Data processing method and apparatus, storage medium, and electronic device

Abstract

The application discloses a data processing method and device, a storage medium and an electronic device. It relates to the field of financial technology. The method comprises the following steps: receiving a storage state switching instruction of a target data volume, wherein the target data volume is used for storing target financial business data, and the storage state switching instruction comprises at least a target switching direction; cloning the target data volume according to the target switching direction, and generating a cloned data volume corresponding to the target data volume in a target storage pool, wherein the storage states of the target data volume and the cloned data volume are different, and the storage states comprise an encrypted state and a non-encrypted state; after the cloned data volume corresponding to the target data volume is generated, exchanging the volume identifiers of the target data volume and the cloned data volume to obtain the target data volume after the state is switched. The method solves the problem that the efficiency is low when the storage state of the storage data is switched by using the data migration or the storage pool reconstruction in the related art.

Description

Technical Field

[0001] This application relates to the field of financial technology, and more specifically, to a data processing method and apparatus, a storage medium, and an electronic device. Background Technology

[0002] Currently, centralized storage systems commonly employ storage pool-level encryption technology, meaning all logical units within the same storage pool have the same encryption state. When a change in storage state (encrypted / unencrypted) is required, related technologies typically employ data migration or storage pool reconstruction, involving multiple manual steps that are time-consuming and prone to errors. Furthermore, data migration or reconstruction necessitates remapping storage resources, leading to service interruptions and poor business continuity. Additionally, after a storage state switch, the original storage pool resources cannot be automatically reclaimed, resulting in wasted storage resources and low resource utilization.

[0003] The methods used in related technologies to switch the storage status of stored data, such as data migration or storage pool reconstruction, have low efficiency, and no effective solution has yet been proposed. Summary of the Invention

[0004] The main objective of this application is to provide a data processing method and apparatus, storage medium and electronic device to solve the problem of low efficiency in switching the storage state of stored data by means of data migration or storage pool reconstruction in related technologies.

[0005] To achieve the above objectives, according to one aspect of this application, a data processing method is provided. The method includes: receiving a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction; cloning the target data volume according to the target switching direction, generating a cloned data volume corresponding to the target data volume in a target storage pool, wherein the storage states of the target data volume and the cloned data volume are different, and the storage states include encrypted and unencrypted states; after generating the cloned data volume corresponding to the target data volume, exchanging the volume identifier of the target data volume with the volume identifier of the cloned data volume to obtain a target data volume after the state switch, wherein the target data volume after the state switch is used to provide target storage resources for a target application server.

[0006] Furthermore, when the target switching direction is from encrypted to unencrypted state, the target storage pool is an unencrypted storage pool. The target data volume is cloned according to the target switching direction. Generating the cloned data volume corresponding to the target data volume in the target storage pool includes: reading the encrypted data of the target financial business data in the target data volume from the encrypted storage pool where the target data volume is located; decrypting the encrypted data according to the target key corresponding to the target data volume to obtain the plaintext data of the target financial business data; and writing the plaintext data into the unencrypted storage pool to generate the cloned data volume.

[0007] Furthermore, after generating the cloned data volume, the method also includes: calling the application programming interface of the encryption machine to delete the encryption configuration information corresponding to the target data volume, wherein the encryption configuration information includes at least the target key.

[0008] Furthermore, after deleting the encrypted configuration information corresponding to the target data volume, the method also includes: deleting the target data volume in the encrypted storage pool to release the storage resources corresponding to the target data volume, and expanding the storage resources to the unencrypted storage pool.

[0009] Furthermore, when the target switching direction is from an unencrypted state to an encrypted state, before cloning the target data volume according to the target switching direction, the method further includes: sending a key generation request to the encryption machine, receiving the encryption key returned by the encryption machine, and storing the encryption key in the key database.

[0010] Furthermore, when the target switching direction is from an unencrypted state to an encrypted state, the target storage pool is an encrypted storage pool. The target data volume is cloned according to the target switching direction. The process of generating a cloned data volume corresponding to the target data volume in the target storage pool includes: reading the plaintext data of the target financial business data from the unencrypted storage pool where the target data volume is located; encrypting the plaintext data according to the encryption key to obtain the encrypted data of the target financial business data; and writing the encrypted data into the encrypted storage pool to generate the cloned data volume.

