WO2019033374A1

WO2019033374A1 - Backup recovery method and system

Info

Publication number: WO2019033374A1
Application number: PCT/CN2017/097943
Authority: WO
Inventors: 叶胡星
Original assignee: 深圳市优品壹电子有限公司
Priority date: 2017-08-17
Filing date: 2017-08-17
Publication date: 2019-02-21

Abstract

A backup recovery method and system, the method comprising: a terminal device (201) sending a backup recovery request to a server (202), the backup recovery request carrying the identity identifier of the terminal device (201), and the identity identifier having been encrypted using a first preset public key (101); the server (202) receiving the backup recovery request sent by the terminal device (201), decrypting the backup recovery request using a first preset private key, and, when the decryption succeeds, obtaining the identity identifier and searching for backup information corresponding to the identity identifier (102), and sending the backup information to the terminal device (201) after encrypting the backup information using a second preset public key (103); the terminal device (201) decrypting the backup information using a second preset private key, and acquiring the backup information when the decryption succeeds (104). Said method can improve the security of information acquisition by performing bidirectional encryption of the terminal device (201) and the server (202).

Description

Backup recovery method and system

Technical field

The present invention relates to the field of communications technologies, and in particular, to a backup recovery method and system.

Background technique

Currently, in order to avoid data loss, the terminal generally backs up some important information on the server. When the terminal obtains its backup information from the server, the server only needs to send its own identification information to obtain the backup information from the server, and the server directly sends the backup information corresponding to the identifier to the terminal. However, the backup information of the terminal in this mode is often easily stolen, such as stealing directly in the process of sending backup information to the terminal by the server, or stealing the identifier of the terminal, and the fake terminal steals the backup information from the server. Poor sex.

Summary of the invention

The embodiment of the invention provides a backup and recovery method and system, which can improve the security of information acquisition through two-way encryption of the terminal device and the server.

In a first aspect, an embodiment of the present invention provides a backup and recovery method, where the method includes:

The terminal device sends a backup recovery request to the server, where the backup recovery request carries the identity identifier of the terminal device, and the identity identifier has been encrypted by using a preset first public key;

The terminal device receives the backup information sent by the server, where the backup information is that the server decrypts the backup recovery request by using a preset first private key, and acquires the identity identifier when the decryption succeeds. Corresponding backup information, and encrypting the backup information by using a preset second public key, and sending the backup information to the terminal device;

The terminal device decrypts the backup information by using a preset second private key, and acquires the backup information when the decryption succeeds;

The first public key and the first private key are pre-generated first key pairs, and the second public key and the second private key are pre-generated second key pairs, and The first key pair and the second key pair are different in key.

Optionally, the method further includes:

The terminal device sends an information backup request to the server, where the information backup request includes backup information of the terminal device and an identity identifier of the terminal device, so that the server uses the identity identifier and the backup information. Perform associative storage.

Optionally, the terminal device sends an information backup request to the server, including:

The terminal device encrypts the backup information by using a preset encryption manner, and sends an information backup request including the encrypted backup information and the identity identifier of the terminal device to the server;

The terminal device decrypts the backup information by using a preset second private key, and obtains the backup information when the decryption succeeds, including:

The terminal device decrypts the backup information by using a preset second private key, and decrypts the backup information by using a preset decryption manner to obtain the backup information;

The preset encryption mode corresponds to the preset decryption mode.

Optionally, the preset encryption manner includes at least one of a password encryption method, a fingerprint string encryption method, a voiceprint encryption method, and an iris encryption method;

The preset decryption method includes at least one of a password decryption method, a fingerprint string decryption method, a voiceprint decryption method, and an iris decryption method.

