WO2022100675A1

WO2022100675A1 - Data encryption and data decryption methods, apparatus, storage medium, and electronic apparatus

Info

Publication number: WO2022100675A1
Application number: PCT/CN2021/130173
Authority: WO
Inventors: 黄琛
Original assignee: 中兴通讯股份有限公司
Priority date: 2020-11-11
Filing date: 2021-11-11
Publication date: 2022-05-19
Also published as: CN114490451A

Abstract

Data encryption and data decryption methods, an apparatus, a storage medium, and an electronic apparatus. The data encryption method comprises: obtaining first data (S202); determining a first storage space used for storing the first data (S204); determining an encryption rule corresponding to a first characteristic value of the first storage space (S206); and performing encryption on the first data according to the encryption rule, so as to obtain first encrypted data (S208).

Description

Data encryption and data decryption method, device, storage medium and electronic device

cross reference

This application is based on the Chinese patent application with the application number "202011255552.9" and the filing date is November 11, 2020, and claims the priority of the Chinese patent application. The entire content of the Chinese patent application is hereby incorporated by reference Apply.

technical field

The embodiments of the present application relate to the field of communications, and in particular, to a data encryption and data decryption method, device, storage medium, and electronic device.

Background technique

When a system built on a thin terminal is to be used in a scenario with a high level of confidentiality, the data on the system is generally encrypted. The encryption method used is generally that the application software operates on the data through some algorithms plus hardware characteristic values, etc., and the obtained operation result is the encrypted data, and the data is written into the storage. The confidentiality level of this method is not enough, and it has a certain impact on IO performance.

There are several ways to encrypt data:

On the upper-layer application software side, the data is calculated through algorithms, hardware characteristic values, etc. When the software writes stored data, it calls this encryption interface, and then writes the data returned by the interface to the storage.

Use hardware encryption cards, dongles, etc., which are generally used with specific software.

The above encryption methods have the following disadvantages:

1: The system itself and the software itself are not encrypted. If the storage is removed, and then the data on the storage can be taken out by mounting or other methods. If the data of the software itself (such as an encryption program) is obtained, there is a certain risk.

2: The efficiency is not high. The algorithm consumes CPU, and the dongle, etc. involve instant USB communication, etc., which is not efficient.

3: The versatility is not good. Encrypted data generally requires application software to call a specific interface to obtain it.

It can be seen from this that the adopted data encryption method has the problems of low data encryption security level, poor security efficiency and poor generality.

SUMMARY OF THE INVENTION

An embodiment of the present application provides a data encryption method, including: acquiring first data; determining a first storage space for storing the first data; determining an encryption corresponding to a first characteristic value of the first storage space rule; encrypting the first data based on the encryption rule to obtain first encrypted data.

An embodiment of the present application further provides a data decryption method, including: acquiring first encrypted data stored in a first storage space, where the first encrypted data is obtained by encrypting the first data based on an encryption rule , the encryption rule is a rule corresponding to the first feature value of the first storage space; the first feature value of the first storage space is determined, and the decryption rule corresponding to the first feature value is determined ; Decrypt the first encrypted data based on the decryption rule to obtain the first data.

An embodiment of the present application further provides a data encryption device, including: a first acquisition module, configured to acquire first data; a first determination module, configured to determine a first storage space for storing the first data; 2. A determination module, configured to determine an encryption rule corresponding to the first characteristic value of the first storage space; an encryption module, configured to perform encryption processing on the first data based on the encryption rule to obtain first encrypted data .

An embodiment of the present application further provides a data decryption device, including: a second acquisition module, configured to acquire first encrypted data stored in a first storage space, wherein the first encrypted data is a obtained after the data is encrypted, the encryption rule is a rule corresponding to the first characteristic value of the first storage space; a third determination module is used to determine the first characteristic value of the first storage space , and determine a decryption rule corresponding to the first feature value; a decryption module, configured to decrypt the first encrypted data based on the decryption rule to obtain the first data.

Embodiments of the present application further provide a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, wherein the computer program is configured to execute the steps in any of the foregoing method embodiments when running. .

An embodiment of the present application further provides an electronic device, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to run the computer program to execute any of the above method embodiments. step.