[0011] Furthermore, after generating the cloned data volume, the method also includes: deleting the target data volume from the unencrypted storage pool to release the storage resources corresponding to the target data volume, and expanding the storage resources to the encrypted storage pool.

[0012] To achieve the above objectives, according to another aspect of this application, a data processing apparatus is provided. The apparatus includes: a first processing unit, configured to receive a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction; a second processing unit, configured to clone the target data volume according to the target switching direction, generating a cloned data volume corresponding to the target data volume in a target storage pool, wherein the storage states corresponding to the target data volume and the cloned data volume are different, and the storage states include an encrypted state and an unencrypted state; and a third processing unit, configured to, after generating the cloned data volume corresponding to the target data volume, exchange the volume identifier of the target data volume with the volume identifier of the cloned data volume to obtain a target data volume after state switching, wherein the target data volume after state switching is used to provide target storage resources for a target application server.

[0013] Furthermore, when the target switching direction is from encrypted to unencrypted state, the target storage pool is an unencrypted storage pool, and the second processing unit includes: a first processing subunit, used to read encrypted data of the target financial business data in the target data volume from the encrypted storage pool where the target data volume is located; a second processing subunit, used to decrypt the encrypted data according to the target key corresponding to the target data volume to obtain the plaintext data of the target financial business data; and a third processing subunit, used to write the plaintext data into the unencrypted storage pool to generate a cloned data volume.

[0014] Furthermore, the device also includes a fourth processing unit, used to call the application programming interface of the encryption machine after generating the cloned data volume, and delete the encryption configuration information corresponding to the target data volume, wherein the encryption configuration information includes at least the target key.

[0015] Furthermore, the device also includes a fifth processing unit, which is used to delete the target data volume in the encrypted storage pool after deleting the encrypted configuration information corresponding to the target data volume, so as to release the storage resources corresponding to the target data volume and expand the storage resources to the unencrypted storage pool.

[0016] Furthermore, the device also includes a sixth processing unit, which, when the target switching direction is from an unencrypted state to an encrypted state, sends a key generation request to the encryption machine and receives the encryption key returned by the encryption machine before cloning the target data volume according to the target switching direction, and stores the encryption key in the key database.

[0017] Furthermore, when the target switching direction is from an unencrypted state to an encrypted state, the target storage pool is an encrypted storage pool. The second processing unit further includes: a fourth processing subunit, used to read plaintext data of the target financial business data from the unencrypted storage pool where the target data volume is located; a fifth processing subunit, used to encrypt the plaintext data according to the encryption key to obtain encrypted data of the target financial business data; and a sixth processing subunit, used to write the encrypted data into the encrypted storage pool to generate a cloned data volume.

[0018] Furthermore, the device also includes a seventh processing unit, used to delete the target data volume in the unencrypted storage pool after generating the cloned data volume, so as to release the storage resources corresponding to the target data volume and expand the storage resources to the encrypted storage pool.

[0019] According to another aspect of the present invention, an electronic device is also provided, comprising: a memory storing an executable program; and a processor for running the program, wherein the program executes the data processing method described above during runtime.

[0020] According to another aspect of the present invention, a computer-readable storage medium is also provided, wherein the storage medium stores a program, and the program controls the device where the storage medium is located to execute the data processing method described above when it is running.

[0021] In this embodiment, the following steps are employed: receiving a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction; cloning the target data volume according to the target switching direction, generating a cloned data volume corresponding to the target data volume in the target storage pool, wherein the storage states of the target data volume and the cloned data volume are different, including encrypted and unencrypted states; after generating the cloned data volume corresponding to the target data volume, exchanging the volume identifier of the target data volume with the volume identifier of the cloned data volume to obtain the target data volume after the state switch, wherein the target data volume after the state switch is used to provide target storage resources for the target application server. This solves the technical problem of low efficiency in related technologies that use data migration or storage pool reconstruction to switch the storage state of stored data.

