CN107948152A - Information storage means, acquisition methods, device and equipment - Google Patents
Information storage means, acquisition methods, device and equipment Download PDFInfo
- Publication number
- CN107948152A CN107948152A CN201711179733.6A CN201711179733A CN107948152A CN 107948152 A CN107948152 A CN 107948152A CN 201711179733 A CN201711179733 A CN 201711179733A CN 107948152 A CN107948152 A CN 107948152A
- Authority
- CN
- China
- Prior art keywords
- salt
- information
- subscriber identity
- identity information
- encryption
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0435—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
- H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Bioethics (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Power Engineering (AREA)
- Storage Device Security (AREA)
Abstract
The embodiment of the invention discloses a kind of information storage means, acquisition methods, device and equipment.The described method includes:Obtain the subscriber identity information in the second application by the user of the first application generation;At least one wheel encryption is performed to subscriber identity information using the first salt group and obtains user identifier, and at least one wheel encryption performs subscriber identity information using second group of salt and obtains key, respectively includes at least one salt in the first salt group and the second salt group;Information to be stored is encrypted using key, obtains encryption information;User identifier and encryption information are corresponded to and stored into the information database of the second application.The embodiment of the present invention is using subscriber identity information as basic character string, user identifier and key are generated using salt Encryption Algorithm is added, encrypted using the cipher key pair information, user identifier and encryption information are then corresponded into storage, stored compared to hash algorithm is directly used after being encrypted to information, encryption information in the embodiment of the present invention cracks difficulty lifting, and security improves.
Description
Technical field
The present embodiments relate to technical field of information storage, more particularly to a kind of information storage means, acquisition methods, dress
Put and equipment.
Background technology
How preferably to store, manage for sensitive information, preferably to ensure the safety of these sensitive informations and protection
The privacy of user, the problem of being major company and enterprise's concern all the time and pay attention to.The sensitive information of user can include surname
The information such as name, gender, date of birth, passport NO., telephone number.
In order to improve the security of above-mentioned sensitive information, it is necessary to after these sensitive informations are encrypted etc. with safe handling again
Stored.In the related art, there is provided a kind of encryption storage scheme based on hash algorithm.To store the quick of targeted customer
Exemplified by feeling information, the sensitive information progress Hash calculation to targeted customer obtains encryption information, then by the user of targeted customer
Account number and above-mentioned encryption information, which correspond to, to be stored into non-sensitive information database.Wherein, the user account number of targeted customer can be this
The account number that targeted customer is registered in a certain network service of login, the identity for unique mark targeted customer.
But the sensitive information for being encrypted using foregoing hash algorithm, network hacker can use rainbow table
(rainbow tables) technology is cracked, and security is relatively low.Also, when wanting to obtain the sensitive information of a certain user,
Corresponding sensitive information can be found by being directly based upon the user account number of the user.
The content of the invention
It is related available for solving an embodiment of the present invention provides a kind of information storage means, acquisition methods, device and equipment
Technology provide information storage schemes present in lookup and crack the problem of difficulty is low, and security is low.The technical solution is such as
Under:
First aspect, there is provided a kind of information storage means, the described method includes:
Obtain the subscriber identity information in the second application by the user of the first application generation;
At least one wheel encryption is performed to the subscriber identity information using the first salt group and obtains user identifier, first salt
Group includes at least one salt;
At least one wheel encryption is performed to the subscriber identity information using second group of salt and obtains key, in the second salt group
Including at least one salt;
Information to be stored is encrypted using the key, obtains encryption information;
The user identifier and the encryption information are corresponded to and stored into the information database of the described second application.
Second aspect, there is provided a kind of information acquisition method, the described method includes:
Obtain the subscriber identity information in the second application by the user of the first application generation;
At least one wheel encryption is performed to the subscriber identity information using the first salt group and obtains user identifier, first salt
Group includes at least one salt;
At least one wheel encryption is performed to the subscriber identity information using second group of salt and obtains key, in the second salt group
Including at least one salt;
The encryption information of storage corresponding with the user identifier is obtained from the information database of the described second application;
The encryption information is decrypted using the key, obtains cleartext information.
The third aspect, there is provided a kind of information-storing device, described device include:
Data obtaining module, for obtaining the subscriber identity information by the user of the first application generation in the second application;
First encrypting module, is used for being performed at least one wheel encryption to the subscriber identity information using the first salt group
Family identifies, and the first salt group includes at least one salt;
Second encrypting module, it is close for being obtained using second group of salt at least one wheel encryption of subscriber identity information execution
Key, the second salt group include at least one salt;
3rd encrypting module, for being encrypted using the key to information to be stored, obtains encryption information;
Information storage module, stores to the described second application for the user identifier and the encryption information to be corresponded to
In information database.
Fourth aspect, there is provided a kind of information acquisition device, described device include:
Data obtaining module, for obtaining the subscriber identity information by the user of the first application generation in the second application;
First encrypting module, is used for being performed at least one wheel encryption to the subscriber identity information using the first salt group
Family identifies, and the first salt group includes at least one salt;
Second encrypting module, it is close for being obtained using second group of salt at least one wheel encryption of subscriber identity information execution
Key, the second salt group include at least one salt;
Data obtaining module, for obtaining deposit corresponding with the user identifier from the information database of the described second application
The encryption information of storage;
Information deciphering module, for being decrypted using the key to the encryption information, obtains cleartext information.
5th aspect, there is provided a kind of computer equipment, the computer equipment includes processor and memory, described to deposit
Be stored with least one instruction, at least one section of program, code set or instruction set in reservoir, at least one instruction, it is described extremely
Few one section of program, the code set or described instruction collection realize such as first aspect or second aspect when being performed by the processor
The method.
A kind of 6th aspect, there is provided computer-readable recording medium, it is characterised in that the computer-readable storage medium
Be stored with least one instruction, at least one section of program, code set or instruction set in matter, at least one instruction, it is described at least
One section of program, the code set or described instruction collection realize the method as described in first aspect or second aspect when executed.
7th aspect, there is provided a kind of computer program product, when the computer program product is performed, it is used to hold
Method described in the above-mentioned first aspect of row or second aspect.
Technical solution provided in an embodiment of the present invention can bring following beneficial effect:
By the character string based on subscriber identity information, subscriber identity information is added using salt Encryption Algorithm is added
It is close, user identifier and key are obtained, information to be stored is encrypted using above-mentioned key to obtain encryption information, then by user identifier
Storage corresponding with encryption information;On the one hand, obtained after encryption information is encrypted using key, and key is by adding salt
Encryption Algorithm generation, compared to directly information to be stored is encrypted using hash algorithm after store, the embodiment of the present invention
In encryption information crack difficulty lifting, security improve;On the other hand, user identifier is also by adding salt Encryption Algorithm to generate
, and the user account number of ciphertext, so that in the stored information of the desired a certain user of acquisition, it is impossible to be directly based upon the use
The user account number at family finds corresponding information, it is necessary to which corresponding information can just be found by generating accurate user identifier so that cracks
Difficulty is further lifted, and security further improves.
Brief description of the drawings
To describe the technical solutions in the embodiments of the present invention more clearly, make required in being described below to embodiment
Attached drawing is briefly described, it should be apparent that, drawings in the following description are only some embodiments of the present invention, for
For those of ordinary skill in the art, without creative efforts, other can also be obtained according to these attached drawings
Attached drawing.
