Data processing method and device, computer equipment, readable storage medium and program product

Abstract

The invention relates to a data processing method and device, computer equipment, a readable storage medium and a program product. The method comprises the following steps: in response to a data processing request of an authorized user, processing an original data table corresponding to the data processing request in a database to obtain a processed original data table; when it is detected that data change occurs in the original data table in the processing process, first data after data change occurs in the processed original data table is determined, and at least two pieces of target data associated with the first data are obtained; performing encryption processing on the at least two pieces of target data to obtain ciphertext data; storing the ciphertext data in an encrypted data table; the encrypted data table is used for performing tamper-proof processing on the processed original data table. By adopting the method, the processing efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of computer technologies, and particularly to a data processing method, apparatus, computer device, computer-readable storage medium, and computer program product. Background Art

[0002] With the continuous development of information technology, the degree of informatization in various industries has gradually deepened, and the storage and transmission of data have become the core part. Especially in databases, the issues of data integrity and security have become increasingly prominent. In order to ensure the effectiveness, accuracy, and immutability of data, data anti-tampering has become a hot issue in current research and applications.

[0003] Data tampering refers to the act of an unauthorized user or system illegally modifying, deleting, or replacing data content. Data tampering not only affects the reliability of data but may also have a serious negative impact on an enterprise's business operations, decision-making analysis, and customer trust. Therefore, how to ensure that the information in a data table is not maliciously tampered with during storage, transmission, and use has become an important research direction in database security technologies.

[0004] In the current technical context, traditional data processing methods usually have the problem of low processing efficiency by manually reviewing whether there is maliciously tampered data in the log. Summary of the Invention

[0005] Based on this, it is necessary to provide a data processing method, apparatus, computer device, computer-readable storage medium, and computer program product that can improve processing efficiency for the above technical problems.

[0006] In a first aspect, the present application provides a data processing method, including:

[0007] In response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table;

[0008] When it is detected that data changes occur in the original data table during the processing, determine the first data after the data change in the processed original data table, and obtain at least two target data associated with the first data;

[0009] Perform encryption processing on the at least two target data to obtain ciphertext data;

[0010] Store the ciphertext data in an encrypted data table; the encrypted data table is used for anti-tampering processing of the processed original data table.

[0011] In one embodiment, obtaining at least two target data associated with the first data includes:

[0012] Determining at least two target fields in the processed original data table;

[0013] Obtaining at least two target data associated with the first data according to the at least two target fields.

[0014] In one embodiment, obtaining at least two target data associated with the first data according to the at least two target fields includes:

[0015] Arranging the at least two target fields to obtain the arranged at least two target fields;

[0016] Obtaining at least two target data associated with the first data according to the order of the arranged at least two target fields.

[0017] In one embodiment, after storing the ciphertext data in the encrypted data table, it further includes:

[0018] If the processed original data table is subject to unauthorized tampering, restoring the original data table with unauthorized tampering based on the encrypted data table to obtain a restored original data table.

[0019] In one embodiment, if the processed original data table is subject to unauthorized tampering, restoring the original data table with unauthorized tampering based on the encrypted data table to obtain a restored original data table includes:

[0020] If the processed original data table is subject to unauthorized tampering, decrypting the encrypted data table to obtain a decrypted data table;

[0021] If the decrypted data table is different from the processed original data table, determining that the processed original data table is subject to unauthorized tampering, and restoring the original data table with unauthorized tampering based on the decrypted data table to obtain a restored original data table.

[0022] In one embodiment, restoring the original data table with unauthorized tampering based on the decrypted data table to obtain a restored original data table includes:

[0023] Determining the second data with unauthorized tampering in the original data table with unauthorized tampering;

[0024] Obtaining the third data corresponding to the second data from the decrypted data table;

[0025] According to the third data, perform a recovery process on the second data in the original data table where unauthorized tampering has occurred to obtain a recovered original data table.

[0026] In a second aspect, the present application further provides a data processing device, including:

[0027] An original data table processing module, configured to process the original data table corresponding to the data processing request in the database in response to a data processing request from an authorized user, to obtain a processed original data table;

[0028] A target data acquisition module, configured to, when detecting that data changes occur during the processing of the original data table, determine first data after the data change in the processed original data table, and obtain at least two target data associated with the first data;

[0029] An encryption module, configured to perform an encryption process on the at least two target data to obtain ciphertext data;

[0030] A data storage module, configured to store the ciphertext data in an encrypted data table; the encrypted data table is used to perform anti-tampering processing on the processed original data table.