[0022] In this solution, the target data volume is cloned according to the target switching direction, and the volume identifier of the target data volume is exchanged with the volume identifier of the cloned data volume. This achieves transparent switching of storage status, avoids business interruption during data migration, ensures continuous access to storage resources by the target application server, and improves the efficiency and reliability of status switching. Attached Figure Description

[0023] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0024] Figure 1 A hardware structure block diagram of a computer terminal for implementing a data processing method is shown.

[0025] Figure 2 This is a flowchart of a data processing method provided according to an embodiment of this application;

[0026] Figure 3 This is a schematic diagram of a data processing apparatus provided according to an embodiment of this application;

[0027] Figure 4 This is a structural block diagram of an electronic device according to an embodiment of this application. Detailed Implementation

[0028] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0029] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0030] It should be noted that the information collected in this application (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) are information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, storage, use, processing, transmission, provision, disclosure, and application of this data all comply with relevant laws, regulations, and standards, and necessary measures have been taken to ensure compliance with public order and good morals. Corresponding access points are provided for users to choose whether to authorize or refuse. For example, interfaces are established between this system and relevant users or organizations, providing users with corresponding access points to choose whether to agree to or refuse automated decision-making results; if the user chooses to refuse, the process proceeds to the expert decision-making stage.

[0031] Example 1

[0032] According to an embodiment of this application, a method embodiment for data processing is also provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0033] The method embodiment provided in Embodiment 1 of this application can be executed on a mobile terminal, computer terminal, or similar computing device. Figure 1 A hardware structure block diagram of a computer terminal (or mobile device) for implementing a data processing method is shown. Figure 1 As shown, the computer terminal 10 (or mobile device) may include one or more processors 102 (shown as 102a, 102b, ..., 102n in the figure) 102 (processor 102 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0034] It should be noted that the aforementioned one or more processors 102 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 10 (or mobile device). As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0035] The memory 104 can be used to store software programs and modules of application software, such as program instructions / data storage devices corresponding to the data processing method in this embodiment. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby implementing the aforementioned data processing method. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the computer terminal 10 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0036] The transmission device 106 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0037] The display may be a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the computer terminal 10 (or mobile device).

[0038] Under the aforementioned operating environment, this application provides the following: Figure 2 The data processing method shown. Figure 2 This is a flowchart of a data processing method according to Embodiment 1 of this application. The data processing method includes:

[0039] Step S201: Receive a storage state switching instruction for the target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least the target switching direction.

[0040] Step S202: Clone the target data volume according to the target switching direction and generate a cloned data volume corresponding to the target data volume in the target storage pool. The storage states of the target data volume and the cloned data volume are different, including encrypted state and unencrypted state.

[0041] Step S203: After generating the cloned data volume corresponding to the target data volume, the volume identifier of the target data volume and the volume identifier of the cloned data volume are exchanged to obtain the target data volume after the state switch. The target data volume after the state switch is used to provide target storage resources for the target application server.

[0042] Optionally, the state switching control system in the centralized storage system serves as the execution entity. The system receives storage state switching instructions for the target data volume initiated by the administrator or the automated operation and maintenance platform. The target data volume is used to store target financial business data, which may include core accounting data, credit application records, customer basic information, etc. For example, if a financial institution's core transaction system needs to adjust the security policy for credit business data, the administrator initiates a storage state switching instruction through the management console of the centralized storage system. This instruction specifies that the target data volume is a logical unit with ID LUN01. This data volume is currently hosted in a storage pool with unencrypted attributes and is used to store business data such as the financial institution's credit application records and customer basic information. The target switching direction specified in the instruction is to switch from an unencrypted state to an encrypted state. After receiving the instruction, the state switching control system parses the instruction parameters, identifies LUN01 as the target data volume to be operated, and then triggers the corresponding cloning process according to the target switching direction specified in the instruction. For example, the system reads the plaintext data in LUN01 and generates the corresponding cloned data volume in the target storage pool (i.e., the storage pool configured with encryption attributes), named LUN02. At this time, LUN01 is located in the unencrypted storage pool, and LUN02 is located in the encrypted storage pool, and the two have different storage states. After generating the cloned data volume and confirming data synchronization, the system performs a volume identifier (i.e., volume ID) exchange operation. For example, the system exchanges the volume identifier of LUN01 (e.g., volume 1) with the volume identifier of LUN02 (e.g., volume 2), so that LUN01 corresponds to volume 2 and LUN02 corresponds to volume 1. After the exchange, the logical volume identifier (e.g., volume 1) mounted on the target application server (e.g., the database host of the core transaction system) remains unchanged, but its underlying mapped data blocks have been switched from data in the unencrypted storage pool to data in the encrypted storage pool, that is, the target data volume after the state switch is obtained. This data volume is now stored in the encrypted storage pool in an encrypted state, continuing to provide storage resources for the target application server, realizing a seamless encryption / decryption state switch for the business.

