WO2021098150A1

WO2021098150A1 - Receipt data encryption method and apparatus, electronic device, and storage medium

Info

Publication number: WO2021098150A1
Application number: PCT/CN2020/087458
Authority: WO
Inventors: 陈飞; 章伟
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2019-11-21
Filing date: 2020-04-28
Publication date: 2021-05-27
Also published as: CN110943982B; CN110943982A

Abstract

(FIG. 1) The present application relates to the field of data processing. Disclosed are a receipt data encryption method and apparatus, an electronic device, and a storage medium. The method comprises: determining a score corresponding to receipt data on the basis of a first reference factor and a second reference factor; determining fields to be encrypted in the receipt data on the basis of the score corresponding to the receipt data and a pre-stored encrypted field table corresponding to the score; determining a field type corresponding to each field in the fields to be encrypted on the basis of the field type corresponding to each field in the receipt data and the fields to be encrypted; and encrypting each field in the fields to be encrypted in the receipt data according to a key corresponding to the field type of the each field. According to the technical solution of the embodiment of the present invention, the security of encrypted receipt data can be improved.

Description

Method, device, electronic equipment and storage medium for document data encryption

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on November 21, 2019, the application number is 201911150333.1, and the invention title is "Methods, devices, electronic equipment and storage media for document data encryption". The entire content of the application is approved. The reference is incorporated in this application.

Technical field

This application relates to the field of data processing, in particular to a method and related equipment for encrypting document data.

Background technique

With the continuous development of computer and Internet technology, especially the development of electronic data storage technology, compared with the way people use paper files to store in the past, people are now accustomed to making electronic backups to facilitate storage. The inventor realized that although people Encrypting the document data stored electronically, but because the encryption method is too single, it is easy to be stolen and cracked by hackers, especially the document data containing a large amount of private data. If the document data is stolen, It is easy to cause the leakage of private data, so how to encrypt the document data to improve the security of the encrypted document data is a problem that needs to be solved urgently.

Summary of the invention

Based on this, the embodiments of the present application provide a method, device, electronic device, and storage medium for document data encryption to at least solve the technical problem of low security of encrypted document data in the prior art.

According to the first aspect of the embodiments of the present application, a method for encrypting document data is provided, which includes: in response to a document data encryption request sent by a user terminal, extracting document data contained in the encryption request; and determining that the document data is Each field corresponds to the field type and extracts the transfer-in party identification and the transfer-out party identification contained in the document data, the number of items corresponding to the item identification and the item identification, and the evaluation value of a single item; based on the transfer-in party The identification and the transferee identification determine a first reference factor, and a second reference factor is determined based on the article identification, the number of articles corresponding to the article identification, and the evaluation value of a single article; based on the first reference factor and the second reference factor The reference factor is used to determine the score corresponding to the document data; the encrypted field table based on the score corresponding to the document data and the prestored score corresponding to the encrypted field table is used to determine the fields that need to be encrypted in the document data; based on each of the document data The field type corresponding to the field and the field to be encrypted are determined, and the field type corresponding to each field to be encrypted in the field to be encrypted is determined; each field to be encrypted in the field to be encrypted in the document data is based on each The key corresponding to the field type of the field to be encrypted is encrypted.

According to a second aspect of the present application, there is provided an encryption device for document data including: an extraction module for extracting document data contained in the encryption request in response to a document data encryption request sent by a user terminal; and a first determination module , Used to determine the field type corresponding to each field in the document data and extract the transfer-in party identification and the transfer-out party identification contained in the bill data, the item identification and the item identification corresponding to the number of items and the number of individual items Evaluation value; a second determination module, configured to determine the first reference factor based on the transfer-in party identification and the transfer-out party identification, and determine the first reference factor based on the item identification, the number of items corresponding to the item identification, and the evaluation value of a single item Two reference factors; a third determining module, configured to determine the score corresponding to the document data based on the first reference factor and the second reference factor; a fourth determining module, configured to determine the corresponding score based on the document data The score value corresponds to an encrypted field table of the pre-stored score value to determine the field to be encrypted in the document data; the fifth determining module is configured to determine based on the field type corresponding to each field in the document data and the field to be encrypted The field type corresponding to each field to be encrypted in the field to be encrypted; the encryption module is used for corresponding to each field to be encrypted in the field to be encrypted in the document data according to the field type of each field to be encrypted The key is encrypted.

According to a third aspect of the present application, there is provided an encrypted electronic device for document data, including: a memory configured to store executable instructions. The processor is configured to execute executable instructions stored in the memory to execute the method described above.

According to a fourth aspect of the present application, a computer-readable storage medium is provided, which stores computer program instructions that, when executed by a computer, cause the computer to execute the method described above.

In the technical solution provided in the embodiments of the present application, the need is determined based on the document data that needs to be encrypted including the transfer-in party identification, the transfer-out party identification, the item identification, and the number of items corresponding to the item identification and the evaluation value of a single item. The score corresponding to the encrypted document data is determined based on the score corresponding to the document data to be encrypted and the preset score corresponding encrypted field table to determine the field to be encrypted in the document data to be encrypted, and the field corresponding to the encrypted field is determined Field type, encrypt the field to be encrypted according to the key corresponding to the field type corresponding to the field to be encrypted, determine the field to be encrypted according to the score corresponding to the document data to be encrypted, and then determine the field to be encrypted according to the document data to be encrypted Each field to be encrypted in the fields to be encrypted is encrypted according to the key corresponding to the field type of each field to be encrypted, thereby improving the security of the encrypted document data.