[0031] In a third aspect, the present application further provides a computer device, including a memory and a processor, where the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0032] In response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table;

[0033] When detecting that data changes occur during the processing of the original data table, determine first data after the data change in the processed original data table, and obtain at least two target data associated with the first data;

[0034] Perform an encryption process on the at least two target data to obtain ciphertext data;

[0035] Store the ciphertext data in an encrypted data table; the encrypted data table is used to perform anti-tampering processing on the processed original data table.

[0036] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0037] In response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table;

[0038] When it is detected that data changes occur in the original data table during processing, determine the first data after the data change in the processed original data table, and obtain at least two target data associated with the first data;

[0039] Perform encryption processing on the at least two target data to obtain ciphertext data;

[0040] Store the ciphertext data in an encrypted data table; the encrypted data table is used to perform anti-tampering processing on the processed original data table.

[0041] In a fifth aspect, the present application further provides a computer program product, including a computer program, which when executed by a processor, implements the following steps:

[0042] In response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table;

[0043] When it is detected that data changes occur in the original data table during processing, determine the first data after the data change in the processed original data table, and obtain at least two target data associated with the first data;

[0044] Perform encryption processing on the at least two target data to obtain ciphertext data;

[0045] Store the ciphertext data in an encrypted data table; the encrypted data table is used to perform anti-tampering processing on the processed original data table.

[0046] The above data processing method, device, computer device, computer-readable storage medium, and computer program product, in response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table. When it is detected that data changes occur in the original data table during processing, determine the first data after the data change in the processed original data table, and obtain at least two target data associated with the first data. Perform encryption processing on the at least two target data to obtain ciphertext data. Then, store the ciphertext data in an encrypted data table. The encrypted data table contains data information in the processed original data table and can be automatically used to perform anti-tampering processing on the processed original data table, avoiding manual anti-tampering processing of the data table and improving the efficiency of data processing. Description of the Drawings

[0047] To more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the following will briefly introduce the accompanying drawings required for the description of the embodiments of the present application or related technologies. Obviously, the accompanying drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other related accompanying drawings can also be obtained based on these drawings.

[0048] Figure 1 It is a schematic flowchart of a data processing method in an embodiment;

[0049] Figure 2 It is a schematic flowchart of a data processing method in another embodiment;

[0050] Figure 3 It is a schematic diagram of the original table after processing in an embodiment;

[0051] Figure 4 It is a schematic flowchart of data recovery in an embodiment;

[0052] Figure 5 It is a structural block diagram of a data processing device in an embodiment;

[0053] Figure 6 It is an internal structure diagram of a computer device in an embodiment. Detailed implementation manners

[0054] In order to make the purpose, technical solutions and advantages of the present application more clear and understandable, the following further details the present application in combination with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0055] In an embodiment, as Figure 1As shown, a data processing method is provided. In this embodiment, the method is exemplified by being applied to a computer device, which can be a terminal or a server. It can be understood that the method can also be applied to a system including a terminal and a server and implemented through the interaction between the terminal and the server. Among them, the terminal can be, but is not limited to, various personal computers, laptop computers, smart phones, tablet computers, Internet of Things devices, and portable wearable devices. The Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart in-vehicle devices, projection devices, etc. The portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The head-mounted device can be a virtual reality (VR) device, an augmented reality (AR) device, smart glasses, etc. The server can be an independent physical server, a server cluster or a distributed system composed of multiple physical servers, or a cloud server providing cloud computing services. In this embodiment, the method includes the following steps:

[0056] Step S102: In response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table.

[0057] Among them, an authorized user refers to a user who has passed system authentication and authorization and is allowed to initiate a data processing request to the database. These users usually have certain permissions and authentication to ensure the security and legality of the data. A data processing request is a request from an authorized user to the database to perform a certain operation on specific data, such as adding, updating, deleting, filtering, sorting, calculating, or converting data. The original data table is the initial data table stored in the database.

[0058] Optionally, the computer device performs an authentication process on a candidate user. If the candidate user passes the authentication process, the candidate user is determined as an authorized user.

[0059] Optionally, the computer device, in response to a data processing request from an authorized user, determines the original data table corresponding to the data processing request in the database and the candidate data corresponding to the data processing request in the original data table; processes the candidate processing in the original data table based on the data processing request to obtain a processed original data table; the processed original data table includes the processed candidate data. The data processing request includes the identifier of the original data table to be processed and the identifier of the data to be processed in the original data table to be processed.

