Encryption methods, devices, and electronic devices

Abstract

The present invention provides an encryption method, device, and electronic device, which records private encryption information in a user private area of ​​an encryption medium provided in a target software, and encrypts related data related to the target software with the private encryption information, thereby realizing that the target software and related data related to the target software are encrypted in the same encryption medium, reducing the complexity of encryption and improving the convenience of encryption.

Description

Technical Field

[0001] <Cross - reference to Related Applications> This invention claims the priority of the Chinese patent application No. 202210280533.4 filed on March 21, 2022, and the said application is incorporated herein by reference.

[0002] This invention relates to data security technology, and particularly to an encryption method, apparatus and electronic device.

Background Art

[0003] Generally, each software individually has a dedicated encryption medium for encrypting the said software. Here, software widely refers to a program (which arranges computer data and instructions in a specific order) that realizes at least one function. The encryption medium is a medium that "restricts and protects the use of software by users" by parameters such as passwords, system keys or hardware keys (usually encryption parameters).

[0004] In related applications, the encryption media provided for each software are limited to providing encryption protection for the software itself and cannot encrypt related data associated with that software. Here, related data associated with the software includes, for example, software configuration information loaded when the software is used, result information generated after the software is executed, and new functions added to the software. That is, although the above related data is related to the software, the encryption of related data is independent of the encryption of the software itself, and the encryption of different types of related data depends on the corresponding encryption media provided for each. For example, if the software is encrypted depending on encryption medium a, the software configuration information loaded when the software is used is encrypted depending on encryption medium b, the result information generated after the software is executed is encrypted depending on encryption medium c, and new functions added to the software are encrypted depending on encryption medium d. Thus, when the software loads the above software configuration information, result information, and new functions added to the software, it is necessary to combine encryption media a, encryption media b, encryption media c, and encryption media d, meaning that four encryption media are required simultaneously, making encryption very complicated. [Overview of the project]

[0005] The present invention provides an encryption method, apparatus, and electronic device for enabling software and other software independent of said software to perform encryption using the same encryption medium.

[0006] Embodiments of the present invention provide an encryption method, which is: A step of recording private encryption information in a user-private area of ​​a currently deployed encryption medium for encrypting and protecting the target software, wherein the encryption medium further records dedicated target software encryption information for encrypting the target software; If an encryption trigger is detected that encrypts related data associated with the target software, the method includes the step of encrypting the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium. The encryption of the related data is independent of the encryption of the target software, and the related data includes at least one of the following: software configuration information of the target software, result information generated after the target software is executed, customization function software, software configuration information of the customization function software, and result information generated after the customization function software is executed, and the customization function software is implemented by adding a program to the target software to implement the customization function.

[0007] An embodiment of the present invention provides an encryption method, and the device is A deployment unit used to record private encryption information in a user-private area of ​​a currently deployed encryption medium for encrypting and protecting target software, wherein the encryption medium further records dedicated target software encryption information for encrypting the target software; When an encryption trigger for encrypting related data associated with the target software is detected, the system includes a processing unit used to encrypt the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, The encryption of the related data is independent of the encryption of the target software, and the related data includes at least one of the following: software configuration information of the target software, result information generated after the target software is executed, customization function software, software configuration information of the customization function software, and result information generated after the customization function software is executed, and the customization function software is implemented by adding a program to the target software to implement the customization function.

[0008] Embodiments of the present invention further provide an electronic device comprising a processor and a device-readable storage medium, the device-readable storage medium storing device-executable instructions that can be executed by the processor, and the processor is used to execute the machine-executable instructions to perform the steps of the method disclosed above.

[0009] As can be seen from the above technical proposals, the present invention records private encryption information in a user-private area of ​​the encryption medium provided in the target software, and encrypts related data associated with the target software using said private encryption information. This enables the target software and related data associated with the target software to be encrypted on the same encryption medium, thereby reducing the complexity of encryption and improving the convenience of encryption. [Brief explanation of the drawing]

[0010] The accompanying drawings incorporated herein and constituting part of this specification illustrate embodiments conforming to the present invention and are used in conjunction with this specification to illustrate the principles of the present invention.