Fig. 1 is the schematic diagram of implementation environment provided by one embodiment of the present invention;
Fig. 2 is the flow chart of information storage means provided by one embodiment of the present invention;
Fig. 3 is the flow chart for the information storage means that another embodiment of the present invention provides;
Fig. 4 be the present embodiments relate to information storing process schematic diagram;
Fig. 5 is the schematic diagram of four key elements involved in information storing process provided in an embodiment of the present invention;
Fig. 6 is the flow chart of information acquisition method provided by one embodiment of the present invention;
Fig. 7 is the flow chart for the information acquisition method that another embodiment of the present invention provides;
Fig. 8 be the present embodiments relate to information access process schematic diagram;
Fig. 9 is the block diagram of information-storing device provided by one embodiment of the present invention;
Figure 10 is the block diagram of information acquisition device provided by one embodiment of the present invention;
Figure 11 is the structure diagram of computer equipment provided by one embodiment of the present invention.
Embodiment
To make the object, technical solutions and advantages of the present invention clearer, below in conjunction with attached drawing to embodiment party of the present invention
Formula is described in further detail.
Method provided in an embodiment of the present invention, the executive agent of each step can be the electricity for arbitrarily possessing data access function
Sub- equipment, such as server, terminal device, cloud device, data center apparatus, etc..In one example, when executive agent is
During server, which can be the background server of network service provider, add for carrying out safety to the information of user
Close storage management.Above-mentioned network service provider can be such as social class application, instant messaging application, pay class application, net
Any application program such as network shopping application, game application.
In one example, as shown in Figure 1, the implementation environment that the embodiment of the present invention may relate to can include:Eventually
End 110 and server 120.
Terminal 110 can be the electronic equipments such as mobile phone, tablet computer, personal computer.
Server 120 can be a server or the server cluster being made of multiple servers, either
One cloud computing service center.The server 120 can be the background server of network service provider, correspondingly, terminal 110
In can be with the application client of installation and operation network service provider, user is by above application programmatic client on backstage
Access information in server.
Implementation environment shown in above-mentioned Fig. 1 is only exemplary and explanatory, and information is except that can be stored in server 120
In outside, can also be stored in terminal 110, either synchronously store or be stored in terminal 110 and server 120 with
Have between server 120 in the miscellaneous equipment (such as cloud device, data center apparatus) of communication connection, the embodiment of the present invention pair
This is not construed as limiting.It can change with the appearance of new business scene, the storage mode of information with the development of science and technology, but this
The technical solution that inventive embodiments provide is equally applicable for the similar problems in new business scene.
In embodiments of the present invention, the particular content of the information of access is not construed as limiting, such as it can be such as user
Name, gender, the date of birth, passport NO., telephone number, kinsfolk, payroll records, work resume, log, phase
The information of storage, such as file, data is encrypted in the sensitive informations such as volume or other any need.
Please refer to Fig.2, it illustrates the flow chart of information storage means provided by one embodiment of the present invention.This method can
With including the following steps:
Step 201, the subscriber identity information in the second application by the user of the first application generation is obtained.
First application and the second application application program that to be two different, such as the first application is an instant messaging application, the
Two applications are a shopping at network application.In embodiments of the present invention, the second application is used to carry out safe encryption to the information of user
Storage management.
Subscriber identity information is the information for referring to identity of the unique mark user in the second application, and different users has
There is different subscriber identity informations, such as subscriber identity information can be user account number or other unique identifiers.In this hair
In bright embodiment, subscriber identity information of the user in the second application is generated by the first application.Alternatively, the second application is not protected
Subscriber identity information is deposited, when it needs to obtain every time subscriber identity information, calls the first application to provide it subscriber identity information.
Exemplarily, the client of the second application provides a user Quick Response Code, is called by the above-mentioned Quick Response Code of scanning recognition
User account number generation user subscriber identity information in second application of first application according to user in the second application, and will
Above-mentioned subscriber identity information is supplied to the second application.Second applies after the user's identity information is got, and can be based on should
Subscriber identity information stores information to be stored using method and step provided below, and after Stored Procedure is completed,
Without preserving subscriber identity information on the backstage of the second application.When needing to store information again or obtain information, in repetition
State flow.
Step 202, at least one wheel encryption is performed to subscriber identity information using the first salt group and obtains user identifier.
In embodiments of the present invention, using adding salt enciphered method that subscriber identity information is encrypted to obtain user identifier.Add
Salt enciphered method refers to, using information to be encrypted and a string-concatenation as salt (salt), then hold character string after splicing
Row Hash calculation obtains encrypted result.Above-mentioned salt is typically a n random numbers, and salt also referred to as encrypts salt, and n is positive integer.The
One salt group includes at least one salt, each salt can generate at random.
User identifier is also referred to as User ID (identity), is unique identification information of the user in information database.It is right
For different users, since its subscriber identity information is different, the user identifier that encryption obtains is also different, i.e., different
User has different user identifiers in information database.Information database refers to the data of the information for storing user
Storehouse, above- mentioned information store again after would generally encrypting, to lift the security of information.In information database, by user identifier and
Encrypted information corresponds to storage.
In one example, the first salt group includes a salt, and a is positive integer.Above-mentioned steps 202 can include following several
Sub-steps:
1st, i-th of salt in the i-th -1 wheel encrypted result and the first salt group is spliced, character string after splicing is performed and is once breathed out
It is uncommon that the i-th wheel encrypted result is calculated, wherein, the initial value of i is 1, as i=1, the i-th -1 wheel encrypted result (namely the 0th wheel
Encrypted result) it is subscriber identity information;
2nd, when i is less than a, i=i+1 is made, and is performed again since above-mentioned steps 1, until i terminates flow when being equal to a,
And the i-th wheel encrypted result is determined as user identifier.
Exemplarily, it is assumed that a=3, namely the first salt group include 3 salt, are denoted as salt1, salt2 and salt3 respectively,
Assuming that subscriber identity information is represented with A, user identifier is represented with User ID, then the process for generating User ID is as follows:(1) to A+
Salt1 carries out a Hash calculation and obtains B, and (2) carry out a Hash calculation to B+salt2 and obtain C, and (3) carry out C+salt3
One time Hash calculation obtains User ID.It is above-mentioned+to represent two string-concatenations.
The algorithm of above-mentioned generation user identifier is properly termed as PBKDF2 (Password-Based Key
DerivationFunction 2) algorithm.Wherein, the quantity a of salt can be advance according to the demand to complexity in the first salt group
Setting, if complexity demand is higher, the value of a is bigger, and the difficulty cracked to user identifier is also bigger.By encrypted result
Splice with salt, can be namely first of the last character of encrypted result and salt by salt splicing behind encrypted result
Character mutually splices;Encrypted result can also be spliced behind salt, namely the first of the last character of salt and encrypted result
A character mutually splices;Or both are spliced using other combinations.Algorithm can be SHA256 used by Hash calculation
Algorithm, SHA1 algorithms, MD5 (Message Digest Algorithm 5) algorithm etc., the embodiment of the present invention is not construed as limiting this.
Step 203, at least one wheel encryption is performed to subscriber identity information using second group of salt and obtains key.