[0060] For example, the computer device, in response to a data update request from an authorized user, changes the candidate data corresponding to the data update request in the original data table in the database to obtain a changed original data table.

[0061] Step S104: When it is detected that data changes occur in the original data table during the processing, determine the first data after the data change in the processed original data table, and obtain at least two target data associated with the first data.

[0062] Among them, the data change can be the addition, update, deletion, etc. of data. The first data is the data after the data change. The target data is the data that has a certain association relationship with the first data, and this association can be logical (such as parent-child relationship, reference relationship), business-related (such as data in related business processes), or positional (such as data belonging to the same row as the first data), etc.

[0063] Optionally, the computer device monitors the original data table in real time; when it is detected that data changes occur in the original data table during the processing, determine the first data after the data change in the processed original data table, and obtain at least two target data associated with the first data. By the computer device monitoring the original data table in real time, business-invisible monitoring and processing can be achieved.

[0064] Optionally, obtaining at least two target data associated with the first data includes: determining at least two target fields in the processed original data table; obtaining at least two target data associated with the first data according to the at least two target fields.

[0065] Among them, the at least two target fields can include all fields in the processed original data table, and at least two fields can be determined from all fields.

[0066] Obtaining at least two target data associated with the first data according to the at least two target fields includes: arranging the at least two target fields to obtain the arranged at least two target fields; obtaining at least two target data associated with the first data according to the order of the arranged at least two target fields.

[0067] The computer device arranges the at least two target fields in lexicographical order to obtain the arranged at least two target fields, and sequentially obtains at least two target data associated with the first data according to the order of the arranged at least two target fields. Among them, the at least two target data include the first data. Lexicographical order (Dictionary Order), also known as alphabetical order, refers to the method of sorting in the natural order such as alphabetical order or numerical order during sorting. It is usually applied to string sorting, but also applicable to other types of data structures.

[0068] Optionally, the computer device separates at least two target data using a delimiter to obtain the at least two separated target data; the at least two separated target data are encrypted to obtain ciphertext data.

[0069] It should be noted that there are no restrictions on the fields of the original data table in the database, and any field naming can be compatible. After encrypting at least two target data, they are separately maintained in another encrypted data table, which does not affect the business processing of the original data table. Give a sequential rule for the fields to ensure the splicing order and avoid the problem of disordered order, because the order of the data fields obtained in the program is not necessarily the same as the order of the data in the visible table.

[0070] Step S106: Encrypt at least two target data to obtain ciphertext data.

[0071] Optionally, the computer device uses a private key to encrypt at least two target data to obtain ciphertext data. When decrypting the ciphertext data, the public key is used to decrypt the plaintext data. Among them, the public key and the private key are corresponding. The public key can be an RSA public key, and the private key can be an RSA private key. Since the public key is public and can be obtained by anyone, but the corresponding private key cannot be derived from the public key; while the private key is only held by the holder of the key and is used to encrypt data. Once the private key is leaked, the security of the entire encryption system will be damaged, so it must be strictly kept.

[0072] Step S108: Store the ciphertext data in the encrypted data table; the encrypted data table is used to prevent tampering with the processed original data table.

[0073] Among them, the encrypted data table is a data table storing ciphertext data. The encrypted data table and the original data table can be in the same database or the same computer device, or in different databases or different computer devices.

[0074] Optionally, the computer device configures the permissions of the encrypted data table so that only authorized users can update or write, and other accounts can only read the encrypted data table.

[0075] The above data processing method responds to a data processing request from an authorized user, processes the original data table corresponding to the data processing request in the database to obtain a processed original data table. When it is detected that data changes occur during the processing of the original data table, the first data after the data change in the processed original data table is determined, and at least two target data associated with the first data are obtained. The at least two target data are encrypted to obtain ciphertext data. Then, the ciphertext data is stored in an encrypted data table, which contains the data information in the processed original data table and can be automatically used to prevent tampering with the processed original data table, avoiding manual tampering prevention of the data table and improving the efficiency of data processing.

[0076] In one embodiment, as Figure 2 shown, the computer device monitors the data processing of the original data table, determines whether there are data changes in the original data table. If not, it continues to monitor the data processing of the original data table; if so, it sorts all the fields of the processed original data table in lexicographical order, obtains at least two target data according to the sorted fields, splices the at least two target data using a delimiter, and encrypts the spliced at least two target data using an RSA private key to obtain ciphertext data, and stores the ciphertext data in a data table.