[0011] [Figure 1] This is an illustrative diagram of an encryption medium according to an embodiment of the present invention. [Figure 2] This is a flowchart of the method according to an embodiment of the present invention. [Figure 3] This is another illustrative diagram of an encryption medium according to an embodiment of the present invention. [Figure 4a] This is an illustrative diagram showing how private encrypted information is recorded in a user-private area according to an embodiment of the present invention. [Figure 4b] This is another illustrative diagram showing how to record private encrypted information in a user-private area according to an embodiment of the present invention. [Figure 5a] This is a schematic diagram of the decoding of related data according to an embodiment of the present invention. [Figure 5b] This is another schematic diagram of the decoding of related data according to an embodiment of the present invention. [Figure 6] This is a configuration diagram of an apparatus according to an embodiment of the present invention. [Figure 7] This is a configuration diagram of an electronic device according to an embodiment of the present invention. [Modes for carrying out the invention]

[0012] The following describes in detail the exemplary embodiments shown in the drawings. Where the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not imply all embodiments consistent with the present invention. On the contrary, these are merely examples of apparatus and methods consistent with some aspects of the present invention.

[0013] The terms used in this invention are for the purpose of describing specific embodiments and are not intended to limit the invention. The singular forms "one kind," "the said," and "the said" used in this invention are also intended to include plural forms unless the context clearly indicates otherwise.

[0014] To help those skilled in the art better understand the technical proposals relating to the embodiments of the present invention, first, the encryption medium relating to the embodiments of the present invention will be described.

[0015] In applications, as shown in Figure 1, the encryption medium includes, but is not limited to, the following areas.

[0016] 1) Dedicated read / write area: Only the original developer is permitted, allowing the original developer to write and read data. In applications, the dedicated read / write area records dedicated encryption information (also called software encryption information) for encrypting software that conforms to the encrypted medium.

[0017] 2) Common read-only area: Permits the original developer to write and read data and permits users to read data. The common read-only area is generally used as a means to record information expressed externally by the original developer, informing users of information that the original developer wants the users to know, such as the basic information of the most common encrypted medium (model, developer, etc.).

[0018] Based on the encrypted medium as described above, in applications, for each software, based on the software encryption information recorded in the dedicated read / write area of the encrypted medium that the software individually has, such as keys or passwords, the software can be encrypted to protect the software itself. However, as described in the background art, the related data related to the software is related to the software, but its encryption is independent of the encryption of the software itself, and the encryption of different related data depends on different encrypted media provided for them respectively. For example, the software described in the background art is encrypted depending on encrypted medium a, the software configuration information loaded when the software is used is encrypted depending on encrypted medium b, the result information generated after the software is executed is encrypted depending on encrypted medium c, and the functions newly added to the software are encrypted depending on encrypted medium d.

[0019] Based on this, when software loads its related associated data, the encryption medium provided in the software needs to combine the encryption media provided in the associated data. For example, when the above software loads the above software configuration information, result information, and functions newly added to the software, it is necessary to combine encryption medium a, encryption medium b, encryption medium c, and encryption medium d, that is, four encryption media are required simultaneously, and the encryption is very complicated, causing great inconvenience.

[0020] To solve the above technical problem, this embodiment provides an encryption method that can solve the above technical problem.

[0021] FIG. 2 exemplarily shows an encryption method according to an embodiment of the present invention.

[0022] FIG. 2 is a flowchart of a method according to an embodiment of the present invention. Optionally, in this embodiment, the method may be applied to an electronic device. Here, the electronic device may be a device that manages or controls software, and this embodiment is not particularly limited.

[0023] As shown in FIG. 2, the flow may include the following steps.

[0024] In step 201, record private encryption information in the user private area of the currently arranged encryption medium for encrypting and protecting the target software.

[0025] Here, the target software generally refers to any software.

[0026] Optionally, in this embodiment, to solve the above technical problems, the encryption medium provided in the target software can be improved by setting a user-private area on the encryption medium. Figure 3 shows the encryption medium shown in Figure 1 with a user-private area added. Optionally, in this embodiment, the specific location of the user-private area on the encryption medium is not limited as long as it does not conflict with existing partitioned areas on the encryption medium, such as a dedicated read / write area or a common read-only area.

