Data encryption resource allocation method and device and electronic equipment

Abstract

The invention provides a data encryption resource allocation method and device and electronic equipment. The method comprises the following steps: acquiring an encryption demand parameter and a data scale parameter of to-be-encrypted data; according to the encryption demand parameter and the data scale parameter, determining encryption computing power corresponding to the to-be-encrypted data; calling a target resource library; and based on the encryption demand parameter and the encryption computing power, distributing a target encryption resource for the to-be-encrypted data from a target resource library. According to the method and the device, the technical problem of unbalanced encryption resource distribution when encryption resource distribution is carried out on the data in related technologies is solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of privacy computing, in particular to a data encryption resource allocation method and device and electronic equipment. BACKGROUND

[0002] In related technologies, various sensitive data are encrypted before transmission, and data also need to be encrypted before storage, and are stored in ciphertext mode. These requirements greatly increase the use of encryption resources. To meet the encryption needs of a large amount of data, encryption resources are converged to an independent encryption system for unified scheduling and management. However, in related technologies, there is an imbalance in the allocation of encryption resources when data is encrypted.

[0003] At present, no effective solution has been proposed to solve the above problems. SUMMARY

[0004] The main purpose of the present application is to provide a data encryption resource allocation method, device and electronic equipment, so as to at least solve the problem of imbalance in the allocation of encryption resources when data is encrypted in related technologies.

[0005] In order to achieve the above purpose, according to one aspect of the present application, a data encryption resource allocation method is provided, comprising: obtaining encryption demand parameters and data size parameters of to-be-encrypted data; determining encryption computing power corresponding to the to-be-encrypted data according to the encryption demand parameters and the data size parameters, wherein the encryption computing power represents the amount of computing resources required to perform encryption operations on the to-be-encrypted data; calling a target resource library, wherein the target resource library includes a plurality of candidate encryption resources for data encryption; based on the encryption demand parameters and the encryption computing power, allocating target encryption resources for the to-be-encrypted data from the target resource library.

[0006] Optionally, the step of allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power includes: determining the real-time resource status corresponding to the target resource library; determining, based on the real-time resource status, whether to perform a target operation on the target resource library, wherein the target operation includes any one of the following: an update operation, an add operation, wherein the update operation is used to update at least one candidate encryption resource among a plurality of candidate encryption resources in the target resource library, and the add operation is used to add a predetermined number of new encryption resources based on the plurality of candidate encryption resources in the target resource library; if the operation determination result is to perform a target operation on the target resource library, performing the target operation on the target resource library to obtain an updated resource library; and allocating target encryption resources for the data to be encrypted from the updated resource library based on the encryption requirement parameters and the encryption computing power.

[0007] Optionally, determining the real-time resource status corresponding to the target resource library includes: determining encryption device parameters, response speed parameters, and load parameters corresponding to the plurality of candidate encrypted resources in the target resource library; determining the device status corresponding to the target resource library based on the encryption device parameters corresponding to the plurality of candidate encrypted resources; determining the response status corresponding to the target resource library based on the response speed parameters corresponding to the plurality of candidate encrypted resources; determining the load status corresponding to the target resource library based on the load parameters corresponding to the plurality of candidate encrypted resources; and determining the real-time resource status corresponding to the target resource library based on the device status, the response status, and the load status.

[0008] Optionally, the step of allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power includes: when the data to be encrypted includes multiple sub-data and the encryption computing power includes sub-encryption computing power corresponding to each of the multiple sub-data, determining the encryption position corresponding to each of the multiple sub-data; according to the encryption position corresponding to each of the multiple sub-data, for any one of the multiple sub-data, allocating sub-encryption resources from the target resource library according to the sub-encryption computing power corresponding to the sub-data, until the multiple sub-data are processed.

[0009] Optionally, before retrieving the target resource library, the method further includes: determining historical data and computing power constraints; determining historical computing power characteristics corresponding to the historical data and the current time period corresponding to the data to be encrypted, wherein the historical computing power characteristics represent the characteristics of the computing power required to perform encryption operations on the historical data changing over time; and constructing the target resource library based on the historical computing power characteristics, the current time period, and the computing power constraints.

[0010] Optionally, allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power includes: determining candidate requirement parameters and candidate computing power corresponding to the plurality of candidate encryption resources in the target resource library; determining a plurality of initial encryption resources from the plurality of candidate encryption resources based on the candidate requirement parameters corresponding to the plurality of candidate encryption resources and the encryption requirement parameters; and allocating target encryption resources for the data to be encrypted from the plurality of initial encryption resources based on the candidate computing power corresponding to the plurality of initial encryption resources and the encryption computing power.

[0011] Optionally, determining the encryption computing power corresponding to the data to be encrypted based on the encryption requirement parameters and the data size parameters includes: when the encryption requirement parameters include encryption type requirements, encryption algorithm requirements, and encryption mode requirements, determining the encryption computing power corresponding to the data to be encrypted based on the encryption type requirements, the encryption algorithm requirements, the encryption mode requirements, and the data size parameters.

[0012] According to another aspect of this application, a data encryption resource allocation apparatus is provided, comprising: an acquisition module for acquiring encryption requirement parameters and data size parameters of data to be encrypted; a first determination module for determining, based on the encryption requirement parameters and the data size parameters, the encryption computing power corresponding to the data to be encrypted, wherein the encryption computing power represents the amount of computing resources required to perform an encryption operation on the data to be encrypted; a retrieval module for retrieving a target resource library, wherein the target resource library includes a plurality of candidate encryption resources for data encryption; and a second determination module for allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power.

[0013] According to another aspect of this application, an electronic device is provided, comprising: one or more processors, a memory, and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including a method for cryptographic resource allocation of data as described in any of the preceding claims.

[0014] According to another aspect of this application, a computer program product is provided, comprising: when the computer program is executed by a processor, the steps of implementing the encrypted resource allocation method for data as described in any one of the preceding claims.

[0015] In this embodiment of the invention, encryption requirement parameters and data size parameters of the data to be encrypted are obtained; based on the encryption requirement parameters and data size parameters, the encryption computing power corresponding to the data to be encrypted is determined, wherein the encryption computing power is used to represent the amount of computing resources required to perform encryption operations on the data to be encrypted; a target resource library is retrieved, wherein the target resource library includes multiple candidate encryption resources for data encryption; based on the encryption requirement parameters and encryption computing power, target encryption resources are allocated to the data to be encrypted from the target resource library. By obtaining the encryption requirement parameters and data size parameters of the data to be encrypted, the core requirement characteristics of the encryption operation can be accurately captured. On this basis, the amount of computing resources (encryption computing power) required to perform encryption operations on the data to be encrypted is determined by combining the two types of parameters. The specific degree of computing resource consumption of the encryption requirement can be clarified. After retrieving the target resource library containing multiple candidate encryption resources, the target encryption resources are allocated from the resource library based on the encryption requirement parameters and the determined encryption computing power. This ensures that the resource allocation is accurately matched with the actual needs, effectively avoids the problem of uneven allocation of encryption resources, and thus solves the technical problem of uneven allocation of encryption resources when allocating encryption resources for data in related technologies. Attached Figure Description

[0016] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0017] Figure 1 A hardware structure block diagram of a mobile terminal for an encrypted resource allocation method for execution data provided in an embodiment of this application is shown.

[0018] Figure 2 A flowchart illustrating a method for allocating encrypted resources for data according to an embodiment of this application is shown.

[0019] Figure 3 A general framework diagram of a dynamic scheduling system for encrypted resources provided according to an embodiment of this application is shown;

[0020] Figure 4 A flowchart illustrating the allocation of encrypted resources in a dynamic scheduling system for encrypted resources provided according to an embodiment of this application is shown.