[0077] If the processed original data table is as Figure 3 shown, the data with changes in the processed original data table is the data with id = 1. Sort all the fields of the processed original data table in lexicographical order to obtain id, name, and status. Obtain the corresponding data according to the sorted fields and splice the data using a delimiter to get 1|zhangsan|1. Encrypt 1|zhangsan|1 to obtain ciphertext data, and store the ciphertext data in a data table.

[0078] In one embodiment, after storing the ciphertext data in the encrypted data table, it further includes: if the processed original data table is subject to unauthorized tampering, the original data table subject to unauthorized tampering is restored based on the encrypted data table to obtain a restored original data table.

[0079] Optionally, the computer device periodically or in real time detects the processed original data table. If it is detected that the processed original data table is subject to unauthorized tampering, the original data table subject to unauthorized tampering is restored based on the encrypted data table to obtain a restored original data table.

[0080] Optionally, if the processed original data table is unauthorizedly tampered with, the original data table with unauthorized tampering is restored based on the encrypted data table to obtain the restored original data table, including: if the processed original data table is unauthorizedly tampered with, the encrypted data table is decrypted to obtain the decrypted data table; if the decrypted data table is different from the processed original data table, it is determined that the processed original data table is unauthorizedly tampered with, and the original data table with unauthorized tampering is restored based on the decrypted data table to obtain the restored original data table.

[0081] The computer device decrypts the encrypted data table using the public key to obtain the decrypted data table; if the decrypted data table is different from the processed original data table, it is determined that the processed original data table is unauthorizedly tampered with; if the decrypted data table is the same as the processed original data table, it is determined that the processed original data table has not been unauthorizedly tampered with.

[0082] Optionally, the original data table with unauthorized tampering is restored based on the decrypted data table to obtain the restored original data table, including: determining the second data with unauthorized tampering in the original data table with unauthorized tampering; obtaining the third data corresponding to the second data from the decrypted data table; and restoring the second data in the original data table with unauthorized tampering according to the third data to obtain the restored original data table.

[0083] Optionally, obtaining the third data corresponding to the second data from the decrypted data table includes: obtaining at least two target data from the decrypted data table; and obtaining the third data corresponding to the second data from the at least two target data.

[0084] Optionally, restoring the second data in the original data table with unauthorized tampering according to the third data to obtain the restored original data table includes: restoring the second data in the original data table with unauthorized tampering to the third data to obtain the restored original data table.

[0085] Optionally, the computer device generates a processing log, which includes information such as anti-tampering processing operation information and recovery operation information. The entire process does not require manual operation. The program automatically performs verification and recovery, and only simple checking is required by observing the processing log.

[0086] In this embodiment, if the processed original data table is unauthorizedly tampered with, the original data table with unauthorized tampering can be automatically restored based on the encrypted data table, and the restored original data table can be obtained more quickly, improving the efficiency of data processing.

[0087] In one embodiment, as Figure 4As shown, the computer device scans the encrypted data table, decrypts the encrypted data table using the public key to obtain the processed decrypted data table, compares the decrypted data table with the processed original data table, and determines whether the decrypted data table and the processed original data table are different. If not, it continues to scan the encrypted data table. If so, it performs a recovery process on the second data in the original data table that has undergone unauthorized tampering.

[0088] The computer device can increase the frequency of scanning the encrypted data table by initiating multiple automatic tasks. Each automatic task scans only a part of the data. For example, Task 1 processes 1 - 100 records, and Task 2 processes 101 - 200 records to improve efficiency.

[0089] In one embodiment, a data processing method is also provided, which is applied to a computer device. The data processing method includes the following steps:

[0090] Step A1: In response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table.

[0091] Step A2: When it is detected that data changes occur in the original data table during the processing, determine the first data after the data change in the processed original data table, and determine at least two target fields in the processed original data table.

[0092] Step A3: Arrange at least two target fields to obtain the arranged at least two target fields.

[0093] Step A4: According to the order of the arranged at least two target fields, obtain at least two target data associated with the first data.

[0094] Step A5: Perform an encryption process on at least two target data to obtain ciphertext data.

[0095] Step A6: Store the ciphertext data in the encrypted data table; the encrypted data table is used for anti - tampering processing of the processed original data table.