Through the present application, after obtaining the first data, determine the encryption rule corresponding to the first characteristic value of the first storage space from the first storage space storing the first encrypted data, and determine the encryption rule for the first data according to the first encryption rule. Encryption processing is performed to obtain the first encrypted data. Since different storage spaces correspond to different eigenvalues, the first eigenvalues of the first storage space for storing the first data are used to encrypt the first data, and there is no need to use upper-layer applications. Therefore, it can solve the problems of low data encryption security level, poor security efficiency and poor generality in the data encryption method adopted, realize partition encryption, improve the security level and security efficiency of data encryption, and improve The versatility of data encryption.

Description of drawings

1 is a block diagram of a hardware structure of a mobile terminal of a data encryption and data decryption method according to an embodiment of the present application;

2 is a flowchart of a data encryption method according to an embodiment of the present application;

Fig. 3 is the data encryption flow chart of the specific embodiment of the present application;

4 is a schematic structural diagram of data encryption according to a specific embodiment of the present application;

5 is a flowchart of a data encryption method according to an embodiment of the present application;

6 is a flowchart of a data decryption method according to a specific embodiment of the present application;

7 is a structural block diagram of a data encryption device according to an embodiment of the present application;

FIG. 8 is a structural block diagram of a data decryption apparatus according to an embodiment of the present application.

Detailed ways

Embodiments of the present application provide a data encryption and data decryption method, device, storage medium, and electronic device to at least solve the problems of low data encryption security level, poor security efficiency, and poor versatility in the data encryption method used.

Hereinafter, the embodiments of the present application will be described in detail with reference to the accompanying drawings and in conjunction with the embodiments.

It should be noted that the terms "first", "second", etc. in the description and claims of the present application and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific sequence or sequence.

The method embodiments provided in the embodiments of the present application may be executed in a mobile terminal, a computer terminal, or a similar computing device. Taking running on a mobile terminal as an example, Fig. 1 is a hardware structure block diagram of a mobile terminal of a data encryption and data decryption method according to an embodiment of the present application. As shown in FIG. 1 , the mobile terminal may include one or more (only one is shown in FIG. 1 ) processor 102 (the processor 102 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, wherein the above-mentioned mobile terminal may also include a transmission device 106 and an input and output device 108 for communication functions. Those of ordinary skill in the art can understand that the structure shown in FIG. 1 is only a schematic diagram, which does not limit the structure of the above-mentioned mobile terminal. For example, the mobile terminal may also include more or fewer components than those shown in FIG. 1 , or have a different configuration than that shown in FIG. 1 .

The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as computer programs corresponding to the data encryption and data decryption methods in the embodiments of the present application, and the processor 102 runs the computer programs stored in the memory 104. Thereby, various functional applications and data processing are performed, that is, the above-mentioned method is realized. Memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory located remotely from the processor 102, and these remote memories may be connected to the mobile terminal through a network. Examples of such networks include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

Transmission device 106 is used to receive or transmit data via a network. The specific example of the above-mentioned network may include a wireless network provided by a communication provider of the mobile terminal. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC for short), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (Radio Frequency, RF for short) module, which is used to communicate with the Internet in a wireless manner.

A data encryption method is provided in this embodiment, and FIG. 2 is a flowchart of a data encryption method according to an embodiment of the present application. As shown in FIG. 2 , the process includes the following steps:

Step S202, acquiring first data.

Step S204, determining a first storage space for storing the first data.

Step S206, determining an encryption rule corresponding to the first characteristic value of the first storage space.

Step S208, encrypting the first data based on the encryption rule to obtain first encrypted data.

In the above embodiment, the first data may be virtual file system (Virtual File System, VFS for short) data, that is, the VFS data is obtained to obtain DATA0, the first storage space for storing the first data is determined, and the first storage space for storing the first data is determined. According to the encryption rule corresponding to the first feature value of the storage space, the first data is encrypted according to the encryption rule to obtain the first encrypted data DATA1.

Exemplarily, the execution subject of the above steps may be a hardware encryption logic unit, for example, a field programmable gate array (Field Programmable Gate Array, FPGA for short). It can also be a later processor, or other data processing devices with similar processing capabilities, but it is not limited to this.