[0021] Figure 5 A flowchart of the demand conversion unit provided according to an embodiment of this application is shown;

[0022] Figure 6 A schematic diagram of target resource pool computing power planning provided according to an embodiment of this application is shown;

[0023] Figure 7 A schematic diagram illustrating the updating of abnormal encrypted resources according to an embodiment of this application is shown;

[0024] Figure 8 A schematic diagram of the expanded pre-scheduled pool encrypted resources provided according to an embodiment of this application is shown;

[0025] Figure 9 A flowchart illustrating the operation of a computing power detection unit according to an embodiment of this application is shown.

[0026] Figure 10 A schematic diagram illustrating the relationship between the target resource library status and task processing according to an embodiment of this application is shown;

[0027] Figure 11 A flowchart of the pre-distribution unit provided according to an embodiment of this application is shown;

[0028] Figure 12 A structural block diagram of an encrypted resource allocation apparatus for data provided according to an embodiment of this application is shown.

[0029] The above figures include the following reference numerals:

[0030] 102. Processor; 104. Memory; 106. Transmission device; 108. Input / output device. Detailed Implementation

[0031] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0032] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0033] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this application described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0034] It should be noted that all information and data collected are authorized by the target object (such as a user) or fully authorized by all parties involved. Furthermore, the collection, storage, use, processing, transmission, provision, disclosure, and application of this data all comply with the requirements and constraints of data collection and processing. Necessary confidentiality measures have been implemented, and corresponding access points are provided for the target object to choose whether to authorize or refuse. When performing related operations, the target object is provided with an access point to choose whether to agree to or refuse the automated decision-making result. If the target object chooses to refuse, no automated decision-making will be performed for them.

[0035] The technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention.

[0036] The methods and embodiments provided in this application can be executed on a mobile terminal, computer terminal, or similar computing device. Taking running on a mobile terminal as an example, Figure 1 A hardware structure block diagram of a mobile terminal for an encrypted resource allocation method for execution data provided in an embodiment of this application is shown, such as... Figure 1 As shown, a mobile terminal may include one or more ( Figure 1 Only one is shown in the diagram. A processor 102 (which may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.) and a memory 104 for storing data are also shown. The mobile terminal may further include a transmission device 106 for communication functions and an input / output device 108. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the mobile terminal described above. For example, the mobile terminal may also include components that are more... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0037] The memory 104 can be used to store computer programs, such as application software programs and modules, like the computer program corresponding to the data encryption resource allocation method in this embodiment of the invention. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, thereby implementing the above-described method. The memory 104 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the mobile terminal via a network. Examples of the aforementioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof. The transmission device 106 is used to receive or send data via a network. Specific examples of the aforementioned networks may include wireless networks provided by the mobile terminal's communication provider. In one example, the transmission device 106 includes a network interface controller (NIC), which can be connected to other network devices via a base station to communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0038] This embodiment provides a method for encrypting and allocating data on a mobile terminal, computer terminal, or similar computing device. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0039] Figure 2 A flowchart illustrating an encrypted resource allocation method for data provided according to an embodiment of this application is shown, such as... Figure 2 As shown, the method includes the following steps:

[0040] S202, obtain the encryption requirement parameters and data size parameters of the data to be encrypted.

[0041] In step S202 of this application, the encryption requirement parameters and data size parameters of the data to be encrypted are obtained.

[0042] This involves data to be encrypted, which is data that needs to be encrypted. The encryption process includes encryption operations, decryption operations, digital signatures, signature verification, etc. The content of the encryption process corresponds to the encryption requirement parameters.

[0043] This involves encryption requirement parameters, which are used to reflect the requirements for encrypting data. These encryption requirement parameters include encryption type requirements (such as data encryption, decryption, digital signature, signature verification, and other operation types), encryption algorithm requirements, and encryption mode requirements.

[0044] This includes a data size parameter, which is an indicator that quantifies the size of the data to be encrypted and reflects the total amount of data that needs to be processed during the encryption operation.

[0045] By obtaining the encryption requirement parameters (covering encryption type, algorithm, and mode requirements) and data size parameters of the data to be encrypted, the specific content and resource consumption of the encryption process can be accurately defined, ensuring that the subsequent allocation of encryption resources is based on data.

[0046] S204. Based on the encryption requirement parameters and the data size parameters, determine the encryption computing power corresponding to the data to be encrypted. The encryption computing power is used to represent the amount of computing resources required to perform encryption operations on the data to be encrypted.

[0047] In step S204 of this application, the encryption computing power corresponding to the data to be encrypted is determined.

[0048] This involves encryption computing power, which is used to represent the amount of computing resources required to perform encryption operations on data to be encrypted. This amount of computing resources can be represented by the sum of hardware and software resources required for the encryption operation.

[0049] This involves encryption operations, which are operations that encrypt data to be encrypted, including data encryption (converting plaintext into ciphertext), decryption (restoring ciphertext to plaintext), digital signature (generating a unique identifier for the data), and signature verification (confirming the integrity and authenticity of the data source).

[0050] By combining encryption requirement parameters and data size parameters, the encryption computing power corresponding to the data to be encrypted can be determined. This clarifies the specific degree of computing resource consumption of the encryption task, providing a precise basis for subsequently retrieving the target resource library and allocating suitable encryption resources. This ensures that resource allocation neither exceeds actual needs and causes waste, nor affects the efficiency and security of encryption operations due to insufficient resources.

[0051] S206, retrieve the target resource library, wherein the target resource library includes multiple candidate encryption resources for data encryption.

[0052] In step S206 of this application, the target resource library is retrieved.

[0053] This involves a target resource library, which is a collection of multiple candidate encrypted resources used to support data encryption operations.

[0054] This involves data encryption, which is the process of performing encryption operations on data, including data encryption (converting plaintext into ciphertext), decryption (restoring ciphertext to plaintext), digital signature (generating a unique identifier for the data), and signature verification (confirming the integrity and authenticity of the data source).

[0055] This involves multiple candidate cryptographic resources, which are resources used to perform cryptographic operations.

[0056] Retrieving a target resource library containing multiple candidate encryption resources can provide diverse resource options for data encryption operations, ensuring that the most suitable encryption resources can be matched and allocated according to specific encryption requirements (such as encryption type, algorithm complexity) and computing power requirements.

[0057] Furthermore, the target resource library comprises multiple resource layers, each containing at least one candidate encrypted resource. These resource layers include a first layer, a second layer, and a third layer. The candidate encrypted resources in the first layer have an encryption requirement satisfaction index greater than a predetermined requirement threshold; the candidate encrypted resources in the second layer have an encryption security index greater than a predetermined security threshold; and the candidate encrypted resources in the third layer have an encryption scenario richness greater than a predetermined scenario richness.

[0058] By setting the encryption requirement satisfaction index of the first-layer candidate encryption resources to be greater than the predetermined requirement threshold, the basic encryption requirements of the data to be encrypted can be accurately matched, ensuring that resource allocation does not deviate from actual functional requirements. The encryption security index of the second-layer candidate encryption resources is greater than the predetermined security threshold, which can enhance the security of encryption operations and avoid data leakage or tampering due to inadequate security. The encryption scenario richness of the third-layer candidate encryption resources is greater than the predetermined scenario richness, which can adapt to different encryption scenarios (such as low computing power scenarios in the Internet of Things and high concurrency scenarios in finance), solving the problem that a single resource cannot cover multiple scenarios. Finally, through the layered resource design with core indicators, the target resource library has the ability to accurately meet the requirements, ensure encryption security, and adapt to diverse scenarios. This provides a comprehensive and reliable resource foundation for the subsequent allocation of target encryption resources based on encryption requirement parameters and encryption computing power, effectively avoiding the problems of uneven or insufficient encryption resource allocation.