In above-mentioned steps 202, user identifier, in embodiments of the present invention, key are generated based on subscriber identity information
It is to be generated based on subscriber identity information.Key is used to information to be stored be encrypted.In embodiments of the present invention, using symmetrical
Information is encrypted in Encryption Algorithm, namely encryption with decryption used by key it is identical.
Similarly, in embodiments of the present invention, using adding salt enciphered method that subscriber identity information is encrypted to obtain key.
Second salt group includes at least one salt, each salt can generate at random.Since the salt in the first salt group and the second salt group is equal
The character string being randomly generated, therefore the first salt group usually will not be identical with the salt in the second salt group.In addition, first
The quantity of salt included by salt group and the quantity of the salt included by the second salt group may be the same or different, and the present invention is implemented
Example is not construed as limiting this.
In one example, the second salt group includes b salt, and b is positive integer.Above-mentioned steps 203 can include following several
Sub-steps:
1st, j-th of the salt taken turns jth -1 in encrypted result and the second salt group splices, and character string after splicing is performed and is once breathed out
It is uncommon that jth wheel encrypted result is calculated, wherein, the initial value of j is 1, as j=1, the wheel of jth -1 encrypted result (namely the 0th wheel
Encrypted result) it is subscriber identity information;
2nd, when j is less than b, j=j+1 is made, and is performed again since above-mentioned steps 1, until j terminates flow when being equal to b,
And jth wheel encrypted result is determined as key.
Exemplarily, it is assumed that b=4, namely the second salt group include 4 salt, be denoted as respectively salt4, salt5, salt6 and
Salt7, it is assumed that subscriber identity information represents that key is represented with secret key with A, then the process for generating secretkey is as follows:
(1) Hash calculation is carried out to A+salt4 and obtains D, (2) carry out a Hash calculation to D+salt5 and obtain E, and (3) are to E+
Salt6 carries out a Hash calculation and obtains F, and (4) carry out a Hash calculation to F+salt7 and obtain secret key.Above-mentioned+table
Show two string-concatenations.
The algorithm of above-mentioned generation key is properly termed as PBKDF2 algorithms.Wherein, the quantity b of salt can basis in the second salt group
The demand of complexity is preset, if complexity demand is higher, the value of b is bigger, the difficulty cracked to key
It is bigger.Encrypted result and salt are spliced, they can splice salt behind encrypted result, namely the last character of encrypted result
Accord with and mutually splicing with the first character of salt;Can also by encrypted result splice behind salt, namely the last character of salt with
The first character of encrypted result mutually splices;Or both are spliced using other combinations.Calculated used by Hash calculation
Method can be SHA256 algorithms, SHA1 algorithms, MD5 algorithms etc., and the embodiment of the present invention is not construed as limiting this.
In addition, in embodiments of the present invention, the execution sequence of above-mentioned steps 202 and step 203 is not construed as limiting, step
203 can perform after step 202, can also be performed before step 202, or be performed at the same time with step 202.
Step 204, information to be stored is encrypted using key, obtains encryption information.
When needing to store the information of any user, the subscriber identity information based on the user generates the use of the user respectively
Family identifies and key, and then the information of the user is encrypted using the key of generation, obtains encryption information.
In embodiments of the present invention, to encryption used by symmetric encipherment algorithm be not construed as limiting, such as DES (Data
Encryption Standard, data encryption standards) algorithm, 3DES algorithms, Blowfish algorithms, RC5 algorithms, IDEA
(International Data Encryption Algorithm, international data encryption algorithm) algorithm etc..
Step 205, user identifier and encryption information are corresponded to and stored into the information database of the second application.
Alternatively, store encryption information in the database, which is properly termed as information database, by user identifier and
Encryption information is corresponded to and stored into information database.In information database, major key of the user identifier as encryption information, with right
The encryption information of different user distinguishes.Exemplarily, the data stored in information database are as shown in following table -1:
The user identifier of user 1 | The encryption information of user 1 |
The user identifier of user 2 | The encryption information of user 2 |
The user identifier of user 3 | The encryption information of user 3 |
… | … |
Table -1
In conclusion information storage means provided in an embodiment of the present invention, pass through the word based on subscriber identity information
Symbol string, using adding salt Encryption Algorithm that subscriber identity information is encrypted, obtains user identifier and key, using above-mentioned key pair
Information to be stored encrypts to obtain encryption information, and user identifier and encryption information then are corresponded to storage;On the one hand, encryption information is
Obtained after being encrypted using key, and key is by adding salt Encryption Algorithm to generate, compared to directly using Hash calculation
Method stores after information to be stored is encrypted, and the encryption information in the embodiment of the present invention cracks difficulty lifting, and security improves;
On the other hand, user identifier is also what is generated by adding salt Encryption Algorithm, and the user account number of ciphertext, so as to want to obtain
During the stored information of a certain user, it is impossible to which the user account number for being directly based upon the user finds corresponding information, it is necessary to generate
Accurate user identifier can just find corresponding information so that crack difficulty and further lifted, security further improves.
In addition, the starting content of whole information encryption storing process is subscriber identity information, and subscriber identity information be by
First application generation, when the second application needs to store the information of user, it first passes through the first application and obtains user identity letter
Breath, and the user's identity information is not to be preserved by the second application, so even the information database of the second application is stolen, due to
Hacker can not simultaneously get subscriber identity information, also cannot carry out successful decryption to the encryption information in information database.
Please refer to Fig.3, the flow chart of the information storage means provided it illustrates another embodiment of the present invention.This method
It can include the following steps:
Step 301, the subscriber identity information in the second application by the user of the first application generation is obtained.
Step 301 is identical with the step 201 in Fig. 2 embodiments, illustrates referring to the introduction in Fig. 2 embodiments, the present embodiment
This is repeated no more.
Step 302, Hash calculation at least once is performed to subscriber identity information, obtains a character string and identified as salt.
Salt mark is also referred to as salt ID, is unique identification information of the user in salt database.For different users,
Since its subscriber identity information is different, the salt mark obtained by Hash calculation is also different, i.e., different users are in salt number
According in storehouse there is different salt to identify.Salt database refers to the information of user is encrypted for storing used during storage
The database of salt (namely the first salt group mentioned above and second salt group).In salt database, salt is identified into deposit corresponding with salt
Storage.
In a kind of possible embodiment, a Hash calculation is performed to subscriber identity information, obtains character string work
Identified for salt.
In alternatively possible embodiment, first time Hash calculation is performed to subscriber identity information, obtains a character
String is used as salt;Subscriber identity information and salt are spliced, second of Hash calculation is performed to character string after splicing, obtains a character string
Identified as salt.Wherein, subscriber identity information and salt are spliced, they can splice salt behind subscriber identity information, namely
The last character of subscriber identity information is mutually spliced with the first character of salt;Subscriber identity information can also be spliced in salt
Below, namely the last character of salt and the first character of subscriber identity information mutually splice;Or use other combination sides
Formula splices both.Algorithm can be SHA256 algorithms, SHA1 algorithms, MD5 algorithms etc. used by Hash calculation, and the present invention is real
Example is applied to be not construed as limiting this.Compared to the first above-mentioned embodiment, difficulty is cracked using what the salt of present embodiment generation identified
Spend bigger.
Step 303, the first salt group and the second salt group are generated.
Each salt in the first salt group and the second salt group generates at random, namely each salt is one random
The character string of generation.First salt group includes at least one salt, and the second salt group includes at least one salt.
