Data management method, electronic equipment and storage medium
By using built-in HSM in the controller, using built-in keys to distinguish and process data types, the high cost problem caused by the lack of SE in the device is solved, and secure storage and access are achieved, reducing costs.
Patent Information
- Application Number
- CN202510537885.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-27
- Publication Date
- 2025-08-01
AI Technical Summary
In the prior art, when a device lacks secure elements (SE), additional SE needs to be configured for data storage, encryption and access, which increases costs.
Using the hardware security module (HSM) built-in controller, the general data stored in the controller is decrypted through the built-in key, and the key data and plaintext data are distinguished according to the access address and structure type of the data. The key data is calculated using HSM, and the controller performs plaintext data calculation to achieve secure storage and access.
No need to rely on SE, reducing the cost of software and hardware, and achieving secure storage, access and computing of data.
Smart Images
Figure CN120408679A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of data security, and in particular, to a data management method, an electronic device, and a computer-readable storage medium. Background Art
[0002] In the related art, data management usually uses an SE (Secure Element) to encrypt and store data. Taking a vehicle-grade car key controller as an example, car key data is stored in the SE, and data interaction is performed with the SE through an external interface. <00 series="false">
[0003] However, when data management is performed in the above manner, for a device that does not have an SE itself (such as a car key controller), it is necessary to additionally configure an SE for data storage, encryption, access, etc., which increases the cost of data management. Summary of the Invention
[0004] The present invention aims to solve at least one of the technical problems existing in the prior art.
[0005] To this end, an object of the present invention is to provide a data management method, which is based on an HSM (Hardware Security Module) built in a controller, does not require the use of an SE, and realizes secure storage, secure access, and secure calculation of data, saving costs.
[0006] To this end, a second object of the present invention is to provide an electronic device.
[0007] To this end, a third object of the present invention is to provide a computer-readable storage medium.
[0008] To achieve the above object, an embodiment of the first aspect of the present invention provides a data management method, the data management method including: decrypting general data stored in the controller according to a built-in key of the hardware security module; determining an access address and a data structure type of the general data after decryption; performing general data calculation according to the access address and the data structure type.
[0009] According to the data management method of the embodiment of the present invention, general data is stored in the controller, the general data stored in the controller is decrypted according to the built-in key of the hardware security module, it is determined whether the general data is key data or plaintext data according to the access address and the data structure type of the general data after decryption, the hardware security module is used for data calculation on the key data, and the controller is used for calculation on the plaintext data, so as to realize secure storage, secure access, and secure calculation of general data without relying on an SE, based on the controller and the hardware security module built in the controller, saving software and hardware costs.
[0010] In some embodiments, before decrypting the general data stored in the controller according to the built-in key of the hardware security module, the method further includes: determining the type of key data of the data to be imported; encrypting different types of the key data according to the built-in key to obtain encrypted key data; determining the decryption general data according to the encrypted key data; and determining the general data according to the decryption general data.
[0011] In some embodiments, after determining the decryption general data according to the encrypted key data, the method further includes: partitioning the decryption general data.
[0012] In some embodiments, determining the general data according to the decryption general data includes: encrypting the decryption general data according to the built-in key to determine the general data.
[0013] In some embodiments, after partitioning the decryption general data, the method further includes: encrypting the partitioned decryption general data according to the built-in key to determine the general data.
[0014] In some embodiments, after determining the general data, the method further includes: storing the general data in the controller.
[0015] In some embodiments, performing the general data calculation according to the access address and the data structure type includes: determining the data structure type of the decrypted general data according to the access address; when the data structure type is the first general data, transmitting the first general data to the hardware security module according to the data interface of the hardware security module to perform the first general data calculation; and when the data structure type is the second general data, performing the second general data calculation according to the controller.
[0016] In some embodiments, after performing the general data calculation according to the access address and the data structure type, the method further includes: resetting the data stored in the controller.
[0017] To achieve the above object, an embodiment of the second aspect of the present invention provides an electronic device, including: at least one processor; and a memory communicatively connected to the at least one processor; wherein, the memory stores a data management program executable by the at least one processor, and when the data management program is executed by the at least one processor, the at least one processor executes the data management method as described in the above embodiments.