[0059] S208, based on encryption requirement parameters and encryption computing power, allocates target encryption resources from the target resource library for the data to be encrypted.

[0060] In step S208 provided in this application, a target encryption resource is allocated from the target resource library for the data to be encrypted.

[0061] This involves target encryption resources, which are selected from the target resource library based on encryption requirement parameters and encryption computing power requirements. These resources are ultimately used to perform encryption operations on the data to be encrypted. They are the best resources selected from the target resource library that can meet the current encryption requirements.

[0062] Encryption requirement parameters can clearly define the specific requirements of the data to be encrypted, including encryption type, algorithm, and mode; encryption computing power can quantify the amount of computing resources required to perform encryption operations, avoiding delays or stutters in encryption operations due to insufficient computing power, or idle and wasteful resources due to excessive computing power. Thus, based on encryption requirement parameters and encryption computing power, target encryption resources can be selected and allocated from the target resource library, enabling precise matching between encryption resources and the requirements of the data to be encrypted.

[0063] Furthermore, multiple resource layers are connected in series, and the number of candidate encrypted resources included in the first layer is greater than the number of candidate encrypted resources included in the second layer, and the number of candidate encrypted resources included in the second layer is greater than the number of candidate encrypted resources included in the third layer. Please analyze the following based on this passage: Multiple resource layers are connected in series, and the number of candidate encrypted resources included in the first layer is greater than the number of candidate encrypted resources included in the second layer, and the number of candidate encrypted resources included in the second layer is greater than the number of candidate encrypted resources included in the third layer.

[0064] Multiple resource layers are interconnected, enabling encrypted resource allocation to be progressively filtered in the order of first-layer demand matching → second-layer security verification → third-layer scenario adaptation. This ensures that each step of the filtering is based on the valid results of the previous layer, avoiding issues such as mismatched requirements, security vulnerabilities, or scenario incompatibility caused by skipping key steps in resource allocation. Simultaneously, setting the number of candidate encrypted resources in the first layer to be greater than that in the second layer, and the second layer greater than that in the third layer, provides more resource options that meet basic needs in the initial allocation stage, ensuring flexibility in demand matching. As the filtering progresses to the security verification and scenario adaptation stages, the number of resources is gradually reduced, focusing on core resources that simultaneously meet high security standards and high scenario adaptability. This avoids inefficiency caused by excessive resources later on, and through a resource gradient design with broad entry and strict exit criteria, ensures that the final allocated target encrypted resources possess demand relevance, security, and scenario adaptability, further optimizing the accuracy and efficiency of encrypted resource allocation.

[0065] In one optional scheme, based on encryption requirement parameters and encryption computing power, target encryption resources are allocated from the target resource library to the data to be encrypted. This includes: determining the real-time resource status corresponding to the target resource library; determining, based on the real-time resource status, whether to perform a target operation on the target resource library, wherein the target operation includes any of the following: an update operation, an add operation, wherein the update operation is used to update at least one candidate encryption resource among multiple candidate encryption resources in the target resource library, and the add operation is used to add a predetermined number of new encryption resources based on the multiple candidate encryption resources in the target resource library; if the operation determination result is to perform a target operation on the target resource library, the target operation is performed on the target resource library to obtain an updated resource library; and, based on the encryption requirement parameters and encryption computing power, target encryption resources are allocated from the updated resource library to the data to be encrypted.

[0066] This embodiment describes the specific steps for allocating target encryption resources for the data to be encrypted from the target resource library based on encryption requirement parameters and encryption computing power.

[0067] This involves real-time resource status, which reflects the current resource status of the target resource library. This includes: resource availability (e.g., busy, normal, idle), response speed parameters (e.g., response latency of encryption operations), load parameters (e.g., processor utilization, memory usage, current processing workload), and encryption device parameters (e.g., device model, device performance). This real-time resource status reflects the availability, busyness, and presence of anomalies of resources within the target resource library.

[0068] This involves determining the operation result, which is based on the real-time resource status of the target resource library to determine whether the target operation needs to be performed on the target resource library.

[0069] This involves target operations, which are operations used to adjust the target resource library to adapt to the encryption requirements of the data to be encrypted, including update operations and add operations.

[0070] This involves update operations, which are operations that upgrade, repair, or adjust the configuration of at least one candidate encrypted resource already existing in the target resource library, such as updating the encryption algorithm version, fixing security vulnerabilities, anomalies, or optimizing performance parameters.

[0071] This includes a "new addition" operation, which involves adding a predetermined number of new encrypted resources to the existing candidate encrypted resources in the target resource library to expand the library's capacity. This operation expands the total number of resources in the library and improves the resource types, addressing issues such as insufficient existing resources (e.g., busy encryption, no available encrypted resources) and missing resource types.

[0072] This involves a predetermined number of resources. This predetermined number is the specific number of new encryption resources that need to be added to the target resource library based on the encryption computing power requirements of the data to be encrypted, the load of existing resources in the real-time resource status, and the estimated amount of future encryption tasks. This ensures that the new resources can just meet the current and short-term encryption needs and avoid resource surplus or shortage.

[0073] This involves adding new encrypted resources, which are candidate encrypted resources added to the target resource library through the addition operation.

[0074] This involves updating the resource library, which is the new resource library obtained after performing the target operation on the target resource library.

[0075] By determining the real-time resource status of the target resource repository, we can accurately grasp the availability, workload, and presence of anomalies of the resources within the repository. Based on this real-time resource status, we can determine whether to perform the target operation on the target resource repository. We can also assess whether resource adjustments are needed to meet encryption requirements based on the existing resource status. Target operations include update and add operations: update operations are used to upgrade, repair, or optimize existing encrypted resources, improving their performance and security; add operations are used to expand the repository capacity, addressing issues of insufficient or missing resource types. When the operation determination result is to perform the target operation on the target resource repository, performing the target operation results in an updated repository, ensuring that the repository has sufficient capacity and flexibility to handle encryption tasks.

[0076] In one optional approach, determining the real-time resource status corresponding to the target resource library includes: determining the encryption device parameters, response speed parameters, and load parameters corresponding to multiple candidate encrypted resources in the target resource library; determining the device status corresponding to the target resource library based on the encryption device parameters corresponding to the multiple candidate encrypted resources; determining the response status corresponding to the target resource library based on the response speed parameters corresponding to the multiple candidate encrypted resources; determining the load status corresponding to the target resource library based on the load parameters corresponding to the multiple candidate encrypted resources; and determining the real-time resource status corresponding to the target resource library based on the device status, response status, and load status.

[0077] This embodiment describes the specific steps for determining the real-time resource status corresponding to the target resource library.

[0078] This involves encryption device parameters, which are attribute information of the encryption devices (such as hardware) corresponding to each candidate encryption resource in the target resource library. These parameters include device model, device performance, device configuration, etc., and are used to measure the encryption processing capability of the encryption device.

[0079] This includes a response speed parameter, which reflects the response speed of each candidate encryption resource when performing encryption operations, and reflects the instantaneous response capability of each candidate encryption resource to encryption operations.

[0080] This includes load parameters, which represent the current operating load of each candidate encryption resource, including processor utilization and memory usage, and are used to determine whether the resource is in a normal, busy, or overloaded state.

[0081] This involves the device status, which is the overall status of the target resource library determined by a comprehensive judgment of the encryption device parameters of all candidate encrypted resources, including overall device availability and hardware performance compatibility.

[0082] This includes load status, which is the overall load of the target resource library based on the summary analysis of load parameters of all candidate encrypted resources. This includes overall resource utilization, idle resource ratio, number of overloaded resources, and task processing saturation, which directly reflects whether the current carrying capacity of the resource library is sufficient.