Alternatively, in order to lift the difficulty that cracks of user identifier and key, and then the difficulty that cracks of encryption information is lifted, the
One salt group includes at least two salt, and/or, the second salt group includes at least two salt.
Alternatively, when the first salt group includes at least two salt, which can sequentially arrange in the form of a list
Row, during at least one wheel encryption is subsequently performed to subscriber identity information using the first salt group and obtains user identifier, according to
At least two salt puts in order, and chooses salt successively and is encrypted.For example, it is assumed that the corresponding list of the first salt group includes a
A salt, the process for being encrypted to obtain user identifier to subscriber identity information using the first salt group are as follows:1st, the i-th -1 wheel is encrypted
As a result i-th of the salt splicing in list corresponding with the first salt group, performs a Hash calculation to character string after splicing and obtains i-th
Encrypted result is taken turns, wherein, the initial value of i is 1, and as i=1, the i-th -1 wheel encrypted result (namely the 0th wheel encrypted result) is to use
Family identity information;2nd, when i is less than a, i=i+1 is made, and is performed again since above-mentioned steps 1, until i terminates to flow when being equal to a
Journey, and the i-th wheel encrypted result is determined as user identifier.
Similarly, when the second salt group includes at least two salt, which can sequentially arrange in the form of a list
Row, during subsequently performing at least one wheel encryption to subscriber identity information using the second salt group and obtaining key, according to this extremely
Few two salt put in order, and choose salt successively and are encrypted.For example, it is assumed that the corresponding list of the second salt group includes b salt,
The process for being encrypted to obtain key to subscriber identity information using the second salt group is as follows:1st, jth -1 is taken turns into encrypted result and the
J-th of salt splicing in the corresponding list of disalt group, performs character string after splicing Hash calculation and obtains jth wheel encryption knot
Fruit, wherein, the initial value of j is 1, and as j=1, jth -1 is taken turns encrypted result (namely the 0th wheel encrypted result) and believed for user identity
Breath;2nd, when j is less than b, j=j+1 is made, and is performed again since above-mentioned steps 1, until j terminates flow when being equal to b, and will
Jth wheel encrypted result is determined as key.
In addition, in embodiments of the present invention, the execution sequence of above-mentioned steps 301 and step 303 is not construed as limiting, step
303 can perform after step 301, can also be performed before step 301, or be performed at the same time with step 301.
Step 304, store salt mark and the first salt group, the second salt group are corresponding.
Alternatively, salt group is stored in the database, which is properly termed as salt database, by salt mark and the first salt
Group, the second salt group are corresponded to and stored into salt database.In salt database, salt identifies the major key as salt, with to different user
Salt distinguish.Exemplarily, the data stored in salt database are as shown in following table -2:
Table -2
Step 305, at least one wheel encryption is performed to subscriber identity information using the first salt group and obtains user identifier.
Step 306, at least one wheel encryption is performed to subscriber identity information using second group of salt and obtains key.
Step 307, information to be stored is encrypted using key, obtains encryption information.
Step 308, user identifier and encryption information are corresponded to and stored into the information database of the second application.
Above-mentioned steps 305-308 is identical with the step 202-205 in Fig. 2 embodiments, referring to introducing in Fig. 2 embodiments
Bright, the present embodiment repeats no more this.
With reference to reference to figure 4, it illustrates the present embodiments relate to information storing process schematic diagram.The process is main
Including following 4 part:
1st, salt mark, storage corresponding with salt are generated
Hash calculation is performed to subscriber identity information, obtains a character string as salt;By subscriber identity information and salt
Splicing, a Hash calculation is performed to character string after splicing, is obtained a character string and is identified as salt.Master using salt mark as salt
Key, is stored in salt database, and generates corresponding with salt mark the first salt group and the second salt group, the first salt group and the second salt group
In salt generate at random.Above-mentioned part 1 is corresponding with the step 301-304 in Fig. 3 embodiments.
2nd, user identifier is generated
Subscriber identity information is encrypted to obtain user identifier using the first salt group using PBKDF2 algorithms.User is marked
Know the major key as user information, be stored in information database.Above-mentioned part 2 is opposite with the step 305 in Fig. 3 embodiments
Should.
3rd, key is generated
Subscriber identity information is encrypted to obtain key using the second salt group using PBKDF2 algorithms.Above-mentioned third portion
It is corresponding with the step 306 in Fig. 3 embodiments.
4th, encryption storage
When there is the information to be stored of user, information to be stored is encrypted using key, obtains encryption information, will then added
Confidential information storage corresponding with user identifier in information database.Above-mentioned 4th part and the step 307-308 in Fig. 3 embodiments
It is corresponding.
As shown in figure 5, in embodiments of the present invention, following 4 partial content is arrived involved in information storing process:User identity
Information 51, salt database 52, information database 53, encryption logic code 54.Encryption logic code is used for realization above-mentioned Fig. 2 and figure
Each method and step in 3 embodiments.Each separate storage, hacker need to such as carry out encrypted information above-mentioned 4 partial content
Crack, then need at the same time to get this 4 partial content, cracking difficulty will be greatly improved.
In conclusion information storage means provided in an embodiment of the present invention, pass through the word based on subscriber identity information
Symbol string, using adding salt Encryption Algorithm that subscriber identity information is encrypted, obtains user identifier and key, using above-mentioned key pair
Information to be stored encrypts to obtain encryption information, and user identifier and encryption information then are corresponded to storage;On the one hand, encryption information is
Obtained after being encrypted using key, and key is by adding salt Encryption Algorithm to generate, compared to directly using Hash calculation
Method stores after information to be stored is encrypted, and the encryption information in the embodiment of the present invention cracks difficulty lifting, and security improves;
On the other hand, user identifier is also what is generated by adding salt Encryption Algorithm, and the user account number of ciphertext, so as to want to obtain
During the stored information of a certain user, it is impossible to which the user account number for being directly based upon the user finds corresponding information, it is necessary to generate
Accurate user identifier can just find corresponding information so that crack difficulty and further lifted, security further improves.
Fig. 6 is refer to, it illustrates the flow chart of information acquisition method provided by one embodiment of the present invention.This method can
With including the following steps:
Step 601, the subscriber identity information in the second application by the user of the first application generation is obtained.
First application and the second application application program that to be two different, such as the first application is an instant messaging application, the
Two applications are a shopping at network application.In embodiments of the present invention, the second application is used to carry out safe encryption to the information of user
Storage management.
Subscriber identity information is the information for referring to identity of the unique mark user in the second application, and different users has
There is different subscriber identity informations, such as subscriber identity information can be user account number or other unique identifiers.In this hair
In bright embodiment, subscriber identity information of the user in the second application is generated by the first application.Alternatively, the second application is not protected
Subscriber identity information is deposited, when it needs to obtain every time subscriber identity information, calls the first application to provide it subscriber identity information.
Exemplarily, the client of the second application provides a user Quick Response Code, is called by the above-mentioned Quick Response Code of scanning recognition
User account number generation user subscriber identity information in second application of first application according to user in the second application, and will
Above-mentioned subscriber identity information is supplied to the second application.Second applies after the user's identity information is got, and can be based on should
Subscriber identity information using method and step provided below decryption obtain the stored information of user, and complete obtain flow it
Afterwards, without preserving subscriber identity information on the backstage of the second application.When needing to obtain information or storage information again, repeat
Above-mentioned flow.