[0043] In summary, by cloning the target data volume according to the target switching direction and exchanging the volume identifiers of the target data volume and the cloned data volume, transparent switching of storage state is achieved, avoiding business interruption during data migration, ensuring continuous access to storage resources by the target application server, and improving the efficiency and reliability of state switching.

[0044] Optionally, in the data processing method provided in this application embodiment, when the target switching direction is from encrypted state to unencrypted state, the target storage pool is an unencrypted storage pool. Cloning the target data volume according to the target switching direction and generating a cloned data volume corresponding to the target data volume in the target storage pool includes: reading encrypted data of the target financial business data in the target data volume from the encrypted storage pool where the target data volume is located; decrypting the encrypted data according to the target key corresponding to the target data volume to obtain the plaintext data of the target financial business data; and writing the plaintext data into the unencrypted storage pool to generate a cloned data volume.

[0045] In an optional embodiment, when the target switching direction is from encrypted to unencrypted state, the target storage pool is an unencrypted storage pool. For example, a financial institution needs to convert historically archived encrypted storage data to unencrypted data. In this case, the target data volume specified by the storage state switching instruction can be a logical unit with ID LUN03. This data volume is carried in a storage pool with encrypted attributes. The system performs a cloning operation according to the target switching direction: First, it reads the encrypted data blocks of the target financial business data in LUN03 from the source storage pool (i.e., the encrypted storage pool) where LUN03 is located. These encrypted data blocks exist in ciphertext form on the physical disk. Then, it decrypts the read encrypted data according to the target key corresponding to LUN03 (such as the decryption key stored in the key database) to restore the plaintext data of the target financial business data. Then, it writes the plaintext data into the pre-allocated space in the unencrypted storage pool to generate a cloned data volume named LUN04.

[0046] By reading encrypted data, decrypting it to obtain plaintext, and writing it into an unencrypted storage pool to generate a cloned data volume, it is possible to generate a cloned data volume in the target storage pool with a storage state different from that of the source data volume, thus providing a data foundation for subsequent volume ID exchange.

[0047] Optionally, in the data processing method provided in the embodiments of this application, after generating the cloned data volume, the method further includes: calling the application programming interface of the encryption machine to delete the encryption configuration information corresponding to the target data volume, wherein the encryption configuration information includes at least the target key.

[0048] In an optional embodiment, when switching from an encrypted state to an unencrypted state, after the cloned data volume LUN04 is generated in the unencrypted storage pool, and the system confirms that the cloning task has been completed and the data consistency verification has passed, the system performs configuration cleanup, calls the application programming interface of the encryption machine, and sends a deletion command to the encryption machine. The command clearly identifies the entity to be deleted as the encryption configuration information corresponding to LUN03, such as the target key, the binding relationship record between the key and the data volume, etc.

[0049] By deleting these configuration details, the storage system and the encryption machine achieved synchronized storage and encryption. Since the data has been converted to an unencrypted state and stored in an unencrypted storage pool, the original encryption key no longer serves any active data copy. Deleting this configuration information eliminates the risk of accidental decryption of historical data due to key remnants, and also frees up the encryption machine's key management resources.

[0050] Optionally, in the data processing method provided in this application embodiment, after deleting the encrypted configuration information corresponding to the target data volume, the method further includes: deleting the target data volume in the encrypted storage pool to release the storage resources corresponding to the target data volume, and expanding the storage resources to the unencrypted storage pool.