Description of the drawings

Fig. 1 shows a flowchart of document data encryption according to an exemplary embodiment of the present disclosure.

Fig. 2 shows a flowchart after step S160 shown in Fig. 1 according to an exemplary embodiment of the present disclosure.

FIG. 3 shows a flowchart after step S220 shown in FIG. 2 according to an exemplary embodiment of the present disclosure.

Fig. 4 shows a device for encrypting document data according to an exemplary embodiment of the present disclosure.

Fig. 5 shows a system architecture diagram of document data encryption according to an exemplary embodiment of the present disclosure.

Fig. 6 shows a diagram of an electronic device for document data encryption according to an exemplary embodiment of the present disclosure.

Fig. 7 shows a diagram of a computer-readable storage medium for document data encryption according to an exemplary embodiment of the present disclosure.

Detailed ways

The purpose of the present disclosure is to technically improve the security of encrypted document data. A method for document data encryption according to an embodiment of the present disclosure includes: in response to a document data encryption request sent by a user terminal, extracting document data contained in the encryption request; and determining the field type corresponding to each field in the document data And extract the transfer-in party identification and transfer-out party identification contained in the document data, the item identification and the number of items corresponding to the item identification and the evaluation value of a single item; determine based on the transfer-in party identification and the transfer-out party identification A first reference factor, a second reference factor is determined based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item; the document is determined based on the first reference factor and the second reference factor The score corresponding to the data; based on the score corresponding to the bill data and the pre-stored score corresponding to the encrypted field table, determine the field to be encrypted in the bill data; based on the field type and the field type corresponding to each field in the bill data Describe the fields to be encrypted, and determine the field type corresponding to each field to be encrypted in the fields to be encrypted; each field to be encrypted in the fields to be encrypted in the document data corresponds to the field type of each field to be encrypted The key is encrypted.

Fig. 1 shows a flowchart of document data encryption according to an exemplary embodiment of the present disclosure:

Step S100: In response to the document data encryption request sent by the user terminal, extract the document data contained in the encryption request;

Step S110: Determine the field type corresponding to each field in the bill data and extract the transfer-in party identification and transfer-out party identification contained in the bill data, the number of items corresponding to the item identification and the item identification, and the value of a single item The assessed value;

Step S120: Determine a first reference factor based on the transfer-in party identifier and the transfer-out party identifier, and determine a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item;

Step S130: Determine the score corresponding to the receipt data based on the first reference factor and the second reference factor;

Step S140: Determine a field to be encrypted in the document data based on the score value corresponding to the document data and the pre-stored score value corresponding encrypted field table;

Step S150: Determine the field type corresponding to each field to be encrypted in the field to be encrypted based on the field type corresponding to each field in the document data and the field to be encrypted;

Step S160: Encrypt each field to be encrypted in the fields to be encrypted in the document data according to the key corresponding to the field type of each field to be encrypted.

Hereinafter, the steps of recognizing the text information in the image in this exemplary embodiment will be explained and described in detail with reference to the accompanying drawings.

In step S100, in response to a bill data encryption request sent by the user terminal, the bill data contained in the encryption request is extracted.

In an embodiment of the present application, the document data encryption request sent by the user terminal contains the document data that needs to be encrypted, and may also include the user ID or user level of the login user corresponding to the user terminal to determine whether the user can call The server encrypts the document data that needs to be encrypted, and records the operation behavior of related users at the same time, so that the corresponding users can be held accountable when the system has problems.

In step S110, determine the field type corresponding to each field in the document data and extract the transfer-in party identification and the transfer-out party identification contained in the bill data, the item identification and the number of items corresponding to the item identification, and the number of individual items. The estimated value of the item.

In an embodiment of the present application, the field type corresponding to each field in the document is determined and the transfer-in party identification and the transfer-out party identification contained in the bill data are extracted, and the item identification and the corresponding item outside the item identification The quantity and the evaluation value of a single item can be obtained by extracting keywords from the document data, determining the probability of the keywords appearing in the document data in the pre-stored database, and extracting each document data from the pre-stored data. The document data with the highest probability of occurrence of the keyword is selected at the same time, and the document data template corresponding to the document data to be encrypted is determined based on the document data selected. The document data template indicates the field type and conversion corresponding to each field. The outgoing party ID and the transferring party ID, the item ID and the number of corresponding items outside the item ID, and the position of the evaluation value of a single item are determined based on the document data template corresponding to each field in the document data to be encrypted Field type and extract the transfer-in party ID and transfer-out party ID contained in the bill data, the item ID and the number of corresponding items outside the item ID, and the evaluation value of a single item.

In an embodiment of the present application, when the document data is an order contract, the field type may refer to the content type of each part of the order contract, such as the main part of the contract, the subject part of the contract, and the rights and obligations of both parties to the contract. For example, the transfer-out party refers to the seller, the transfer-in party refers to the buyer, the item identifier refers to the item to be traded, and the evaluation value of the single item refers to the unit price of the item to be traded. Similarly, the bill data can also be other contracts or bills, such as storage contracts, takeaway bills, and so on.

In step S120, a first reference factor is determined based on the transfer-in party identification and the transfer-out party identification, and a second reference factor is determined based on the item identification, the number of items corresponding to the item identification, and the evaluation value of a single item.