Step 602, at least one wheel encryption is performed to subscriber identity information using the first salt group and obtains user identifier.
In embodiments of the present invention, using adding salt enciphered method that subscriber identity information is encrypted to obtain user identifier.Add
Salt enciphered method refers to, using information to be encrypted and a string-concatenation as salt (salt), then hold character string after splicing
Row Hash calculation obtains encrypted result.Above-mentioned salt is typically a n random numbers, and salt also referred to as encrypts salt, and n is positive integer.The
One salt group includes at least one salt, each salt can generate at random.
User identifier is also referred to as User ID, is unique identification information of the user in information database.For different use
For family, since its subscriber identity information is different, the user identifier that encryption obtains is also different, i.e., different users are in information
There is different user identifiers in database.Information database refers to the database of the information for storing user, above- mentioned information
Stored again after would generally encrypting, to lift the security of information.In information database, by user identifier and encrypted information
Corresponding storage.
In one example, the first salt group includes a salt, and a is positive integer.Above-mentioned steps 602 can include following several
Sub-steps:
1st, i-th of salt in the i-th -1 wheel encrypted result and the first salt group is spliced, character string after splicing is performed and is once breathed out
It is uncommon that the i-th wheel encrypted result is calculated, wherein, the initial value of i is 1, as i=1, the i-th -1 wheel encrypted result (namely the 0th wheel
Encrypted result) it is subscriber identity information;
2nd, when i is less than a, i=i+1 is made, and is performed again since above-mentioned steps 1, until when i is equal to a, terminates stream
Journey, and the i-th wheel encrypted result is determined as user identifier.
Exemplarily, it is assumed that a=3, namely the first salt group include 3 salt, are denoted as salt1, salt2 and salt3 respectively,
Assuming that subscriber identity information is represented with A, user identifier is represented with User ID, then the process for generating User ID is as follows:(1) to A+
Salt1 carries out a Hash calculation and obtains B, and (2) carry out a Hash calculation to B+salt2 and obtain C, and (3) carry out C+salt3
One time Hash calculation obtains User ID.It is above-mentioned+to represent two string-concatenations.
The algorithm of above-mentioned generation user identifier is properly termed as PBKDF2 algorithms.Wherein, the quantity a of salt can be with the first salt group
Preset according to the demand to complexity, if complexity demand is higher, the value of a is bigger, and user identifier is cracked
Difficulty it is also bigger.Encrypted result and salt are spliced, can splice salt behind encrypted result, namely encrypted result is most
The latter character and the first character of salt mutually splice;Can also by encrypted result splice behind salt, namely salt last
A character and the first character of encrypted result mutually splice;Or both are spliced using other combinations.Hash calculation institute
The algorithm of use can be SHA256 algorithms, SHA1 algorithms, MD5 algorithms etc., and the embodiment of the present invention is not construed as limiting this.
Step 603, at least one wheel encryption is performed to subscriber identity information using second group of salt and obtains key.
In above-mentioned steps 602, user identifier, in embodiments of the present invention, key are generated based on subscriber identity information
It is to be generated based on subscriber identity information.In embodiments of the present invention, information to be stored is encrypted using symmetric encipherment algorithm,
Namely key is identical used by encrypting with decryption.Therefore, key is also used in addition to for information to be stored to be encrypted
Encryption information is decrypted to obtain cleartext information.
Similarly, in embodiments of the present invention, using adding salt enciphered method that subscriber identity information is encrypted to obtain key.
Second salt group includes at least one salt, each salt can generate at random.Since the salt in the first salt group and the second salt group is equal
The character string being randomly generated, therefore the first salt group usually will not be identical with the salt in the second salt group.In addition, first
The quantity of salt included by salt group and the quantity of the salt included by the second salt group may be the same or different, and the present invention is implemented
Example is not construed as limiting this.
In one example, the second salt group includes b salt, and b is positive integer.Above-mentioned steps 603 can include following several
Sub-steps:
1st, j-th of the salt taken turns jth -1 in encrypted result and the second salt group splices, and character string after splicing is performed and is once breathed out
It is uncommon that jth wheel encrypted result is calculated, wherein, the initial value of j is 1, as j=1, the wheel of jth -1 encrypted result (namely the 0th wheel
Encrypted result) it is subscriber identity information;
2nd, when j is less than b, j=j+1 is made, and is performed again since above-mentioned steps 1, until j terminates flow when being equal to b,
And jth wheel encrypted result is determined as key.
Exemplarily, it is assumed that b=4, namely the second salt group include 4 salt, be denoted as respectively salt4, salt5, salt6 and
Salt7, it is assumed that subscriber identity information represents that key is represented with secret key with A, then the process for generating secretkey is as follows:
(1) Hash calculation is carried out to A+salt4 and obtains D, (2) carry out a Hash calculation to D+salt5 and obtain E, and (3) are to E+
Salt6 carries out a Hash calculation and obtains F, and (4) carry out a Hash calculation to F+salt7 and obtain secret key.Above-mentioned+table
Show two string-concatenations.
The algorithm of above-mentioned generation key is properly termed as PBKDF2 algorithms.Wherein, the quantity b of salt can basis in the second salt group
The demand of complexity is preset, if complexity demand is higher, the value of b is bigger, the difficulty cracked to key
It is bigger.Encrypted result and salt are spliced, they can splice salt behind encrypted result, namely the last character of encrypted result
Accord with and mutually splicing with the first character of salt;Can also by encrypted result splice behind salt, namely the last character of salt with
The first character of encrypted result mutually splices;Or both are spliced using other combinations.Calculated used by Hash calculation
Method can be SHA256 algorithms, SHA1 algorithms, MD5 algorithms etc., and the embodiment of the present invention is not construed as limiting this.
In addition, in embodiments of the present invention, the execution sequence of above-mentioned steps 602 and step 603 is not construed as limiting, step
603 can perform after step 602, can also be performed before step 602, or be performed at the same time with step 602.
Step 604, the encryption information of storage corresponding with user identifier is obtained from the information database of the second application.
When needing to obtain the information of any user, the subscriber identity information based on the user generates the use of the user respectively
Family identifies and key, and then using the user identifier of the user as major key, the user with the user is obtained from information database
The encryption information of the corresponding storage of mark, which is the encrypted information of the user.
Step 605, decrypted using key pair encryption information, obtain cleartext information.
It is corresponding using used Encryption Algorithm when generating encryption information with encryption after encryption information is got
Decipherment algorithm, is decrypted using key pair encryption information, obtains cleartext information.
In conclusion information acquisition method provided in an embodiment of the present invention, passes through the word based on subscriber identity information
Symbol string, using adding salt Encryption Algorithm that subscriber identity information is encrypted, obtains user identifier and key, is marked using above-mentioned user
Know and obtain corresponding encryption information, then decrypt to obtain cleartext information using key pair encryption information;On the one hand, cleartext information needs
To be decrypted to obtain using key, and key is by adding salt Encryption Algorithm to generate, compared to directly using hash algorithm
Stored after information is encrypted, the encryption information in the embodiment of the present invention cracks difficulty lifting, and security improves;The opposing party
Face, user identifier is also what is generated by adding salt Encryption Algorithm, and the user account number of ciphertext, so as to want to obtain a certain use
During the stored information in family, it is impossible to which the user account number for being directly based upon the user finds corresponding information, it is necessary to generate accurately
User identifier can just find corresponding information so that crack difficulty and further lifted, security further improves.