[0027] In this embodiment, the user private area allows the recording of private encrypted information.

[0028] In order to enable the recording of private encrypted information in the user private area described above, as one embodiment, an external interface corresponding to the target software may be added, and the recording of private encrypted information in the user private area may be enabled via this external interface. Specifically, as shown in Figure 4a, recording private encrypted information in the user private area may include receiving private encrypted information written to the user private area from an external source via the newly configured external interface corresponding to the target software. In other words, the recording of private encrypted information in the user private area is enabled.

[0029] In another embodiment, private encrypted information may be recorded in the user private area by borrowing a software interaction interface corresponding to the target software. Specifically, as shown in Figure 4b, recording private encrypted information in the user private area may include receiving private encrypted information to be written to the user private area, which is input from an external source via the software interaction interface corresponding to the target software, and writing said private encrypted information to the user private area. In other words, recording private encrypted information in the user private area is realized.

[0030] In this embodiment, the private encrypted information recorded in the user's private area may be dynamically modified, deleted, etc., based on actual needs.

[0031] If an encryption trigger is detected in step 202 that encrypts related data associated with the target software, step 203 is executed.

[0032] In this embodiment, the above-mentioned related data is related to the target software, but the encryption of the related data is independent of the encryption of the target software. Optionally, in this embodiment, the related data includes at least one of the following: software configuration information of the target software, result information generated after the target software is executed, customization function software, software configuration information of the customization function software, and result information generated after the customization function software is executed. In this embodiment, the above-mentioned related data related to the target software may be defined according to actual needs. For example, the above-mentioned related data may not include the customization function software, and may only include the software configuration information of the customization function software, result information generated after the customization function software is executed, etc., and this embodiment is not limited in any way.

[0033] In some embodiments, step 202 may be omitted, and step 203 may be performed directly after step 201.

[0034] In this embodiment, the customization function software is implemented by adding a new program to the target software to realize the customization function. For example, user customization tools and user customization information are newly added to the target software, and these newly added user customization tools and user customization information are collectively referred to as the customization function software.

[0035] Conventional encryption methods require a corresponding encryption medium to encrypt each piece of software-related data. In this embodiment, instead of providing a corresponding encryption medium for each piece of software-related data, encryption of related data is achieved by extending the user-private area within the encryption medium provided by the software. For details, please refer to step 203, and the explanation is omitted here.

[0036] In this embodiment, the electronic device provides one external interface, which may be an interaction interface for the target software, or a management interface for managing the target software (different from the interaction interface for the target software). However, in this embodiment, regardless of the interface, when an encryption trigger for encrypting related data associated with the target software is detected (for example, a trigger identifier associated with related data (e.g., a button) is set in the interface, and when it is detected that the trigger identifier has been triggered, an encryption trigger for encrypting the related data is detected), the corresponding related data can be acquired and encrypted in a timely manner.

[0037] In step 203, the relevant data is encrypted based on the private encryption information corresponding to the relevant data, which is recorded in the user-private area of ​​the encryption medium.

[0038] As one embodiment, one piece of private encrypted information may be recorded in the user-private area. This private encrypted information may be used to encrypt all related data associated with the target software. In other words, the private encrypted information recorded in the user-private area corresponds to all related data of the target software.

[0039] As one embodiment, the user private area may record two or more pieces of private encryption information to correspond to at least two different pieces of related data. For example, the user private area may record three pieces of private encryption information: key a1, key a2, and key a3. The software configuration information of the target software corresponds to key a1 recorded in the user private area, the result information generated after the target software is executed corresponds to key a2, and the customization function software corresponds to key a3. When encrypting related data related to the target software, first, it is necessary to identify what the related data specifically is. For example, if the related data is software configuration information, the software configuration information is encrypted based on key a1 recorded in the user private area. If the related data is result information, the result information is encrypted based on key a2 recorded in the user private area.