In an embodiment of the present application, determining the first reference factor based on the transfer-in party identifier and the transfer-out party identifier may include:

Determining the number of different transfer-in party identifiers included in the transfer-in party identifier and the number of different transfer-out party identifiers included in the transfer-out party identifier;

Based on the transfer-in party identification and the transfer-out party identification and the pre-stored score table corresponding to the transfer-in party and the transfer-out party identification, the score corresponding to each of the different transfer-in party identifications and each of the different transfer-out parties are determined Identify the corresponding score;

The first reference factor is determined by the following formula:

Where s is the first reference factor, a _i is the score corresponding to the i-th transfer-in party identifier among the different transfer-in party identifiers, n is the number of the different transfer-in party identifiers, and b _c is the The score corresponding to the c-th transfer-out party identifier in the different transfer-out party identifiers, and d is the number of the different transfer-out party identifiers.

In an embodiment of the present application, determining the second reference factor based on the item identifier, the quantity of items corresponding to the item identifier, and the evaluation value of a single item may include:

Determining the number of different item identifiers included in the item identifier;

Determine the score corresponding to each item identifier in the different item identifiers based on the score table corresponding to the item identifier and the pre-stored item identifier;

The second reference factor is determined by the following formula:

Where F is the second reference factor, r is the number of different item identifiers contained in the bill data, We is the score corresponding to the e-th item identifier in the different item identifiers, and te is the different item identifier. The item quantity corresponding to the e-th item identifier in the item identifier, he is the individual item evaluation value corresponding to the e-th item identifier in the different item identifiers, g is a preset constant, and g is greater than zero and less than one.

In an embodiment of the present application, by setting the constant g, g is greater than zero and less than one to prevent

The value of is too large, which causes the determined second reference factor to be too large, which in turn affects the score corresponding to the document data determined later, so that the score corresponding to the document data is too large.

In step S130: based on the first reference factor and the second reference factor, a score corresponding to the document data is determined.

In an embodiment of the present application, the step S130 may include:

Based on the first reference factor and the second reference factor, the score corresponding to the document data is determined by the following formula:

M=log _z F+S

Where M is the score corresponding to the receipt data, z is a constant greater than 1, F is the second reference factor, and s is the first reference factor.

In step S140: Based on the encrypted field table corresponding to the score corresponding to the bill data and the pre-stored score, it is determined that the field in the bill data needs to be encrypted.

Because not all of the document data to be stored require a key to be encrypted for storage, if all of the document data needs to be encrypted, the entire system will process a large amount of encrypted document data at the same time, resulting in a lower operating efficiency of the system. The operating load of the system will cause the entire system to crash. Therefore, the first reference factor and the second reference factor are used to determine the fields that need to be encrypted in the document data to be encrypted, so as to avoid encrypting and storing the entire document data, thereby reducing The processing pressure of the entire system ensures the stability of the system.

In an embodiment of the present application, if it is determined that the score corresponding to the order contract one is 1000, and the score corresponding to the order contract two is 2000, according to the pre-stored score corresponding to the encrypted field table, it can be seen that the order contract one needs The encrypted fields are the subject part of the contract. For the order contract, the fields that need to be encrypted are the subject part of the contract and the contract rights and obligations.

In step S150, based on the field type corresponding to each field in the document data and the field to be encrypted, the field type corresponding to each field to be encrypted in the field to be encrypted is determined.

In step S160, each field to be encrypted in the fields to be encrypted in the document data is encrypted according to the key corresponding to the field type of each field to be encrypted.

In order to prevent the document data that needs to be encrypted from being easily cracked after being leaked, this solution is based on assigning corresponding encryption keys to the field types corresponding to the document fields that need to be encrypted in the document data that need to be encrypted, so that different field types in the fields that need to be encrypted correspond to The encryption keys of the fields are different, thereby reducing the success rate of cracking the leaked document data and improving the security of the document data.

In an embodiment of the present application, if the field type corresponding to the field to be encrypted in the order contract to be added is the subject of the contract, it is determined according to the pre-stored field type corresponding encryption key table, and the corresponding encryption key of the contract subject is "678 ", the key is used to encrypt the fields in the order contract whose field type is the subject of the contract in the fields to be encrypted.

In an embodiment of the present application, the encryption key corresponding to the field type may be determined based on the following method: determining the encryption key corresponding to the field type based on the encryption key table corresponding to the field type and the pre-stored field type , Wherein the encryption key table corresponding to the pre-stored field type can be determined by the following method: obtaining the total number of field types in the encryption key table corresponding to the field inner type, and randomly extracting the encryption key from the pre-stored encryption key library The total number of field types corresponds to the number of encryption keys, and the extracted encryption key is randomly combined with the field types in the encryption key table to determine the corresponding field type in the encryption key table. Encryption key.

In an embodiment of the present application, as shown in FIG. 2, after step S160 in FIG. 1, the method may further include:

Step S210: Determine the level corresponding to the bill data based on the score corresponding to the bill and the pre-stored score corresponding level table;

Step S220: Based on the level corresponding to the bill data, store the bill data in a corresponding storage server.

The score corresponding to the bill data indicates the importance of the bill data. In order to better store and protect the corresponding bill data, based on the score corresponding to the bill data, store the bill data in a different storage server , In order to improve the security of the document data.

