Information storage method and device, electronic equipment and storage medium

Abstract

The invention provides an information storage method and device, electronic equipment and a storage medium, and relates to the technical field of computers. The method comprises the following steps: after receiving a storage request sent by a client, distributing a corresponding object identifier for target information carried in the storage request, acquiring a corresponding first key according to the object identifier, and encrypting the target information according to the first key to obtain a first target ciphertext of the target information, and storing the first target ciphertext in the first target storage node. Therefore, the target information is encrypted through the first key, and the ciphertext obtained by encryption is stored in the corresponding storage node, so that safe storage of the information can be realized, and the security of the information is ensured.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of computer, and particularly relates to an information storage method and device, electronic equipment and storage medium. BACKGROUND

[0002] In the process that a client requests a distributed storage system to store information (for example, 5G information) to be stored in a storage request, how to securely store the information to be stored in the distributed storage system and ensure the storage security of data is a technical problem to be solved at present. SUMMARY

[0003] The present disclosure provides an information storage method and device, electronic equipment and storage medium.

[0004] In a first aspect, the present disclosure provides an information storage method, which comprises: receiving a storage request sent by a client, wherein the storage request comprises target information to be stored; allocating a corresponding object identifier for the target information, and obtaining a corresponding first key according to the object identifier; performing encryption processing on the target information according to the first key to obtain first target ciphertext of the target information; and storing the first target ciphertext in a first target storage node.

[0005] In a second aspect, the present disclosure provides an information storage device, which comprises: a first receiving module configured to receive a storage request sent by a client, wherein the storage request comprises target information to be stored; a first obtaining module configured to allocate a corresponding object identifier for the target information, and obtain a corresponding first key according to the object identifier; an encryption processing module configured to perform encryption processing on the target information according to the first key to obtain first target ciphertext of the target information; and a first storage module configured to store the first target ciphertext in a first target storage node.

[0006] In a third aspect, the present disclosure provides an electronic equipment, which comprises a processor and a memory connected with the processor in communication; the memory stores computer execution instructions; and the processor executes the computer execution instructions stored in the memory to implement the information storage method disclosed in the embodiments of the present disclosure.

[0007] In a fourth aspect, the present disclosure provides a computer readable storage medium, which stores computer execution instructions; and the computer execution instructions are executed by a processor to implement the information storage method disclosed in the embodiments of the present disclosure.

[0008] In a fifth aspect, the present disclosure provides a computer program product, which comprises a computer program; and the computer program is executed by a processor to implement the information storage method disclosed in the embodiments of the present disclosure.

[0009] The embodiments of the present disclosure provide at least the following beneficial effects: After receiving the storage request sent by the client, the target information carried in the storage request is allocated with a corresponding object identifier, the corresponding first key is obtained according to the object identifier, the target information is encrypted according to the first key to obtain the first target ciphertext of the target information, and the first target ciphertext is stored in the first target storage node. Thus, the target information is encrypted by the first key, and the ciphertext obtained by the encryption is stored in the corresponding storage node, so that the secure storage of information can be realized, and the security of the information is ensured. BRIEF DESCRIPTION OF DRAWINGS

[0010] The accompanying drawings, which are incorporated herein and form part of the specification, illustrate embodiments consistent with the present disclosure and, together with the description, further serve to explain the principles of the present disclosure.

[0011] Figure 1 A flowchart of an information storage method according to an exemplary embodiment is shown; Figure 2 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 3 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 4 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 5 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 6 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 7 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 8 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 9 A flowchart of another information storage method according to an exemplary embodiment is shown; Figure 10 A structural schematic diagram of an information storage device according to an exemplary embodiment is shown; Figure 11 A structural block diagram of an electronic device according to an exemplary embodiment is shown.

[0012] The specific embodiments of the present disclosure have been shown through the above drawings, and will be described in more detail hereinafter. These drawings and the written description are not intended to restrict the scope of the present disclosure in any way, but to illustrate the concept of the present disclosure to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0013] The exemplary embodiments will be described in detail herein with reference to the attached drawings. The same or similar components are denoted by the same or similar reference numerals throughout the drawings and the written description, unless otherwise specified. The embodiments described in the following exemplary embodiments are not representative of all embodiments consistent with the present disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0014] The technical solutions of the present disclosure and how the technical solutions of the present disclosure solve the above technical problems will be described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes can not be described again in some embodiments. The embodiments of the present disclosure will be described below with reference to the drawings.

[0015] First, the information storage method provided by the embodiments of the present disclosure will be described. Figure 1 The information storage method provided by the embodiments of the present disclosure will be described.

[0016] Figure 1 A flowchart of an information storage method according to an exemplary embodiment is shown.

[0017] It should be noted that the information storage method provided by the embodiments of the present disclosure can be executed by an information storage device, wherein the information storage device can be implemented by software and / or hardware. The information storage device can be an electronic device or can be configured in an electronic device.

[0018] The electronic device can perform storage management on storage nodes in a distributed storage system, wherein the electronic device can be a server, and the embodiments of the present disclosure do not limit the electronic device.

[0019] As shown in the information storage method includes the following steps: Figure 1 Step 101, receiving a storage request sent by a client, wherein the storage request includes target information to be stored. Step 101, receiving a storage request sent by a client, wherein the storage request includes target information to be stored.