[0040] In this embodiment, the software configuration information of the customization function software and the private encryption information corresponding to the result information generated after the customization function software is executed may be the same, or for example, both may be private encryption information corresponding to the customization function software. Of course, the software configuration information of the customization function software and the private encryption information corresponding to the result information generated after the customization function software is executed may be different, and for example, the user private area may further define two types of private encryption information: private encryption information corresponding to the software configuration information of the customization function software and private encryption information corresponding to the result information generated after the customization function software is executed, and this embodiment is not limited in any way.

[0041] Ultimately, this embodiment achieves, by step 203 above, that the relevant data associated with the software is encrypted using an encryption medium provided in the software.

[0042] As can be seen from the flow chart in Figure 2, in this embodiment, private encryption information is recorded in the user-private area of ​​the encryption medium provided in the target software, and related data associated with the target software is encrypted using this private encryption information. This ensures that the target software and related data associated with the target software are encrypted on the same encryption medium, thereby reducing the complexity of encryption and improving the convenience of encryption.

[0043] Optionally, in this embodiment, if the related data includes at least one of the following: software configuration information when the target software is executed, result information generated after the target software is executed, software configuration information of the customization function software, and result information generated after the customization function software is executed, then in step 203, after encrypting the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, the method further includes the step of decrypting the encrypted related data according to a decryption scheme corresponding to superimposed encryption when it receives a load trigger to load and execute the encrypted related data into the target software. Specifically, this is shown in Figure 5a.

[0044] As shown in Figure 5a, when decrypting related data encrypted according to a decryption method corresponding to superimposed encryption, the target software reads the target software encryption information and the private encryption information corresponding to the encrypted related data from the encryption medium provided in the target software. The read target software encryption information and private encryption information are then verified. If the verification is successful, the encrypted related data is decrypted, loaded into the target software, and executed; otherwise, a load failure is displayed.

[0045] Optionally, in this embodiment, when encrypting the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium in step 203, the currently used private encryption information and the currently recorded target software encryption information are recorded. Based on this, verifying the read target software encryption information and private encryption information may include checking whether the currently read target software encryption information is the target software encryption information recorded in step 203 for encrypting the related data, and checking whether the currently read private encryption information is the private encryption information recorded in step 203 for encrypting the related data. If so, it is determined that the verification has passed; otherwise, it is determined that the verification has failed.

[0046] In this embodiment, if the related data includes at least one of the following: software configuration information when the target software is executed, result information generated after the target software is executed, software configuration information of the customization function software, and result information generated after the customization function software is executed, then in step 203, the related data is encrypted using private encryption information, but it is understood that this implicitly includes superimposed encryption of the related data. Accordingly, if the related data needs to be loaded, as described above, the encrypted related data must be decrypted according to the decryption method corresponding to superimposed encryption.

[0047] In this embodiment, if the related data includes at least customized functional software, step 203 encrypts the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium. The method further includes, upon receiving a trigger to use a function provided by the target software, providing said function in accordance with decryption corresponding to distributed encryption. Specifically, this is shown in Figure 5b.

[0048] As shown in Figure 5b, when a trigger is received to use a customization function provided by a newly developed customization function software based on the target software, the private encrypted information corresponding to the encrypted customization function software is read from the encryption medium, the read private encrypted information is verified, and if the verification is successful, the customization function software is decrypted and the use of the customization function provided by the customization function software is permitted; otherwise, the use of the customization function provided by the customization function software is prohibited. When a trigger is received to use the original function provided by the target software, the target software encrypted information is read from the encryption medium, the read target software encrypted information is verified, and if the verification is successful, the target software is decrypted and the use of the original function provided by the target software is permitted; otherwise, the use of the original function provided by the target software is prohibited. Here, verifying the read private encrypted information and verifying the read target software encrypted information is as described above and will not be explained here.

[0049] In this embodiment, even if private encrypted information is recorded in the user's private area, the private encrypted information recorded in the user's private area is not necessarily always unchanged; it may be updated or deleted.

[0050] In this embodiment, an update message for updating private encryption information in the user private area may be received from an external source via an external interface corresponding to the newly configured target software, or via a software interaction interface corresponding to the target software, and the private encryption information recorded in the user private area may be updated based on the update message. For example, the private encryption information recorded in the user private area may be updated with the private encryption information attached to the update message. This realizes the updating of private encryption information in the user private area.