[0083] This includes the response status, which is the overall response efficiency of the target resource library based on a comprehensive evaluation of the response speed parameters of all candidate encrypted resources. This includes the average response latency, the percentage of resources that meet the response speed standard, and the distribution of high-latency resources, reflecting the real-time response level of the resource library to encryption tasks.

[0084] By analyzing device status, load status, and response status, the available resource quantity of the target resource library can be clearly quantified. Furthermore, determining the real-time resource status corresponding to the target resource library based on device status, response status, and load status can also include: determining a first temporal correlation between the device status sequence and the response status sequence, a second correlation between the device status sequence and the load status sequence, and a third correlation between the response status sequence and the load status sequence, based on the first, second, and third temporal correlations, determining the temporal coupling characteristics corresponding to the target resource library, and determining the real-time resource status corresponding to the target resource library based on the temporal coupling characteristics. Here, the device status sequence reflects the changes in device status over time; the response status sequence reflects the changes in response status over time; and the load status sequence reflects the changes in load status over time.

[0085] By transforming device status, response status, and load status into a time-dimensional sequence, the dynamic patterns of their changes over time can be captured, avoiding the one-sidedness of status judgments caused by relying solely on data from a single point in time. Identifying the three types of relationships—device and response, device and load, and response and load—clarifies the logic of their mutual influence (such as the lagging impact of load changes on response speed and the constraints of device performance degradation on load tolerance), making status correlation analysis more in-depth. Extracting temporal coupling features based on these three types of relationships allows for the integration of the overall dynamic interaction patterns of the three (such as the transmission path of abnormal states and the synchronicity of changes), avoiding cognitive biases caused by isolated analysis of individual relationships. Determining real-time resource status based on temporal coupling features comprehensively and objectively reflects the dynamic operation of the target resource pool, ensuring that subsequent resource adjustments and allocations align with resource change trends, effectively avoiding resource allocation imbalances caused by neglecting temporal correlations, and further improving the accuracy and foresight of encrypted resource scheduling.

[0086] In one alternative approach, based on encryption requirement parameters and encryption computing power, target encryption resources are allocated from the target resource library for the data to be encrypted. This includes: when the data to be encrypted includes multiple sub-data and the encryption computing power includes sub-encryption computing power corresponding to each of the multiple sub-data, determining the encryption position corresponding to each of the multiple sub-data; and according to the encryption position corresponding to each of the multiple sub-data, allocating sub-encryption resources from the target resource library for any one of the multiple sub-data based on the sub-encryption computing power corresponding to the sub-data, until the multiple sub-data are processed.

[0087] This embodiment describes the specific steps for allocating target encryption resources for the data to be encrypted from the target resource library based on encryption requirement parameters and encryption computing power.

[0088] This involves multiple sub-data, which are several independent data units included in the data to be encrypted. Each sub-data has integrity that can be encrypted independently (it can be a piece of data to be encrypted split into multiple data blocks, or a group of data to be encrypted split into multiple independent records).

[0089] This involves the encryption order, which is the sequence in which multiple sub-data items are encrypted, and can be determined based on the importance of the sub-data items.

[0090] This involves any one of the sub-data items, which is the sub-data item currently in the encryption process among multiple sub-data items.

[0091] This involves sub-encryption computing power, which is the amount of computing resources required to perform encryption operations on a single piece of data. It can be related to the size of the sub-data (such as data size), the complexity of the encryption algorithm (such as symmetric encryption or asymmetric encryption), security level requirements, etc.

[0092] This involves sub-encryption resources, which are encryption resources allocated from the target resource library for a single piece of data to perform encryption operations on it.

[0093] When the data to be encrypted contains multiple sub-data and the encryption computing power corresponds to the sub-encryption computing power of each sub-data, by determining the encryption position of multiple sub-data, the order of encryption operations can be clearly defined based on factors such as the importance of the sub-data. This avoids delays in the encryption of core sub-data due to disordered processing. Furthermore, by allocating sub-encryption resources from the target resource library according to the encryption position of any sub-data based on its corresponding sub-encryption computing power, it can be ensured that when encryption resources are insufficient, the sub-data with higher encryption positions, i.e., the relatively important encryption tasks, are encrypted first, thereby ensuring that core sub-data is processed first.

[0094] Furthermore, based on the encryption bits corresponding to each of the multiple sub-data items, for any one of the sub-data items, according to the corresponding sub-encryption computing power, sub-encryption resources are allocated from the target resource library for that sub-data item until all sub-data items are processed. This can be done even when the real-time resource status of the target resource library is busy. When the real-time resource status of the target resource library is busy, allocating sub-encryption resources to any one of the sub-data items according to their corresponding sub-encryption computing power based on their encryption bits, and continuing this process until all sub-data items are processed, can clearly define the priority of core sub-data items by encryption bits, avoiding processing chaos caused by core data and non-core data competing for resources under busy conditions. At the same time, it can focus limited resources on matching the computing power requirements of each sub-data item, avoiding efficiency waste caused by resource misallocation under busy conditions, and maximizing the utilization of existing resources under resource constraints, ensuring that all data to be encrypted is encrypted on time. This avoids encryption task backlog caused by resource busyness and ensures the orderliness and accuracy of encryption operations.

[0095] In one alternative approach, before retrieving the target resource library, the following steps are also included: determining historical data and computing power constraints; determining the historical computing power characteristics corresponding to the historical data and the current time period corresponding to the data to be encrypted, wherein the historical computing power characteristics represent the characteristics of the computing power required to perform encryption operations on the historical data changing over time; and constructing the target resource library based on the historical computing power characteristics, the current time period, and the computing power constraints.

[0096] This embodiment describes the specific steps before retrieving the target resource library.

[0097] This involves historical computing power characteristics, which are used to reflect the changes in computing power required to perform encryption operations on historical data over time. These characteristics include the peak and trough values ​​of computing power demand in different time periods (such as peak periods and trough periods), the rate of increase or decrease in computing power, and the fluctuation cycle of computing power demand corresponding to specific types of data. These characteristics can reflect the time dimension change pattern of encryption computing power.

[0098] This involves computational power constraints, which are resource limitations and constraints when constructing the target resource library. These constraints include a first constraint and a second constraint. The first constraint limits the number of encrypted resources in the target resource library while meeting the expected computational power requirements. For example, the first constraint could be a minimum principle, meaning the fewer encrypted resources in the target resource library, the better, while still meeting the expected computational power requirements. The second constraint limits the range of encrypted resources that can be adapted to the target resource library while still meeting the expected computational power requirements. For example, the second constraint could be an optimal principle, prioritizing the use of encrypted resources with the largest available computational power.

[0099] Determining historical data and computing power constraints provides the foundational data and limitations for constructing the resource repository. Based on historical computing power characteristics and the current time period corresponding to the data to be encrypted, it is possible to accurately grasp the computing power demand patterns of encryption tasks over time. Furthermore, constructing the target resource repository based on these characteristics and constraints ensures that the scale and performance of the resource repository precisely match actual needs, avoiding delays or failures in encryption tasks due to insufficient resources, while also preventing waste caused by resource excess. This achieves efficient resource utilization and dynamic optimization, improving the overall performance and reliability of the encryption system.

[0100] In one alternative approach, based on encryption requirement parameters and encryption computing power, target encryption resources are allocated from a target resource library to the data to be encrypted. This includes: determining candidate requirement parameters and candidate computing power corresponding to multiple candidate encryption resources in the target resource library; determining multiple initial encryption resources from the multiple candidate encryption resources based on the candidate requirement parameters and encryption requirement parameters corresponding to the multiple candidate encryption resources; and allocating target encryption resources to the data to be encrypted from the multiple initial encryption resources based on the candidate computing power and encryption computing power corresponding to the multiple initial encryption resources.