[0051] In an optional embodiment, after deleting the encrypted configuration information corresponding to the target data volume, the system works with the storage pool manager to perform raw data cleanup. For example, it locates and deletes LUN03, which was originally located in the encrypted storage pool, and releases the physical hard disk storage resources it occupies. Then, the released hard disk resources are expanded to the unencrypted storage pool.

[0052] Through the above process, the hard disk space originally belonging to the encrypted storage pool is reallocated to the unencrypted storage pool, solving the problem of resources not being automatically reclaimed in traditional solutions, improving the capacity utilization of the unencrypted storage pool, and realizing dynamic optimization and recycling of storage hardware resources.

[0053] Optionally, in the data processing method provided in the embodiments of this application, when the target switching direction is from unencrypted state to encrypted state, before cloning the target data volume according to the target switching direction, the method further includes: sending a key generation request to the encryption machine, receiving the encryption key returned by the encryption machine, and storing the encryption key in the key database.

[0054] In an optional embodiment, when the target switching direction is from an unencrypted state to an encrypted state, before cloning the target data volume according to the target switching direction, the system executes a new configuration process. For example, the system sends a key generation request to the encryption machine. The request parameters include key type, key length, and associated service identifier. The encryption machine responds to the request and generates a new encryption key. The system receives the encryption key returned by the encryption machine and stores the encryption key in the key database. Optionally, the encryption key can be stored in ciphertext form.

[0055] Optionally, in the data processing method provided in this application embodiment, when the target switching direction is from an unencrypted state to an encrypted state, the target storage pool is an encrypted storage pool. Cloning the target data volume according to the target switching direction and generating a cloned data volume corresponding to the target data volume in the target storage pool includes: reading plaintext data of the target financial business data in the target data volume from the unencrypted storage pool where the target data volume is located; encrypting the plaintext data according to the encryption key to obtain encrypted data of the target financial business data; and writing the encrypted data into the encrypted storage pool to generate a cloned data volume.

[0056] In an optional embodiment, when the target switching direction is from unencrypted state to encrypted state, the target storage pool is an encrypted storage pool. For example, the system reads plaintext data from the source storage pool (i.e., the unencrypted storage pool) where LUN01 is located, encrypts the read plaintext data according to the encryption key, generates ciphertext data blocks (i.e., encrypted data), and then writes the generated ciphertext data blocks into the pre-allocated space in the encrypted storage pool, thereby generating a cloned data volume named LUN02.

[0057] By reading plaintext data, encrypting it to obtain ciphertext, and writing it into an encrypted storage pool to generate a cloned data volume, a cloned data volume with a different storage state from the source data volume is generated in the target storage pool, providing a data foundation for subsequent volume ID exchange.

[0058] Optionally, in the data processing method provided in this application embodiment, after generating the cloned data volume, the method further includes: deleting the target data volume in the unencrypted storage pool to release the storage resources corresponding to the target data volume, and expanding the storage resources to the encrypted storage pool.

[0059] In an optional embodiment, after generating the cloned data volume, the system works with the storage pool manager to perform raw data cleanup, for example, locating and deleting LUN01 originally located in the unencrypted storage pool, releasing the physical hard disk storage resources it occupies, and then expanding the released hard disk resources to the encrypted storage pool.

[0060] Through the above process, the hard disk space that originally belonged to the unencrypted storage pool is reallocated to the encrypted storage pool, which solves the problem of resources not being automatically reclaimed in traditional solutions, improves the capacity utilization of the encrypted storage pool, and realizes dynamic optimization and recycling of storage hardware resources.

[0061] The data processing method provided in this application includes the following steps: receiving a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction; cloning the target data volume according to the target switching direction, generating a cloned data volume corresponding to the target data volume in the target storage pool, wherein the storage states of the target data volume and the cloned data volume are different, including encrypted and unencrypted states; after generating the cloned data volume corresponding to the target data volume, exchanging the volume identifier of the target data volume with the volume identifier of the cloned data volume to obtain the target data volume after the state switch, wherein the target data volume after the state switch is used to provide target storage resources for the target application server. This solves the technical problem of low efficiency in related technologies that use data migration or storage pool reconstruction to switch the storage state of stored data.