Fig. 7 is refer to, the flow chart of the information acquisition method provided it illustrates another embodiment of the present invention.This method
It can include the following steps:
Step 701, the subscriber identity information in the second application by the user of the first application generation is obtained.
Step 701 is identical with the step 601 in Fig. 6 embodiments, illustrates referring to the introduction in Fig. 6 embodiments, the present embodiment
This is repeated no more.
Step 702, Hash calculation at least once is performed to subscriber identity information, obtains a character string and identified as salt.
Salt mark is also referred to as salt ID, is unique identification information of the user in salt database.For different users,
Since its subscriber identity information is different, the salt mark obtained by Hash calculation is also different, i.e., different users are in salt number
According in storehouse there is different salt to identify.Salt database refers to the information of user is encrypted for storing used during storage
The database of salt (namely the first salt group mentioned above and second salt group).In salt database, salt is identified into deposit corresponding with salt
Storage.
In a kind of possible embodiment, a Hash calculation is performed to subscriber identity information, obtains character string work
Identified for salt.
In alternatively possible embodiment, first time Hash calculation is performed to subscriber identity information, obtains a character
String is used as salt;Subscriber identity information and salt are spliced, second of Hash calculation is performed to character string after splicing, obtains a character string
Identified as salt.Wherein, subscriber identity information and salt are spliced, they can splice salt behind subscriber identity information, namely
The last character of subscriber identity information is mutually spliced with the first character of salt;Subscriber identity information can also be spliced in salt
Below, namely the last character of salt and the first character of subscriber identity information mutually splice;Or use other combination sides
Formula splices both.Algorithm can be SHA256 algorithms, SHA1 algorithms, MD5 algorithms etc. used by Hash calculation, and the present invention is real
Example is applied to be not construed as limiting this.Compared to the first above-mentioned embodiment, difficulty is cracked using what the salt of present embodiment generation identified
Spend bigger.
Step 703, the first salt group and the second salt group of storage corresponding with salt mark are obtained.
Each salt in first salt group and the second salt group generates at random, namely each salt is a random generation
Character string.First salt group includes at least one salt, and the second salt group includes at least one salt.
When needing to obtain the salt of any user, major key is used as using the salt of the user mark, obtained from salt database and
The the first salt group and the second salt group of the corresponding storage of salt mark of the user, above-mentioned the first salt group got and the second salt group are
The salt used when the user identifier and key that generate the user, in follow-up decrypting process, equally using first salt
Group and the second salt group generate the user identifier and key of the user.
Step 704, at least one wheel encryption is performed to subscriber identity information using the first salt group and obtains user identifier.
Step 705, at least one wheel encryption is performed to subscriber identity information using second group of salt and obtains key.
Step 706, the encryption information of storage corresponding with user identifier is obtained from the information database of the second application.
Step 707, decrypted using key pair encryption information, obtain cleartext information.
Above-mentioned steps 704-707 is identical with the step 602-605 in Fig. 6 embodiments, referring to introducing in Fig. 6 embodiments
Bright, the present embodiment repeats no more this.
With reference to reference to figure 8, it illustrates the present embodiments relate to information access process schematic diagram.The process is main
Including following 4 part:
1st, salt mark is generated, inquiry salt database obtains corresponding salt
Hash calculation is performed to subscriber identity information, obtains a character string as salt;By subscriber identity information and salt
Splicing, a Hash calculation is performed to character string after splicing, is obtained a character string and is identified as salt.Using salt mark as major key,
Corresponding with salt mark the first salt group and the second salt group are obtained from salt database.In above-mentioned part 1 and Fig. 7 embodiments
Step 701-703 is corresponding.
2nd, user identifier is generated
Subscriber identity information is encrypted to obtain user identifier using the first salt group using PBKDF2 algorithms.Marked with user
Knowledge is used as major key, and encryption information corresponding with user identifier is obtained from information database.Above-mentioned part 2 and Fig. 7 embodiments
In step 704 it is corresponding.
3rd, key is generated
Subscriber identity information is encrypted to obtain key using the second salt group using PBKDF2 algorithms.Above-mentioned third portion
It is corresponding with the step 705 in Fig. 7 embodiments.
4th, decrypting process
The encryption information got is decrypted using key, obtains cleartext information.Implement with Fig. 7 above-mentioned 4th part
Step 706-707 in example is corresponding.
In conclusion information acquisition method provided in an embodiment of the present invention, passes through the word based on subscriber identity information
Symbol string, using adding salt Encryption Algorithm that subscriber identity information is encrypted, obtains user identifier and key, is marked using above-mentioned user
Know and obtain corresponding encryption information, then decrypt to obtain cleartext information using key pair encryption information;On the one hand, cleartext information needs
To be decrypted to obtain using key, and key is by adding salt Encryption Algorithm to generate, compared to directly using hash algorithm
Stored after information is encrypted, the encryption information in the embodiment of the present invention cracks difficulty lifting, and security improves;The opposing party
Face, user identifier is also what is generated by adding salt Encryption Algorithm, and the user account number of ciphertext, so as to want to obtain a certain use
During the stored information in family, it is impossible to which the user account number for being directly based upon the user finds corresponding information, it is necessary to generate accurately
User identifier can just find corresponding information so that crack difficulty and further lifted, security further improves.
Following is apparatus of the present invention embodiment, can be used for performing the method for the present invention embodiment.It is real for apparatus of the present invention
The details not disclosed in example is applied, refer to the method for the present invention embodiment.
Fig. 9 is refer to, it illustrates the block diagram of information-storing device provided by one embodiment of the present invention.The device has
Realize the function for the information storage means that above method example provides, the function can be by hardware realization, can also be by hardware
Corresponding software is performed to realize.The device can include:Data obtaining module 910, the first encrypting module 920, second encryption mould
Block 930, the 3rd encrypting module 940 and information storage module 950.
Data obtaining module 910, is believed for obtaining by user identity of the user of the first application generation in the second application
Breath.
First encrypting module 920, is encrypted for being performed at least one wheel to the subscriber identity information using the first salt group
To user identifier, the first salt group includes at least one salt.
Second encrypting module 930, obtains at least one wheel encryption of subscriber identity information execution using second group of salt close
Key, the second salt group include at least one salt.
3rd encrypting module 940, for being encrypted using the key to information to be stored, obtains encryption information.
Information storage module 950, is answered for corresponding to store to described second the user identifier and the encryption information
In information database.
In conclusion information-storing device provided in an embodiment of the present invention, passes through the word based on subscriber identity information
Symbol string, using adding salt Encryption Algorithm that subscriber identity information is encrypted, obtains user identifier and key, using above-mentioned key pair
Information to be stored encrypts to obtain encryption information, and user identifier and encryption information then are corresponded to storage;On the one hand, encryption information is
Obtained after being encrypted using key, and key is by adding salt Encryption Algorithm to generate, compared to directly using Hash calculation
Method stores after information to be stored is encrypted, and the encryption information in the embodiment of the present invention cracks difficulty lifting, and security improves;
On the other hand, user identifier is also what is generated by adding salt Encryption Algorithm, and the user account number of ciphertext, so as to want to obtain
During the stored information of a certain user, it is impossible to which the user account number for being directly based upon the user finds corresponding information, it is necessary to generate
Accurate user identifier can just find corresponding information so that crack difficulty and further lifted, security further improves.