[0018] An electronic device according to an embodiment of the present invention uses the data management method of the above embodiment on the electronic device, stores general data through a controller, decrypts the general data stored by the controller according to the built-in key of the hardware security module, determines whether the general data is key data or plaintext data according to the access address and data structure type of the decrypted general data, performs data calculation on the key data using the hardware security module, and performs calculation on the plaintext data using the controller, so as to realize secure storage, secure access and secure calculation of general data without relying on the SE, based on the controller and the built-in hardware security module of the controller, saving software and hardware costs.
[0019] To achieve the above object, an embodiment of the third aspect of the present invention provides a computer-readable storage medium, on which a data management program is stored. When the data management program is executed by a processor, the device installed with the data management program realizes the data management method as described in the above embodiment.
[0020] The additional aspects and advantages of the present invention will be partially given in the following description, partially become obvious from the following description, or be understood through the practice of the present invention. Description of the Drawings
[0021] The above and / or additional aspects and advantages of the present invention will become obvious and easy to understand from the description of the embodiments in conjunction with the following drawings, where: Figure 1 is a flowchart of a data management method according to an embodiment of the present invention; Figure 2 is a flowchart of data secure storage according to an embodiment of the present invention; Figure 3 is a flowchart of data secure access and calculation according to an embodiment of the present invention; Figure 4 is a flowchart of a data management method according to another embodiment of the present invention; Figure 5 is a block diagram of an electronic device according to an embodiment of the present invention.
[0022] Reference Numerals: Processor 98; Memory 99; Electronic device 100. Detailed Embodiments
[0023] The embodiments described with reference to the drawings are exemplary. The embodiments of the present invention will be described in detail below.
[0024] In the related art, taking the data management of in-vehicle grade vehicle keys as an example, although the vehicle key controller is built-in with an HSM, the HSM lacks a storage function. Therefore, an SE is usually used as the data storage unit of the vehicle key, and data interaction is performed with the SE through an external interface.
[0025] However, when using the above method for data management, for devices such as vehicle key controllers that do not have an SE themselves, an additional SE needs to be configured, increasing the cost of data management.
[0026] Thus, by storing general data in the controller, decrypting the general data stored in the controller according to the built-in key of the hardware security module, determining whether the general data is key data or plaintext data according to the access address and data structure type of the decrypted general data, performing data calculation on the key data using the hardware security module, and performing calculation on the plaintext data using the controller, it is possible to achieve secure storage, secure access, and secure calculation of general data without relying on an SE, based on the controller and the hardware security module built into the controller, saving software and hardware costs.
[0027] The following Figures 1 - 4 describes the data management method of the embodiments of the present invention.
[0028] As Figure 1 shown, it is a flowchart of the data management method of an embodiment of the present invention. The data management method of the embodiment of the present invention at least includes steps S1 - step S3.
[0029] Step S1, decrypt the general data stored in the controller according to the built-in key of the hardware security module.
[0030] In the embodiment, the hardware security module is, for example, an HSM. The HSM is an independent hardware entity that can provide the same algorithm encryption function as the SE itself, but does not have the ability to store data. Therefore, the on-chip flash (a non-volatile memory) of the controller can be used to store data. When the HSM leaves the factory, a key (one key for one device) is solidified. The controller and the HSM access through interface instructions, and the HSM can directly access the RAM of the MCU.
[0031] When the controller accesses data, it reads flash data by block address and executes the "secure access to general data A" rule. If the general data stored in the controller is data that has been divided into fixed blocks, it reads the on-chip flash data of the controller by block address to obtain one or more encrypted general data blocks C1; if the general data stored in the controller is data that has not been divided into fixed blocks, it reads the on-chip flash data of the controller by the general data address to obtain the encrypted decrypted general data C2; it uses the built-in key of the HSM (one key for one device) to decrypt the encrypted general data block C1 and / or the encrypted decrypted general data C2 to obtain the general data block B and / or the decrypted general data A, and stores them in the RAM of the controller, so as to realize storing data based on the controller without relying on the SE and performing different levels of decryption and secure access on the data stored in the controller. For example, for a car key controller without an SE, it can securely store and securely access all personalized data in the car key controller, which is applicable to securely storing car key data when operating such as activating the car key, and securely accessing car key data when using the car key to start the vehicle.