In a second aspect, the embodiment of the present invention further provides a backup and recovery system, where the system includes: a terminal device and a server;

The terminal device is configured to send a backup and restore request to the server, where the backup and recovery request carries an identity identifier of the terminal device, and the identity identifier is encrypted by using a preset first public key;

The server is configured to receive the backup recovery request sent by the terminal device, and decrypt the backup recovery request by using a preset first private key, and obtain the identity identifier and search when the decryption succeeds And generating the backup information corresponding to the identity identifier, and encrypting the backup information by using a preset second public key, and sending the backup information to the terminal device;

The terminal device is further configured to decrypt the backup information by using a preset second private key, and obtain the backup information when the decryption succeeds;

Optionally, the terminal device is further configured to send an information backup request to the server, where the information backup request includes backup information of the terminal device and an identity identifier of the terminal device;

The server is further configured to receive the information backup request sent by the terminal device, and store the identity identifier and the backup information in association.

Optionally, the terminal device is specifically configured to encrypt the backup information by using a preset encryption manner, and send an information backup request including the encrypted backup information and the identity identifier of the terminal device to the server.

Optionally, the terminal device is configured to decrypt the backup information by using a preset second private key, and decrypt the backup information by using a preset decryption manner to obtain the The backup information, wherein the preset encryption mode corresponds to the preset decryption mode.

Optionally, the server is configured to determine, according to the identity identifier, whether the identity of the terminal device is legal, and associate the identity identifier with the backup information when determining that the identity of the terminal device is legal. storage.

In a third aspect, an embodiment of the present invention provides a terminal device, where the terminal device includes: a communication unit and a processing unit, and the terminal device performs some or all of the steps of the method of the first aspect by using the foregoing unit.

In a fourth aspect, an embodiment of the present invention provides a server, where the server includes: a communication unit and a processing unit, and the server performs some or all of the steps performed by the server of the second aspect by using the foregoing unit.

In a fifth aspect, an embodiment of the present invention provides another terminal device, including a processor, a transceiver, and a memory, where the processor, the transceiver, and the memory are connected to each other, wherein the memory is used to store the supporting terminal device to perform the foregoing. An application code of a method, the processor being configured to perform the method of the first aspect above.

In a sixth aspect, an embodiment of the present invention provides another server, including a processor, a transceiver, and a memory, where the processor, the transceiver, and the memory are connected to each other, wherein the memory is used for storing The application code executing the above method by the server, the processor being configured to perform some or all of the steps of the server of the second aspect above.

In a seventh aspect, an embodiment of the present invention provides a computer readable storage medium, where the computer storage medium stores a computer program, where the computer program includes program instructions, and the program instructions, when executed by a processor, cause the processing The method of the first aspect described above is performed.

In an eighth aspect, an embodiment of the present invention provides a computer readable storage medium, where the computer storage medium stores a computer program, where the computer program includes program instructions, and the program instructions, when executed by a processor, cause the processing The method of executing the server of the second aspect above is performed.

In a ninth aspect, the present application also provides a computer program product comprising instructions which, when run on a computer, cause the computer to perform the method described in the above aspects.

In a tenth aspect, the present application further provides a chip system including a processor for supporting a terminal device or a server to implement the functions involved in the above aspects. In a possible design, the chip system further comprises a memory for storing program instructions and data necessary for the terminal device or the server. The chip system can be composed of chips, and can also include chips and other discrete devices.

In the embodiment of the present invention, the terminal device may send a backup recovery request carrying the identity identifier encrypted by using the preset first public key to the server, so that the server can decrypt the backup recovery request by using the preset first private key. And when the decryption succeeds, the identifier is obtained, and the backup information corresponding to the identifier is found, and the backup information is encrypted by using the preset second public key, and then sent to the terminal device, so that the terminal device can pass the The backup information is decrypted by using the preset second private key, and when the decryption is successful, the backup information is obtained, thereby improving the security of information acquisition through two-way encryption of the terminal device and the server.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present invention. For the ordinary technicians, other drawings can be obtained based on these drawings without any creative work.

1 is a schematic diagram of interaction of a backup and recovery method according to an embodiment of the present invention;

2 is a schematic structural diagram of a backup and recovery system according to an embodiment of the present invention;

3 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a terminal device according to another embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The use of the terms "comprising", "comprising", "","," The presence or addition of a plurality of other features, integers, steps, operations, elements, components, and/or collections thereof.