[0020] In some embodiments, the storage request sent by the client can be received through an application programming interface (API).

[0021] It should be noted that the target information in this embodiment can be any information to be stored.

[0022] In some embodiments, the target information described above can be mobile communication information, for example, the target information can be 5G information, 4G information, etc., and this embodiment does not make specific limitation on the target information.

[0023] In some embodiments, the target information described above can be obtained by decentralizing the initial 5G information.

[0024] For example, the initial 5G information is represented as The target information is obtained by decentralizing the initial 5G information , wherein It can be represented as:

[0025] In the formula, the data total amount of the initial 5G message and the total amount of the equipment for generating the 5G message are represented as

[0026] Step 102, assigning a corresponding object identifier to the target information, and obtaining a corresponding first key according to the object identifier.

[0027] It can be understood that the object identifier assigned to different target information is different.

[0028] In some embodiments, after assigning a corresponding object identifier (Object Identifier, OID) to the target information, the target information and the object identifier can also be stored in association.

[0029] In some embodiments, the first key associated with the object identifier can be obtained from the pre-stored association relationship between the object identifier and the key.

[0030] It should be noted that, in order to ensure the security of the data, the first keys associated with different object identifiers are usually different.

[0031] The first key associated with the object identifier is pre-generated by a key generation algorithm, and is associated with the first key when the object identifier is created.

[0032] Step 103, encrypting the target information according to the first key to obtain the first target ciphertext of the target information.

[0033] In some embodiments, the target information can be encrypted according to the first key based on a pre-set first encryption algorithm to obtain the first target ciphertext of the target information. ​

[0034] The preset first encryption algorithm is set in advance according to requirements, for example, the preset first encryption algorithm can be selected from one of a symmetric first encryption algorithm or an asymmetric first encryption algorithm, and the embodiment does not make a specific limitation on the preset first encryption algorithm.

[0035] In step 104, the first target ciphertext is stored in the first target storage node.

[0036] The information storage method provided by the embodiment of the present disclosure allocates a corresponding object identifier to the target information carried in the storage request after receiving the storage request sent by the client, obtains a corresponding first key according to the object identifier, and performs encryption processing on the target information according to the first key to obtain the first target ciphertext of the target information, and stores the first target ciphertext in the first target storage node. Therefore, the target information is encrypted by the first key, and the ciphertext obtained by the encryption is stored in the corresponding storage node, so that the secure storage of information can be realized, and the security of the information is ensured.

[0037] Based on the above embodiment, in order to enable the client to know the storage result and the information required to obtain the target information again, in some embodiments, a storage success message for the storage request can also be returned to the client, wherein the storage success message includes the object identifier.

[0038] Figure 2 A flowchart of an information storage method according to an example embodiment is shown.

[0039] As shown in Figure 2 The information storage method includes the following steps: In step 201, a storage request sent by a client is received, wherein the storage request includes target information to be stored.

[0040] In step 202, a corresponding object identifier is allocated to the target information, and a corresponding first key is obtained according to the object identifier.

[0041] In step 203, the target information is encrypted according to the first key to obtain the first target ciphertext of the target information.

[0042] It should be noted that the specific description of steps 201 to 203 can be referred to the related description in other embodiments, which will not be repeated here.

[0043] In step 204, a first target storage node is determined from a set of storage nodes, and the first target ciphertext is stored through the first target storage node.

[0044] It should be noted that the set of storage nodes is formed according to the storage nodes in the distributed storage system.

[0045] In different application scenarios, the first target storage node can be determined from the set of storage nodes in different ways, which are exemplarily described as follows: As an example, a storage node can be randomly selected from the set of storage nodes as the first target storage node.

[0046] As another example, a plurality of candidate storage nodes in a normal state can be determined from the set of storage nodes, and a storage node can be randomly selected from the plurality of candidate storage nodes as the first target storage node.

[0047] As another example, a receiving time point of the storage request can be obtained, and storage load rates of each storage node in the set of storage nodes at the receiving time point can be determined; and a storage node with the smallest storage load rate in the set of storage nodes can be determined as the first target storage node.

[0048] In some embodiments, a possible implementation of determining the storage load rate of each storage node in the set of storage nodes at the receiving time point can be: for each storage node in the set of storage nodes, a storage load amount corresponding to the storage node at the receiving time point can be obtained, and a maximum storage load amount allowed by the storage node can be obtained, and the storage load rate of the storage node at the receiving time point can be determined according to the load amount and the maximum storage load amount.

[0049] In some embodiments, the formula for calculating the storage load rate of the storage node at the receiving time point t can be represented as:

[0050] It should be noted that in the formula, Load(t) can represent the storage load amount corresponding to the storage node at the receiving time point t; and B can represent the maximum storage load amount allowed by the storage node.

[0051] Step 205, returning a storage success message for the storage request to the client, wherein the storage success message includes the object identifier.

[0052] In some embodiments, after determining that the first ciphertext is successfully stored in the first target storage node, a storage success message for the storage request can be returned to the client, wherein the storage success message includes the object identifier.

[0053] ​​It can be understood that the object identifier is returned to the client by storing the success message, so as to facilitate the client to send a data access request to the electronic device based on the object identifier. That is, the object identifier carried in the storage success message is used to access the stored target information.