In an embodiment of the present application, if the score corresponding to order contract one is 1000 points, and the score corresponding to order contract two is 2000 points, according to the pre-stored score corresponding grade table, it can be determined that the corresponding grade of order contract one is Level 1, order contract 2 corresponds to level 4, level 1 to 3 corresponds to storage server 1, and level 4 to 6 corresponds to storage server 2, then order contract 1 is encrypted and stored to the storage server 1. The order and contract two are encrypted and stored in the storage server 2.

In an embodiment of the present application, as shown in FIG. 3, after step S220 in FIG. 2, it may further include:

Step S230: In response to the call request sent by the user terminal, extract the user identification and the call receipt data identification included in the call request;

Step S240: Determine the level corresponding to the user based on the user identifier, and determine the level corresponding to the retrieved receipt data based on the retrieved receipt data identifier;

Step S250: Based on the relationship between the level corresponding to the user and the level corresponding to the retrieved receipt data, it is determined whether the user can retrieve the retrieved receipt data.

As mentioned above, the score corresponding to the bill data indicates the degree of importance of the bill data. When the user calls the bill data, the user is determined according to the relationship between the user's corresponding level and the level corresponding to the bill data to be retrieved. Whether the corresponding document data can be retrieved to prevent the leakage of the document data and to ensure the security of the document data.

In an embodiment of the present application, if the level corresponding to user A is level 2, and the level corresponding to the document data a to be retrieved is level 1, the level corresponding to document data b is level 3, because 1<2< 3. The user A can call the bill data a, but cannot call the bill data b.

The present disclosure also provides a device for document data encryption. Referring to FIG. 4, the device 400 for encrypting document data includes: an extraction module 410, a first determination module 420, a second determination module 430, a third determination module 440, a fourth determination module 450, and a fifth determination module 460, Encryption module 470. among them:

The extraction module 410 is configured to extract the document data contained in the encryption request in response to the document data encryption request sent by the user terminal;

The first determining module 420 is configured to determine the field type corresponding to each field in the bill data and extract the transfer-in party identification and the transfer-out party identification contained in the bill data, and the item identification and the item identification corresponding to the item Quantity and the estimated value of a single item;

The second determination module 430 is configured to determine a first reference factor based on the transfer-in party identifier and the transfer-out party identifier, and determine a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item factor;

The third determining module 440 is configured to determine the score corresponding to the document data based on the first reference factor and the second reference factor;

The fourth determining module 450 is configured to determine the fields that need to be encrypted in the document data based on the score value corresponding to the document data and the pre-stored score value corresponding encrypted field table;

The fifth determining module 460 is configured to determine the field type corresponding to each field to be encrypted in the field to be encrypted based on the field type corresponding to each field in the document data and the field to be encrypted;

The encryption module 470 is configured to encrypt each field to be encrypted in the fields to be encrypted in the document data according to the key corresponding to the field type of each field to be encrypted.

In an embodiment of the present application, the second determining module 430 may also be configured to determine the number of different transfer-in party identifiers included in the transfer-in party identifier and the difference between the number of transfer-in party identifiers included in the transfer-out party identifier. The number of transfer-out party IDs; based on the transfer-in party ID and transfer-out party ID and the pre-stored transfer-in party and transfer-out party ID corresponding score table, determine the score corresponding to each of the different transfer-in party IDs and each Points corresponding to each of the different transfer-out party identifiers;

The first reference factor is determined by the following formula:

In an embodiment of the present application, the second determining module 430 may also be configured to: determine the number of different item identifiers contained in the item identifier; based on the score table corresponding to the item identifier and the pre-stored item identifier , Determine the score corresponding to each item identifier in the different item identifiers;

The second reference factor is determined by the following formula:

In an embodiment of the present application, the third determining module 440 may be further configured to determine the score corresponding to the document data by the following formula based on the first reference factor and the second reference factor :

M=log _z F+S

In an embodiment of the present application, the device 400 for encrypting document data further includes: a storage module for determining the level corresponding to the document data based on the corresponding level table of the score corresponding to the document and the pre-stored score value. ; Based on the level corresponding to the bill data, store the bill data to the corresponding storage server.

In an embodiment of the present application, the device 400 for encrypting bill data further includes: an invocation module configured to, in response to an invocation request sent by the user terminal, extract the user identification and the invocation bill data contained in the invocation request Identification; determine the level corresponding to the user based on the user identifier, determine the level corresponding to the call receipt data based on the call receipt data identification; determine the rank corresponding to the call receipt data based on the user The relationship between the levels determines whether the user can retrieve the retrieval receipt data.

The specific details of each module in the above apparatus for encrypting document data in an image have been described in detail in the corresponding method, and therefore will not be repeated here.

It should be noted that although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above may be embodied in one module or unit. Conversely, the features and functions of a module or unit described above can be further divided into multiple modules or units to be embodied.

In addition, although the various steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that these steps must be performed in the specific order, or that all the steps shown must be performed to achieve the desired the result of. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step for execution, and/or one step may be decomposed into multiple steps for execution, etc.

Through the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described here can be implemented by software, or can be implemented by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, and the software product can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or a network The above includes several instructions to make a computing device (which may be a personal computer, a server, a mobile terminal, or a network device, etc.) execute the method according to the embodiment of the present disclosure.

Fig. 5 shows a block diagram of a system architecture for document data encryption according to an exemplary embodiment of the present disclosure. The system architecture includes: a client 310 and a server 320.

In one embodiment, the client 310 sends an encryption request to the server 320. The server 320 extracts the receipt data from the received encryption request. The server 320 determines the field type corresponding to each field in the receipt data and extracts the receipt data. The transfer-in party identification and the transfer-out party identification contained in the transfer-in party identification and the transfer-out party identification, the item identification and the number of items corresponding to the item identification and the evaluation value of a single item, the server 320 determines the first reference factor based on the transfer-in party identification and the transfer-out party identification , The server 320 determines a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item; the server 320 determines the receipt based on the first reference factor and the second reference factor The score corresponding to the data; the server 320 then determines the fields to be encrypted in the document data based on the score corresponding to the document data and the pre-stored score corresponding to the encrypted field table; the server 320 corresponds to each field in the document data The field type of the field to be encrypted and the field to be encrypted are determined, and the field type corresponding to each field to be encrypted in the field to be encrypted is determined; The key corresponding to the field type of the field to be encrypted is encrypted.

It should be noted that the method for encrypting the document data provided by the embodiments of the present disclosure is generally executed by the server 320, and accordingly, the device for encrypting the document data is generally set in the server 320. However, in other embodiments of the present disclosure, the terminal and the server may also have similar functions, so as to implement the document data encryption solution provided by the embodiments of the present disclosure.

Through the above description of the system architecture, those skilled in the art can easily understand that the system architecture described here can realize the functions of each module in the device for document data encryption shown in FIG. 4.

In an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

Those skilled in the art can understand that various aspects of the present application can be implemented as a system, a method, or a program product. Therefore, each aspect of the present application can be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to herein as "Circuit", "Module" or "System".

The electronic device 500 according to this embodiment of the present application will be described below with reference to FIG. 6. The electronic device 500 shown in FIG. 6 is only an example, and should not bring any limitation to the function and scope of use of the embodiments of the present application.

As shown in FIG. 6, the electronic device 500 is represented in the form of a general-purpose computing device. The components of the electronic device 500 may include, but are not limited to: the aforementioned at least one processing unit 510, the aforementioned at least one storage unit 520, and a bus 530 connecting different system components (including the storage unit 520 and the processing unit 510).

Wherein, the storage unit stores program code, and the program code can be executed by the processing unit 510, so that the processing unit 510 executes the various exemplary methods described in the “Exemplary Method” section of this specification. Steps of implementation. For example, the processing unit 510 may perform step S100 as shown in FIG. 1: in response to the document data encryption request sent by the user terminal, extract the document data contained in the encryption request; step S110: determine every item in the document data Field types corresponding to each field, and extract the transfer-in party identification and transfer-out party identification contained in the document data, the number of items corresponding to the item identification and the item identification, and the evaluation value of a single item; step S120: based on the transfer The incoming party identifier and the outgoing party identifier determine a first reference factor, and determine a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item; step S130: based on the first reference factor Determine the score corresponding to the document data with the second reference factor; Step S140: Determine the field to be encrypted in the document data based on the encrypted field table corresponding to the score corresponding to the document data and the pre-stored score; Step S150: Determine the field type corresponding to each field to be encrypted in the field to be encrypted based on the field type corresponding to each field in the document data and the field to be encrypted; Step S160: Check all the fields in the document data Each field to be encrypted in the fields to be encrypted is encrypted according to the key corresponding to the field type of each field to be encrypted.

The storage unit 520 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 5201 and/or a cache storage unit 5202, and may further include a read-only storage unit (ROM) 5203.

The storage unit 520 may also include a program/utility tool 5204 having a set (at least one) program module 5205. Such program module 5205 includes but is not limited to: an operating system, one or more application programs, other program modules, and program data, Each of these examples or some combination may include the implementation of a network environment.

The bus 530 may represent one or more of several types of bus structures, including a storage unit bus or a storage unit controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local area using any bus structure among multiple bus structures. bus.

The electronic device 500 may also communicate with one or more external devices 600 (such as keyboards, pointing devices, Bluetooth devices, etc.), and may also communicate with one or more devices that enable users to interact with the electronic device 500, and/or communicate with Any device (such as a router, modem, etc.) that enables the electronic device 500 to communicate with one or more other computing devices. Such communication can be performed through an input/output (I/O) interface 550. In addition, the electronic device 500 may also communicate with one or more networks (for example, a local area network (LAN), a wide area network (WAN), and/or a public network, such as the Internet) through the network adapter 560. As shown in the figure, the network adapter 560 communicates with other modules of the electronic device 500 through the bus 530. It should be understood that although not shown in the figure, other hardware and/or software modules can be used in conjunction with the electronic device 500, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives And data backup storage system, etc.

Through the description of the above embodiments, those skilled in the art can easily understand that the example embodiments described here can be implemented by software, or can be implemented by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, U disk, mobile hard disk, etc.) or on the network , Including several instructions to make a computing device (which may be a personal computer, a server, a terminal device, or a network device, etc.) execute the method according to the embodiment of the present disclosure.

In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, on which a program product capable of implementing the above method of this specification is stored. In some possible implementation manners, various aspects of the present application can also be implemented in the form of a program product, which includes program code. When the program product runs on a terminal device, the program code is used to make the The terminal device executes the steps according to various exemplary embodiments of the present application described in the above-mentioned "Exemplary Method" section of this specification.