It is also to be understood that the terminology of the present invention is to be construed as a The singular forms "", ",",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

It is further understood that the term "and/or" used in the description of the invention and the appended claims means any combination and all possible combinations of one or more of the associated listed items, .

As used in this specification and the appended claims, the term "if" can be interpreted as "when" or "on" or "in response to determining" or "in response to detecting" depending on the context. . Similarly, the phrase "if determined" or "if detected [condition or event described]" may be interpreted in context to mean "once determined" or "in response to determining" or "once detected [condition or event described] ] or "in response to detecting [conditions or events described]".

The embodiment of the invention discloses a backup and recovery method, a system and a terminal device, which can improve the security of information acquisition through two-way encryption of the terminal device and the server. The details are explained below.

FIG. 1 is a schematic diagram of interaction of a backup recovery method according to an embodiment of the present invention. Specific As shown in FIG. 1, the backup recovery method of the embodiment of the present invention may include the following steps:

The terminal device sends a backup recovery request to the server, where the backup recovery request carries the identity identifier of the terminal device, and the identity identifier has been encrypted by using a preset first public key.

Specifically, the terminal device stores a pre-configured first public key and a second private key, and the server stores a pre-configured first private key and a second public key. The first public key and the first private key are pre-generated first key pairs, the second public key and the second private key are pre-generated second key pairs, and the first key The key corresponding to the second key pair is different. That is to say, the first public key and the first private key are mutually encrypted and decrypted keys, and the second public key and the second private key are mutually encrypted and decrypted keys. Thereby two-way encryption and decryption of the terminal device and the server are realized.

102. The server decrypts the backup recovery request by using a preset first private key, and obtains the identity identifier when the decryption succeeds, and searches for backup information corresponding to the identity identifier.

Optionally, the server may store backup information uploaded by each terminal device, and each backup information may be stored in association with the identity identifier of the terminal device. Therefore, when receiving the backup recovery request carrying the identity identifier, the server can obtain the identity of the terminal device by performing a program for the backup recovery request, and then search for the associated backup information according to the identity identifier.

103. The server encrypts the backup information by using a preset second public key, and sends the backup information to the terminal device.

104. The terminal device decrypts the backup information by using a preset second private key, and obtains the backup information when the decryption succeeds.

Specifically, after the server finds the backup information, the server may encrypt the backup information by using the second public key, and then send the encrypted backup information to the terminal device instead of directly sending the backup information to the terminal device. Therefore, when receiving the backup information returned by the server for the backup recovery request, the terminal device may decrypt the encrypted backup information by using the second private key to obtain the backup information. This effectively prevents the backup information from being stolen by illegal molecules and improves information security.

Optionally, the terminal device may further send an information backup request to the server, where the information backup request includes backup information of the terminal device and an identity identifier of the terminal device. The server may receive the information backup request sent by the terminal device, and store the identity identifier and the backup information in association. That is, each terminal device can perform information backup on the server in advance, so that the terminal device can recover the backed up information from the server in time when the information is lost.

Optionally, when the terminal device sends an information backup request to the server, the backup information may be encrypted by using a preset encryption manner, and the information including the encrypted backup information and the identity identifier of the terminal device is sent to the server. Backup request. Further, the terminal device decrypts the backup information by using a preset second private key, and when the decryption is successful, the terminal information may be specifically used to adopt a preset second private key pair. The backup information is decrypted, and when the decryption is successful, the backup information is decrypted by using a preset decryption manner to obtain the backup information. That is to say, when uploading the backup information, the terminal device can encrypt the backup information, that is, store the encrypted backup information at the server. Therefore, when the terminal device performs backup and recovery, and receives the encrypted backup information returned by the server, the backup information can be successfully decrypted by using the second private key and the preset decryption manner to obtain the backup information. This further enhances safety performance.