Through the present application, after obtaining the first data, determine the encryption rule corresponding to the first characteristic value of the first storage space from the first storage space storing the first encrypted data, and determine the encryption rule for the first data according to the first encryption rule. Encryption processing is performed to obtain the first encrypted data. Since different storage spaces correspond to different eigenvalues, the first eigenvalues of the first storage space for storing the first data are used to encrypt the first data, and there is no need to use upper-layer applications. Therefore, it can solve the problems of low data encryption security level, poor security efficiency and poor generality in the data encryption method adopted, realize partition encryption, improve the security level and security efficiency of data encryption, and improve data encryption. Universality of encryption.

In an exemplary embodiment, before acquiring the first data, the method further includes: acquiring the first characteristic value; and performing an initialization operation based on the first characteristic value, wherein the initialization operation is used to trigger execution An operation of acquiring the first data. In this embodiment, before acquiring the first data, the first characteristic value may be acquired first, and the initialization operation is performed by using the first characteristic value. For example, when the FPGA is used to implement data encryption, the first characteristic value of the first storage space may be obtained first, and the FPGA may be initialized by using the first characteristic value, so as to trigger the FPGA to perform the operation of obtaining the first data.

In an exemplary embodiment, acquiring the first feature value includes: acquiring first identification information for identifying the first storage space; processing the first identification information based on a first algorithm to obtain a target value; determining the target value as the first characteristic value of the first storage space. In this embodiment, different storage spaces correspond to different identification information, and after obtaining the first identification information of the first storage space, the first identification information can be processed through a first algorithm to obtain a target value, and the target value It is determined as the first characteristic value of the first storage space. Wherein, the first identification information may be Block ID (block code), that is, the encoding information of the first storage space, and the first algorithm may be a cryptographic hash function algorithm (Secure Hash Algorithm, SHA256 for short), and the Block ID is processed by the SHA256 algorithm. After processing, KEY1 (key 1) can be obtained, and KEY1 is determined as the first characteristic value. After the first characteristic value is determined, the first data may be encrypted according to the encryption rule. The encryption rule may be adding KEY1 before DATA0 or after adding KEY1 to DATA0. Of course, KEY1 may also be split into several parts and inserted into predetermined positions of DATA0 to obtain DATA1.

In an exemplary embodiment, after encrypting the first data based on the encryption rule to obtain the first encrypted data, the method further includes: sending the first encrypted data to a block driver, to instruct the block driver to store the first encrypted data in the first storage space. In this embodiment, after obtaining the first encrypted data, the first encrypted data may be sent to the Block driver, that is, the block driver, to instruct the block driver to store the first encrypted data in the first storage space.

Data encryption will be described below in conjunction with specific embodiments:

FIG. 3 is a data encryption flow chart according to a specific embodiment of the present application. As shown in FIG. 3 , the flow includes:

Step S302, obtain hardware (hard disk, CPU) characteristic value, carry out SHA256 (corresponding to above-mentioned first algorithm) processing to the Block ID (corresponding to above-mentioned first identification information) of hardware, obtain KEY1 (corresponding to above-mentioned first characteristic value) .

Step S304, use KEY1 to initialize the FPGA.

Step S306, acquiring VFS data, and obtaining DATA0 (corresponding to the above-mentioned first data).

Step S308, the algorithm in the FGPA encrypts and calculates DATA0 according to KEY1+DATA0 (corresponding to the above encryption rule) to obtain DATA1 (corresponds to the above first encrypted data).

In step S310, DATA1 is sent to the Block drive.

The schematic diagram of the structure of data encryption can be seen in FIG. 4 . As shown in FIG. 4 , a filter driver, that is, an encryption driver, is set between the VFS driver and the Block driver. Use a hardware encryption logic unit, such as an FPGA, to receive data input, then encrypt the data according to the encryption logic and hardware eigenvalues, and output the encrypted data to the Block driver. Since different hardware corresponds to different eigenvalues, it can be The purpose of partition data encryption is achieved without perceiving user state programming, and the security level and security efficiency of data encryption are improved.