Referring to FIG. 7, a program product 700 for implementing the above method according to an embodiment of the present application is described. It can adopt a portable compact disk read-only memory (CD-ROM) and include program code, and can be stored in a terminal device, For example, running on a personal computer. However, the program product of this application is not limited to this. In this document, the readable storage medium can be any tangible medium that contains or stores a program, and the program can be used by or in combination with an instruction execution system, device, or device.

The program product can use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or a combination of any of the above. More specific examples (non-exhaustive list) of readable storage media include: electrical connections with one or more wires, portable disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable Type programmable read only memory (EPROM or flash memory), optical fiber, portable compact disk read only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above.

The computer-readable signal medium may include a data signal propagated in baseband or as a part of a carrier wave, and readable program code is carried therein. This propagated data signal can take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. The readable signal medium may also be any readable medium other than a readable storage medium. The storage medium is a volatile storage medium or a non-volatile storage medium. The readable medium can be sent, propagated or transmitted for use by the instruction Execute programs used by or in combination with systems, devices or devices.

The program code contained on the readable medium can be transmitted by any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the above.

The program code used to perform the operations of the present application can be written in any combination of one or more programming languages. The programming languages include object-oriented programming languages—such as Java, C++, etc., as well as conventional procedural programming languages. Programming language-such as "C" language or similar programming language. The program code can be executed entirely on the user's computing device, partly on the user's device, executed as an independent software package, partly on the user's computing device and partly executed on the remote computing device, or entirely on the remote computing device or server Executed on. In the case of a remote computing device, the remote computing device can be connected to a user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (for example, using Internet service providers). Business to connect via the Internet).

In addition, the above-mentioned drawings are merely schematic illustrations of the processing included in the method according to the exemplary embodiments of the present application, and are not intended for limitation. It is easy to understand that the processing shown in the above drawings does not indicate or limit the time sequence of these processings. In addition, it is easy to understand that these processes can be executed synchronously or asynchronously in multiple modules, for example.

Those skilled in the art will easily think of other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptive changes of the present disclosure. These variations, uses, or adaptive changes follow the general principles of the present disclosure and include common knowledge or conventional technical means in the technical field that are not disclosed in the present disclosure. . The description and the embodiments are only regarded as exemplary, and the true scope and spirit of the present disclosure are pointed out by the claims.

Claims

A method for document data encryption, the method includes:

In response to a bill data encryption request sent by the user terminal, extract the bill data contained in the encryption request;

Determining the field type corresponding to each field in the document data and extracting the transfer-in party identification and the transfer-out party identification contained in the bill data, the number of items corresponding to the item identification and the item identification, and the evaluation value of a single item;

Determine a first reference factor based on the transfer-in party identifier and the transfer-out party identifier, and determine a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item;

Determine the score corresponding to the receipt data based on the first reference factor and the second reference factor;

Determine the field to be encrypted in the document data based on the encrypted field table corresponding to the score corresponding to the document data and the pre-stored score;

Determine the field type corresponding to each field to be encrypted in the field to be encrypted based on the field type corresponding to each field in the document data and the field to be encrypted;

Each field to be encrypted in the fields to be encrypted in the document data is encrypted according to the key corresponding to the field type of each field to be encrypted.
The method according to claim 1, wherein the determining the first reference factor based on the transfer-in party identifier and the transfer-out party identifier comprises:

Determining the number of different transfer-in party identifiers included in the transfer-in party identifier and the number of different transfer-out party identifiers included in the transfer-out party identifier;

Based on the transfer-in party identification and the transfer-out party identification and the pre-stored score table corresponding to the transfer-in party and the transfer-out party identification, the score corresponding to each of the different transfer-in party identifications and each of the different transfer-out parties are determined Identify the corresponding score;

The first reference factor is determined by the following formula:

Where s is the first reference factor, a i is the score corresponding to the i-th transfer-in party identifier among the different transfer-in party identifiers, n is the number of the different transfer-in party identifiers, and b c is the The score corresponding to the c-th transfer-out party identifier in the different transfer-out party identifiers, and d is the number of the different transfer-out party identifiers.
The method according to claim 1, wherein the determining the second reference factor based on the item identifier, the number of items corresponding to the item identifier and the evaluation value of a single item comprises:

Determining the number of different item identifiers included in the item identifier;

Determine the score corresponding to each item identifier in the different item identifiers based on the score table corresponding to the item identifier and the pre-stored item identifier;

The second reference factor is determined by the following formula:

Where F is the second reference factor, r is the number of different item identifiers contained in the bill data, We is the score corresponding to the e-th item identifier in the different item identifiers, and te is the different item identifier. The item quantity corresponding to the e-th item identifier in the item identifier, he is the individual item evaluation value corresponding to the e-th item identifier in the different item identifiers, g is a preset constant, and g is greater than zero and less than one.
The method according to claim 1, wherein the determining the score corresponding to the document data based on the first reference factor and the second reference factor comprises:

Based on the first reference factor and the second reference factor, the score corresponding to the document data is determined by the following formula:

M=log z F+S

Where M is the score corresponding to the receipt data, z is a constant greater than 1, F is the second reference factor, and s is the first reference factor.
The method according to claim 1, after said encrypting each of the fields to be encrypted in the fields to be encrypted in the document data respectively according to a key corresponding to the field type of each field to be encrypted, the method further comprises:

Determine the level corresponding to the document data based on the corresponding level table of the score corresponding to the document and the pre-stored score value;

