecture. The bus may include any number of interconnected buses and bridges, and the bus links various circuits including one or more processors and memories together. The bus may also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, etc. These are well known in the art, and therefore, they will not be further described herein. The bus interface provides an interface between the bus and the receiver and the transmitter. The receiver and the transmitter may be the same element, i.e., a transceiver, providing a unit for communicating with various other systems on the transmission medium. The processor is responsible for managing the bus and general processing, and the memory may be used to store data used by the processor when executing operations.

[0068] Additionally, the electronic device may further include components such as a communication module, an input unit, an audio processor, a display, a power supply, etc. The processor (or controller, operation control) used therein may include a microprocessor or other processor devices and / or logic devices, which receive inputs and control the operations of various components of the electronic device; the memory may be one or more of a buffer, a flash memory, a hard drive, a removable medium, a volatile memory, a non-volatile memory, or other suitable devices, capable of storing the above relevant data information, and may also store programs for executing relevant information, and the processor may execute the programs stored in the memory to achieve information storage or processing, etc.; the input unit is used to provide inputs to the processor, for example, it may be a key or a touch input device; the power supply is used to provide power to the electronic device; the display is used to display display objects such as images and texts, for example, it may be an LCD display. The communication module is a transmitter / receiver that sends and receives signals via an antenna. The communication module (transmitter / receiver) is coupled to the processor to provide input signals and receive output signals, which may be the same as in the case of a conventional mobile communication terminal. Based on different communication technologies, multiple communication modules may be provided in the same electronic device, such as a cellular network module, a Bluetooth module, and / or a wireless local area network module, etc. The communication module (transmitter / receiver) is also coupled to the speaker and the microphone via the audio processor to provide audio output via the speaker and receive audio input from the microphone, thereby realizing normal telecommunication functions. The audio processor may include any suitable buffer, decoder, amplifier, etc. Additionally, the audio processor is also coupled to the central processor, so that recording can be performed on the device through the microphone, and the sound stored on the device can be played through the speaker.

[0069] Those skilled in the art should understand that the embodiments of the present invention can be provided as a method, a system, or a computer program product. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk memories, CD-ROMs, optical memories, etc.) containing computer-usable program codes.

[0070] The present invention is described with reference to the flowcharts and / or block diagrams of methods, apparatuses (systems), and computer program products according to embodiments of the present invention. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combinations of flows and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, such that the instructions executed by the processor of the computer or other programmable data processing devices generate a system for implementing the functions specified in one or more flows of the flowchart and / or one or more blocks of the block diagram.

[0071] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, such that the instructions stored in the computer-readable memory generate a manufacture including an instruction system that implements the functions specified in one or more flows of the flowchart and / or one or more blocks of the block diagram.

[0072] These computer program instructions can also be loaded onto a computer or other programmable data processing device, such that a series of operation steps are executed on the computer or other programmable device to generate a computer-implemented process, so that the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more flows of the flowchart and / or one or more blocks of the block diagram. Although the preferred embodiments of the present invention have been described, those skilled in the art can make additional changes and modifications once they learn the basic creative concepts. Therefore, the appended claims are intended to be construed to include the preferred embodiments and all changes and modifications falling within the scope of the present invention.

[0073] The above is only the preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by those skilled in the art within the technical scope disclosed by the present invention should be covered by the protection scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.

Claims

1. A data integrity verification method based on multi-function verification, characterized in that, it includes: S1. Obtain target data, and perform data sharding operation on the target data to generate a number of independent first data fragments; S2. Use the first data fragments to generate second data fragments, and the second data fragments include at least two different first data fragments; S3. Use the first verification function to perform a first verification operation on one or more first data fragments to generate a first verification value; S4. Use the second verification function to perform a second verification operation on the first data fragments that have not undergone the first verification operation to generate a second verification value; S5. Use the third verification function to perform a third verification operation on the second data fragments to generate a third verification value; S6. Use the first verification value, the second verification value and the third verification value to generate a composite verification value; S7. Use the composite verification value to perform an integrity verification operation on the transmission backup data of the target data.

2. The method according to claim 1, characterized in that, the method further includes: Adding feature tags to the first data fragments used to generate the second data fragments.

3. The method according to claim 2, characterized in that, the method further includes: Performing a first verification operation on the first data fragments added with feature tags, and performing a second verification operation on the first data fragments added with feature tags.

4. The method according to claim 3, characterized in that, the method further includes: Judging whether the second data fragments are complete by matching the first verification value and the second verification value according to the third verification value; When it is judged that the second data fragments are complete, use the first verification value, the second verification value and the third verification value to generate a composite verification value.

5. The method according to claim 1, characterized in that, the performing of the data sharding operation includes: Configuring a sharding key according to a preset sharding strategy; Cutting the target data into a number of independent first data fragments according to the sharding key.

6. A data integrity verification system based on multi-function verification, characterized in that, it includes: A sharding operation module for performing a data sharding operation on the target data to generate a number of independent first data fragments; A fragment management module for using the first data fragments to generate second data fragments; A first verification execution module for using the first verification function to perform a first verification operation on one or more first data fragments to generate a first verification value; A second verification execution module for using the second verification function to perform a second verification operation on the first data fragments that have not undergone the first verification operation to generate a second verification value; A third verification execution module for using the third verification function to perform a third verification operation on the second data fragments to generate a third verification value; A verification value combination module for using the first verification value, the second verification value and the third verification value to generate a composite verification value; A verification module for using the composite verification value to perform an integrity verification operation on the transmission backup data of the target data.

7. A computer-readable storage medium, characterized in that, a computer program is stored on the storage medium, and when the computer program is executed by a processor, the method described in any one of claims 1 to 5 is implemented.

8. An electronic device, It is characterized in that it includes a processor and a memory; the memory is used for storing a first data segment and a second data segment; the processor is used for executing the method according to any one of claims 1 to 5 by calling the first data segment and the second data segment.

9. A computer program product, comprising a computer program and / or instructions It is characterized in that when the computer program and / or instructions are executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented.