Data encryption method and device, electronic equipment and storage medium

Abstract

The invention provides a data encryption method and device, electronic equipment and a storage medium. The data encryption method comprises the following steps: after capturing a recording file operation request for conference data triggered by a storage service system, generating access permission information corresponding to the conference data, encrypting the conference data, and storing the encrypted conference data; after capturing a playback file operation request for the conference data triggered by the storage service system, performing access permission verification according to the access permission information; and if the verification is passed, decrypting the encrypted conference data, and returning the decrypted conference data to the storage service system. According to the embodiment of the invention, the confidentiality and security of data storage can be ensured, access authority control can be carried out on the data access process, a data encryption and decryption function does not need to be developed in the storage service system, and the implementation process is simpler and more convenient.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer technology, and in particular, to a data encryption method and device, electronic equipment and storage medium. BACKGROUND

[0002] With the rapid development of audio and video technology and network technology, video conferencing is increasingly widely used. Under this trend, a storage service system as an important video conferencing application method can realize the function of recording audio and video data in a video conference and the function of playing back the recorded audio and video data after the video conference.

[0003] However, the current storage service system is limited in function and stores the audio and video data in the video conference in plaintext, so it cannot effectively guarantee the privacy of the data and access control of the data, thereby reducing the trust of users in the platform. SUMMARY

[0004] In view of the above problems, the present application embodiments are proposed to provide a data encryption method, device, electronic equipment and storage medium which can overcome the above problems or at least partially solve the above problems.

[0005] In a first aspect, the present application embodiments disclose a data encryption method, which comprises:

[0006] After capturing a recording file operation request for conference data triggered by a storage service system, generating access permission information corresponding to the conference data, encrypting the conference data, and storing the encrypted conference data;

[0007] After capturing a playback file operation request for the conference data triggered by the storage service system, performing access permission verification according to the access permission information;

[0008] If the verification is passed, decrypting the encrypted conference data, and returning the decrypted conference data to the storage service system.

[0009] Optionally, the generating of the access permission information corresponding to the conference data comprises:

[0010] Obtaining a first user identifier included in the recording file operation request, and adding the first user identifier to the access permission information;

[0011] and / or,

[0012] Obtaining a second user identifier set in advance, and adding the second user identifier to the access permission information.

[0013] Optionally, the access permission verification according to the access permission information comprises: obtaining a third user identifier contained in the playback file operation request; determining whether the third user identifier exists in the access permission information; if the third user identifier exists, the verification is passed; and if the third user identifier does not exist, the verification is not passed.

[0014] Optionally, the method further comprises: if the verification is not passed, returning the encrypted conference data to the storage service system.

[0015] In a second aspect, an embodiment of the present application discloses a data encryption method, and the method comprises:

[0016] After receiving a conference recording instruction, triggering a recording file operation request for conference data;

[0017] After receiving a conference playback instruction, triggering a playback file operation request for the conference data;

[0018] After receiving the decrypted conference data returned by the user space file system, playing the decrypted conference data.

[0019] Optionally, the triggering of the recording file operation request for conference data comprises: calling a first application programming interface of an operating system to trigger the recording file operation request for conference data; and the triggering of the playback file operation request for the conference data comprises: calling a second application programming interface of the operating system to trigger the recording file operation request for conference data.

[0020] In a third aspect, an embodiment of the present application discloses a data encryption device, and the device comprises:

[0021] A first processing module is configured to, after capturing a recording file operation request for conference data triggered by a storage service system, generate access permission information corresponding to the conference data, encrypt the conference data, and store the encrypted conference data.

[0022] A verification module is configured to, after capturing a playback file operation request for the conference data triggered by the storage service system, perform access permission verification according to the access permission information.

[0023] A second processing module is configured to, if the verification is passed, decrypt the encrypted conference data, and return the decrypted conference data to the storage service system.

[0024] Optionally, the first processing module is specifically configured to:

[0025] Obtain a first user identifier contained in the recording file operation request, and add the first user identifier into the access permission information.

[0026] and / or,

[0027] obtaining a preset second user identifier, and adding the second user identifier into the access permission information.

[0028] Optionally, the verification module is specifically configured to obtain a third user identifier contained in the playback file operation request, and determine whether the third user identifier exists in the access permission information; if the third user identifier exists, the verification is passed; if the third user identifier does not exist, the verification is not passed.

[0029] Optionally, the second processing module is further configured to return the encrypted conference data to the storage service system if the verification is not passed.

[0030] In a fourth aspect, an embodiment of the present application discloses a data encryption device, and the device comprises:

[0031] A first triggering module is configured to trigger a recording file operation request for conference data after receiving a conference recording instruction.

[0032] A second triggering module is configured to trigger a playback file operation request for the conference data after receiving a conference playback instruction.

[0033] A playing module is configured to play the decrypted conference data returned by the user space file system after receiving the decrypted conference data.

[0034] Optionally, the first triggering module is specifically configured to call a first application programming interface of an operating system to trigger the recording file operation request for the conference data; and the second triggering module is specifically configured to call a second application programming interface of the operating system to trigger the recording file operation request for the conference data.

[0035] In a fifth aspect, an embodiment of the present application discloses an electronic device, which comprises a processor and a computer readable storage medium, and the computer readable storage medium stores a computer program; when the computer program is executed by the processor, the processor executes the data encryption method executed by the user space file system according to any one of the above or executes the data encryption method executed by the storage service system according to any one of the above.

[0036] In a sixth aspect, an embodiment of the present application discloses a computer readable storage medium, and the computer readable storage medium stores a computer program; when the computer program is executed by a processor, the processor executes the data encryption method executed by the user space file system according to any one of the above or executes the data encryption method executed by the storage service system according to any one of the above.

[0037] In the embodiment of the present application, the recording file operation request and the playback file operation request triggered by the storage service system are captured. After capturing the recording file operation request triggered by the storage service system for the conference data, the access permission information corresponding to the conference data is generated, the conference data is encrypted, and the encrypted conference data is stored, so that the confidentiality and security of data storage can be ensured. After capturing the playback file operation request triggered by the storage service system for the conference data, the access permission verification is performed according to the access permission information. If the verification is passed, the encrypted conference data is decrypted, and the decrypted conference data is returned to the storage service system, so that the access permission control for the data access process can be performed to prevent data leakage. Moreover, the data encryption and decryption function does not need to be developed in the storage service system, and the storage service system does not need to perceive the encryption and decryption details, so that the implementation process is more simple.

[0038] The above description is only a summary of the technical scheme of the present application. In order to more clearly understand the technical means of the present application, the content of the specification can be implemented, and in order to make the above and other purposes, characteristics and advantages of the present application more obvious and easy to understand, the specific embodiments of the present application are described below. BRIEF DESCRIPTION OF DRAWINGS

[0039] In order to more clearly illustrate the technical scheme of the embodiments of the present application, the drawings needed in the description of the embodiments of the present application will be briefly introduced. Obviously, the drawings in the following description are only some of the drawings of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0040] Figure 1 is a step flow chart of a data encryption method of the embodiment of the present application;

[0041] Figure 2 is a step flow chart of another data encryption method of the embodiment of the present application;

[0042] Figure 3 is a step flow chart of another data encryption method of the embodiment of the present application;

[0043] Figure 4 is a system architecture diagram of a data encryption of the embodiment of the present application;

[0044] Figure 5 is a schematic diagram of a data encryption process of the embodiment of the present application;

[0045] Figure 6 is a structural block diagram of a data encryption device of the embodiment of the present application;

[0046] Figure 7is a structural block diagram of another data encryption device according to an embodiment of the present application;

[0047] Figure 8 is a structural block diagram of an electronic device according to an embodiment of the present application;

[0048] Figure 9 is a structural block diagram of a computer readable storage medium according to an embodiment of the present application. DETAILED DESCRIPTION

[0049] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0050] The data encryption method in the embodiments of the present application can be applied to a storage server, which can include a storage service system and a user space file system. The data encryption method in the embodiments of the present application can be applied to a video live network and can also be applied to the Internet.

[0051] The storage service system faces media resources (such as audio and video resources) to build an integrated application system for interconnection and interworking, provides unified services such as recording, playing, connecting and managing for media resources, including system management, recording service, resource management, playing service, storage gateway and other system functions, so as to realize the goal of maximizing the value of media resources. In the embodiments of the present application, the storage service system is used to initiate a file operation request at the business level, so as to trigger recording and playback of conference data.

[0052] The user space file system (Filesystem in Userspace, FUSE) includes a kernel module, a user space library and a mounting utility program. In the embodiments of the present application, the user space file system is used to capture a file operation request, so as to realize encryption and decryption processing and permission control of data, and write the processed data into an underlying file system or return the processed data to the storage service system.

[0053] Referring to Figure 1 , a step flowchart of a data encryption method according to an embodiment of the present application is shown. The data encryption method according to the embodiments of the present application can be applied to a storage service system.

[0054] As shown in Figure 1 , the data encryption method can include the following steps:

[0055] At step 101, after receiving the conference recording instruction, the storage service system triggers a recording file operation request for the conference data.

[0056] The storage service system can provide a front-end user operation interface. The user can trigger a corresponding instruction by performing a corresponding operation on the front-end user operation interface.

[0057] After the video conference is started, if the user wants to record the conference data of the video conference, the user can click a recording button or the like on the front-end user operation interface of the storage service system, thereby triggering a conference recording instruction. After receiving the conference recording instruction, the storage service system can trigger a recording file operation request for the conference data, so that the user space file system can capture the recording file operation request and perform a corresponding operation. Details are described below.

[0058] The conference recording instruction is used to trigger the storage service system to start recording the conference. The conference recording instruction needs to include information identifying a specific conference and parameters such as recording requirements, so that the storage service system can process the storage of the conference data according to rules. For example, the conference recording instruction can include, but is not limited to, a conference identifier, recording instruction information, a recording format, a stored file name, a stored file path, and the like.

[0059] In an optional implementation, the process in which the storage service system triggers the recording file operation request for the conference data can include: the storage service system calling a first application programming interface (API) of an operating system to trigger the recording file operation request for the conference data. In this way, the user space file system can successfully capture the recording file operation request by using its own function of capturing a file operation request of an application programming interface.

[0060] At step 102, after receiving the conference playback instruction, the storage service system triggers a playback file operation request for the conference data.

[0061] After the video conference is ended, if the user wants to play back the conference data of the video conference, the user can click a playback button or the like on the front-end user operation interface of the storage service system, thereby triggering a conference playback instruction. After receiving the conference playback instruction, the storage service system can trigger a playback file operation request for the conference data, so that the user space file system can capture the playback file operation request and perform a corresponding operation. Details are described below.

[0062] The conference playback instruction is used to trigger the storage service system to start playing back the conference, and needs to contain information identifying a specific conference and parameters such as playback requirements, so that the storage service system processes the playback of the conference data according to rules. Exemplarily, the conference playback instruction can include but is not limited to conference identification, playback indication information, stored file path, and the like.

[0063] In an optional embodiment, the process in which the storage service system triggers the playback file operation request of the conference data can include: the storage service system calling the second application programming interface of the operating system to trigger the playback file operation request of the conference data. In this way, the user space file system can successfully capture the playback file operation request by using the function of capturing the file operation request of the application programming interface by itself.

[0064] Step 103: After receiving the decrypted conference data returned by the user space file system, the storage service system plays the decrypted conference data.

[0065] The related process of this step will be described in detail in the following embodiments.

[0066] Referring to Figure 2 , a step flowchart of another data encryption method of an embodiment of the present application is shown. The data encryption method of the embodiment of the present application can be applied to a user space file system.

[0067] As Figure 2 shown, the data encryption method can include the following steps:

[0068] Step 201: After capturing the recording file operation request of the conference data triggered by the storage service system, the user space file system generates access permission information corresponding to the conference data, encrypts the conference data, and stores the encrypted conference data.

[0069] After capturing the recording file operation request of the conference data triggered by the storage service system, the user space file system can generate access permission information corresponding to the conference data according to the recording file operation request, encrypt the conference data, and store the encrypted conference data.

[0070] Exemplarily, the recording file operation request can include but is not limited to a first user identification, a stored file name, a stored file path, conference data, and the like. The first user identification is the user identification of the user triggering the conference recording instruction.

[0071] Exemplarily, the process in which the user space file system generates the access permission information corresponding to the conference data can include: obtaining a first user identifier included in the recording file operation request, and adding the first user identifier into the access permission information; and / or, obtaining a second user identifier set in advance, and adding the second user identifier into the access permission information. The second user identifier can be a user with higher permission to view conference data recorded by other users, and the second user identifier can be set according to actual needs. The user identifiers present in the access permission information have access permission to the conference data.

[0072] Exemplarily, the process in which the user space file system encrypts the conference data and stores the encrypted conference data can include: creating a file according to a stored file name and a stored file path, the created file being used to store the conference data to be recorded, obtaining a key corresponding to the conference data from a key management system, encrypting the conference data by using the key, and writing the encrypted conference data into a local disk. The user space file system and the key management system can store associated information of the conference data and the key, respectively.

[0073] Exemplarily, the first application programming interface can include an open (create) interface and a write (write) interface, and accordingly, the recording file operation request can include a create file request and a write file request.

[0074] When the storage service system calls the open interface, a create file request is triggered, and the first user identifier can be transmitted. After the user space file system captures the create file request, the access permission information corresponding to the conference data can also be generated according to the first user identifier.

[0075] When the storage service system calls the open interface, a create file request is triggered, and the stored file name, the stored file path and other parameters can be transmitted. After the user space file system captures the create file request, a file is created according to the stored file name, the stored file path and other parameters.

[0076] After the user space file system captures the create file request, the key corresponding to the conference data can also be obtained from the key management system, and the key is associated with the conference data, so that the key is used to encrypt the conference data subsequently.

[0077] When the storage service system calls the write interface, a write file request can be triggered, and the conference data to be recorded can be transmitted. The conference data can include audio and video data. After the user space file system captures the write file request, the conference data is encrypted by using the key, and the encrypted conference data is written into the file created in advance in the local disk.

[0078] In step 202, after the user space file system captures the playback file operation request for the conference data triggered by the storage service system, access permission verification is performed according to the access permission information.

[0079] In step 202, after the user space file system captures the playback file operation request for the conference data triggered by the storage service system, access permission verification is performed according to the access permission information.

[0080] Exemplarily, the playback file operation request can include but is not limited to a third user identifier, a stored file name, a stored file path, and the like. The third user identifier is the user identifier of the user triggering the conference playback instruction.

[0081] Exemplarily, the process of access permission verification performed by the user space file system according to the access permission information can include: obtaining the third user identifier included in the playback file operation request, determining whether the third user identifier exists in the access permission information corresponding to the conference data, verifying pass if the third user identifier exists, and verifying fail if the third user identifier does not exist.

[0082] In step 203, if the verification is passed, the user space file system decrypts the encrypted conference data and returns the decrypted conference data to the storage service system.

[0083] In step 203, if the verification is passed, the user space file system decrypts the encrypted conference data and returns the decrypted conference data to the storage service system.

[0084] Exemplarily, the process of decryption of the encrypted conference data performed by the user space file system can include: opening a file according to the stored file name and the stored file path, the file storing the encrypted conference data, obtaining the key corresponding to the conference data from the key management system, and decrypting the encrypted conference data by using the key to obtain the decrypted conference data. The user space file system and the key management system can store the association information of the conference data and the key, respectively.

[0085] Exemplarily, the second application programming interface can include an open interface and a read interface, and correspondingly, the playback file operation request can include an open file request and a read file request.

[0086] When the storage service system calls the open interface, the open file request is triggered, and the third user identifier can be transmitted. After the user space file system captures the open file request, access permission verification can also be performed according to the access permission information.

[0087] When the storage service system calls the open interface, an open file request is triggered, and parameters such as a stored file name and a stored file path can be passed in. After the user space file system captures the open file request, a file is opened according to the parameters such as the stored file name and the stored file path, and subsequent reading of conference data is prepared.

[0088] After the user space file system captures the open file request, the key corresponding to the conference data can be obtained from the key management system, the key is associated with the conference data, so that the conference data is decrypted by using the key subsequently.

[0089] When the storage service system calls the read interface, a read file request can be triggered. After the user space file system captures the read file request, the conference data is read from the previously opened file in the local disk, and the conference data is decrypted by using the key.

[0090] After the user space file system obtains the decrypted conference data, the decrypted conference data is returned to the storage service system. After the storage service system receives the decrypted conference data returned by the user space file system, the decrypted conference data is played.

[0091] Reference Figure 3 Another step flowchart of a data encryption method of an embodiment of the application is shown. The data encryption method of the embodiment of the application can be applied to a user space file system.

[0092] As shown in Figure 3 , the data encryption method can include the following steps:

[0093] Step 301, after the user space file system captures a recording file operation request for conference data triggered by a storage service system, access permission information corresponding to the conference data is generated, the conference data is encrypted, and the encrypted conference data is stored.

[0094] Step 302, after the user space file system captures a playback file operation request for the conference data triggered by the storage service system, access permission verification is performed according to the access permission information.

[0095] Step 303, if the user space file system passes the verification, the encrypted conference data is decrypted, and the decrypted conference data is returned to the storage service system.

[0096] Step 304, if the user space file system fails the verification, the encrypted conference data is returned to the storage service system.

[0097] If the user space file system fails the verification, the encrypted conference data is obtained and returned to the storage service system.

[0098] As an example, the user space file system opens a file according to the stored file name and the stored file path, the file storing the encrypted conference data, and reads the encrypted conference data from the file.

[0099] After the storage service system receives the encrypted conference data, a prompt information can be popped up to prompt the user that the conference data is an encrypted file and cannot be viewed.

[0100] In the embodiment of the present application, the recording file operation request and the playback file operation request triggered by the storage service system are captured by the user space file system. After capturing the recording file operation request triggered by the storage service system for the conference data, the access permission information corresponding to the conference data is generated, the conference data is encrypted, and the encrypted conference data is stored, so as to ensure the confidentiality and security of data storage. After capturing the playback file operation request triggered by the storage service system for the conference data, the access permission verification is performed according to the access permission information. If the verification is passed, the encrypted conference data is decrypted, and the decrypted conference data is returned to the storage service system, so as to control the access permission of the data access process and prevent data leakage. Moreover, the user space file system is used to realize data encryption and decryption in the embodiment of the present application, and the storage service system does not need to develop data encryption and decryption function and does not need to perceive the encryption and decryption details, so that the implementation process is more simple.

[0101] Referring to Figure 4 , a system architecture diagram of data encryption in the embodiment of the present application is shown.

[0102] As shown in Figure 4 , in the system architecture of the embodiment of the present application, the storage service system interacts with the operating system API, the operating system API interacts with the user space file system, the user space file system interacts with the encryption and decryption module, and the encryption and decryption module respectively interacts with the key management system and the underlying file system (local disk).

[0103] Referring to Figure 5 , a schematic diagram of a data encryption process in the embodiment of the present application is shown.

[0104] As shown in Figure 5 , the data encryption process can include a recording process and a playback process.

[0105] The recording process includes:

[0106] The storage service system receives a conference recording instruction, and calls an operating system API to trigger a recording file operation request.

[0107] After the user space file system captures the recording file operation request, the user space file system obtains a key corresponding to conference data from a key management system, encrypts the conference data by using the key, writes the encrypted video data into a local disk, and obtains an encrypted data file.

[0108] After the user space file system captures the recording file operation request, the user space file system can specifically interact with the encryption and decryption module, the encryption and decryption module obtains a key corresponding to conference data from a key management system, the encryption and decryption module encrypts the conference data by using the key, and the encryption and decryption module writes the encrypted conference data ciphertext into a local disk.

[0109] The playback process includes:

[0110] The storage service system receives a conference playback instruction, and calls an operating system API to trigger a playback file operation request.

[0111] After the user space file system captures the playback file operation request, the user space file system obtains a key corresponding to conference data from a key management system, decrypts the encrypted conference data in the encrypted data file by using the key, and returns the decrypted video data to the storage service system.

[0112] After the user space file system captures the playback file operation request, the user space file system can specifically interact with the encryption and decryption module, the encryption and decryption module obtains a key corresponding to conference data from a key management system, and the encryption and decryption module decrypts the encrypted conference data by using the key.

[0113] In the embodiment of the application, the encryption and decryption process described above can be implemented by using any applicable encryption algorithm, such as an SM2 (national encryption elliptic curve encryption algorithm), an SM3 (national encryption Hash algorithm), an SM4 (national encryption block encryption algorithm), and the like, and the embodiment of the application does not limit this.

[0114] Referring to Figure 6 , a structural block diagram of a data encryption device according to an embodiment of the application is shown. Figure 6 The data encryption device shown is applied to a user space file system.

[0115] As shown in Figure 6 , the data encryption device can include the following modules:

[0116] The first processing module 601 is configured to, after capturing a recording file operation request for conference data triggered by a storage service system, generate access permission information corresponding to the conference data, encrypt the conference data, and store the encrypted conference data.

[0117] The verification module 602 is configured to perform access permission verification according to the access permission information after capturing the playback file operation request for the conference data triggered by the storage service system;

[0118] The second processing module 603 is configured to decrypt the encrypted conference data and return the decrypted conference data to the storage service system if the verification is passed.

[0119] Optionally, the first processing module 601 is specifically configured to:

[0120] add the first user identifier included in the recording file operation request to the access permission information;

[0121] and / or,

[0122] add a second user identifier preset to the access permission information.

[0123] Optionally, the verification module 602 is specifically configured to obtain a third user identifier included in the playback file operation request, and determine whether the third user identifier exists in the access permission information; if the third user identifier exists in the access permission information, the verification is passed; if the third user identifier does not exist in the access permission information, the verification is not passed.

[0124] Optionally, the second processing module 603 is further configured to return the encrypted conference data to the storage service system if the verification is not passed.

[0125] Referring to Figure 7 , another structural block diagram of a data encryption device is shown. Figure 7 The data encryption device shown is applied to a storage service system.

[0126] As shown in Figure 7 , the data encryption device can include the following modules:

[0127] The first trigger module 701 is configured to trigger a recording file operation request for conference data after receiving a conference recording instruction.

[0128] The second trigger module 702 is configured to trigger a playback file operation request for the conference data after receiving a conference playback instruction.

[0129] The playing module 703 is configured to play the decrypted conference data returned by the user space file system after receiving the decrypted conference data.

[0130] Optionally, the first triggering module 701 is specifically configured to call a first application programming interface of an operating system to trigger a recording file operation request for the conference data; and the second triggering module 702 is specifically configured to call a second application programming interface of the operating system to trigger the recording file operation request for the conference data.

[0131] In the embodiment of the present application, the recording file operation request and the playback file operation request triggered by the storage service system are captured by the user space file system. After capturing the recording file operation request for the conference data triggered by the storage service system, the access permission information corresponding to the conference data is generated, the conference data is encrypted, and the encrypted conference data is stored, so that the confidentiality and security of data storage can be ensured. After capturing the playback file operation request for the conference data triggered by the storage service system, the access permission verification is performed according to the access permission information. If the verification is passed, the encrypted conference data is decrypted, and the decrypted conference data is returned to the storage service system, so that the access permission control can be performed on the data access process to prevent data leakage. Moreover, the user space file system is used to realize data encryption and decryption in the embodiment of the present application, and the storage service system does not need to develop data encryption and decryption function and does not need to perceive the encryption and decryption details, so that the implementation process is more simple.

[0132] For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the related parts refer to the part of the method embodiment.

[0133] In the embodiment of the present application, an electronic device is also provided. The electronic device can include a processor and a computer readable storage medium, and the computer readable storage medium stores a computer program. When the computer program is executed by the processor, the processor executes the data encryption method of any one of the above embodiments.

[0134] Reference Figure 8 , a structural block diagram of an electronic device according to an embodiment of the present application is shown. As Figure 8 shown, the electronic device 11 includes a processor 111, a computer readable storage medium 112, and the computer readable storage medium 112 stores a computer program 1121.

[0135] The processor 111 is configured to execute the computer program 1121 stored in the computer readable storage medium 112. When the processor 111 executes the computer program 1121, the processor 111 implements the data encryption method of any one of the above embodiments and achieves the same technical effects. To avoid repetition, the details are not described here.

[0136] The processor 111 mentioned above can include, but is not limited to, a central processing unit (CPU), a network processor (NP), a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, and the like.

[0137] The computer readable storage medium 112 mentioned above can include, but is not limited to, a read only memory (ROM), a random access memory (RAM), a compact disc read only memory (CD-ROM), an electronic erasable programmable read only memory (EEPROM), a hard disk, a floppy disk, a flash memory, and the like.

[0138] In the embodiments of the present application, a computer readable storage medium is also provided, and the computer readable storage medium stores a computer program, which can be executed by a processor of an electronic device, and when the computer program is executed by the processor, the processor executes the data encryption method according to any one of the above embodiments.

[0139] Reference Figure 9 is shown in FIG. 21, which is a structural block diagram of a computer readable storage medium according to an embodiment of the present application. As shown in Figure 9 , the computer readable storage medium 21 stores a computer program 211, and when the computer program 211 is executed by a processor, the processor executes the data encryption method according to any one of the above embodiments and achieves the same technical effects. To avoid repetition, details are not described herein.

[0140] It should be noted that all actions of obtaining signals, information or data in the present application are performed under the premise of complying with the corresponding data protection regulations and policies of the place and obtaining the authorization given by the owner of the corresponding device.

[0141] The various embodiments described in this specification are combinable with each other, and each embodiment is described in a progressive manner, with each embodiment focusing on the differences from other embodiments, and the same or similar parts among the various embodiments can be mutually referred to.

[0142] Those skilled in the art will appreciate that embodiments of the present application can be readily used as a method, apparatus, or computer program product. Accordingly, embodiments of the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present application can take the form of a computer program product on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage devices, and the like) embodying computer program code.

[0143] Embodiments of the present application are described with reference to the flowchart illustrations and / or block diagrams of the methods, terminal devices (systems), and computer program products according to embodiments of the present application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, an embedded processor, or other programmable data processing terminal devices to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal devices, create means for implementing the functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams.

[0144] These computer program instructions can also be stored in a computer- readable memory that can direct a computer or other programmable data processing terminal devices to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions means which implement the function specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams.

[0145] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal devices, such that a series of operational steps are performed on the computer or other programmable terminal devices to create a computer implemented process so that the instructions executed on the computer or other programmable terminal devices provide steps for implementing the functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams. Figure 1 one or more functions specified in the flowchart illustrations and / or block diagrams.

[0146] While the preferred embodiments of the application have been described above, it should be understood that many modifications and variations to these embodiments will be apparent to those skilled in the art once they learn of the basic inventive concepts. Therefore, the attached claims are intended to cover all such modifications and variations.

[0147] Finally, it is to be understood that the phraseology or terminology employed herein, such as "first" and "second", etc., are for descriptive purposes only and should not be construed to imply or incorporate any kind of ordering, unless and except for the order of method steps or process steps as expressly and implicitly defined in the appended claims. Moreover, the use of the term "including" or "comprising" in the description, or in any statement of the claims, is not intended to exclude or limit other elements or steps. The term "consisting essentially of to allow the inclusion of additional elements or steps without however, introducing new claim limitations, which elements or steps are non-essential to the application. In addition, the use of the term "or" is meant to encompass both exclusive and inclusive "or". Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the application belongs. The present application illustrates a data encryption method, device, electronic equipment and storage medium, and the principles and implementation manners of the application are described by using specific examples. The above description of the embodiments is only intended to help understand the method of the application and its core idea. Meanwhile, for those skilled in the art, the specific implementation manners and application scope of the application can be changed according to the idea of the application. In summary, the content of the specification should not be understood as limiting the application.

[0148] The above describes in detail the data encryption method, device, electronic equipment and storage medium provided by the application. The principles and implementation manners of the application are described by using specific examples. The above description of the embodiments is only intended to help understand the method of the application and its core idea. Meanwhile, for those skilled in the art, the specific implementation manners and application scope of the application can be changed according to the idea of the application. In summary, the content of the specification should not be understood as limiting the application.

Claims

1. A data encryption method, characterized in that: The method comprises: After capturing a recording file operation request for conference data triggered by a storage service system, generating access permission information corresponding to the conference data, encrypting the conference data, and storing the encrypted conference data; After capturing the playback file operation request for the conference data triggered by the storage service system, performing access permission verification according to the access permission information; If the verification is successful, the encrypted conference data is decrypted and the decrypted conference data is returned to the storage service system.

2. The method according to claim 1, characterized in that The generating of access permission information corresponding to the conference data includes: Obtaining a first user identifier included in the recording file operation request, and adding the first user identifier to the access permission information; and / or, A preset second user identifier is obtained, and the second user identifier is added to the access authority information.

3. The method according to claim 1, characterized in that The performing access permission verification according to the access permission information includes: Obtaining a third user identifier included in the file playback operation request, and determining whether the third user identifier exists in the access permission information; If it exists, the verification passes; If it does not exist, the verification fails.

4. The method according to claim 1, wherein The method further comprises: If the verification fails, the encrypted conference data is returned to the storage service system.

5. A data encryption method, characterized in that: The method comprises: After receiving the conference recording instruction, trigger the recording file operation request for the conference data; After receiving the conference playback instruction, triggering a playback file operation request for the conference data; After receiving the decrypted conference data returned by the user space file system, the decrypted conference data is played.

6. The method according to claim 5, characterized in that The triggering of the recording file operation request for the conference data includes: calling a first application programming interface of the operating system to trigger the recording file operation request for the conference data; The triggering of the playback file operation request for the conference data includes: calling a second application programming interface of the operating system to trigger the recording file operation request for the conference data.

7. A data encryption device, characterized in that: The device comprises: A first processing module is configured to capture a recording file operation request for conference data triggered by a storage service system, generate access permission information corresponding to the conference data, encrypt the conference data, and store the encrypted conference data; a verification module, configured to, upon capturing a playback file operation request for the conference data triggered by the storage service system, perform access permission verification according to the access permission information; The second processing module is configured to decrypt the encrypted conference data and return the decrypted conference data to the storage service system if the verification is successful.

8. A data encryption device, characterized in that: The device comprises: A first trigger module is configured to trigger a recording file operation request for conference data after receiving a conference recording instruction; A second trigger module is configured to trigger a playback file operation request for the conference data after receiving a conference playback instruction; The playing module is used to play the decrypted conference data after receiving the decrypted conference data returned by the user space file system.

9. An electronic device, characterized in that: The electronic device includes a processor and a computer-readable storage medium, on which a computer program is stored; when the computer program is executed by the processor, the processor executes the data encryption method as described in any one of claims 1 to 4, or executes the data encryption method as described in any one of claims 5 to 6.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the processor executes the data encryption method according to any one of claims 1 to 4, or executes the data encryption method according to any one of claims 5 to 6.

Images