[0096] Step A7: If unauthorized tampering occurs in the processed original data table, decrypt the encrypted data table to obtain a decrypted data table.

[0097] Step A8: If the decrypted data table is different from the processed original data table, determine that unauthorized tampering has occurred in the processed original data table.

[0098] Step A9: Determine the second data that has undergone unauthorized tampering in the original data table where unauthorized tampering has occurred.

[0099] Step A10: Obtain the third data corresponding to the second data from the decrypted data table.

[0100] Step A11: According to the third data, perform recovery processing on the second data in the original data table where unauthorized tampering has occurred to obtain the recovered original data table.

[0101] It should be understood that although the steps in the flowcharts involved in the above-described embodiments are sequentially shown according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless there is a clear indication in this article, the execution of these steps has no strict order limit, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-described embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be executed alternately or in turn with at least a part of other steps or steps or stages in other steps.

[0102] Based on the same inventive concept, an embodiment of the present application further provides a data processing device for implementing the data processing method described above. The implementation solution provided by this device to solve problems is similar to the implementation solution described in the above method. Therefore, the specific limitations in one or more embodiments of the data processing device provided below can refer to the limitations on the data processing method in the above text, and will not be repeated here.

[0103] In an exemplary embodiment, as Figure 5 shown, a data processing device is provided, including: an original data table processing module 502, a target data acquisition module 504, an encryption module 506, and a data storage module 508, where:

[0104] The original data table processing module 502 is configured to, in response to a data processing request from an authorized user, process the original data table corresponding to the data processing request in the database to obtain a processed original data table;

[0105] The target data acquisition module 504 is configured to, when it detects that data changes occur during the processing of the original data table, determine the first data after the data change in the processed original data table, and obtain at least two target data associated with the first data;

[0106] The encryption module 506 is configured to perform encryption processing on the at least two target data to obtain ciphertext data;

[0107] The data storage module 508 is configured to store the ciphertext data in an encrypted data table; the encrypted data table is used to perform anti-tampering processing on the processed original data table.

[0108] The above data processing device, in response to a data processing request from an authorized user, processes the original data table corresponding to the data processing request in the database to obtain a processed original data table. When it detects that data changes occur during the processing of the original data table, it determines the first data after the data change in the processed original data table, obtains at least two target data associated with the first data, performs encryption processing on the at least two target data to obtain ciphertext data, and then stores the ciphertext data in an encrypted data table. The encrypted data table contains the data information in the processed original data table and can be automatically used for anti-tampering processing of the processed original data table, avoiding manual anti-tampering processing of the data table and improving the efficiency of data processing.

[0109] In one embodiment, the above target data acquisition module 504 is further configured to determine at least two target fields in the processed original data table; and obtain at least two target data associated with the first data according to the at least two target fields.

[0110] In one embodiment, the above target data acquisition module 504 is further configured to arrange the at least two target fields to obtain the arranged at least two target fields; and obtain at least two target data associated with the first data in the order of the arranged at least two target fields.

[0111] In one embodiment, the above device further includes a data recovery module; the data recovery module is configured to, if the processed original data table is subject to unauthorized tampering, recover the original data table with unauthorized tampering based on the encrypted data table to obtain a recovered original data table.

[0112] In one embodiment, the above data recovery module is further configured to, if the processed original data table is subject to unauthorized tampering, decrypt the encrypted data table to obtain a decrypted data table; if the decrypted data table is different from the processed original data table, determine that the processed original data table is subject to unauthorized tampering, and recover the original data table with unauthorized tampering based on the decrypted data table to obtain a recovered original data table.

[0113] In one embodiment, the above data recovery module is further configured to determine the second data with unauthorized tampering in the original data table with unauthorized tampering; obtain the third data corresponding to the second data from the decrypted data table; and perform recovery processing on the second data in the original data table with unauthorized tampering according to the third data to obtain a recovered original data table.

[0114] Each module in the above data processing device can be implemented in whole or in part by software, hardware, or a combination thereof. Each of the above modules can be embedded in the processor of the computer device in hardware form or be independent of it, or can be stored in the memory of the computer device in software form, so that the processor can call and execute the operations corresponding to each of the above modules.

[0115] In an exemplary embodiment, a computer device is provided. The computer device can be a server, and its internal structure diagram can be as Figure 6 shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, abbreviated as I / O), and a communication interface. Among them, the processor, the memory, and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data for data processing. The input / output interface of the computer device is used to exchange information between the processor and external devices. The communication interface of the computer device is used to communicate with external terminals through a network connection. When the computer program is executed by the processor, it implements a data processing method.