[0032] Step S2: Determine the access address and data structure type of the decrypted general data.
[0033] In the embodiment, the access address of the general data is, for example, the flash address of the accessed controller; the data structure type includes the data structure type corresponding to the key data and the data structure type corresponding to the plaintext data. Among them, the key data is, for example, the key data E1 encrypted by the key data generated by the HSM, and the encrypted key data E2 obtained by encrypting the externally imported key data using the HSM. The plaintext data can be data that does not need to be encrypted such as the user name and identification according to requirements; the data type includes the key data and the plaintext data type; according to the accessed flash address and the corresponding data structure type, the data type at the corresponding address can be distinguished, and it can be determined whether the data type is key data or plaintext data, so as to prepare for performing different security calculations according to different data types.
[0034] Step S3: Perform general data calculation according to the access address and data structure type.
[0035] In the embodiment, it is determined whether the general data is of the plaintext data type or the key data type according to the access address and the data structure type. For the general data of the plaintext data type, it is applicable to directly calculate inside the controller, and for the general data of the key data type, it is applicable to perform secure calculation in the HSM, so as to realize performing different calculations according to different types of general data based on the secure calculation ability of the HSM without relying on the SE. For example, for a car key controller without an SE, it can securely calculate all personalized data of the car key in the car key controller.
[0036] According to the data management method of the embodiments of the present invention, general data is stored by a controller, the general data stored by the controller is decrypted according to the built-in key of the hardware security module, whether the general data is key data or plaintext data is determined according to the access address and data structure type of the decrypted general data, the hardware security module is used to perform data calculation on the key data, and the controller is used to perform calculation on the plaintext data, so as to realize secure storage, secure access and secure calculation of general data without relying on an SE, based on the controller and the hardware security module built in the controller, saving the software and hardware costs.
[0037] In some embodiments, before decrypting the general data stored by the controller according to the built-in key of the hardware security module, it further includes: determining the type of the key data of the data to be imported; encrypting different types of key data according to the built-in key to obtain encrypted key data; determining the decryption of the general data according to the encrypted key data; and determining the general data according to the decrypted general data.
[0038] In an embodiment, the data to be imported is, for example, data that needs to be stored; the types of key data are divided into key data (set as D1) encrypted by a key generated by an HSM and then encrypted key data (set as E1), and externally imported key data (set as D2). Among them, for the key data D1 generated by the HSM, when it is exported by the HSM, it will be automatically encrypted using the built-in key (one key for one machine) to obtain the encrypted key data E1; determining the type of the key data of the data to be imported, for example, judging the type of the key data of the imported data that needs to be stored, which is used as a basis for performing corresponding encryption processing on the data to be imported according to the type.
[0039] Encrypting different types of key data according to the built-in key to obtain encrypted key data. For example, if it is determined that the data to be imported is not the encrypted key data E1 encrypted by the key generated by the HSM, it is continued to determine whether the data to be imported is the externally imported key data D2. If it is the externally imported key data D2, it is encrypted using the HSM built-in key (one key for one machine) to obtain the encrypted key data E2; determining the decryption of the general data according to the encrypted key data. For example, if it is determined that the data to be imported is the encrypted key data E1 encrypted by the key generated by the HSM, indicating that the data has been encrypted and no further encryption is required, then E1 can be directly used as the decryption general data; if it is determined that the data to be imported is not the encrypted key data E1 encrypted by the key generated by the HSM, it is continued to determine whether the data to be imported is the externally imported key data D2. If it is not the externally imported key data D2, it means that the data to be imported is plaintext data (set as A2), and no encryption processing is required, and A2 can be directly used as the decryption general data; setting the decryption general data as A, and taking E1, E2, and A2 as the decryption general data, which is prepared for realizing the secure storage of the decryption general data.
[0040] Determine the general data according to the decrypted general data. For example, encrypt the decrypted general data A using the built-in key of the HSM (one key per device) to obtain the general data, and / or first perform a fixed block division on the decrypted general data A, and then encrypt the decrypted general data A after the fixed block division using the built-in key of the HSM (one key per device) to obtain the general data, so as to implement the encryption process of the decrypted general data according to requirements.
[0041] In some embodiments, after determining the decrypted general data according to the encryption key data, it further includes: dividing the decrypted general data.
[0042] In an embodiment, dividing the decrypted general data, for example, dividing the general data A according to a fixed block size, and for the part less than one block, performing fixed data filling, then one or more general data blocks B with a fixed size can be obtained as the divided decrypted general data, and stored in the MCU RAM. The fixed block division can avoid frequent erasure of the entire storage area, reduce operation time and energy consumption, so as to improve the storage management efficiency and optimize the performance of data storage.
[0043] In some embodiments, determining the general data according to the decrypted general data includes: encrypting the decrypted general data according to the built-in key to determine the general data.
[0044] In an embodiment, encrypt the decrypted general data A using the built-in key of the HSM (one key per device) to obtain the encrypted decrypted general data C2 as the general data, and store it in the RAM of the controller, so as to implement the encryption process of the decrypted general data.
[0045] In some embodiments, after dividing the decrypted general data, it further includes: encrypting the divided decrypted general data according to the built-in key to determine the general data.
[0046] In an embodiment, encrypt the general data block B using the built-in key of the HSM (one key per device) to obtain the encrypted general data block C1 as the general data, and store it in the RAM of the controller, so as to implement the encryption process of the decrypted general data after the fixed block division, implement the secondary encryption of the key data, and it cannot be exported, but can be imported into the HSM for calculation to ensure data security.
[0047] In some embodiments, after determining the general data, it further includes: storing the general data in the controller.
[0048] In an embodiment, store the encrypted general data block C1, and / or the encrypted decrypted general data C2 in the on-chip flash of the controller, and clear the RAM of the relevant MCU (Microcontroller Unit, controller), so as to implement the secure storage of the data to be imported.
[0049] For example, the process for the secure storage of data to be imported is as follows Figure 2 shown in the flowchart of data secure storage according to an embodiment of the present invention. The process of data secure storage according to the embodiment of the present invention includes at least steps S10 - S18.
[0050] Step S10, start.
[0051] Step S11, determine whether the imported data is the key data encrypted by the key data generated by the HSM. If so, execute step S14; otherwise, execute step S12.
[0052] Step S12, determine whether the imported data is the externally imported key data. If so, execute step S13; otherwise, execute step S14.
[0053] Step S13, encrypt using the built - in key of the HSM (one key per device) to obtain the encrypted key data.
[0054] Step S14, regard the imported data as general data.
[0055] Step S15, divide the general data into fixed - size blocks according to a fixed block size to obtain one or more general data blocks of a fixed size, and store them in the MCU RAM.
[0056] Step S16, encrypt the general data block B using the built - in key of the HSM (one key per device) to obtain the encrypted general data block, and store it in the MCU RAM.
[0057] Step S17, store the encrypted general data block in the on - chip flash of the MCU.
[0058] Step S18, clear the relevant MCU RAM.
[0059] In some embodiments, general data calculation is performed according to the access address and data structure type, including: determining the data structure type of the decrypted general data according to the access address; when the data structure type is the first general data, transmitting the first general data to the hardware security module according to the data interface of the hardware security module for the first general data calculation; when the data structure type is the second general data, performing the second general data calculation according to the controller.
[0060] In an embodiment, according to the accessed flash address and the corresponding data structure type, it is determined whether the data structure type of the decrypted general data is the data structure type corresponding to the key data or the data structure type corresponding to the plaintext data, preparing for determining the data type for the GNU data structure type; if the data structure type is the data structure type corresponding to the key data, the data of the key data type (such as E1 and E2) is used as the first general data, and the first general data is applicable to HSM calculation. When accessing, the RAM address corresponding to the first general data is passed into the HSM through the HSM interface for secure calculation to implement secure calculation on the data of the key data type; if the data structure type is the data structure type corresponding to the plaintext data, the data of the plaintext data type (such as A2) is used as the second general data, and the second general data is calculated inside the controller to implement calculation on the data of the plaintext data type.
[0061] In some embodiments, after performing general data calculation according to the access address and the data structure type, it further includes: resetting the data stored in the controller.
[0062] In an embodiment, set the data stored in the controller, for example, clear the RAM of the relevant controller to implement cleaning of the data in the controller.
[0063] For example, the process of general data calculation is as Figure 3 shown, which is a flowchart of data security access and calculation according to an embodiment of the present invention. The process of general data calculation in the embodiment of the present invention at least includes steps S20 - step S26.