[0054] The information storage method provided by the embodiments of the present disclosure allocates a corresponding object identifier for the target information carried in the storage request after receiving the storage request sent by the client, obtains a corresponding first key according to the object identifier, and performs encryption processing on the target information according to the first key to obtain a first target ciphertext of the target information, determines a first target storage node from the set of storage nodes, and stores the first target ciphertext through the first target storage node, and returns a storage success message for the storage request to the client. Therefore, by encrypting the target information through the first key and storing the ciphertext obtained by encryption in the corresponding storage node, the security of the information can be ensured.

[0055] Figure 3 A flowchart of another information storage method according to an exemplary embodiment is shown.

[0056] As shown in Figure 3 , the information storage method comprises the following steps: Step 301, receiving a storage request sent by a client, wherein the storage request comprises target information to be stored.

[0057] Step 302, allocating a corresponding object identifier for the target information.

[0058] It should be noted that the specific description of steps 301 to 302 can be referred to the related description in other embodiments, which will not be repeated here.

[0059] Step 303, obtaining a first storage address index associated with the object identifier in the storage address index table.

[0060] Step 304, obtaining a first key associated with the first storage address index in the key table.

[0061] Step 305, determining a first target storage node to which the first storage address index belongs from the set of storage nodes.

[0062] Step 306, obtaining a first storage address corresponding to the first storage address index, wherein the first storage address is located in the first target storage node.

[0063] Step 307, storing the first target ciphertext in the first storage address of the first target storage node.

[0064] In some embodiments, in a case that the first target storage node is currently in a normal state, the first target ciphertext can be stored in the first storage address of the first target storage node.

[0065] In the embodiment, the storage address index for determining the storage address for storing the target information can be quickly obtained based on the object identifier, the storage node for storing the target information can be quickly determined based on the storage address index, and the target information can be stored in the storage address corresponding to the storage address index in the storage node, which is helpful to improve the efficiency of storing data.

[0066] In some embodiments, in order to enable the client to learn the information required for obtaining the target information again while learning the storage result, after step 307, a storage success message for the storage request can also be returned to the client, where the storage success message includes the object identifier.

[0067] Based on the above embodiment, after the client stores the target information in the distributed storage system, in order to enable the client to access the target information stored in the distributed storage system, the client can also send a data access request to obtain the target information in the distributed storage system. In order to clearly understand the process, the following will be described in combination with Figure 4 The method of the embodiment is further exemplarily described.

[0068] Figure 4 A flowchart of another information storage method according to an exemplary embodiment is shown.

[0069] In Figure 3 Based on the embodiment shown in Figure 4 The method can further include: Step 401, receiving a first data access request sent by a client, where the first data access request includes an object identifier.

[0070] In some embodiments, the first data access request sent by the client can be received through an API.

[0071] Step 402, obtaining a first storage address index associated with the object identifier in a storage address index table.

[0072] Step 403, obtaining a first key in a key table according to the first storage address index.

[0073] Step 404, obtaining a first target ciphertext from a first target storage address corresponding to the first storage address index.

[0074] Step 405, decrypting the first target ciphertext according to the first key to obtain target information.

[0075] In some embodiments, the first target ciphertext can be decrypted according to the first key based on a preset first decryption algorithm to obtain the target information.

[0076] The preset first decryption algorithm is preset according to actual requirements, and the preset first decryption algorithm corresponds to the preset encryption algorithm, that is, the preset first decryption algorithm is determined according to the preset first encryption algorithm.

[0077] Step 406, the target information is sent to the client.

[0078] In this embodiment, the client can also obtain the target information again by sending a data access request after storing the target information, which meets the user's demand for obtaining the target information.

[0079] Figure 5 A flowchart of another information storage method according to an exemplary embodiment is shown.

[0080] As shown in Figure 5 The method can include: Step 501, receiving a storage request sent by a client, wherein the storage request includes target information to be stored.

[0081] Step 502, assigning a corresponding object identifier to the target information.

[0082] Step 503, obtaining a first storage address index associated with the object identifier in a storage address index table.

[0083] Step 504, obtaining a first key associated with the first storage address index in a key table.

[0084] Step 505, encrypting the target information according to the first key to obtain first target ciphertext of the target information.

[0085] Step 506, obtaining a second key of the first target storage node.

[0086] In some embodiments, the second key of the first target storage node can be obtained according to the correspondence between the target storage node and the key saved in advance.

[0087] Step 507, encrypting the first target ciphertext by the second key to obtain second target ciphertext.

[0088] In some embodiments, the first target ciphertext can be encrypted according to the second key based on a preset second encryption algorithm to obtain the second target ciphertext.

[0089] The preset second encryption algorithm is preset according to requirements, for example, the preset second encryption algorithm can be selected from one of a symmetric second encryption algorithm or an asymmetric second encryption algorithm, and the embodiment does not make a specific limitation on the preset second encryption algorithm.

[0090] In some embodiments, in order to further improve the security of data storage, an effective time range of the second key can be acquired, and a receiving time point of receiving the storage request can be acquired, and in a case where the receiving time point is in the effective time range, the first target ciphertext is encrypted by using the second key to obtain the second target ciphertext. Thus, the first target ciphertext is re-encrypted by using the effective second key, and the security of data storage is further improved.