[0051] In this embodiment, if a deletion instruction is received via an external interface corresponding to the newly configured target software, or via a software interaction interface corresponding to the target software, the private encrypted information recorded in the user private area may be deleted based on the deletion instruction. This enables the deletion of private encrypted information in the user private area.

[0052] Having described the method according to the embodiment of the present invention above, the apparatus according to the embodiment of the present invention will now be described.

[0053] Figure 6 is a diagram showing the configuration of an encryption device according to an embodiment of the present invention. As shown in Figure 6, the device is A deployment unit used to record private encryption information in a user-private area of ​​a currently deployed encryption medium for encrypting and protecting target software, wherein the encryption medium further records dedicated target software encryption information for encrypting the target software; If an encryption trigger is detected that encrypts related data associated with the target software, the system may include a processing unit used to encrypt the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium. The encryption of the related data is independent of the encryption of the target software, and the related data includes at least one of the following: software configuration information of the target software, result information generated after the target software is executed, customization function software, software configuration information of the customization function software, and result information generated after the customization function software is executed, and the customization function software is implemented by adding a program to the target software to implement the customization function.

[0054] If, optionally, private encryption information is recorded in the user-private area of ​​the currently deployed encryption medium for encrypting and protecting the target software, the deployment unit shall The software receives the private encrypted information written to the user's private area from an external source via an external interface corresponding to the target software, or It is used to receive the private encrypted information to be written to the user private area, which is input from an external source via a software interaction interface corresponding to the target software, and to write the private encrypted information to the user private area.

[0055] If the related data optionally includes at least one of the following: software configuration information when the target software is executed, result information generated after the target software is executed, software configuration information of the customization function software, and result information generated after the customization function software is executed, the processing unit encrypts the related data based on the private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, and then further, When a load trigger is received to load the encrypted related data into the target software and execute it, the target software encryption information and private encryption information corresponding to the encrypted related data are read from the encryption medium, the read target software encryption information and private encryption information are verified, and if the verification is successful, the encrypted related data is decrypted, loaded into the target software and executed; otherwise, it is used to display a load failure.

[0056] If the related data includes at least the customization function software, the processing unit encrypts the related data based on the private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, and then further, When a trigger is received to use the customization function provided by the customization function software, the private encrypted information corresponding to the encrypted customization function software is read from the encryption medium, the read private encrypted information is verified, and if the verification is successful, the customization function software is decrypted and the use of the customization function provided by the customization function software is permitted; otherwise, the use of the customization function provided by the customization function software is prohibited. When a trigger is received to use the intended function provided by the target software, the system reads the target software encryption information from the encryption medium, verifies the target software encryption information, and if the verification is successful, decrypts the target software and permits the use of the intended function provided by the target software; otherwise, it is used to prohibit the use of the intended function provided by the target software.

[0057] Optionally, the deployment unit records private encrypted information in the user's private area, and then further... It receives an update message from an external source, via an external interface corresponding to the target software, or via a software interaction interface corresponding to the target software, for updating the private encrypted information in the user private area, and is used to update the private encrypted information recorded in the user private area based on the update message, or It is used to receive a deletion instruction via an external interface corresponding to the target software, or via a software interaction interface corresponding to the target software, and to delete private encrypted information recorded in the user private area based on the deletion instruction.

[0058] Embodiments of the present invention further provide the hardware structure of the device shown in Figure 6. Figure 7 is a configuration diagram of an electronic device according to an embodiment of the present invention. As shown in Figure 7, the hardware structure includes a processor and a machine-readable storage medium, the machine-readable storage medium storing machine-executable instructions that can be executed by the processor, and the processor is used to execute the machine-executable instructions and perform the method disclosed in the above embodiment of the present invention.

[0059] Based on a similar concept to the above-described method, embodiments of the present invention further provide a machine-readable storage medium in which several computer instructions are stored, and when the computer instructions are executed by a processor, the method disclosed in the above-described embodiments of the present invention is performed.