In the alternative embodiment provided based on Fig. 9 embodiments, the first salt group includes a salt, and a is
Positive integer;
First encrypting module 920, is used for:
I-th of salt in i-th -1 wheel encrypted result and the first salt group is spliced, character string after splicing is performed once
Hash calculation obtains the i-th wheel encrypted result, wherein, the initial value of the i is 1, as i=1, the i-th -1 wheel encrypted result
For the subscriber identity information;
When i is less than a, make i=i+1, and again from it is described by the i-th -1 wheel encrypted result and the first salt group the
I salt splicing, performs a step of Hash calculation obtains the i-th wheel encrypted result to character string after splicing and starts to perform, until i
Terminate flow during equal to a, and the described i-th wheel encrypted result is determined as the user identifier.
In another alternative embodiment provided based on Fig. 9 embodiments, the second salt group includes b salt, the b
For positive integer;
Second encrypting module 930, is used for:
J-th of salt jth -1 taken turns in encrypted result and the second salt group splices, and character string after splicing is performed once
Hash calculation obtains jth wheel encrypted result, wherein, the initial value of the j is 1, and as j=1, the jth -1 takes turns encrypted result
For the subscriber identity information;
When j is less than b, make j=j+1, and again from it is described jth -1 taken turns in encrypted result and the second salt group the
J salt splicing, performs a step of Hash calculation obtains jth wheel encrypted result to character string after splicing and starts to perform, until j
Terminate flow during equal to b, and the jth wheel encrypted result is determined as the key.
In another alternative embodiment provided based on Fig. 9 embodiments, described device further includes:Salt generation module, salt
Identifier generation module and salt memory module (not shown).
Salt generation module, for generating the first salt group and the second salt group, wherein, the first salt group and described
Each salt in second salt group generates at random.
Salt identifier generation module, for performing Hash calculation at least once to the subscriber identity information, obtains a character
String is identified as salt.
Salt memory module, for storing salt mark and the first salt group, the second salt group are corresponding.
Alternatively, salt identifier generation module, for performing first time Hash calculation to the subscriber identity information, obtains one
Character string is as salt;The subscriber identity information and the salt are spliced, second of Hash calculation is performed to character string after splicing,
A character string is obtained to identify as the salt.
0 is please referred to Fig.1, it illustrates the block diagram of information acquisition device provided by one embodiment of the present invention.The device has
There is the function of realizing the information acquisition method that above method example provides, the function can be by hardware realization, can also be by hard
Part performs corresponding software and realizes.The device can include:Data obtaining module 1010, the first encrypting module 1020, second add
Close module 1030, data obtaining module 1040 and information deciphering module 1050.
Data obtaining module 1010, is believed for obtaining by user identity of the user of the first application generation in the second application
Breath.
First encrypting module 1020, is encrypted for being performed at least one wheel to the subscriber identity information using the first salt group
To user identifier, the first salt group includes at least one salt.
Second encrypting module 1030, is encrypted for being performed at least one wheel to the subscriber identity information using second group of salt
To key, the second salt group includes at least one salt.
Data obtaining module 1040, for being obtained and the user identifier pair from the information database of the described second application
The encryption information that should be stored.
Information deciphering module 1050, for being decrypted using the key to the encryption information, obtains cleartext information.
In conclusion information acquisition device provided in an embodiment of the present invention, passes through the word based on subscriber identity information
Symbol string, using adding salt Encryption Algorithm that subscriber identity information is encrypted, obtains user identifier and key, is marked using above-mentioned user
Know and obtain corresponding encryption information, then decrypt to obtain cleartext information using key pair encryption information;On the one hand, cleartext information needs
To be decrypted to obtain using key, and key is by adding salt Encryption Algorithm to generate, compared to directly using hash algorithm
Stored after information is encrypted, the encryption information in the embodiment of the present invention cracks difficulty lifting, and security improves;The opposing party
Face, user identifier is also what is generated by adding salt Encryption Algorithm, and the user account number of ciphertext, so as to want to obtain a certain use
During the stored information in family, it is impossible to which the user account number for being directly based upon the user finds corresponding information, it is necessary to generate accurately
User identifier can just find corresponding information so that crack difficulty and further lifted, security further improves.
In the alternative embodiment provided based on Figure 10 embodiments, the first salt group includes a salt, a
For positive integer;
First encrypting module 1020, is used for:
I-th of salt in i-th -1 wheel encrypted result and the first salt group is spliced, character string after splicing is performed once
Hash calculation obtains the i-th wheel encrypted result, wherein, the initial value of the i is 1, as i=1, the i-th -1 wheel encrypted result
For the subscriber identity information;
When i is less than a, make i=i+1, and again from it is described by the i-th -1 wheel encrypted result and the first salt group the
I salt splicing, performs a step of Hash calculation obtains the i-th wheel encrypted result to character string after splicing and starts to perform, until i
Terminate flow during equal to a, and the described i-th wheel encrypted result is determined as the user identifier.
In another alternative embodiment provided based on Figure 10 embodiments, the second salt group includes b salt, described
B is positive integer;
Second encrypting module 1030, is used for:
J-th of salt jth -1 taken turns in encrypted result and the second salt group splices, and character string after splicing is performed once
Hash calculation obtains jth wheel encrypted result, wherein, the initial value of the j is 1, and as j=1, the jth -1 takes turns encrypted result
For the subscriber identity information;
When j is less than b, make j=j+1, and again from it is described jth -1 taken turns in encrypted result and the second salt group the
J salt splicing, performs a step of Hash calculation obtains jth wheel encrypted result to character string after splicing and starts to perform, until j
Terminate flow during equal to b, and the jth wheel encrypted result is determined as the key.
In another alternative embodiment provided based on Figure 10 embodiments, described device further includes:Salt mark generation mould
Block and salt acquisition module (not shown).
Salt identifier generation module, for performing Hash calculation at least once to the subscriber identity information, obtains a character
String is identified as salt.
Salt acquisition module, the first salt group and the second salt group for acquisition storage corresponding with salt mark,
Wherein, each salt in the first salt group and the second salt group generates at random.
Alternatively, salt identifier generation module, is used for:First time Hash calculation is performed to the subscriber identity information, is obtained
One character string is as salt;The subscriber identity information and the salt are spliced, second of Hash meter is performed to character string after splicing
Calculate, obtain a character string and identified as the salt.
It should be noted that above-described embodiment provide device when realizing its function, only with above-mentioned each function module
Division for example, in practical application, can be completed as needed and by above-mentioned function distribution by different function modules,
The internal structure of equipment is divided into different function modules, to complete all or part of function described above.In addition,
The apparatus and method embodiment that above-described embodiment provides belongs to same design, its specific implementation process refers to embodiment of the method, this
In repeat no more.