[0091] In another embodiment, in a case where it is determined that the receiving time point is not in the effective time range, the first target ciphertext can be directly stored by using the first target storage node.

[0092] Step 508, determining a first target storage node to which the first storage address index belongs from the set of storage nodes.

[0093] Step 509, acquiring a first storage address corresponding to the first storage address index, wherein the first storage address is located in the first target storage node.

[0094] Step 510, in a case where the first target storage node is currently in a normal state, storing the second target ciphertext in the first storage address of the first target storage node.

[0095] Step 511, in a case where the first target storage node is currently in a fault state, acquiring a receiving time point of receiving the storage request.

[0096] Step 512, determining storage load rates of each storage node in the set of storage nodes at the receiving time point.

[0097] It should be noted that the specific description of step 510 can be referred to the related description in other embodiments, which will not be repeated here.

[0098] Step 513, acquiring a storage node different from the first target storage node and having the minimum storage load rate from the set of storage nodes, and taking the acquired storage node as a second target storage node.

[0099] Step 514, in a case where the second target storage node is currently in a normal state, storing the first target ciphertext by using the second target storage node.

[0100] In some embodiments, to further improve the security of the stored data, a third key of the second target storage node can also be acquired, and the first target ciphertext is encrypted by the third key to obtain a third ciphertext, and the third target ciphertext is stored by the second target storage node.

[0101] In the present embodiment, the first ciphertext is continuously encrypted by the second key of the first target storage node to obtain a second ciphertext, and the second ciphertext is stored in the second target storage node, further improving the security of the stored data.

[0102] In some embodiments, to enable the client to learn the information required to obtain the target information again while learning the storage result, after step 510 or step 514, a storage success message for the storage request can also be returned to the client, wherein the storage success message includes the object identifier.

[0103] In some embodiments, to facilitate subsequent access and accurately acquire data, after step 514, the storage address index associated with the object identifier in the storage address index table can be updated, and the association relationship including the first key in the key table can be updated. To clearly understand the process, the process is described below by way of example. Figure 6

[0104] Figure 6 A flowchart of another information storage method according to an exemplary embodiment.

[0105] As Figure 6 shown, the method can include: Step 601: Acquire a second storage address of the first target ciphertext on the second target storage node.

[0106] Step 602: Acquire a second storage address index corresponding to the second storage address.

[0107] Step 603: Update the first storage address index associated with the object identifier in the storage address index table to the second storage address index.

[0108] Step 604: In the key table, disassociate the first storage address index from the first key, and associate the second storage address index with the first key.

[0109] Based on the above embodiments, after the client stores the target information in the distributed storage system, to enable the client to access the target information stored in the distributed storage system, the client can also acquire the target information in the distributed storage system by a data access request. To clearly understand the process, the process is described below by way of example. Figure 7 ​The method of this embodiment is further exemplarily described.

[0110] Figure 7 A flowchart of another information storage method according to an exemplary embodiment is shown.

[0111] In Figure 5 Based on the embodiment shown in Figure 7 The method can further include: Step 701, receiving a second data access request sent by a client, wherein the second data access request includes an object identifier.

[0112] Step 702, obtaining a first storage address index associated with the object identifier in a storage address index table.

[0113] Step 703, obtaining a first key according to the first storage address index in a key table.

[0114] Step 704, obtaining second target ciphertext from a first target storage address corresponding to the first storage address index.

[0115] Step 705, decrypting the second target ciphertext according to a second key of a first target storage node to which the first target storage address belongs to obtain first target ciphertext.

[0116] In some embodiments, the second target ciphertext can be decrypted according to the second key based on a preset second decryption algorithm to obtain the first target ciphertext.

[0117] The preset second decryption algorithm is set in advance according to actual needs, and the preset second decryption algorithm corresponds to the preset encryption algorithm, that is, the preset second decryption algorithm is determined according to the preset second encryption algorithm.

[0118] Step 706, decrypting the first target ciphertext according to the first key to obtain target information.

[0119] It should be noted that the specific description of step 706 can refer to the related description in other embodiments, which will not be described here.

[0120] Step 707, sending the target information to the client.

[0121] In this embodiment, the client can also obtain the target information again by sending a data access request after storing the target information, which meets the user's demand for obtaining the target information.

[0122] Based on the above embodiment, after the client stores the target information in the distributed storage system, in order to enable the client to access the target information stored in the distributed storage system, the client can also obtain the target information in the distributed storage system by sending a data access request. In order to clearly understand the process, the following will be described in combination with Figure 8 The method of the embodiment is further exemplarily described.

[0123] Figure 8 A flowchart of another information storage method according to an exemplary embodiment is shown.

[0124] Based on the embodiment shown in Figure 6 As shown in the embodiment, the method can further include: Figure 8 Step 801, receiving a second data access request sent by the client, wherein the second data access request includes: an object identifier.

[0125] Step 802, obtaining, in the storage address index table, a second storage address index associated with the object identifier.

[0126] Step 803, obtaining, in the key table, a first key associated with the second storage address.

[0127] Step 804, obtaining the first target ciphertext from the second target storage address corresponding to the second storage address index.

[0128] Step 805, decrypting the first target ciphertext according to the first key to obtain the target information.