[0062] In this solution, the target data volume is cloned according to the target switching direction, and the volume identifier of the target data volume is exchanged with the volume identifier of the cloned data volume. This achieves transparent switching of storage status, avoids business interruption during data migration, ensures continuous access to storage resources by the target application server, and improves the efficiency and reliability of status switching.

[0063] It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases the steps shown or described may be executed in a different order than that shown here.

[0064] Example 2

[0065] This application also provides a data processing apparatus. It should be noted that the data processing apparatus of this application can be used to execute the data processing method provided in this application. The data processing apparatus provided in this application will be described below.

[0066] According to embodiments of this application, a data processing apparatus for implementing the above-described data processing method is also provided, such as... Figure 3 As shown, the device includes: a first processing unit 301, a second processing unit 302, and a third processing unit 303.

[0067] The first processing unit 301 is used to receive a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least the target switching direction.

[0068] The second processing unit 302 is used to clone the target data volume according to the target switching direction and generate a cloned data volume corresponding to the target data volume in the target storage pool. The target data volume and the cloned data volume have different storage states, including encrypted state and unencrypted state.

[0069] The third processing unit 303 is used to exchange the volume identifier of the target data volume with the volume identifier of the clone data volume after generating the clone data volume corresponding to the target data volume, so as to obtain the target data volume after the state switch, wherein the target data volume after the state switch is used to provide target storage resources for the target application server.

[0070] The data processing apparatus provided in this application embodiment receives a storage state switching instruction for a target data volume through a first processing unit 301. The target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction. A second processing unit 302 clones the target data volume according to the target switching direction, generating a cloned data volume corresponding to the target data volume in the target storage pool. The storage states of the target data volume and the cloned data volume are different, including encrypted and unencrypted states. After generating the cloned data volume corresponding to the target data volume, a third processing unit 303 exchanges the volume identifier of the target data volume with the volume identifier of the cloned data volume to obtain the target data volume after the state switch. The target data volume after the state switch is used to provide target storage resources for the target application server.

[0071] Optionally, in the data processing apparatus provided in this application embodiment, when the target switching direction is from encrypted state to unencrypted state, the target storage pool is an unencrypted storage pool, and the second processing unit includes: a first processing subunit, used to read encrypted data of the target financial business data in the target data volume from the encrypted storage pool where the target data volume is located; a second processing subunit, used to decrypt the encrypted data according to the target key corresponding to the target data volume to obtain plaintext data of the target financial business data; and a third processing subunit, used to write the plaintext data into the unencrypted storage pool to generate a cloned data volume.

[0072] Optionally, in the data processing apparatus provided in the embodiments of this application, the apparatus further includes: a fourth processing unit, configured to call the application programming interface of the encryption machine after generating the cloned data volume, and delete the encryption configuration information corresponding to the target data volume, wherein the encryption configuration information includes at least the target key.

[0073] Optionally, in the data processing apparatus provided in the embodiments of this application, the apparatus further includes: a fifth processing unit, configured to delete the target data volume in the encrypted storage pool after deleting the encrypted configuration information corresponding to the target data volume, so as to release the storage resources corresponding to the target data volume and expand the storage resources to the unencrypted storage pool.

[0074] Optionally, in the data processing apparatus provided in the embodiments of this application, the apparatus further includes: a sixth processing unit, configured to send a key generation request to the encryption machine and receive the encryption key returned by the encryption machine before cloning the target data volume according to the target switching direction when the target switching direction is switching from an unencrypted state to an encrypted state, and store the encryption key in the key database.

[0075] Optionally, in the data processing apparatus provided in this application embodiment, when the target switching direction is from an unencrypted state to an encrypted state, the target storage pool is an encrypted storage pool, and the second processing unit further includes: a fourth processing subunit, used to read plaintext data of the target financial business data in the target data volume from the unencrypted storage pool where the target data volume is located; a fifth processing subunit, used to encrypt the plaintext data according to the encryption key to obtain encrypted data of the target financial business data; and a sixth processing subunit, used to write the encrypted data into the encrypted storage pool to generate a cloned data volume.