Further, the preset encryption method may include at least one of a password encryption method, a fingerprint string encryption method, a voiceprint encryption method, and an iris encryption method. Accordingly, the preset decryption method may include a password decryption method and a fingerprint. At least one of a string decryption method, a voiceprint decryption method, and an iris decryption method. The preset encryption mode corresponds to the preset decryption mode. For example, when the preset encryption mode is the password encryption mode, the preset decryption mode is also a password decryption mode, and the password encryption mode is the same as the password corresponding to the password decryption mode; for example, the preset encryption mode is fingerprint string encryption. In the mode, the preset decryption mode is also a fingerprint string decryption mode, and the fingerprint string encryption mode is the same as the corresponding fingerprint string of the fingerprint string decryption mode, including the same fingerprint and the same fingerprint input order.

Further optionally, the server may further determine, according to the identity identifier, whether the identity of the terminal device is legal, and associate the identity identifier with the backup information when determining that the identity of the terminal device is legal. Thereby improving safety performance. For example, the server may store the identifier list of the legal user. If the identity of the terminal device is in the identifier list, the identity of the terminal device may be determined. For the manner of determining whether the identity of the terminal device is legal, the embodiment of the present invention Not limited.

Further optionally, the terminal device may further receive the to-be-verified information input for the user operation, determine whether the to-be-verified information matches the preset verification information, and when the to-be-verified information matches the verification information, , send a backup recovery request to the server. That is to say, if it is determined that the terminal device needs to send a backup recovery request, the user identity may be verified, and when the verification is successful, the backup recovery request is sent to improve the reliability of information recovery.

The information to be verified may include password information, fingerprint string information, voiceprint information, and iris information. At least one of them.

Optionally, the information to be verified may include fingerprint string information, where the fingerprint string information includes at least one fingerprint and an input sequence of the fingerprint. Further, the terminal device may determine whether the fingerprint included in the fingerprint string information matches the fingerprint in the preset verification information, and whether the input sequence of the fingerprint included in the fingerprint string information is in the verification information. The input order of the fingerprints is the same, and when the fingerprints match and the input order of the fingerprints is the same, it is determined that the information to be verified matches the verification information.

Optionally, the information to be verified may include voiceprint information. Further, the terminal device may determine whether the voiceprint information included in the to-be-verified information matches the voiceprint information in the preset verification information, and determine the to-be-verified information and the verification information when matching Match.

In the embodiment of the present invention, the terminal device may send a backup recovery request carrying the identity identifier encrypted by using the preset first public key to the server, so that the server can restore the backup request by using the preset first private key. The decryption is performed, and when the decryption is successful, the identity identifier is obtained, and the backup information corresponding to the identity identifier is found, and the backup information is encrypted by using the preset second public key, and then sent to the terminal device, so that the terminal device is The backup information can be decrypted by using the preset second private key, and when the decryption is successful, the backup information is obtained, thereby improving the security of information acquisition through two-way encryption of the terminal device and the server.

Referring to FIG. 2, it is a schematic structural diagram of a backup and recovery system according to an embodiment of the present invention. Specifically, as shown in FIG. 2, the backup and recovery system of the embodiment of the present invention may include: a terminal device 201 and a server 202;

The terminal device 201 is configured to send a backup recovery request to the server 202, where the backup recovery request carries an identity identifier of the terminal device 201, and the identity identifier is encrypted by using a preset first public key. ;

The server 202 is configured to receive the backup recovery request sent by the terminal device 201, and decrypt the backup recovery request by using a preset first private key, and obtain the identity identifier when the decryption is successful. And searching for the backup information corresponding to the identity identifier, and encrypting the backup information by using a preset second public key, and sending the backup information to the terminal device 201;

The terminal device 201 is further configured to decrypt the backup information by using a preset second private key, and obtain the backup information when the decryption succeeds;

Optionally, the terminal device 201 is further configured to send an information backup request to the server 202, where the information backup request includes backup information of the terminal device 201 and an identity identifier of the terminal device 201;

The server 202 is further configured to receive the information backup request sent by the terminal device 201, and store the identity identifier and the backup information in association.