A data decryption method is also provided in this embodiment. FIG. 5 is a flowchart of a data encryption method according to an embodiment of the present application. As shown in FIG. 5 , the process includes the following steps:

Step S502: Obtain the first encrypted data stored in the first storage space, wherein the first encrypted data is obtained by encrypting the first data based on an encryption rule, and the encryption rule is the same as that of the first storage space. The rule corresponding to the first eigenvalue of the space;

Step S504, determine the first characteristic value of the first storage space, and determine the decryption rule corresponding to the first characteristic value;

Step S506: Decrypt the first encrypted data based on the decryption rule to obtain the first data.

In the above embodiment, the first encrypted data may be block driving data, that is, obtaining block driving data to obtain DATA1 (first encrypted data), wherein the first encrypted data is data obtained by encrypting the first data according to an encryption rule , the first data may be VFS data, that is, DATA0 is obtained by acquiring VFS data. The encryption rule is a rule corresponding to the first characteristic value of the first storage space. After acquiring the first encrypted data, determine the first feature value of the first storage space and the decryption rule with the first feature value object, and decrypt the first encrypted data according to the decryption rule to obtain the first data.

Exemplarily, the execution body of the above steps may be a hardware encryption logic unit, for example, an FPGA. It can also be a later processor, or other data processing devices with similar processing capabilities, but it is not limited to this.

Through this application, the first encrypted data stored in the first storage space is obtained, then the first characteristic value of the first storage space and the decryption rule corresponding to the first characteristic value are determined, and the first encrypted data is decrypted according to the decryption rule, to get the first data. Since different storage spaces correspond to different eigenvalues, the first encrypted data is decrypted by using the first eigenvalue corresponding to the first storage space, and the upper-layer application software does not need to be used for decryption. Therefore, the data existing in the related art can be solved. For the problems of low security level, poor security efficiency and poor generality, partition decryption is realized, the security level and security efficiency of data decryption are improved, and the generality of data decryption is improved.

In an exemplary embodiment, before acquiring the first encrypted data stored in the first storage space, the method further includes: acquiring the first characteristic value; and performing an initialization operation based on the first characteristic value, wherein, The initialization operation is used to trigger the execution of the operation of acquiring the first encrypted data. In this embodiment, before acquiring the first encrypted data, the first characteristic value may be acquired first, and the initialization operation is performed by using the first characteristic value. For example, when the FPGA is used to decrypt the data, the first characteristic value of the first storage space may be obtained first, and the FPGA may be initialized by using the first characteristic value, so as to trigger the FPGA to perform the operation of obtaining the first decrypted data.

In an exemplary embodiment, acquiring the first feature value includes: acquiring first identification information for identifying the first storage space; processing the first identification information based on a first algorithm to obtain a target value; determining the target value as the first characteristic value of the first storage space. In this embodiment, different storage spaces correspond to different identification information, and after obtaining the first identification information of the first storage space, the first identification information can be processed through a first algorithm to obtain a target value, and the target value It is determined as the first characteristic value of the first storage space. Wherein, the first identification information can be Block ID (block code), that is, the encoding information of the first storage space, the first algorithm can be SHA256, and the Block ID can be processed by using the SHA256 algorithm to obtain KEY1 (key 1), and the KEY1 is determined as the first eigenvalue. After the first characteristic value is determined, the first encrypted data can be decrypted according to the encryption rule. The encryption rule may be adding KEY1 before DATA0 or after adding KEY1 to DATA0. Of course, KEY1 may also be split into several parts and inserted into predetermined positions of DATA0 to obtain DATA1. During decryption, the first data can be obtained by simply removing the KEY1 part in the first encrypted data according to the encryption rules.

In an exemplary embodiment, after decrypting the first encrypted data based on the decryption rule to obtain the first data, the method further includes: sending the first data to a virtual file system VFS driver. In this embodiment, after the first data is obtained, the first data may be sent to the VFS driver for data calling or other operations on the first data.

The data decryption will be described below in conjunction with specific embodiments:

FIG. 6 is a flowchart of a data decryption method according to a specific embodiment of the present application. As shown in FIG. 6 , the process includes:

Step S602, obtain hardware (hard disk, CPU) characteristic value, carry out SHA256 (corresponding to above-mentioned first algorithm) processing to the Block ID (corresponding to above-mentioned first identification information) of hardware, obtain KEY1 (corresponding to above-mentioned first characteristic value) .