[0101] This embodiment describes the specific steps for allocating target encryption resources for the data to be encrypted from the target resource library based on encryption requirement parameters and encryption computing power.

[0102] This involves candidate requirement parameters, which are the encryption requirement characteristics corresponding to each candidate encrypted resource in the target resource library, including encryption type, encryption algorithm, and encryption mode. These parameters describe the specific range of encryption requirements that each candidate encrypted resource can meet and are an important basis for determining whether a candidate encrypted resource is suitable for the data to be encrypted.

[0103] This involves candidate computing power, which is the amount of computing resources required to perform encryption operations on each candidate encrypted resource in the target resource library.

[0104] By determining the candidate requirement parameters and candidate computing power of each candidate encryption resource in the target resource library, we can comprehensively understand the functional adaptability range and computing resource quantity of each candidate resource. Based on the matching of the candidate requirement parameters with the encryption requirement parameters of the data to be encrypted, multiple initial encryption resources are determined from the candidate encryption resources. This allows us to first screen out resources that functionally meet the encryption requirements, avoiding invalid allocation due to functional mismatch. Then, based on the matching of the candidate computing power of the initial encryption resources with the encryption computing power of the data to be encrypted, target encryption resources are allocated from the initial encryption resources. This ensures that the finally selected resources not only meet the functional requirements but also have sufficient computing power to support encryption operations, avoiding encryption delays due to insufficient computing power or resource waste due to excessive computing power. Ultimately, this achieves precise matching between encryption resources and the requirements of the data to be encrypted, improving the efficiency and rationality of encryption resource allocation.

[0105] In one alternative approach, determining the encryption computing power corresponding to the data to be encrypted based on encryption requirement parameters and data size parameters includes: when the encryption requirement parameters include encryption type requirements, encryption algorithm requirements, and encryption mode requirements, determining the encryption computing power corresponding to the data to be encrypted based on the encryption type requirements, encryption algorithm requirements, encryption mode requirements, and data size parameters.

[0106] This embodiment describes the specific steps for determining the encryption computing power corresponding to the data to be encrypted based on encryption requirement parameters and data size parameters.

[0107] This involves encryption type requirements, which are the types of encryption operations required for the data to be encrypted, such as data encryption, decryption, digital signature, and signature verification.

[0108] This involves the requirement for encryption algorithms, which refers to the specific encryption algorithm required for the data to be encrypted.

[0109] This involves the requirement for encryption mode, which refers to the encryption mode used under the encryption algorithm. The choice of encryption mode will affect the structure, security and performance of the encrypted data, and is a detailed technical requirement for the encryption task.

[0110] The encryption type requirement clarifies the core types of encryption operations, the encryption algorithm requirement clarifies the specific execution algorithm, and the encryption mode requirement clarifies the algorithm's operating logic. These three elements together define the basic complexity of the encryption operation. Combined with data scale parameters (such as data size) to quantify the volume of computing power consumed, the calculation of encryption computing power can be more targeted and accurate. Ultimately, based on these factors, the corresponding encryption computing power for the data to be encrypted can be determined, providing an accurate basis for the allocation of target encryption resources. This ensures that the allocated resources not only meet the encryption technology requirements but also have sufficient computing power to support them, avoiding low encryption efficiency or resource waste caused by inaccurate computing power estimation, and further guaranteeing the accuracy and efficiency of encryption operations.

[0111] Through the above embodiments, the encryption requirement parameters and data size parameters of the data to be encrypted are obtained; based on the encryption requirement parameters and data size parameters, the encryption computing power corresponding to the data to be encrypted is determined, where the encryption computing power represents the amount of computing resources required to perform encryption operations on the data to be encrypted; a target resource library is retrieved, where the target resource library includes multiple candidate encryption resources for data encryption; and target encryption resources are allocated to the data to be encrypted from the target resource library based on the encryption requirement parameters and encryption computing power. By obtaining the encryption requirement parameters and data size parameters of the data to be encrypted, the core requirement characteristics of the encryption operation can be accurately captured. Based on this, the amount of computing resources (encryption computing power) required to perform encryption operations on the data to be encrypted is determined by combining the two types of parameters. The specific degree of computing resource consumption by the encryption requirement can be clarified. After retrieving the target resource library containing multiple candidate encryption resources, the target encryption resources are allocated from the resource library based on the encryption requirement parameters and the determined encryption computing power. This ensures that the resource allocation is accurately matched with the actual requirement, effectively avoiding the problem of uneven allocation of encryption resources, and thus solving the technical problem of uneven allocation of encryption resources when allocating encryption resources for data in related technologies.

[0112] To enable those skilled in the art to better understand the technical solution of this application, the implementation process of the encrypted resource allocation method for data in this application will be described in detail below with reference to specific embodiments.

[0113] This embodiment relates to a specific method for allocating encrypted data resources, which can be implemented through an encrypted resource dynamic scheduling system. Figure 3 A general framework diagram of a dynamic scheduling system for encrypted resources provided according to embodiments of this application is shown, such as... Figure 3As shown, the encrypted resource dynamic scheduling system can be used to improve the encryption capabilities and utilization efficiency of encrypted resources. The encrypted resource dynamic scheduling system comprises four parts: a demand calculation unit, an encrypted resource pre-distribution unit (i.e., the pre-distribution unit), an encrypted resource computing power detection unit (i.e., the computing power detection unit), and an encrypted resource dynamic control and scheduling unit (i.e., the dynamic scheduling unit). Specifically:

[0114] Demand conversion unit: used to analyze the computing power required for encryption requests, break down various computing demands, convert them into a unified internal demand index, and record it as expected computing power (that is, the encryption computing power corresponding to the data to be encrypted).

[0115] Pre-distribution unit: used to balance the matching relationship between encrypted requests and encrypted resources, and to plan and generate a pre-scheduled pool of encrypted resources (i.e., target resource library) based on historical data, and to distribute requests to designated encrypted resources for computation according to plan.

[0116] The computing power detection unit is used to calculate the optimal computing power range for encrypted resources and monitor the status of encrypted resources in real time. The dynamic scheduling unit compares the results of the computing power detection unit with the pre-scheduled pool in the front-end distribution unit and adjusts the number of resources and computing power in the pool in real time.

[0117] Dynamic scheduling unit: Based on the resource usage data generated by the computing power detection unit, it adjusts the resources to be used in the pre-scheduled pool in real time to ensure the availability of encrypted resources in the pre-scheduled pool, forming a closed loop of resource detection and scheduling.

[0118] Figure 4 A flowchart illustrating the allocation of encrypted resources in a dynamic scheduling system for encrypted resources according to an embodiment of this application is shown, such as... Figure 4 As shown, a detailed description follows.

[0119] Step S1: Obtain the encryption requirement parameters and data size parameters of the data to be encrypted;

[0120] Receive and respond to encryption requests, which carry encryption requirement parameters and data size parameters of the data to be encrypted.

[0121] Step S2: Based on the encryption requirement parameters and the data size parameters, determine the encryption computing power corresponding to the data to be encrypted, whereby the encryption computing power is used to represent the amount of computing resources required to perform encryption operations on the data to be encrypted;

[0122] Furthermore, step S2 may also include: when the encryption requirement parameters include encryption type requirement, encryption algorithm requirement, and encryption mode requirement, determining the encryption computing power corresponding to the data to be encrypted based on the encryption type requirement, encryption algorithm requirement, encryption mode requirement, and data size parameter.