[0064] Step S20, start.
[0065] Step S21, read flash data by block address to obtain one or more encrypted general data blocks.
[0066] Step S22, use the built-in key of the HSM (one key for one machine) to decrypt the encrypted general data block to obtain the general data block and store it in the MCU RAM.
[0067] Step S23, according to the accessed flash address and the corresponding data structure type, determine whether the data type to be accessed is encrypted key data. If so, execute step S25; otherwise, execute step S24.
[0068] Step S24, the data type to be accessed is plaintext data, which is applicable to internal MCU calculation, and directly calculate.
[0069] Step S25, applicable to HSM calculation, use the HSM interface to pass the RAM address corresponding to the key data into the HSM for secure calculation.
[0070] Step S26, clear the relevant MCU RAM.
[0071] The following refers to Figure 4 to specifically describe the data management method of the embodiment of the present invention.
[0072] As Figure 4 shown, it is a flowchart of the data management method of another embodiment of the present invention. The data management method of the embodiment of the present invention includes at least steps S30 - S43.
[0073] Step S30, determine the type of key data of the data to be imported.
[0074] Step S31, encrypt different types of key data according to the built-in key to obtain encrypted key data.
[0075] Step S32, determine the decrypted general data according to the encrypted key data.
[0076] Step S33, divide the decrypted general data.
[0077] Step S34, encrypt the divided decrypted general data according to the built-in key to determine the general data.
[0078] Step S35, encrypt the decrypted general data according to the built-in key to determine the general data.
[0079] Step S36, store the general data in the controller.
[0080] Step S37, decrypt the general data stored in the controller according to the built-in key of the hardware security module.
[0081] Step S38, determine the access address and data structure type of the decrypted general data.
[0082] Step S39, determine the data structure type of the decrypted general data according to the access address.
[0083] Step S40, determine whether the data structure type is the first general data. If so, execute step S42; otherwise, execute step S41.
[0084] Step S41, the data structure type is the second general data, and perform the second general data calculation according to the controller.
[0085] Step S42, transfer the first general data to the hardware security module through the data interface of the hardware security module for the first general data calculation.
[0086] Step S43, reset the data stored in the controller.
[0087] According to the method of an embodiment of the present invention, the controller stores general data, decrypts the general data stored by the controller according to the built-in key of the hardware security module, determines whether the general data is key data or plaintext data according to the access address and data structure type of the decrypted general data, performs data calculation on the key data using the hardware security module, and performs calculation on the plaintext data using the controller, so as to realize secure storage, secure access and secure calculation of general data without relying on the SE, based on the controller and the built-in hardware security module of the controller, saving software and hardware costs.
[0088] The following refers to Figure 5 Describe the electronic device of the embodiment of the present invention.
[0089] As Figure 5 shown, it is a block diagram of an electronic device according to an embodiment of the present invention. The electronic device 100 according to the embodiment of the present invention includes: at least one processor 98; and a memory 99 communicatively connected to the at least one processor 98; wherein, the memory 99 stores a data management program executable by the at least one processor 98. When the data management program is executed by the at least one processor 98, the at least one processor 98 executes the data management method as described in the above embodiment.
[0090] For the electronic device 100 according to the embodiment of the present invention, the above-described data management method is used on the electronic device 100. The controller stores general data, decrypts the general data stored by the controller according to the built-in key of the hardware security module, determines whether the general data is key data or plaintext data according to the access address and data structure type of the decrypted general data, performs data calculation on the key data using the hardware security module, and performs calculation on the plaintext data using the controller, so as to realize secure storage, secure access and secure calculation of general data without relying on the SE, based on the controller and the built-in hardware security module of the controller, saving software and hardware costs.
[0091] In some embodiments, the processor 98 is configured to: before decrypting the general data stored by the controller according to the built-in key of the hardware security module, further include: determining the type of the key data of the data to be imported; encrypting different types of key data according to the built-in key to obtain encrypted key data; determining the decryption of the general data according to the encrypted key data; and determining the general data according to the decrypted general data.
[0092] In some embodiments, the processor 98 is configured to: after determining the decryption of the general data A according to the encrypted key data, further include: dividing the decrypted general data.