Step S604, use KEY1 to initialize the FPGA.

Step S606, obtaining BLOCK driving data to obtain DATA1 (corresponding to the above-mentioned first encrypted data).

Step S608, the algorithm in the FGPA performs decryption and calculation according to KEY1+DATA1 to obtain DATA0 (corresponding to the above-mentioned first data).

In step S610, DATA0 is sent to the VFS driver.

From the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is better implementation. Based on this understanding, the technical solution of the present application can be embodied in the form of a software product. The computer software product is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes several instructions to A terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) executes the methods described in the various embodiments of this application.

In this embodiment, a data encryption and data decryption apparatus is also provided, and the apparatus is used to implement the above-mentioned embodiments and preferred implementations, and what has been described will not be repeated. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, implementations in hardware, or a combination of software and hardware, are also possible and contemplated.

Fig. 7 is the structural block diagram of the data encryption device according to the embodiment of the present application, as shown in Fig. 7, this device comprises:

The first obtaining module 72 is configured to obtain first data.

The first determining module 74 is configured to determine a first storage space for storing the first data.

The second determination module 76 is configured to determine an encryption rule corresponding to the first characteristic value of the first storage space.

An encryption module 78, configured to perform encryption processing on the first data based on the encryption rule to obtain first encrypted data.

In an exemplary embodiment, the apparatus may be configured to acquire the first characteristic value before acquiring the first data; perform an initialization operation based on the first characteristic value, wherein the initialization operation is used to trigger execution An operation of acquiring the first data.

In an exemplary embodiment, the apparatus may achieve the acquisition of the first feature value in the following manner: acquiring first identification information used to identify the first storage space; identifying the first identification based on a first algorithm The information is processed to obtain a target value; the target value is determined as the first characteristic value of the first storage space.

In an exemplary embodiment, the apparatus may be further configured to send the first encrypted data to a block driver after encrypting the first data based on the encryption rule to obtain the first encrypted data , to instruct the block driver to store the first encrypted data in the first storage space.

Fig. 8 is the structural block diagram of the data decryption device according to the embodiment of the present application, as shown in Fig. 8, this device comprises:

The second acquiring module 82 is configured to acquire the first encrypted data stored in the first storage space, wherein the first encrypted data is obtained by encrypting the first data based on an encryption rule, and the encryption rule is the same as the The rule corresponding to the first feature value of the first storage space.

The third determination module 84 is configured to determine the first characteristic value of the first storage space, and determine a decryption rule corresponding to the first characteristic value.

The decryption module 86 is configured to decrypt the first encrypted data based on the decryption rule to obtain the first data.

In an exemplary embodiment, the apparatus may be configured to acquire the first characteristic value before acquiring the first encrypted data stored in the first storage space; perform an initialization operation based on the first characteristic value, wherein, The initialization operation is used to trigger the execution of the operation of acquiring the first encrypted data.

In an exemplary embodiment, the apparatus may be further configured to send the first data to a virtual file after decrypting the first encrypted data based on the decryption rule to obtain the first data System VFS driver.

It should be noted that the above modules can be implemented by software or hardware, and the latter can be implemented in the following ways, but not limited to this: the above modules are all located in the same processor; or, the above modules can be combined in any combination The forms are located in different processors.

Embodiments of the present application further provide a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, wherein the computer program is configured to execute the steps in any one of the above method embodiments when running.

In an exemplary embodiment, the above-mentioned computer-readable storage medium may include, but is not limited to, a USB flash drive, a read-only memory (Read-Only Memory, referred to as ROM for short), and a random access memory (Random Access Memory, referred to as RAM for short) , mobile hard disk, magnetic disk or CD-ROM and other media that can store computer programs.

Embodiments of the present application further provide an electronic device, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

In an exemplary embodiment, the above-mentioned electronic device may further include a transmission device and an input-output device, wherein the transmission device is connected to the above-mentioned processor, and the input-output device is connected to the above-mentioned processor.