[0123] Specifically, the encryption requirements parameters for the data to be encrypted include encryption type requirements, encryption algorithm requirements, and encryption mode requirements. After obtaining the encryption requirements parameters and data size parameters of the data to be encrypted, the encryption requirements parameters are broken down to obtain encryption type requirements (such as encryption, decryption, signature, etc.), encryption algorithm requirements, and encryption mode requirements. This can be achieved through the requirement conversion unit of the encryption system. The requirement conversion unit breaks down the encryption requirements, identifies the three key elements of the encryption requirements: encryption type requirements, encryption algorithm requirements, and encryption mode requirements, and, combined with the data size, determines the corresponding encryption computing power for the data to be encrypted.

[0124] Figure 5 A flowchart of the demand conversion unit provided according to an embodiment of this application is shown, such as... Figure 5 As shown, the demand conversion unit is used to convert the encryption demand in the data to be encrypted into the required expected computing power (i.e., encryption computing power). Specifically, the required computing power value of the three elements is calculated through the computing power mapping table. Subsequently, the required computing power value is used as the judgment condition for whether the encryption resource is available. Table 1 is a schematic table of the mapping between encryption demand and expected computing power, as shown in Table 1.

[0125] Table 1

[0126]

[0127] Where n and m represent the interval boundaries of the data scale, and x, 3x, 6x, y1, y2 and z represent the computing power in the corresponding scenarios.

[0128] Based on the above, we first determine the encryption elements such as encryption type, algorithm, and parameters, and then calculate the computing power based on the data scale. Different encryption methods exhibit different patterns when processing data of different scales. For example, in scenario 1 (including scenarios 1-1, 1-2, and 1-3), the data scale under this encryption method is directly proportional to the required computing power. However, scenarios 2 (including scenarios 2-1 and 2-2) and 3 (i.e., scenario 3-1) do not exhibit this characteristic. For encryption methods with obvious characteristics like scenario 1, the data scale in its mapping table can use the smallest unit as the baseline value, and the required computing power is obtained by multiplying the actual data scale by this baseline value. For scenarios 2 and 3, where the data scale is not directly proportional to the required computing power, the data scale can be represented by a range segment, and the maximum required computing power within that range can be used as the expected computing power to improve the efficiency of computing power conversion. Furthermore, regardless of the scenario, the expected computing power must be based on actual measurement.

[0129] Step S3: Retrieve the target resource library, which includes multiple candidate encryption resources for data encryption;

[0130] Furthermore, before step S3, the process may include: determining historical data and computing power constraints; determining the historical computing power characteristics corresponding to the historical data, and the current time period corresponding to the data to be encrypted, wherein the historical computing power characteristics represent the characteristics of the computing power required to perform encryption operations on historical data changing over time; and constructing a target resource library based on the historical computing power characteristics, the current time period, and the computing power constraints. This can be achieved through a pre-distribution unit, where the pre-scheduled pool (i.e., the target resource library) is constructed based on historical demand computing power (i.e., historical data), combined with the actual available computing power scale. The computing power constraints can be based on the "minimum optimal" principle. Specifically, this can be achieved through a pre-distribution unit, which generates a pre-scheduled pool based on historical data. The pre-scheduled pool is then dynamically adjusted by a dynamic scheduling unit based on the latest situation to ensure that the encrypted resources in the pre-scheduled pool are available. The pre-scheduled pool is a collection of encrypted resources, and a daily scheduling plan is constructed based on historical data. In other words, after analyzing historical data, the fewer encrypted resources in the pool, the better, while meeting the expected computing power requirements (first constraint, i.e., the minimum principle), and the encrypted resources with the largest available computing power are prioritized (second constraint, i.e., the optimal principle). This is because: firstly, fewer backend encrypted resources reduce the load on the front-end distribution unit; secondly, the entire encrypted resource dynamic scheduling system may have multiple pre-scheduled pools, so adjusting the number of encrypted resources in the pre-scheduled pools according to actual demand is more efficient in saving encrypted resources and improving their effective utilization than directly using a fixed number of resources to build the pre-scheduled pools.

[0131] Figure 6 A schematic diagram of target resource library computing power planning according to an embodiment of this application is shown, such as... Figure 6 As shown, the historical demand within the target period exhibits a clear bimodal fluctuation pattern, with peak trading hours of 8-10 AM (referred to as the first period) and 6-8 PM (referred to as the second period). The computing power requests during these bimodal periods (i.e., the first and second periods) are significantly higher than those during other periods. Considering that the computing power resources in the pre-scheduled pool change according to historical computing power demand, if the resources required during the bimodal periods are greater than those during other periods, the computing power resources in the pre-scheduled pool will increase accordingly during those bimodal periods. After calculating the planned computing power for each time point, and referring to the computing power of each encrypted resource calculated by the computing power detection unit, the pre-scheduled pool for each period is constructed according to the "minimum optimal" principle. This ensures that the planned pre-scheduled pool can smoothly handle peak encryption periods, guaranteeing the response efficiency of encrypted resources.

[0132] Step S4: Based on the encryption requirement parameters and encryption computing power, allocate target encryption resources for the data to be encrypted from the target resource library.

[0133] Furthermore, S4 may also include: determining the real-time resource status corresponding to the target resource library; determining, based on the real-time resource status, whether to perform the target operation on the target resource library, wherein the target operation includes any of the following: an update operation, an add operation, wherein the update operation is used to update at least one candidate encrypted resource among multiple candidate encrypted resources in the target resource library, and the add operation is used to add a predetermined number of new encrypted resources based on the multiple candidate encrypted resources in the target resource library; if the operation determination result is to perform the target operation on the target resource library, performing the target operation on the target resource library to obtain an updated resource library; and allocating target encrypted resources from the updated resource library for the data to be encrypted based on the encryption requirement parameters and encryption computing power. This can be implemented through a dynamic scheduling unit.

[0134] The dynamic scheduling unit continuously monitors the encrypted resources in the pre-scheduled pool, using the three elements of encrypted resources generated by the computing power detection unit as a basis. It adjusts the resources in the pre-scheduled pool when necessary, and is the only unit in the entire device that actively adjusts the pre-scheduled pool. Although the dynamic scheduling unit is constantly adjusting, it typically does not trigger adjustment conditions. It only actively adjusts the pre-scheduled pool resources (i.e., executes the target operation) under two circumstances, as follows:

[0135] Update operation trigger condition: At least one abnormal encrypted resource exists among multiple candidate encrypted resources in the target resource pool. This abnormal encrypted resource is a candidate encrypted resource that cannot be encrypted. For example, if the computing power detection unit detects an abnormal encrypted resource that is already in the pre-scheduling pool, the dynamic scheduling unit will remove the resource from the pre-scheduling pool and replace it with a normal resource.

[0136] Added operation trigger condition: The encryption computing power of the target resource library is less than the encryption demand computing power. For example, if the real-time expected computing power suddenly becomes much higher than the expected computing power value due to changes in external demand, resulting in the encryption resources in the pre-scheduled pool being busy (the available computing power is lower than the set threshold), the dynamic scheduling unit will add idle encryption resources to the pre-scheduled pool until it is detected that all encryption resources are in a normal state.

[0137] Figure 7 The illustration shows a schematic diagram of updating abnormal encrypted resources according to an embodiment of this application, such as... Figure 7 As shown, the computing power detection unit detects and records an anomaly in encrypted resource C. The dynamic scheduling unit removes encrypted resource C from the pre-scheduling pool and moves encrypted resource D into the pre-scheduling pool. Figure 8 A schematic diagram of the extended pre-scheduled pool encrypted resources provided according to an embodiment of this application is shown, such as... Figure 8As shown, when the computing power detection unit detects that the resources in the pre-scheduled pool are busy, the dynamic scheduling unit adds available encrypted resources to the pre-scheduled pool. Scheduling ensures the sufficiency and availability of encrypted resources in the pre-scheduled pool. When all encrypted resources are in the pre-scheduled pool and are all in a busy state, the dynamic scheduling unit sets the pre-scheduled pool to a busy state, and the front-end distribution unit prioritizes processing services according to the busy state.