Optionally, the terminal device 201 may be specifically configured to encrypt the backup information by using a preset encryption manner, and send the encrypted backup information and the identity identifier of the terminal device 201 to the server 202. Information backup request.

Optionally, the terminal device 201 is specifically configured to decrypt the backup information by using a preset second private key, and decrypt the backup information by using a preset decryption manner when the decryption is successful, Obtaining the backup information, where the preset encryption manner corresponds to the preset decryption manner.

Optionally, the preset encryption mode includes at least one of a password encryption mode, a fingerprint string encryption mode, a voiceprint encryption mode, and an iris encryption mode; and correspondingly, the preset decryption mode includes a password decryption mode and a fingerprint string. At least one of a decryption method, a voiceprint decryption method, and an iris decryption method.

Optionally, the server 202 is specifically configured to determine, according to the identity identifier, whether the identity of the terminal device 201 is legal, and when determining that the identity of the terminal device 201 is legal, the identity identifier and the Backup information is stored in association.

Specifically, the terminal device 201 can refer to the related description of the terminal device in the embodiment shown in FIG. 1 , and the server 202 can refer to the related description of the server in the embodiment shown in FIG. 1 , and details are not described herein.

FIG. 3 is a schematic structural diagram of a terminal device according to an embodiment of the present invention. Specifically, as shown in FIG. 3, the terminal device 300 of the embodiment of the present invention may include a communication unit 301 and a processing unit 302. Wherein, these units can perform corresponding functions of the terminal device in the above method example, for example,

The communication unit 301 is configured to send a backup recovery request to the server, where the backup recovery request carries the identity identifier of the terminal device, and the identity identifier has been encrypted by using a preset first public key;

The communication unit 301 is further configured to receive backup information sent by the server, where the backup information is that the server decrypts the backup recovery request by using a preset first private key, and when the decryption succeeds, acquiring The backup information corresponding to the identity identifier, and the backup information is encrypted by using a preset second public key, and then sent to the terminal device;

The processing unit 302 is configured to decrypt the backup information by using a preset second private key, and obtain the backup information when the decryption succeeds;

Optionally, the communication unit 301 is further configured to send an information backup request to the server, where the information backup request includes backup information of the terminal device and an identity identifier of the terminal device, so that the server The identity identifier and the backup information are stored in association.

Optionally, when the communication unit 301 sends an information backup request to the server, the communication unit 301 may be specifically configured to:

And encrypting the backup information by using a preset encryption manner, and sending an information backup request including the encrypted backup information and the identity identifier of the terminal device to the server;

The processing unit 302 decrypts the backup information by using a preset second private key, and when the decryption is successful, the backup information may be specifically used for:

Decrypting the backup information by using a preset second private key, and decrypting the backup information by using a preset decryption manner to obtain the backup information;

The preset encryption mode corresponds to the preset decryption mode.

Further, the preset encryption method may include at least one of a password encryption method, a fingerprint string encryption method, a voiceprint encryption method, and an iris encryption method. Accordingly, the preset decryption method may include a password decryption method. At least one of a fingerprint decryption method, a voiceprint decryption method, and an iris decryption method.

Specifically, the terminal device may implement some or all of the steps in the backup recovery method in the foregoing embodiment shown in FIG. 1 by using the foregoing unit. It should be understood that the embodiments of the present invention are device embodiments corresponding to the method embodiments, and the description of the method embodiments is also applicable to the embodiments of the present invention.

FIG. 4 is a schematic structural diagram of a terminal device according to another embodiment of the present invention. Specifically, as shown in FIG. 4, the terminal device 400 of the embodiment of the present invention may include: one or more processors 401; and optionally include one or more transceivers 402, a user interface 403, a memory 404, and the like. Wait. The processor 401, the transceiver 402, the user interface 403, and the memory 404 may be connected by a bus 405, or may be connected by other means. Memory 404 can be used to store instructions, and processor 401 can be used to execute instructions stored by memory 404.