[0076] Optionally, in the data processing apparatus provided in the embodiments of this application, the apparatus further includes: a seventh processing unit, configured to delete the target data volume in the unencrypted storage pool after generating the cloned data volume, so as to release the storage resources corresponding to the target data volume and expand the storage resources to the encrypted storage pool.

[0077] It should be noted that the first processing unit 301, the second processing unit 302, and the third processing unit 303 mentioned above correspond to steps S201 to S203 in Embodiment 1. The three units and their corresponding steps implement the same instances and application scenarios, but are not limited to the content disclosed in Embodiment 1. It should be noted that the above modules or units can be hardware or software components stored in memory (e.g., memory 104) and processed by one or more processors (e.g., processors 102a, 102b, ..., 102n). The above units can also be part of a device and run in the computer terminal 10 provided in Embodiment 1.

[0078] Example 3

[0079] Embodiments of this application may provide an electronic device. Figure 4 This is a structural block diagram of an electronic device according to an embodiment of this application. Figure 4 As shown, the electronic device may include: one or more (Figure 4 (Only one is shown) Processor 402, memory 404, memory controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display.

[0080] The memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the methods and apparatus in the embodiments of this application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory, thereby implementing the above-described methods. The memory may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include memory remotely located relative to the processor, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0081] The processor can invoke information and applications stored in the memory via a transmission device to perform the following steps: receiving a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction; cloning the target data volume according to the target switching direction, generating a cloned data volume corresponding to the target data volume in the target storage pool, wherein the storage states of the target data volume and the cloned data volume are different, and the storage states include encrypted and unencrypted states; after generating the cloned data volume corresponding to the target data volume, exchanging the volume identifier of the target data volume with the volume identifier of the cloned data volume to obtain the target data volume after the state switch, wherein the target data volume after the state switch is used to provide target storage resources for the target application server.

[0082] The processor can invoke the information and application stored in the memory through the transmission device to perform the following steps: read the encrypted data of the target financial business data in the target data volume from the encrypted storage pool where the target data volume is located; decrypt the encrypted data according to the target key corresponding to the target data volume to obtain the plaintext data of the target financial business data; and write the plaintext data into the unencrypted storage pool to generate a cloned data volume.

[0083] The processor can invoke the information and application stored in the memory through the transmission device to perform the following steps: after generating the cloned data volume, call the application programming interface of the encryption machine to delete the encryption configuration information corresponding to the target data volume, wherein the encryption configuration information includes at least the target key.

[0084] The processor can invoke the information and application stored in the memory through the transmission device to perform the following steps: after deleting the encrypted configuration information corresponding to the target data volume, delete the target data volume in the encrypted storage pool to release the storage resources corresponding to the target data volume, and expand the storage resources to the unencrypted storage pool.

[0085] The processor can access the information and application stored in the memory via the transmission device to perform the following steps: when the target switching direction is from unencrypted to encrypted, before cloning the target data volume according to the target switching direction, send a key generation request to the encryption machine, receive the encryption key returned by the encryption machine, and store the encryption key in the key database.

[0086] The processor can invoke information and applications stored in the memory through the transmission device to perform the following steps: read plaintext data of the target financial business data from the unencrypted storage pool where the target data volume is located; encrypt the plaintext data according to the encryption key to obtain encrypted data of the target financial business data; and write the encrypted data into the encrypted storage pool to generate a cloned data volume.

[0087] The processor can invoke the information and application stored in the memory through the transmission device to perform the following steps: after generating the cloned data volume, delete the target data volume in the unencrypted storage pool to release the storage resources corresponding to the target data volume, and expand the storage resources to the encrypted storage pool.

[0088] Those skilled in the art will understand that Figure 4 The structure shown is for illustrative purposes only. Electronic devices can also be smartphones, tablets, handheld computers, mobile internet devices (MIDs), PADs, and other terminal devices. Figure 4 This does not limit the structure of the aforementioned electronic device. For example, electronic devices may also include components that are more... Figure 4 The more or fewer components shown (such as network interfaces, display devices, etc.), or having the same Figure 4 The different configurations shown.