[0138] Furthermore, determining the real-time resource status corresponding to the target resource library may also include: determining the encryption device parameters, response speed parameters, and load parameters corresponding to multiple candidate encrypted resources in the target resource library; determining the device status corresponding to the target resource library based on the encryption device parameters corresponding to the multiple candidate encrypted resources; determining the response status corresponding to the target resource library based on the response speed parameters corresponding to the multiple candidate encrypted resources; determining the load status corresponding to the target resource library based on the load parameters corresponding to the multiple candidate encrypted resources; and determining the real-time resource status corresponding to the target resource library based on the device status, response status, and load status. This can be achieved through a computing power detection unit.

[0139] Figure 9 A flowchart illustrating the operation of a computing power detection unit according to an embodiment of this application is shown, such as... Figure 9As shown, the computing power detection unit can measure the capabilities of encrypted resources in real time, detect the status of encrypted resources, and synchronize the status to the dynamic scheduling unit. The computing power detection unit consists of two parts: a computing power calculation layer and a computing power detection layer. The computing power calculation layer is responsible for shielding the differences in the underlying hardware device layer, uniformly converting the computing power of different encrypted devices, such as different models and performance levels of encrypted resources, into the computing power that the device can provide, and calculating the device status of each encrypted resource, which can be represented by the maximum available computing power, as well as the response status while ensuring response speed parameters, such as response efficiency, which can be represented by the optimal available computing power. The computing power detection layer is used to summarize the load parameters of encrypted resources, such as various indicators, including the number of connections, processor utilization, memory utilization, response time, etc., and uniformly abstract them into the load status of the encrypted resource, which can be represented by the current available computing power. The computing power usage is updated and stored in real time for use by the dynamic scheduling unit. Therefore, by calculating various indicators, the computing power detection unit obtains the three elements of each encrypted resource: maximum computing power, optimal computing power, and currently available computing power. The currently available computing power is correlated with the expected computing power in the demand conversion unit. The computing power values ​​of the two units are measured using the same unit to ensure the correctness of the expected computing power comparison in the pre-distribution. The maximum and optimal computing power often only need to be calculated once or periodically, but computing power detection needs to be real-time. The computing power detection module is the only way to detect the availability of encrypted resources; therefore, it is necessary to ensure the correctness of the current usage, especially when encountering device anomalies. The available amount should be recorded as 0 in a timely manner to isolate the device in conjunction with the dynamic scheduling unit. Table 2 is a schematic diagram of available computing power calculation under abnormal scenarios, recording simplified encryption anomaly records.

[0140] Table 2

[0141]

[0142] Among them, Io (Input / Output) represents input / output and is used to measure the read and write capabilities of encrypted resources.

[0143] Furthermore, based on encryption requirement parameters and encryption computing power, target encryption resources are allocated from the target resource library for the data to be encrypted. This includes: when the data to be encrypted includes multiple sub-data items, and the encryption computing power includes sub-encryption computing power corresponding to each of the multiple sub-data items, determining the encryption position corresponding to each of the multiple sub-data items; according to the encryption position corresponding to each of the multiple sub-data items, for any one of the multiple sub-data items, allocating sub-encryption resources from the target resource library based on the sub-encryption computing power corresponding to the sub-data item, until all the multiple sub-data items have been processed. Specifically, the encryption position is identified by the requirement conversion unit, the sub-data items with higher encryption positions are marked with priority (i.e., marked with task priority), and the required computing power and the marking are passed to the front-end distribution unit. Figure 10 A schematic diagram illustrating the relationship between the target resource library status and task processing according to an embodiment of this application is shown. Figure 10 As shown, the pre-scheduled pool (i.e., the target resource pool) uses status indicators to identify the current overall resource usage, which is divided into normal and busy states. In principle, it is always in the normal state. When the resource pool becomes busy in extreme cases, the front-end distribution unit will prioritize the priority markers in the tasks and use common techniques such as rate limiting and blocking to prioritize the processing of high-priority tasks, ensuring the normal operation of core tasks.

[0144] Furthermore, S4 may also include: determining candidate requirement parameters and candidate computing power corresponding to multiple candidate encrypted resources in the target resource library; determining multiple initial encrypted resources from the multiple candidate encrypted resources based on the candidate requirement parameters and encryption requirement parameters corresponding to the multiple candidate encrypted resources; and allocating target encrypted resources to the data to be encrypted from the multiple initial encrypted resources based on the candidate computing power and encryption computing power corresponding to the multiple initial encrypted resources. Specifically, this can be implemented through a front-end distribution unit. Figure 11 A flowchart illustrating the workflow of a pre-distribution unit provided according to an embodiment of this application is shown, such as... Figure 11 As shown, the front-end distribution unit is used to match the encryption resources required by the encryption service request. First, it selects the predetermined encryption resources from the planned pre-scheduling pool, and then verifies whether the computing power value of the encryption resource can meet the expected computing power of the service request, so as to ensure the rationality of the encryption resource allocation.

[0145] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0146] This application also provides a data encryption resource allocation apparatus. It should be noted that this data encryption resource allocation apparatus can be used to execute the data encryption resource allocation method provided in this application. This apparatus is used to implement the above embodiments and preferred embodiments; details already described will not be repeated. As used below, the term "module" can refer to a combination of software and / or hardware that implements a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated. The data encryption resource allocation apparatus provided in this application is described below. Figure 12 A structural block diagram of an encrypted resource allocation apparatus for data provided according to embodiments of this application is shown, such as... Figure 12 As shown, the device includes: an acquisition module 1202, a first determination module 1204, a retrieval module 1206, and a second determination module 1208.

[0147] The acquisition module 1202 is used to acquire the encryption requirement parameters and data size parameters of the data to be encrypted; the first determination module 1204, connected to the acquisition module 1202, is used to determine the encryption computing power corresponding to the data to be encrypted based on the encryption requirement parameters and the data size parameters, wherein the encryption computing power is used to represent the amount of computing resources required to perform encryption operations on the data to be encrypted; the retrieval module 1206, connected to the first determination module 1204, is used to retrieve the target resource library, wherein the target resource library includes multiple candidate encryption resources for data encryption; the second determination module 1208, connected to the retrieval module 1206, is used to allocate target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power.

[0148] It should be noted that the above-mentioned acquisition module 1202, first determination module 1204, retrieval module 1206, and second determination module 1208 correspond to steps S202 to S208 in the encrypted resource allocation method for implementing data. The multiple modules and the corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in the above-mentioned encrypted resource allocation method embodiment for data.

[0149] The data encryption resource allocation device includes a processor and a memory. The aforementioned acquisition module 1202, first determination module 1204, retrieval module 1206, and second determination module 1208 are all stored as program units in the memory. The processor executes these program units stored in the memory to achieve the corresponding functions. All of the above modules reside in the same processor; alternatively, the modules may be located in different processors in any combination. The processor contains a kernel, which retrieves the corresponding program units from the memory. One or more kernels can be configured, and adjusting kernel parameters can address the problem of uneven encryption resource allocation in related technologies. The memory may include non-permanent memory in computer-readable media, random access memory (RAM), and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. The memory includes at least one memory chip.