It should be understood that, in the embodiment of the present invention, the processor 401 may be a central processing unit (CPU), and the processor may also be another general-purpose processor, a digital signal processor (DSP). , Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, etc. The general purpose processor may be a microprocessor or the processor or any conventional processor or the like.

The transceiver 402 can be used to receive and/or transmit information.

The user interface 403 may include a touchpad, a fingerprint sensor (for collecting fingerprint information of the user), a microphone, etc., and may also include a display (LCD or the like), a speaker, and the like.

The memory 404 can include read only memory and random access memory and provides instructions and data to the processor 401. A portion of memory 404 may also include non-volatile random access memory.

The processor 401 is specifically configured to: send, by using the transceiver 402, a backup and recovery request to the server, where the backup and recovery request carries the identity identifier of the terminal device, and the identity identifier has adopted a preset a public key encryption; receiving, by the transceiver 402, backup information sent by the server, where the backup information is that the server decrypts the backup recovery request by using a preset first private key, and when the decryption is successful Obtaining the backup information corresponding to the identity identifier, and encrypting the backup information by using a preset second public key, and sending the backup information to the terminal device; using the preset second private key to the backup information Decrypting, and when the decryption is successful, acquiring the backup information; wherein the first public key and the first private key are pre-generated first key pairs, the second public key and the first The second private key is a pre-generated second key pair, and the first key pair and the second key pair correspond to different keys.

Optionally, the processor 401 is further configured to perform the following steps:

Sending an information backup request to the server through the transceiver 402, the information backup request And including the backup information of the terminal device and the identity identifier of the terminal device, so that the server associates the identity identifier and the backup information in association.

And encrypting the backup information by using a preset encryption manner, and sending, by the transceiver 402, an information backup request including the encrypted backup information and the identity identifier of the terminal device to the server;

The processor 401 decrypts the backup information by using a preset second private key, and when the decryption is successful, the backup information may be specifically used for:

The preset encryption mode corresponds to the preset decryption mode.

In a specific implementation, the processor 401, the transceiver 402, the user interface 03, and the memory 404 described in the embodiment of the present invention may implement the implementation described in the backup recovery method in the embodiment shown in FIG. 1, and may also perform the present invention. The implementation manner of the terminal device described in the embodiment is not described herein again.

In another embodiment of the present invention, there is provided a computer readable storage medium storing a computer program, the computer program being executed by a processor to implement a backup recovery method of the embodiment shown in FIG. .

The computer readable storage medium may be an internal storage unit of the terminal device described in any of the foregoing embodiments, such as a hard disk or a memory of the terminal device. The computer readable storage medium may also be an external storage device of the terminal device, such as a plug-in hard disk equipped on the terminal device, a smart memory card (SMC), and a secure digital (Secure Digital, SD) ) cards, flash cards, etc. Further, the computer readable storage medium may also include both an internal storage unit of the terminal device and an external storage device. The computer readable storage medium is for storing the computer program and other programs and data required by the terminal device. The computer readable storage medium can also be used to temporarily store data that has been output or is about to be output.

One of ordinary skill in the art will recognize the various aspects described in connection with the embodiments disclosed herein. The unit and algorithm steps of the example can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the examples have been generally described in terms of functions in the above description. Composition and steps. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

A person skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working process of the system, the terminal device and the server described above can be referred to the corresponding process in the foregoing method embodiments, and details are not described herein again.