[0116] Those skilled in the art can understand that Figure 6 the structure shown in

[0117] is only a block diagram of some structures related to the solution of this application, and does not constitute a limitation on the computer device to which the solution of this application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine some components, or have different component arrangements.

[0118] In one embodiment, a computer device is further provided, including a memory and a processor. A computer program is stored in the memory, and when the processor executes the computer program, it implements the steps in each of the above method embodiments.

[0118] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by the processor, it implements the steps in each of the above method embodiments.

[0119] In one embodiment, a computer program product is provided, including a computer program. When the computer program is executed by the processor, it implements the steps in each of the above method embodiments.

[0120] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use, and processing of relevant data need to comply with relevant regulations.

[0121] Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above methods. Among them, any reference to a memory, database, or other medium used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The databases involved in the embodiments provided in this application can include at least one of relational databases and non-relational databases. Non-relational databases can include distributed databases based on blockchain, etc., without limitation. The processors involved in the embodiments provided in this application can be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, data processing logics based on quantum computing, artificial intelligence (AI) processors, etc., without limitation.

[0122] The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity of description, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as the scope recorded in this application.

[0123] The above-described embodiments merely represent several implementation manners of this application. The description is relatively specific and detailed, but it should not be construed as a limitation on the scope of the patent of this application. It should be noted that for those of ordinary skill in the art, without departing from the concept of this application, several modifications and improvements can still be made, and these all belong to the protection scope of this application. Therefore, the protection scope of this application shall be subject to the appended claims.

Claims

1. A data processing method, characterized in that, The method includes: In response to a data processing request from an authorized user, processing the original data table corresponding to the data processing request in the database to obtain a processed original data table; When it is detected that data changes occur during the processing of the original data table, determining the first data after the data change in the processed original data table, and obtaining at least two target data associated with the first data; Performing encryption processing on the at least two target data to obtain ciphertext data; Storing the ciphertext data in an encrypted data table; the encrypted data table is used for anti-tampering processing of the processed original data table.

2. The method according to claim 1, wherein The obtaining of at least two target data associated with the first data includes: Determining at least two target fields in the processed original data table; Obtaining at least two target data associated with the first data according to the at least two target fields.

3. The method according to claim 2, characterized in that, The obtaining of at least two target data associated with the first data according to the at least two target fields includes: Arranging the at least two target fields to obtain the arranged at least two target fields; Obtaining at least two target data associated with the first data according to the order of the arranged at least two target fields.

4. The method according to any one of claims 1 to 3, characterized in that, After storing the ciphertext data in the encrypted data table, it further includes: If the processed original data table is subject to unauthorized tampering, restoring the originally tampered original data table based on the encrypted data table to obtain a restored original data table.

5. The method according to claim 4, characterized in that The if the processed original data table is subject to unauthorized tampering, restoring the originally tampered original data table based on the encrypted data table to obtain a restored original data table includes: If the processed original data table is subject to unauthorized tampering, decrypting the encrypted data table to obtain a decrypted data table; If the decrypted data table is different from the processed original data table, determining that the processed original data table is subject to unauthorized tampering, and restoring the originally tampered original data table based on the decrypted data table to obtain a restored original data table.

6. The method according to claim 5, wherein The restoring the originally tampered original data table based on the decrypted data table to obtain a restored original data table includes: Determining the second data that has been subject to unauthorized tampering in the originally tampered original data table; Obtaining the third data corresponding to the second data from the decrypted data table; According to the third data, performing a restoration process on the second data in the originally tampered original data table to obtain a restored original data table.

7. A data processing device, characterized in that, The device includes: An original data table processing module, configured to process the original data table corresponding to the data processing request in the database in response to a data processing request from an authorized user to obtain a processed original data table; A target data acquisition module, configured to determine the first data after the data change in the processed original data table and obtain at least two target data associated with the first data when it is detected that data changes occur during the processing of the original data table; An encryption module, configured to perform encryption processing on the at least two target data to obtain ciphertext data; A data storage module, configured to store the ciphertext data in an encrypted data table; the encrypted data table is used to perform anti-tampering processing on the processed original data table.

8. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that, When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product comprising a computer program, characterized in that, When the computer program is executed by the processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images