For specific examples in this embodiment, reference may be made to the examples described in the foregoing embodiments and exemplary implementation manners, and details are not described herein again in this embodiment.

Obviously, those skilled in the art should understand that the above-mentioned modules or steps of the present application can be implemented by a general-purpose computing device, and they can be centralized on a single computing device, or distributed in a network composed of multiple computing devices On the other hand, they can be implemented in program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, can be performed in a different order than shown here. Or the described steps, or they are respectively made into individual integrated circuit modules, or a plurality of modules or steps in them are made into a single integrated circuit module to realize. As such, the present application is not limited to any particular combination of hardware and software.

The above descriptions are only preferred embodiments of the present application, and are not intended to limit the present application. For those skilled in the art, the present application may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the principles of this application shall be included within the protection scope of this application.

Claims

A data encryption method comprising:

get the first data;

determining a first storage space for storing the first data;

determining an encryption rule corresponding to the first characteristic value of the first storage space;

The first data is encrypted based on the encryption rule to obtain first encrypted data.
The data encryption method according to claim 1, wherein, before acquiring the first data, the method further comprises:

obtaining the first eigenvalue;

An initialization operation is performed based on the first characteristic value, wherein the initialization operation is used to trigger the execution of an operation of acquiring the first data.
The data encryption method according to claim 2, wherein the acquiring the first characteristic value comprises:

obtaining first identification information for identifying the first storage space;

processing the first identification information based on a first algorithm to obtain a target value;

The target value is determined as the first characteristic value of the first storage space.
The data encryption method according to any one of claims 1 to 3, wherein after performing encryption processing on the first data based on the encryption rule to obtain the first encrypted data, the method further comprises: include:

Sending the first encrypted data to the block driver to instruct the block driver to store the first encrypted data in the first storage space.
A data decryption method, comprising:

Acquire the first encrypted data stored in the first storage space, wherein the first encrypted data is obtained by encrypting the first data based on an encryption rule, and the encryption rule is the same as the first encrypted data of the first storage space. A rule corresponding to an eigenvalue;

determining the first characteristic value of the first storage space, and determining a decryption rule corresponding to the first characteristic value;

Decrypt the first encrypted data based on the decryption rule to obtain the first data.
The data decryption method according to claim 5, wherein before acquiring the first encrypted data stored in the first storage space, the method further comprises:

obtaining the first eigenvalue;

An initialization operation is performed based on the first characteristic value, wherein the initialization operation is used to trigger an operation of acquiring the first encrypted data.
The data decryption method according to claim 6, wherein the acquiring the first characteristic value comprises:

obtaining first identification information for identifying the first storage space;

processing the first identification information based on a first algorithm to obtain a target value;

The target value is determined as the first characteristic value of the first storage space.
The method according to any one of claims 5 to 7, wherein after decrypting the first encrypted data based on the decryption rule to obtain the first data, the method further include:

Send the first data to the virtual file system VFS driver.
A data encryption device, comprising:

a first acquisition module for acquiring first data;

a first determining module, configured to determine a first storage space for storing the first data;

a second determining module, configured to determine an encryption rule corresponding to the first characteristic value of the first storage space;

An encryption module, configured to perform encryption processing on the first data based on the encryption rule to obtain first encrypted data.
A data decryption device, comprising:

The second obtaining module is configured to obtain the first encrypted data stored in the first storage space, wherein the first encrypted data is obtained by encrypting the first data based on an encryption rule, and the encryption rule is the same as the encrypted data. Describe the rule corresponding to the first eigenvalue of the first storage space;

a third determining module, configured to determine the first feature value of the first storage space, and determine a decryption rule corresponding to the first feature value;

A decryption module, configured to decrypt the first encrypted data based on the decryption rule to obtain the first data.
A computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, wherein the computer program implements the data encryption method described in any one of claims 1 to 4 when the computer program is executed by a processor , or the steps of implementing the data decryption method described in any one of claims 5 to 8.
An electronic device, comprising a memory, a processor, and a computer program stored on the memory and running on the processor, wherein the processor implements the claim 1 when the processor executes the computer program The steps of the data encryption method described in any one of claims 5 to 4, or the steps of implementing the data decryption method described in any one of claims 5 to 8.