[0129] In some embodiments, in the case where the first target ciphertext is encrypted by a third key of the second target storage node, the above step 804 can be: obtaining the third target ciphertext from the second target storage address corresponding to the second storage address index.

[0130] Correspondingly, before the above step 805, the following operation can also be performed: decrypting the third target ciphertext according to the third key of the second target storage node to obtain the first target ciphertext.

[0131] Step 806, sending the target information to the client.

[0132] In the embodiment, after the client stores the target information, the client can also obtain the target information again by sending a data access request, which meets the user's demand for obtaining the target information.

[0133] In some embodiments, in order to clearly understand the present disclosure, the following will be described in combination with Figure 9 ​The method of this embodiment is exemplarily described. It should be noted that in this embodiment, the target information is target 5G information, and the information storage method is exemplarily described by a 5G information access layer. The 5G information access layer can be deployed in a distributed storage system for storing 5G information.

[0134] Figure 9 A flowchart of another information storage method according to an exemplary embodiment is shown.

[0135] As shown in Figure 9 , the method can include: Step 901, the 5G information access layer receives a storage request sent by a client through an API, and parses and processes the storage request to obtain target 5G information to be stored in the storage request.

[0136] Step 902, the 5G information access layer allocates a corresponding object identifier to the target 5G information, and obtains a first key associated with the object identifier.

[0137] It should be noted that the object identifiers allocated for different target 5G information are different.

[0138] In some embodiments, the 5G information access layer can include a 5G logical sublayer, and correspondingly, the 5G logical sublayer can allocate a corresponding object identifier to the target 5G information.

[0139] The object identifier is used to distinguish different target 5G information.

[0140] In some embodiments, the 5G information access layer can further include a 5G data sublayer, wherein the 5G data sublayer is responsible for storage management of 5G information, and the 5G data sublayer interacts with the underlying physical storage hardware to ensure efficient storage and access of data.

[0141] In some embodiments, the 5G information access layer can further include a 5G physical sublayer, which is responsible for data processing, storage and read-write operations.

[0142] In some embodiments, the first key associated with the object identifier can be obtained from a key management module.

[0143] The first key is a unique key for encrypting and decrypting the target 5G information.

[0144] The first key is usually generated by a key generation algorithm and associated with the OID when the OID is created.

[0145] It should be noted that the key management module is responsible for generating, storing, distributing and updating keys.

[0146] In some embodiments, in order to protect the security of the key, a plurality of security measures are usually adopted, such as access control, encrypted storage, key backup and recovery mechanism, etc.

[0147] At step 903, the 5G information access layer encrypts the target 5G information by using the first key to obtain a first ciphertext.

[0148] In some embodiments, the target 5G information can be encrypted by using the first key based on a preset encryption algorithm to obtain the first ciphertext. In this way, the security of the 5G information in the storage process can be protected, and even if the data is stolen or leaked, the original sensitive information cannot be directly accessed, thereby protecting the security of the data.

[0149] The preset encryption algorithm is set in advance according to requirements, for example, the preset encryption algorithm can be selected from one of symmetric encryption algorithms or asymmetric encryption algorithms, and the embodiment does not make a specific limitation on the preset encryption algorithm.

[0150] At step 904, the 5G information access layer determines a first target storage node from a set of storage nodes, wherein the set of storage nodes is formed according to available storage nodes in a distributed storage system.

[0151] In some embodiments, one possible implementation manner of determining the first target storage node from the set of storage nodes can be: obtaining a receiving time point of receiving the storage request; determining a storage load rate of each storage node in the set of storage nodes at the receiving time point; and taking the storage node with the minimum storage load rate in the set of storage nodes as the first target storage node.

[0152] In another possible implementation manner of determining the first target storage node from the set of storage nodes, the receiving time point of receiving the storage request can be obtained, the storage load rate of each storage node in the set of storage nodes at the receiving time point can be determined, the key feature sequence of the storage node can be obtained, and the storage suitability of the storage node can be determined according to the storage load rate and the key feature sequence, and the storage node with the highest storage suitability in the set of storage nodes can be taken as the first target storage node.

[0153] The higher the storage suitability of a storage node is, the more suitable the storage node is for storage.

[0154] The key feature sequence refers to a set of ordered or unordered features for characterizing the encryption attribute and key management capability of the storage node. The key feature sequence can include but is not limited to: the encryption algorithm type supported by the storage node, the key length, the key generation mode, the key validity period, the key security level, and the key management strategy.

[0155] At step 905, the 5G information access layer acquires the second key of the first target storage node, and encrypts the first ciphertext according to the second key to obtain a second ciphertext.

[0156] In some embodiments, the valid time range of the second key can also be acquired, and it is judged whether the receiving time point of the storage request is within the valid time range. If it is within the valid time range, the second key is valid, and at this time, the first ciphertext can be encrypted according to the second key to obtain the second ciphertext, thereby improving the security of encrypted storage.

[0157] At step 906, the 5G information access layer stores the second ciphertext through the first target storage node.

[0158] At step 907, the 5G information access layer acquires a second target storage address of the second ciphertext in the first target storage node, determines a second storage address index of the second target storage address, and saves the association relationship between the object identifier and the second storage address index.