[0060] Exemplary, the machine-readable storage medium may be any electronic, magnetic, optical, or other physical storage device that contains or stores information such as executable instructions and data. For example, the machine-readable storage medium may be RAM (Random Access Memory), volatile memory, non-volatile memory, flash memory, storage drives (e.g., hard disk drives), solid-state drives, any type of storage disk (e.g., optical discs, DVDs, etc.), or similar storage media, or a combination thereof.

[0061] The systems, devices, modules, or units described in the above embodiments may be specifically implemented by a computer or by a product having some function. A typical implementing device is a computer, and the specific form of the computer may be a personal computer, laptop computer, mobile phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email sending and receiving device, game console, tablet computer, wearable device, or any combination of these devices.

[0062] For the sake of clarity, the above-mentioned device will be described by dividing it into various units according to their functions. Naturally, when implementing the present invention, the functions of each unit can be realized with the same or multiple software and / or hardware.

[0063] Those skilled in the art will understand that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of hardware embodiments, software embodiments, or embodiments combining software and hardware. Furthermore, embodiments of the present invention can take the form of computer program products implemented on one or more computer-usable storage media (including, but not limited to, magnetic disk memory, CD-ROM, optical memory, etc.) containing computer-usable program code.

[0064] The present invention will be described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and combinations of flows and / or blocks in the flowcharts and / or block diagrams, can be realized by computer program instructions. These computer program instructions may be provided to a processor of a general-purpose computer, a dedicated computer, an embedded processor, or other programmable data processing device to generate a machine, and the instructions executed by the processor of the computer or other programmable data processing device generate a device for realizing the functions specified in one or more flows and / or blocks in one or more blocks of the flowchart and / or block diagram.

[0065] Furthermore, these computer program instructions may be stored in computer-readable memory that can instruct a computer or other programmable data processing device to operate in a specified manner, and the instructions stored in said computer-readable memory generate a product including an instruction unit, which implements the functions specified in one or more flows of a flowchart and / or one or more blocks of a block diagram.

[0066] These computer program instructions may be loaded into a computer or other programmable data processing device, and a series of operational steps may be executed on the computer or other programmable device to generate processing to be implemented on the computer, thereby providing steps for the instructions executed on the computer or other programmable device to implement a function specified in one or more flows of a flowchart and / or one or more blocks of a block diagram.

[0067] The foregoing are merely embodiments of the present invention and do not limit it. The present invention can be modified and adapted in various ways by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of the claims of the present invention.

Claims

1. An encryption method applicable to electronic equipment, A step of recording private encryption information in a user-private area of ​​a currently deployed encryption medium for encrypting and protecting the target software, wherein the encryption medium further records dedicated target software encryption information for encrypting the target software; The step includes encrypting the relevant data based on private encryption information corresponding to the relevant data recorded in the user private area of ​​the encryption medium, The encryption of the related data is independent of the encryption of the target software, and the related data includes at least one of the following: software configuration information of the target software, result information generated after the target software is executed, customization function software, software configuration information of the customization function software, and result information generated after the customization function software is executed, and the customization function software is implemented by adding a program to the target software to implement the customization function. An encryption method characterized by the following.

2. The step of recording private encryption information in the user-private area of ​​the currently deployed encryption medium for encrypting and protecting the target software is: The steps include receiving the private encrypted information written to the user private area from an external source via an external interface corresponding to the target software, or The process includes the step of receiving the private encrypted information to be written to the user private area, which is input from an external source via a software interaction interface corresponding to the target software, and writing the private encrypted information to the user private area. The encryption method according to feature 1.

3. The steps include: verifying the encryption information of the target software in response to executing the target software, and executing the target software if the verification is successful; The further step includes verifying private encrypted information corresponding to the aforementioned data in response to loading the aforementioned related data, and loading the aforementioned related data if the verification is successful. The encryption method according to feature 1.

4. If the related data includes at least one of the following: software configuration information when the target software is executed, result information generated after the target software is executed, software configuration information of the customization function software, and result information generated after the customization function software is executed, the encryption method further encrypts the related data based on the private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, and then the encryption method further... Upon receiving a load trigger that loads the encrypted associated data into the target software and executes it, the system includes the steps of: reading the target software encryption information and private encryption information corresponding to the encrypted associated data from the encryption medium; verifying the read target software encryption information and private encryption information; and, if both verifications are successful, decrypting the encrypted associated data and loading and executing it into the target software. The encryption method according to feature 1.