[0093] In some embodiments, the processor 98 is configured to: determine the general data according to the decrypted general data, including: encrypting and decrypting the general data according to the built-in key to determine the general data.
[0094] In some embodiments, the processor 98 is configured to: after partitioning and decrypting the general data, further include: encrypting the partitioned decrypted general data according to the built-in key to determine the general data.
[0095] In some embodiments, the processor 98 is configured to: after determining the general data, further include: storing the general data in the controller.
[0096] In some embodiments, the processor 98 is configured to perform general data calculation according to the access address and data structure type, including: determining the data structure type of the decrypted general data according to the access address; when the data structure type is the first general data, transmitting the first general data to the hardware security module according to the data interface of the hardware security module to perform the first general data calculation; when the data structure type is the second general data, performing the second general data calculation according to the controller.
[0097] In some embodiments, the processor 98 is configured to: after performing general data calculation according to the access address and data structure type, further include: resetting the data stored in the controller.
[0098] According to the electronic device 100 of the embodiment of the present invention, the data management method using the above-mentioned data is used on the electronic device 100. The general data is stored through the controller, the general data stored in the controller is decrypted according to the built-in key of the hardware security module, and it is determined whether the general data is key data or plaintext data according to the access address and data structure type of the decrypted general data. The hardware security module is used for data calculation of the key data, and the controller is used for calculation of the plaintext data, so as to realize secure storage, secure access and secure calculation of general data without relying on the SE, based on the controller and the built-in hardware security module of the controller, saving the software and hardware costs.
[0099] The computer-readable storage medium of the embodiment of the present invention will be described below.
[0100] The computer-readable storage medium of the embodiment of the present invention stores a data management program. When the data management program is executed by a processor, the device installed with the data management program realizes the data management method as described in the above embodiment.
[0101] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "illustrative embodiments", "examples", "specific examples", or "some examples", etc. means that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example.
[0102] Although embodiments of the present invention have been shown and described, those of ordinary skill in the art can understand that various changes, modifications, substitutions, and variations can be made to these embodiments without departing from the principles and spirit of the present invention. The scope of the present invention is defined by the claims and their equivalents.
Claims
1. A data management method, characterized in that, For a controller, the controller includes a hardware security module, and the method includes: Decrypting general data stored in the controller according to a built-in key of the hardware security module; Determining an access address and a data structure type of the general data after decryption; Performing general data calculation according to the access address and the data structure type.
2. The data management method according to claim 1, characterized in that Before decrypting the general data stored in the controller according to the built-in key of the hardware security module, it further includes: Determining a type of key data of data to be imported; Encrypting the key data of different types according to the built-in key to obtain encrypted key data; Determining decryption general data according to the encrypted key data; Determining the general data according to the decryption general data.
3. The data management method according to claim 1 or 2, characterized in that, After determining the decryption general data according to the encrypted key data, it further includes: Dividing the decryption general data.
4. The data management method according to claim 2, wherein The determining the general data according to the decryption general data includes: Encrypting the decryption general data according to the built-in key to determine the general data.
5. The data management method according to claim 3, wherein After dividing the decryption general data, it further includes: Encrypting the divided decryption general data according to the built-in key to determine the general data.
6. The data management method according to claim 4 or 5, characterized in that After determining the general data, it further includes: Storing the general data into the controller.
7. The data management method according to claim 1, wherein The performing general data calculation according to the access address and the data structure type includes: Determining the data structure type of the general data after decryption according to the access address; When the data structure type is the first general data, transmitting the first general data to the hardware security module according to a data interface of the hardware security module to perform the first general data calculation; When the data structure type is the second general data, performing the second general data calculation according to the controller.
8. The data management method according to any one of claims 1-7, characterized in that, After performing general data calculation according to the access address and the data structure type, it further includes: Resetting data stored in the controller.
9. An electronic device, characterized in that, It includes: At least one processor; And a memory communicatively connected to the at least one processor; Wherein, the memory stores a data management program executable by the at least one processor, and when the data management program is executed by the at least one processor, the at least one processor executes the data management method according to any one of claims 1-8.
10. A computer-readable storage medium, characterized in that, A data management program is stored on the computer-readable storage medium, and when the data management program is executed by a processor, the device installed with the data management program implements the data management method according to any one of claims 1-8.