[0159] In some embodiments, the object identifier and the corresponding second storage address index can be sent to the address index unit to save the association relationship between the object identifier and the second storage address index through the address index unit.

[0160] At step 908, the 5G information access layer receives a fourth data access request sent by the client through the API, and parses the fourth data access request to obtain the object identifier in the fourth data access request.

[0161] At step 909, the 5G information access layer acquires the second storage address index associated with the object identifier from the association relationship.

[0162] In some embodiments, the 5G information access layer can acquire the second storage address index associated with the first object identifier from the address index unit.

[0163] In this embodiment, the address index unit can effectively manage the association relationship between the OID and the storage address index, which helps the client to accurately access the target 5G information.

[0164] It should be noted that in the case that the storage address of the target 5G information in the distributed storage system changes, the new storage address index corresponding to the new storage address of the target 5G information in the distributed storage system can also be acquired, and the storage address index associated with the OID in the address index unit is replaced with the new storage address index, thereby realizing the dynamic adjustment of the association relationship between the OID and the physical storage address.

[0165] At step 910, the 5G information access layer obtains a first key corresponding to the object identifier.

[0166] At step 911, the 5G information access layer obtains a second target ciphertext from a second target storage address corresponding to the second storage address index.

[0167] It should be noted that the execution of steps 910 and 911 is not in a specific order, and the execution order of steps 910 and 911 is not limited in this embodiment.

[0168] In some embodiments, after obtaining the second target storage address corresponding to the second storage address index, the 5G information access layer can obtain a first target storage node to which the second target storage address belongs, and obtain the second target ciphertext from the first target storage node according to the second target storage address.

[0169] At step 912, the 5G information access layer decrypts the second target ciphertext according to the second key of the first target storage node to which the second target storage address belongs, to obtain a first target ciphertext.

[0170] At step 913, the 5G information access layer decrypts the first target ciphertext according to the first key to obtain the target 5G information.

[0171] At step 914, the 5G information access layer sends the target 5G information to the client.

[0172] It should be noted that the 5G information access layer in this embodiment can effectively manage the storage and access of 5G information, which helps to improve the security of data.

[0173] In this embodiment, during the storage of the target 5G information, the security of the target 5G information during storage can be improved through multiple encryption strategies. Moreover, when selecting a storage node and performing encryption processing, the performance factor is considered, which helps to improve the efficiency and response speed of the storage operation.

[0174] It should be noted that in the case of failure of the first target storage node, a second target storage node different from the first target storage node can be determined from the set of storage nodes, and the target 5G information stored on the first target storage node is stored on the second target storage node, and a new storage address of the target 5G information on the second target storage node is obtained.

[0175] Figure 10 A structural diagram of an information storage device according to an example embodiment.

[0176] As Figure 10As shown, the information storage apparatus 1000 comprises a first receiving module 1001, a first obtaining module 1002, an encryption processing module 1003, and a first storage module 1004, wherein: The first receiving module 1001 is configured to receive a storage request sent by a client, wherein the storage request comprises target information to be stored.

[0177] The first obtaining module 1002 is configured to allocate a corresponding object identifier to the target information, and obtain a corresponding first key according to the object identifier.

[0178] The encryption processing module 1003 is configured to perform encryption processing on the target information according to the first key, to obtain first target ciphertext of the target information.

[0179] The first storage module 1004 is configured to store the first target ciphertext in a first target storage node.

[0180] In an embodiment of the present disclosure, the first obtaining module 1002 obtains the corresponding first key according to the object identifier in the following manner: in the storage address index table, a first storage address index associated with the object identifier is obtained; in the key table, a first key associated with the first storage address index is obtained.

[0181] In an embodiment of the present disclosure, the first storage module 1004 is specifically configured to: determine a first target storage node to which the first storage address index belongs from the set of storage nodes; obtain a first storage address corresponding to the first storage address index, wherein the first storage address is located in the first target storage node; and store the first target ciphertext in the first storage address of the first target storage node.

[0182] In an embodiment of the present disclosure, the first storage module 1004 stores the first target ciphertext in the first storage address of the first target storage node in the following manner: in a case where the first target storage node is currently in a normal state, the first target ciphertext is stored in the first storage address of the first target storage node.

[0183] In an embodiment of the present disclosure, the apparatus can further comprise: The second obtaining module is configured to, in a case where the first target storage node is currently in a fault state, obtain a receiving time point at which the storage request is received; The determining module is configured to determine storage load rates of each storage node in the set of storage nodes at the receiving time point; The third obtaining module is configured to obtain, from the set of storage nodes, a storage node different from the first target storage node and having the minimum storage load rate, and take the obtained storage node as a second target storage node; The second storage module is configured to store the first target ciphertext by the second target storage node in a case where the second target storage node is currently in a normal state.

[0184] In an embodiment of the present disclosure, the apparatus can further include a processing module configured to: obtain a second storage address of the first target ciphertext on the second target storage node; obtain a second storage address index corresponding to the second storage address; update the first storage address index associated with the object identifier in the storage address index table to the second storage address index; and in the key table, disassociate the first storage address index from the first key and associate the second storage address index with the first key.