5. If the related data includes at least the customization function software, the encryption method further encrypts the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, and then the encryption method further Upon receiving a trigger to use a customization function provided by the customization function software, the following steps are taken: reading private encrypted information corresponding to the encrypted customization function software from the encryption medium; verifying the read private encrypted information; if the verification is successful, decrypting the customization function software and permitting the use of the customization function provided by the customization function software; if the verification fails, prohibiting the use of the customization function provided by the customization function software. The encryption method according to feature 1.

6. The aforementioned encryption method further, The following steps are included: upon receiving a trigger to use the intended function provided by the target software, the target software encryption information is read from the encryption medium, the target software encryption information is verified, and if the verification is successful, the target software is decrypted and permission is granted to use the intended function provided by the target software; if the verification fails, the use of the intended function provided by the target software is prohibited. The encryption method according to feature 5.

7. After recording private encryption information in the user-private area of ​​the currently deployed encryption medium for encrypting and protecting the target software, the encryption method further: The steps include receiving an update message, input from an external source, for updating private encryption information in the user private area, via an external interface corresponding to the target software, or via a software interaction interface corresponding to the target software; The steps include updating the private encryption information recorded in the user private area based on the update message, Or, The steps include receiving a delete instruction via an external interface corresponding to the target software, or via a software interaction interface corresponding to the target software, The process includes the step of deleting the private encrypted information recorded in the user private area based on the deletion instruction, The encryption method according to feature 1.

8. After encrypting the related data based on the private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, the encryption method further: Upon receiving a load trigger that loads the encrypted associated data into the target software and executes it, the system includes the steps of: reading the target software encryption information and private encryption information corresponding to the encrypted associated data from the encryption medium; verifying the read target software encryption information and private encryption information; and, if both verifications are successful, decrypting the encrypted associated data and loading and executing it into the target software. The encryption method according to feature 1.

9. If the related data includes at least one of the following: customization function software, software configuration information of the customization function software, and result information generated after the customization function software is executed, the encryption method further encrypts the related data based on private encryption information corresponding to the related data recorded in the user private area of ​​the encryption medium, and then the encryption method further... Upon receiving a load trigger that loads the encrypted associated data into the target software and executes it, the software includes the steps of: reading private encryption information corresponding to the encrypted associated data from the encryption medium; verifying the private encryption information; and, if the verification is successful, decrypting the encrypted associated data and loading and executing it into the target software. The encryption method according to feature 1.

10. Multiple pieces of private encrypted information are recorded in the user's private area, and each piece of private encrypted information is configured with the type of the corresponding related data. If an encryption trigger is detected that encrypts related data associated with the aforementioned target software, the encryption method further: The steps include identifying the type of the aforementioned related data, The steps include determining private encrypted information corresponding to the related data in the user private area based on the type of related data, The process includes the step of encrypting the associated data based on private encryption information corresponding to the associated data recorded in the user private area. The encryption method according to feature 1.

11. A deployment unit used to record private encryption information in a user-private area of ​​a currently deployed encryption medium for encrypting and protecting target software, wherein the encryption medium further records dedicated target software encryption information for encrypting the target software; The system includes a processing unit used to encrypt the associated data based on private encryption information corresponding to the associated data recorded in the user private area of ​​the encryption medium, The encryption of the related data is independent of the encryption of the target software, and the related data includes at least one of the following: software configuration information of the target software, result information generated after the target software is executed, customization function software, software configuration information of the customization function software, and result information generated after the customization function software is executed, and the customization function software is implemented by adding a program to the target software to implement the customization function. An encryption device characterized by the following features.

12. An electronic device including a processor and a machine-readable storage medium, The machine-readable storage medium stores machine-executable instructions that can be executed by the processor. The processor is used to execute the machine-executable instructions and perform the steps of the method according to any one of claims 1 to 10. An electronic device characterized by the following features.

13. A non-volatile storage medium storing computer instructions, wherein when a computer instruction is invoked by a processor, the processor performs a step according to any one of claims 1 to 10. A non-volatile memory medium characterized by the following features.

Images