[0089] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0090] Example 4

[0091] Embodiments of this application also provide a computer-readable storage medium. Optionally, in this embodiment, the storage medium can be used to store the program code executed by the data processing method provided in Embodiment 1.

[0092] Optionally, in this embodiment, the storage medium may be located in any computer terminal in a group of computer terminals in a computer network, or in any mobile terminal in a group of mobile terminals.

[0093] This application also provides a computer program product, which, when executed on a data processing device, is a program adapted to perform data processing method steps.

[0094] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0095] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0096] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0097] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0098] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0099] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0100] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A data processing method, characterized in that, include: Receive a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction; The target data volume is cloned according to the target switching direction, and a cloned data volume corresponding to the target data volume is generated in the target storage pool. The target data volume and the cloned data volume have different storage states, including encrypted state and unencrypted state. After generating the cloned data volume corresponding to the target data volume, the volume identifier of the target data volume and the volume identifier of the cloned data volume are exchanged to obtain the target data volume after state switching. The target data volume after state switching is used to provide target storage resources for the target application server.

2. The method according to claim 1, characterized in that, When the target switching direction is from encrypted to unencrypted state, and the target storage pool is an unencrypted storage pool, cloning the target data volume according to the target switching direction, and generating a cloned data volume corresponding to the target data volume in the target storage pool includes: Read the encrypted data of the target financial business data from the encrypted storage pool where the target data volume is located; The encrypted data is decrypted using the target key corresponding to the target data volume to obtain the plaintext data of the target financial business data; The plaintext data is written into the unencrypted storage pool to generate the cloned data volume.

3. The method according to claim 2, characterized in that, After generating the cloned data volume, the method further includes: The encryption machine's application programming interface is invoked to delete the encryption configuration information corresponding to the target data volume, wherein the encryption configuration information includes at least the target key.

4. The method according to claim 3, characterized in that, After deleting the encryption configuration information corresponding to the target data volume, the method further includes: The target data volume is deleted from the encrypted storage pool to release the storage resources corresponding to the target data volume, and the storage resources are expanded to the unencrypted storage pool.

5. The method according to claim 1, characterized in that, When the target switching direction is from an unencrypted state to an encrypted state, the method further includes the following steps before cloning the target data volume according to the target switching direction: Send a key generation request to the encryption machine, receive the encryption key returned by the encryption machine, and store the encryption key in the key database.

6. The method according to claim 5, characterized in that, When the target switching direction is from an unencrypted state to an encrypted state, and the target storage pool is an encrypted storage pool, cloning the target data volume according to the target switching direction, and generating a cloned data volume corresponding to the target data volume in the target storage pool includes: Read the plaintext data of the target financial business data from the unencrypted storage pool where the target data volume is located; The plaintext data is encrypted using the encryption key to obtain encrypted data of the target financial business data; The encrypted data is written into the encrypted storage pool to generate the cloned data volume.

7. The method according to claim 6, characterized in that, After generating the cloned data volume, the method further includes: The target data volume is deleted from the unencrypted storage pool to release the storage resources corresponding to the target data volume, and the storage resources are expanded to the encrypted storage pool.

8. A data processing apparatus, characterized in that, include: The first processing unit is configured to receive a storage state switching instruction for a target data volume, wherein the target data volume is used to store target financial business data, and the storage state switching instruction includes at least a target switching direction. The second processing unit is used to clone the target data volume according to the target switching direction and generate a cloned data volume corresponding to the target data volume in the target storage pool. The target data volume and the cloned data volume have different storage states, including encrypted state and unencrypted state. The third processing unit is used to exchange the volume identifier of the target data volume with the volume identifier of the clone data volume after generating the clone data volume corresponding to the target data volume, so as to obtain the target data volume after state switching, wherein the target data volume after state switching is used to provide target storage resources for the target application server.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored executable program, wherein, when the executable program is executed, it controls the device on which the computer-readable storage medium is located to perform the data processing method according to any one of claims 1 to 7.

10. An electronic device, characterized in that, include: Memory, which stores executable programs; A processor for running the program, wherein the program, when running, performs the data processing method according to any one of claims 1 to 7.

Images