In the several embodiments provided by the present application, it should be understood that the disclosed system, terminal device, and server and method may be implemented in other manners. For example, the division of the unit in the embodiment of the present invention is schematic, and is only a logical function division, and the actual implementation may have another division manner. Each functional unit in the embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated in one unit, or some features may be ignored or not executed. . The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, or an electrical, mechanical or other form of connection.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the embodiments of the present invention.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention contributes in essence or to the prior art, or the entire technical solution The portion or portion may be embodied in the form of a software product stored in a storage medium, including instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform the various aspects of the present invention. All or part of the steps of the method described in the examples. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any equivalent person can be easily conceived within the technical scope of the present invention by any person skilled in the art. Modifications or substitutions are intended to be included within the scope of the invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

A backup recovery method, comprising:

The terminal device sends a backup recovery request to the server, where the backup recovery request carries the identity identifier of the terminal device, and the identity identifier has been encrypted by using a preset first public key;

The terminal device receives the backup information sent by the server, where the backup information is that the server decrypts the backup recovery request by using a preset first private key, and acquires the identity identifier when the decryption succeeds. Corresponding backup information, and encrypting the backup information by using a preset second public key, and sending the backup information to the terminal device;

The terminal device decrypts the backup information by using a preset second private key, and acquires the backup information when the decryption succeeds;

The first public key and the first private key are pre-generated first key pairs, and the second public key and the second private key are pre-generated second key pairs, and The first key pair and the second key pair are different in key.
The method of claim 1 further comprising:

The terminal device sends an information backup request to the server, where the information backup request includes backup information of the terminal device and an identity identifier of the terminal device, so that the server uses the identity identifier and the backup information. Perform associative storage.
The method according to claim 2, wherein the terminal device sends an information backup request to the server, including:

The terminal device encrypts the backup information by using a preset encryption manner, and sends an information backup request including the encrypted backup information and the identity identifier of the terminal device to the server;

The terminal device decrypts the backup information by using a preset second private key, and obtains the backup information when the decryption succeeds, including:

The terminal device decrypts the backup information by using a preset second private key, and decrypts the backup information by using a preset decryption manner to obtain the backup information;

The preset encryption mode corresponds to the preset decryption mode.
The method of claim 3 wherein:

The preset encryption method includes at least one of a password encryption method, a fingerprint string encryption method, a voiceprint encryption method, and an iris encryption method;

The preset decryption method includes at least one of a password decryption method, a fingerprint string decryption method, a voiceprint decryption method, and an iris decryption method.
A backup and recovery system, comprising: a terminal device and a server; wherein

The terminal device is configured to send a backup and restore request to the server, where the backup and recovery request carries an identity identifier of the terminal device, and the identity identifier is encrypted by using a preset first public key;

The server is configured to receive the backup recovery request sent by the terminal device, and decrypt the backup recovery request by using a preset first private key, and obtain the identity identifier and search when the decryption succeeds And generating the backup information corresponding to the identity identifier, and encrypting the backup information by using a preset second public key, and sending the backup information to the terminal device;

The terminal device is further configured to decrypt the backup information by using a preset second private key, and obtain the backup information when the decryption succeeds;

The first public key and the first private key are pre-generated first key pairs, and the second public key and the second private key are pre-generated second key pairs, and The first key pair and the second key pair are different in key.
The system of claim 5 wherein:

The terminal device is further configured to send an information backup request to the server, where the information backup request includes backup information of the terminal device and an identity identifier of the terminal device;

The server is further configured to receive the information backup request sent by the terminal device, and store the identity identifier and the backup information in association.
The system of claim 6 wherein:

The terminal device is specifically configured to encrypt the backup information by using a preset encryption manner, and send information including the encrypted backup information and the identity identifier of the terminal device to the server. Backup request.
The system of claim 7 wherein:

The terminal device is specifically configured to decrypt the backup information by using a preset second private key, and decrypt the backup information by using a preset decryption manner to obtain the backup information. The preset encryption mode corresponds to the preset decryption mode.
The system of claim 8 wherein:

The preset encryption method includes at least one of a password encryption method, a fingerprint string encryption method, a voiceprint encryption method, and an iris encryption method;

The preset decryption method includes at least one of a password decryption method, a fingerprint string decryption method, a voiceprint decryption method, and an iris decryption method.
A system according to any one of claims 6-9, wherein

The server is configured to determine whether the identity of the terminal device is legal according to the identity identifier, and when the identity of the terminal device is determined to be legal, the identity identifier and the backup information are stored in association.