[0185] In an embodiment of the present disclosure, the apparatus can further include: The fourth obtaining module is configured to obtain a second key of the first target storage node. The first storage module 1004 stores the first target ciphertext in the first storage address of the first target storage node in the following manner: encrypts the first target ciphertext by using the second key to obtain a second target ciphertext; and stores the second target ciphertext in the first storage address of the first target storage node.

[0186] In an embodiment of the present disclosure, the encryption of the first target ciphertext by using the second key to obtain the second target ciphertext is performed in the following manner: obtaining an effective time range of the second key; obtaining a receiving time point of the storage request; and in a case where the receiving time point is within the effective time range of the second key, encrypting the first target ciphertext by using the second key to obtain the second target ciphertext.

[0187] In an embodiment of the present disclosure, the apparatus further includes a first access processing module configured to receive a first data access request sent by a client, wherein the first data access request includes an object identifier; in the storage address index table, obtain a first storage address index associated with the object identifier; in the key table, obtain a first key according to the first storage address index; obtain a first target ciphertext from a first target storage address corresponding to the first storage address index; decrypt the first target ciphertext by using the first key to obtain target information; and send the target information to the client.

[0188] In an embodiment of the present disclosure, the apparatus further includes a second access processing module configured to receive a second data access request sent by the client, wherein the second data access request includes an object identifier, obtain a first storage address index associated with the object identifier in a storage address index table, obtain a first key according to the first storage address index in a key table, obtain second target ciphertext from a first target storage address corresponding to the first storage address index, decrypt the second target ciphertext according to a second key of a first target storage node to which the first target storage address belongs to obtain first target ciphertext, decrypt the first target ciphertext according to the first key to obtain target information, and send the target information to the client.

[0189] In an embodiment of the present disclosure, the apparatus can further include a third access processing module configured to receive a third data access request sent by the client, wherein the third data access request includes an object identifier, obtain a second storage address index associated with the object identifier in a storage address index table, obtain a first key associated with the second storage address in a key table, obtain first target ciphertext from a second target storage address corresponding to the second storage address index, decrypt the first target ciphertext according to the first key to obtain target information, and send the target information to the client.

[0190] In an embodiment of the present disclosure, the apparatus can include: The sending module is configured to return a storage success message for the storage request to the client, wherein the storage success message includes the object identifier.

[0191] It should be noted that the foregoing description of the information storage method embodiments is also applicable to the information storage apparatus of the embodiments, which will not be described herein.

[0192] It should be noted that the apparatus provided by the embodiments of the present disclosure corresponds to the foregoing method embodiments. The technical effects are the same as those of the foregoing method embodiments, and details can be referred to the description of the method part.

[0193] According to the embodiments of the present disclosure, an electronic device is provided, which includes a processor and a memory connected with the processor in communication; the memory stores computer execution instructions; and the processor executes the computer execution instructions stored in the memory to implement the information storage method disclosed by the embodiments of the present disclosure.

[0194] In order to implement the foregoing embodiments, the embodiments of the present disclosure further provide a computer readable storage medium, which stores computer execution instructions, and the computer execution instructions are executed by a processor to implement the information storage method disclosed by the embodiments of the present disclosure.

[0195] To achieve the above-mentioned embodiments, the embodiments of the present disclosure further provide a computer program product.

[0196] The computer program product includes a computer program, and the computer program is executed by a processor to implement the information storage method disclosed by the embodiments of the present disclosure.

[0197] Figure 11 A structural block diagram of an electronic device according to an exemplary embodiment. Figure 11 The electronic device shown is merely an example, and should not bring any limitation to the functions and use range of the embodiments of the present disclosure.

[0198] As shown in Figure 11 The electronic device 1100 includes a processor 111, which can perform various appropriate actions and processes according to programs stored in a read only memory (ROM) 112 or loaded from a memory 116 into a random access memory (RAM) 113. In the RAM 113, various programs and data required for the operation of the electronic device 1100 are also stored. The processor 111, the ROM 112, and the RAM 113 are connected to each other through a bus 114. An input / output (I / O) interface 115 is also connected to the bus 114.

[0199] The following components are connected to the I / O interface 115: the memory 116 including a hard disk or the like; and a communication section 117 including a network interface card such as a local area network (LAN) card, a modem, or the like, which performs communication processing via a network such as the Internet; and a drive 118 is also connected to the I / O interface 115 as needed.

[0200] In particular, according to the embodiments of the present disclosure, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, the embodiments of the present disclosure include a computer program carried on a computer readable medium, which contains program codes for executing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network by the communication section 117. When the computer program is executed by the processor 111, the above-mentioned functions defined in the methods of the present disclosure are performed.

[0201] In an exemplary embodiment, a storage medium including instructions, for example, a memory including instructions, is also provided, which can be executed by the processor 111 of the electronic device 1100 to complete the above method. Optionally, the storage medium can be a non-transitory computer-readable storage medium, for example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, and an optical data storage device, etc.

[0202] In the present disclosure, a computer readable storage medium can be any tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device. In the present disclosure, a computer readable signal medium can include a data signal that is propagated in baseband or that is propagated as part of a carrier wave. Such a propagated data signal can take a variety of forms, including but not limited to electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium can be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable storage medium can be transmitted using any appropriate medium, including but not limited to wireless, wire line, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0203] Other embodiments of the present disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the features disclosed herein. The present disclosure is intended to cover any variations, uses, or adaptations of the present disclosure following the general principles thereof and including such departures from the present disclosure that come within known use or custom in the art to which the present disclosure pertains. The specification and examples are to be regarded as illustrative only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0204] It should be understood that the present disclosure is not limited to the precise structures herein described and illustrated, and that various modifications and changes can be made without departing from the scope thereof. The scope of the present disclosure is limited only by the claims that follow.