[0150] This invention provides an electronic device, including one or more processors, a memory, and one or more programs. The one or more programs are stored in the memory and configured to be executed by the one or more processors. The one or more programs include a method for allocating encrypted resources for executing data as described above. The method includes the following steps: obtaining encryption requirement parameters and data size parameters of the data to be encrypted; determining the encryption computing power corresponding to the data to be encrypted based on the encryption requirement parameters and the data size parameters, wherein the encryption computing power represents the amount of computing resources required to perform encryption operations on the data to be encrypted; retrieving a target resource library, wherein the target resource library includes multiple candidate encryption resources for data encryption; and allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power. The device described herein can be a server, PC, PAD, mobile phone, etc.

[0151] This application also provides a computer program product, including a computer program, which, when executed by a processor, implements a method for allocating encrypted resources for data according to any of the above-mentioned methods, comprising: obtaining encryption requirement parameters and data size parameters of the data to be encrypted; determining the encryption computing power corresponding to the data to be encrypted based on the encryption requirement parameters and the data size parameters, wherein the encryption computing power is used to represent the amount of computing resources required to perform encryption operations on the data to be encrypted; retrieving a target resource library, wherein the target resource library includes multiple candidate encryption resources for data encryption; and allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power.

[0152] It is evident that those skilled in the art will understand that the modules or steps of the present invention described above can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed across a network of multiple computing devices. They can be implemented using computer-executable program code, thereby allowing them to be stored in a storage device for execution by a computing device. In some cases, the steps shown or described can be performed in a different order than those described herein, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the present invention is not limited to any particular hardware and software combination. Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Moreover, this application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0153] This application is described with reference to flowchart illustrations and / or block diagrams according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 The computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The functions specified in one or more boxes. These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable apparatus for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0154] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory. Memory may include non-persistent memory in computer-readable media, random access memory (RAM), and / or non-volatile memory such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media. Computer-readable media includes both permanent and non-persistent, removable and non-removable media that can store information by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information that can be accessed by the computing device. As defined in this article, computer-readable media do not include transient media, such as modulated data signals and carrier waves.

[0155] The technical features of the embodiments described above can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as the combination of these technical features does not contradict each other, it should be considered within the scope of this specification. It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes the element.

[0156] As can be seen from the above description, the embodiments of this application achieve the following technical effects:

[0157] 1) Compared with related technologies, this invention abstracts encryption requirements into expected computing power and extracts backend encryption resource computing power into available computing power, which complements each other and better balances the supply and demand relationship between requirements and equipment, and makes resource usage more clearly observable.

[0158] 2) Compared to related technologies, this invention, through a uniformly constructed pre-scheduling pool, can not only ensure the response efficiency of encryption resources during peak encryption request periods, but also significantly reduce the total amount of encryption resources used. Simultaneously, task marking can also ensure the execution efficiency of high-priority tasks.

[0159] 3) Compared with related technologies, the present invention ensures the reliability of encrypted resources by detecting encrypted resources and improves the stability of the overall encrypted resources by dynamically scheduling the pre-scheduling pool.

[0160] 4) Compared with related technologies, the present invention can determine in advance whether the request type is supported by the computing power mapping table, and then select encrypted resources through the distribution unit. Compared with directly selecting resources, problems can be discovered earlier and resources can be selected more reasonably.

[0161] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the protection scope of this application.

Claims

1. A method for allocating encrypted data resources, characterized in that, include: Obtain the encryption requirement parameters and data size parameters of the data to be encrypted; Based on the encryption requirement parameters and the data size parameters, the encryption computing power corresponding to the data to be encrypted is determined, wherein the encryption computing power is used to represent the amount of computing resources required to perform encryption operations on the data to be encrypted; Retrieve the target resource library, wherein the target resource library includes multiple candidate encryption resources for data encryption; Based on the encryption requirement parameters and the encryption computing power, target encryption resources are allocated from the target resource library for the data to be encrypted.

2. The method according to claim 1, characterized in that, The step of allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power includes: Determine the real-time resource status corresponding to the target resource library; Based on the real-time resource status, determine whether to perform a target operation on the target resource library, wherein the target operation includes any one of the following: an update operation and a add operation. The update operation is used to update at least one candidate encrypted resource among a plurality of candidate encrypted resources in the target resource library, and the add operation is used to add a predetermined number of new encrypted resources based on the plurality of candidate encrypted resources in the target resource library. If the operation result determines that the target operation is to be performed on the target resource library, the target operation is performed on the target resource library to obtain an updated resource library; Based on the encryption requirement parameters and the encryption computing power, target encryption resources are allocated from the updated resource library for the data to be encrypted.

3. The method according to claim 2, characterized in that, Determining the real-time resource status corresponding to the target resource library includes: Determine the encryption device parameters, response speed parameters, and load parameters corresponding to the multiple candidate encrypted resources in the target resource library; Based on the encryption device parameters corresponding to the multiple candidate encryption resources, the device status corresponding to the target resource library is determined; Based on the response speed parameters corresponding to the multiple candidate encrypted resources, determine the response status corresponding to the target resource library; Based on the load parameters corresponding to the multiple candidate encrypted resources, determine the load status corresponding to the target resource library; Based on the device status, the response status, and the load status, the real-time resource status corresponding to the target resource library is determined.

4. The method according to claim 1, characterized in that, The step of allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power includes: When the data to be encrypted includes multiple sub-data, and the encryption computing power includes sub-encryption computing power corresponding to each of the multiple sub-data, the encryption position corresponding to each of the multiple sub-data is determined; According to the encryption positions corresponding to the multiple sub-data, for any one of the multiple sub-data, based on the sub-encryption computing power corresponding to the sub-data, sub-encryption resources are allocated from the target resource library for the any one sub-data until the multiple sub-data are processed.

5. The method according to claim 1, characterized in that, Before retrieving the target resource library, the process also includes: Determine historical data and computing power constraints; Determine the historical computing power characteristics corresponding to the historical data, and the current time period corresponding to the data to be encrypted, wherein the historical computing power characteristics represent the characteristics of the computing power required to perform encryption operations on the historical data changing over time; Based on the historical computing power characteristics, the current time period, and the computing power constraints, a target resource library is constructed.

6. The method according to claim 1, characterized in that, The step of allocating target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power includes: Determine the candidate requirement parameters and candidate computing power corresponding to the plurality of candidate encrypted resources in the target resource library; Based on the candidate requirement parameters corresponding to the multiple candidate encrypted resources, and the encryption requirement parameters, multiple initial encrypted resources are determined from the multiple candidate encrypted resources; Based on the candidate computing power corresponding to the plurality of initial encryption resources, and the encryption computing power, a target encryption resource is allocated to the data to be encrypted from the plurality of initial encryption resources.

7. The method according to any one of claims 1 to 6, characterized in that, The step of determining the encryption computing power corresponding to the data to be encrypted based on the encryption requirement parameters and the data size parameters includes: When the encryption requirement parameters include encryption type requirement, encryption algorithm requirement, and encryption mode requirement, the encryption computing power corresponding to the data to be encrypted is determined based on the encryption type requirement, the encryption algorithm requirement, the encryption mode requirement, and the data size parameter.

8. A data encryption resource allocation device, characterized in that, include: The acquisition module is used to obtain the encryption requirement parameters and data size parameters of the data to be encrypted; The first determining module is used to determine the encryption computing power corresponding to the data to be encrypted based on the encryption requirement parameters and the data scale parameters, wherein the encryption computing power is used to represent the amount of computing resources required to perform encryption operations on the data to be encrypted; A retrieval module is used to retrieve a target resource library, wherein the target resource library includes multiple candidate encrypted resources for data encryption. The second determining module is used to allocate target encryption resources for the data to be encrypted from the target resource library based on the encryption requirement parameters and the encryption computing power.

9. An electronic device, characterized in that, include: One or more processors, a memory, and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including a method for performing a cryptographic resource allocation of data according to any one of claims 1 to 7.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the encrypted resource allocation method for data as described in any one of claims 1 to 7.

Images