Based on the level corresponding to the bill data, the bill data is stored in a corresponding storage server.
The method according to claim 5, after the storing the bill data in a corresponding preset database based on the level corresponding to the bill data, further comprising:

In response to the call request sent by the user terminal, extract the user identification and the call receipt data identification included in the call request;

Determine the level corresponding to the user based on the user identifier, and determine the level corresponding to the call receipt data based on the call receipt data identifier;

Based on the relationship between the level corresponding to the user and the level corresponding to the call receipt data, it is determined whether the user can call the call receipt data.
A document data encryption device, including:

The extraction module is used to extract the document data contained in the encryption request in response to the document data encryption request sent by the user terminal;

The first determining module is used to determine the field type corresponding to each field in the bill data and extract the transfer-in party identification and the transfer-out party identification contained in the bill data, the item identification and the number of items corresponding to the item identification And the assessed value of a single item;

The second determination module is configured to determine a first reference factor based on the transfer-in party identifier and the transfer-out party identifier, and determine a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item ；

A third determining module, configured to determine the score corresponding to the document data based on the first reference factor and the second reference factor;

The fourth determining module is configured to determine the fields in the document data that need to be encrypted based on the encrypted field table corresponding to the score corresponding to the document data and the pre-stored score;

A fifth determining module, configured to determine the field type corresponding to each field to be encrypted in the field to be encrypted based on the field type corresponding to each field in the document data and the field to be encrypted;

The encryption module is used for encrypting each field to be encrypted in the fields to be encrypted in the document data according to the key corresponding to the field type of each field to be encrypted.
According to the device according to claim 7, the second determining module may be further configured as:

Determining the number of different transfer-in party identifiers included in the transfer-in party identifier and the number of different transfer-out party identifiers included in the transfer-out party identifier;

Based on the transfer-in party identification and the transfer-out party identification and the pre-stored score table corresponding to the transfer-in party and the transfer-out party identification, the score corresponding to each of the different transfer-in party identifications and each of the different transfer-out parties are determined Identify the corresponding score;

The first reference factor is determined by the following formula:

Where s is the first reference factor, a i is the score corresponding to the i-th transfer-in party identifier among the different transfer-in party identifiers, n is the number of the different transfer-in party identifiers, and b c is the The score corresponding to the c-th transfer-out party identifier in the different transfer-out party identifiers, and d is the number of the different transfer-out party identifiers.
According to the device according to claim 7, the second determining module may be further configured as:

Determining the number of different item identifiers included in the item identifier;

Determine the score corresponding to each item identifier in the different item identifiers based on the score table corresponding to the item identifier and the pre-stored item identifier;

The second reference factor is determined by the following formula:

Where F is the second reference factor, r is the number of different item identifiers contained in the bill data, We is the score corresponding to the e-th item identifier in the different item identifiers, and te is the different item identifier. The item quantity corresponding to the e-th item identifier in the item identifier, he is the individual item evaluation value corresponding to the e-th item identifier in the different item identifiers, g is a preset constant, and g is greater than zero and less than one.
A computer device includes: one or more processors; a memory; one or more computer programs, wherein the one or more computer programs are stored in the memory and configured to be used by the one or more The processor executes, and the one or more computer programs are configured to execute a method for document data encryption, wherein the method for document data encryption includes:

In response to a bill data encryption request sent by the user terminal, extract the bill data contained in the encryption request;

Determining the field type corresponding to each field in the document data and extracting the transfer-in party identification and the transfer-out party identification contained in the bill data, the number of items corresponding to the item identification and the item identification, and the evaluation value of a single item;

Determine a first reference factor based on the transfer-in party identifier and the transfer-out party identifier, and determine a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item;

Determine the score corresponding to the receipt data based on the first reference factor and the second reference factor;

Determine the field to be encrypted in the document data based on the encrypted field table corresponding to the score corresponding to the document data and the pre-stored score;

Determine the field type corresponding to each field to be encrypted in the field to be encrypted based on the field type corresponding to each field in the document data and the field to be encrypted;

Each field to be encrypted in the fields to be encrypted in the document data is encrypted according to the key corresponding to the field type of each field to be encrypted.
The computer device according to claim 10, wherein the determining the first reference factor based on the transfer-in party identification and the transfer-out party identification comprises:

Determining the number of different transfer-in party identifiers included in the transfer-in party identifier and the number of different transfer-out party identifiers included in the transfer-out party identifier;

Based on the transfer-in party identification and the transfer-out party identification and the pre-stored score table corresponding to the transfer-in party and the transfer-out party identification, the score corresponding to each of the different transfer-in party identifications and each of the different transfer-out parties are determined Identify the corresponding score;

The first reference factor is determined by the following formula:

Where s is the first reference factor, a i is the score corresponding to the i-th transfer-in party identifier among the different transfer-in party identifiers, n is the number of the different transfer-in party identifiers, and b c is the The score corresponding to the c-th transfer-out party identifier in the different transfer-out party identifiers, and d is the number of the different transfer-out party identifiers.
11. The computer device according to claim 10, wherein the determining the second reference factor based on the item identifier and the item number corresponding to the item identifier and the evaluation value of a single item comprises:

Determining the number of different item identifiers included in the item identifier;

Determine the score corresponding to each item identifier in the different item identifiers based on the score table corresponding to the item identifier and the pre-stored item identifier;

The second reference factor is determined by the following formula:

Where F is the second reference factor, r is the number of different item identifiers contained in the bill data, We is the score corresponding to the e-th item identifier in the different item identifiers, and te is the different item identifier. The item quantity corresponding to the e-th item identifier in the item identifier, he is the individual item evaluation value corresponding to the e-th item identifier in the different item identifiers, g is a preset constant, and g is greater than zero and less than one.
11. The computer device according to claim 10, wherein the determining the second reference factor based on the item identifier and the item number corresponding to the item identifier and the evaluation value of a single item comprises:

Determining the number of different item identifiers included in the item identifier;

Determine the score corresponding to each item identifier in the different item identifiers based on the score table corresponding to the item identifier and the pre-stored item identifier;

The second reference factor is determined by the following formula:

Where F is the second reference factor, r is the number of different item identifiers contained in the bill data, We is the score corresponding to the e-th item identifier in the different item identifiers, and te is the different item identifier. The item quantity corresponding to the e-th item identifier in the item identifier, he is the individual item evaluation value corresponding to the e-th item identifier in the different item identifiers, g is a preset constant, and g is greater than zero and less than one.
The computer device according to claim 10, wherein the determining the score corresponding to the document data based on the first reference factor and the second reference factor comprises:

Based on the first reference factor and the second reference factor, the score corresponding to the document data is determined by the following formula: M=log z F+S

Where M is the score corresponding to the receipt data, z is a constant greater than 1, F is the second reference factor, and s is the first reference factor.
The computer device according to claim 10, after said encrypting each of the fields to be encrypted in the fields to be encrypted in the document data according to the key corresponding to the field type of each field to be encrypted, further comprising: :

Determine the level corresponding to the document data based on the corresponding level table of the score corresponding to the document and the pre-stored score value;

Based on the level corresponding to the bill data, the bill data is stored in a corresponding storage server.
The computer device according to claim 15, after storing the bill data in a corresponding preset database based on the level corresponding to the bill data, further comprising:

In response to the call request sent by the user terminal, extract the user identification and the call receipt data identification included in the call request;

Determine the level corresponding to the user based on the user identifier, and determine the level corresponding to the call receipt data based on the call receipt data identifier;

Based on the relationship between the level corresponding to the user and the level corresponding to the call receipt data, it is determined whether the user can call the call receipt data.
A computer-readable storage medium with a computer program stored on the computer-readable storage medium, which implements a method for document data encryption when the computer program is executed by a processor, wherein the method for document data encryption includes the following steps:

In response to a bill data encryption request sent by the user terminal, extract the bill data contained in the encryption request;

Determining the field type corresponding to each field in the document data and extracting the transfer-in party identification and the transfer-out party identification contained in the bill data, the number of items corresponding to the item identification and the item identification, and the evaluation value of a single item;

Determine a first reference factor based on the transfer-in party identifier and the transfer-out party identifier, and determine a second reference factor based on the item identifier, the number of items corresponding to the item identifier, and the evaluation value of a single item;

Determine the score corresponding to the receipt data based on the first reference factor and the second reference factor;

Determine the field to be encrypted in the document data based on the encrypted field table corresponding to the score corresponding to the document data and the pre-stored score;

Determine the field type corresponding to each field to be encrypted in the field to be encrypted based on the field type corresponding to each field in the document data and the field to be encrypted;

Each field to be encrypted in the fields to be encrypted in the document data is encrypted according to the key corresponding to the field type of each field to be encrypted.
The computer-readable storage medium according to claim 17, wherein the determining the first reference factor based on the transfer-in party identifier and the transfer-out party identifier comprises:

Determining the number of different transfer-in party identifiers included in the transfer-in party identifier and the number of different transfer-out party identifiers included in the transfer-out party identifier;

Based on the transfer-in party identification and the transfer-out party identification and the pre-stored score table corresponding to the transfer-in party and the transfer-out party identification, the score corresponding to each of the different transfer-in party identifications and each of the different transfer-out parties are determined Identify the corresponding score;

The first reference factor is determined by the following formula:

Where s is the first reference factor, a i is the score corresponding to the i-th transfer-in party identifier among the different transfer-in party identifiers, n is the number of the different transfer-in party identifiers, and b c is the The score corresponding to the c-th transfer-out party identifier in the different transfer-out party identifiers, and d is the number of the different transfer-out party identifiers.
17. The computer-readable storage medium according to claim 17, wherein the determining the second reference factor based on the item identifier, the number of items corresponding to the item identifier and the evaluation value of a single item comprises:

Determining the number of different item identifiers included in the item identifier;

Determine the score corresponding to each item identifier in the different item identifiers based on the score table corresponding to the item identifier and the pre-stored item identifier;

The second reference factor is determined by the following formula:

Where F is the second reference factor, r is the number of different item identifiers contained in the bill data, We is the score corresponding to the e-th item identifier in the different item identifiers, and te is the different item identifier. The item quantity corresponding to the e-th item identifier in the item identifier, he is the individual item evaluation value corresponding to the e-th item identifier in the different item identifiers, g is a preset constant, and g is greater than zero and less than one.
17. The computer-readable storage medium according to claim 17, wherein the determining the score corresponding to the document data based on the first reference factor and the second reference factor comprises:

Based on the first reference factor and the second reference factor, the score corresponding to the document data is determined by the following formula: M=log z F+S

Where M is the score corresponding to the receipt data, z is a constant greater than 1, F is the second reference factor, and s is the first reference factor.