Claims

1. An information storage method characterized by, The method comprises: receiving a storage request sent by a client, wherein the storage request comprises target information to be stored; allocating a corresponding object identifier to the target information and obtaining a corresponding first key according to the object identifier; encrypting the target information according to the first key to obtain first target ciphertext of the target information; storing the first target ciphertext in a first target storage node.

2. The method of claim 1, wherein, The obtaining of the corresponding first key according to the object identifier comprises: obtaining a first storage address index associated with the object identifier in a storage address index table; obtaining a first key associated with the first storage address index in a key table.

3. The method of claim 2, wherein, The storing of the first target ciphertext in the first storage address of the first target storage node comprises: determining the first target storage node to which the first storage address index belongs from a set of storage nodes; obtaining a first storage address corresponding to the first storage address index, wherein the first storage address is located in the first target storage node; storing the first target ciphertext in the first storage address of the first target storage node.

4. The method of claim 3, wherein, The storing of the first target ciphertext in the first storage address of the first target storage node comprises: storing the first target ciphertext in the first storage address of the first target storage node in a case where the first target storage node is currently in a normal state.

5. The method of claim 4, wherein, The method comprises: in a case where the first target storage node is currently in a fault state, obtaining a receiving time point at which the storage request is received; determining storage load rates of each storage node in the set of storage nodes at the receiving time point; from the set of storage nodes, obtaining a storage node different from the first target storage node and having the smallest storage load rate, and taking the obtained storage node as a second target storage node; storing the first target ciphertext through the second target storage node in a case where the second target storage node is currently in a normal state.

6. The method of claim 5, wherein, The method further comprises: obtaining a second storage address of the first target ciphertext on the second target storage node; obtaining a second storage address index corresponding to the second storage address; updating the first storage address index associated with the object identifier in the storage address index table to the second storage address index; in the key table, disassociating the first storage address index from the first key and associating the second storage address index with the first key.

7. The method of claim 3, wherein, The method further comprises: obtaining a second key of the first target storage node; wherein the storing of the first target ciphertext in the first storage address of the first target storage node comprises: encrypting the first target ciphertext through the second key to obtain second target ciphertext; storing the second target ciphertext in the first storage address of the first target storage node.

8. The method of claim 7, wherein, The encrypting of the first target ciphertext through the second key to obtain the second target ciphertext comprises: obtaining an effective time range of the second key; acquire a receiving time point of the storage request; in a case where the receiving time point is within a valid time range of the second key, perform encryption processing on the first target ciphertext by using the second key to obtain the second target ciphertext.

9. The method of claim 3, wherein, The method further comprises: receiving a first data access request sent by the client, wherein the first data access request comprises the object identifier; in the storage address index table, acquiring a first storage address index associated with the object identifier; in the key table, acquiring the first key according to the first storage address index; acquiring the first target ciphertext from the first target storage address corresponding to the first storage address index; performing decryption processing on the first target ciphertext according to the first key to obtain the target information; sending the target information to the client.

10. The method of claim 7, wherein, The method further comprises: receiving a second data access request sent by the client, wherein the second data access request comprises the object identifier; in the storage address index table, acquiring a first storage address index associated with the object identifier; in the key table, acquiring the first key according to the first storage address index; acquiring the second target ciphertext from the first target storage address corresponding to the first storage address index; performing decryption processing on the second target ciphertext according to the second key of the first target storage node to which the first target storage address belongs, to obtain the first target ciphertext; performing decryption processing on the first target ciphertext according to the first key to obtain the target information; sending the target information to the client.

11. The method of claim 6, wherein, The method further comprises: receiving a third data access request sent by the client, wherein the third data access request comprises the object identifier; in the storage address index table, acquiring the second storage address index associated with the object identifier; in the key table, acquiring the first key associated with the second storage address; acquiring the first target ciphertext from the second target storage address corresponding to the second storage address index; performing decryption processing on the first target ciphertext according to the first key to obtain the target information; sending the target information to the client.

12. The method of any one of claims 9-11, wherein, The method further comprises: returning a storage success message for the storage request to the client, wherein the storage success message comprises the object identifier.

13. An information storage device, characterized by comprising: The device comprises: a first receiving module configured to receive a storage request sent by a client, wherein the storage request comprises target information to be stored; a first acquiring module configured to allocate a corresponding object identifier to the target information and acquire a corresponding first key according to the object identifier; an encryption processing module configured to perform encryption processing on the target information according to the first key to obtain first target ciphertext of the target information; a first storage module configured to store the first target ciphertext in a first target storage node.

14. An electronic device, comprising: comprises: a processor, and a memory connected with the processor in communication; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method of any one of claims 1-12.

15. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, implement the method of any one of claims 1-12.

16. A computer program product, characterised in that, A computer program is included, which, when executed by a processor, implements the method of any one of claims 1-12.

Images