1 is please referred to Fig.1, it illustrates the structure diagram of computer equipment provided by one embodiment of the present invention.For example,
The computer equipment can be server, the method for implementing above-described embodiment offer.Specifically:
The computer equipment 1100 includes central processing unit (CPU) 1101 including random access memory (RAM)
1102 and the system storage 1104 of read-only storage (ROM) 1103, and connection system storage 1104 and central processing list
The system bus 1105 of member 1101.The computer equipment 1100 transmits letter between further including each device helped in computer
The basic input/output (I/O systems) 1106 of breath, and for storage program area 1113, application program 1114 and other
The mass-memory unit 1107 of program module 1115.
The basic input/output 1106 includes the display 1108 for showing information and is inputted for user
The input equipment 1109 of such as mouse, keyboard etc of information.Wherein described display 1108 and input equipment 1109 all pass through
The input and output controller 1110 for being connected to system bus 1105 is connected to central processing unit 1101.The basic input/defeated
Going out system 1106 can also touch including input and output controller 1110 for receiving and handling from keyboard, mouse or electronics
Control the input of multiple other equipments such as pen.Similarly, input and output controller 1110 also provide output to display screen, printer or
Other kinds of output equipment.
The mass-memory unit 1107 (is not shown by being connected to the bulk memory controller of system bus 1105
Go out) it is connected to central processing unit 1101.The mass-memory unit 1107 and its associated computer-readable medium are
Computer equipment 1100 provides non-volatile memories.That is, the mass-memory unit 1107 can include it is such as hard
The computer-readable medium (not shown) of disk or CD-ROM drive etc.
Without loss of generality, the computer-readable medium can include computer storage media and communication media.Computer
Storage medium is included for information such as storage computer-readable instruction, data structure, program module or other data
The volatile and non-volatile of any method or technique realization, removable and irremovable medium.Computer-readable storage medium includes
RAM, ROM, EPROM, EEPROM, flash memory or other solid-state storages its technologies, CD-ROM, DVD or other optical storages, tape
Box, tape, disk storage or other magnetic storage apparatus.Certainly, skilled person will appreciate that the computer-readable storage medium
It is not limited to above-mentioned several.Above-mentioned system storage 1104 and mass-memory unit 1107 may be collectively referred to as memory.
According to various embodiments of the present invention, the computer equipment 1100 can also be connected by networks such as internets
The remote computer operation being connected on network.Namely computer equipment 1100 can be by being connected on the system bus 1105
Network Interface Unit 1111 be connected to network 1112, in other words, it can also be connected to using Network Interface Unit 1111
The network or remote computer system of his type.
It is stored with least one instruction, at least one section of program, code set or instruction set in the memory, described at least one
Bar instruction, at least one section of program, code set or instruction set are configured to by one or the execution of more than one processor, to realize
Above- mentioned information storage method or information acquisition method.
In the exemplary embodiment, a kind of computer-readable recording medium is additionally provided, is stored with the storage medium
At least one instruction, at least one section of program, code set or instruction set, at least one instruction, at least one section of program, the institute
State code set or described instruction collection and realize such as above-mentioned information storage means or letter when being performed by the processor of computer equipment
Cease the function of each step in acquisition methods.
Alternatively, above computer readable storage medium storing program for executing can be ROM, random access memory (RAM), CD-ROM, magnetic
Band, floppy disk and optical data storage devices etc..
It should be appreciated that referenced herein " multiple " refer to two or more."and/or", description association
The incidence relation of object, expression may have three kinds of relations, for example, A and/or B, can represent:Individualism A, while there are A
And B, individualism B these three situations.It is a kind of relation of "or" that character "/", which typicallys represent forward-backward correlation object,.
The embodiments of the present invention are for illustration only, do not represent the quality of embodiment.
The foregoing is merely the exemplary embodiment of the present invention, it is not intended to limit the invention, all spirit in the present invention
Within principle, any modification, equivalent replacement, improvement and so on, should all be included in the protection scope of the present invention.
Claims (14)
- A kind of 1. information storage means, it is characterised in that the described method includes:Obtain the subscriber identity information in the second application by the user of the first application generation;At least one wheel encryption is performed to the subscriber identity information using the first salt group and obtains user identifier, in the first salt group Including at least one salt;At least one wheel encryption is performed to the subscriber identity information using second group of salt and obtains key, the second salt group includes At least one salt;Information to be stored is encrypted using the key, obtains encryption information;The user identifier and the encryption information are corresponded to and stored into the information database of the described second application.
- 2. according to the method described in claim 1, it is characterized in that, the first salt group includes a salt, a is just whole Number;It is described that user identifier is obtained at least one wheel encryption of subscriber identity information execution using the first salt group, including:I-th of salt in i-th -1 wheel encrypted result and the first salt group is spliced, a Hash is performed to character string after splicing The i-th wheel encrypted result is calculated, wherein, the initial value of the i is 1, and as i=1, the i-th -1 wheel encrypted result is institute State subscriber identity information;When i is less than a, i=i+1 is made, and again from i-th by the i-th -1 wheel encrypted result and the first salt group Salt splices, and performing a step of Hash calculation obtains the i-th wheel encrypted result to character string after splicing starts to perform, until i etc. Terminate flow when a, and the described i-th wheel encrypted result is determined as the user identifier.
- 3. according to the method described in claim 1, it is characterized in that, the second salt group includes b salt, the b is just whole Number;It is described that key is obtained at least one wheel encryption of subscriber identity information execution using second group of salt, including:J-th of salt jth -1 taken turns in encrypted result and the second salt group splices, and a Hash is performed to character string after splicing Jth wheel encrypted result is calculated, wherein, the initial value of the j is 1, and as j=1, it is institute that the jth -1, which takes turns encrypted result, State subscriber identity information;When j is less than b, j=j+1 is made, and again from j-th taken turns jth -1 in encrypted result and the second salt group Salt splices, and performing a step of Hash calculation obtains jth wheel encrypted result to character string after splicing starts to perform, until j etc. Terminate flow when b, and the jth wheel encrypted result is determined as the key.
- 4. method according to any one of claims 1 to 3, it is characterised in that the method further includes:The first salt group and the second salt group are generated, wherein, each in the first salt group and the second salt group Salt generates at random;Hash calculation at least once is performed to the subscriber identity information, a character string is obtained and is identified as salt;Store salt mark and the first salt group, the second salt group are corresponding.
- 5. according to the method described in claim 4, it is characterized in that, described performed to the subscriber identity information is breathed out at least once It is uncommon to calculate, obtain a character string and identified as salt, including:First time Hash calculation is performed to the subscriber identity information, obtains a character string as salt;The subscriber identity information and the salt are spliced, second of Hash calculation is performed to character string after splicing, obtains a word Symbol string is identified as the salt.
- A kind of 6. information acquisition method, it is characterised in that the described method includes:Obtain the subscriber identity information in the second application by the user of the first application generation;At least one wheel encryption is performed to the subscriber identity information using the first salt group and obtains user identifier, in the first salt group Including at least one salt;At least one wheel encryption is performed to the subscriber identity information using second group of salt and obtains key, the second salt group includes At least one salt;The encryption information of storage corresponding with the user identifier is obtained from the information database of the described second application;The encryption information is decrypted using the key, obtains cleartext information.
- 7. according to the method described in claim 6, it is characterized in that, the first salt group includes a salt, a is just whole Number;It is described that user identifier is obtained at least one wheel encryption of subscriber identity information execution using the first salt group, including:I-th of salt in i-th -1 wheel encrypted result and the first salt group is spliced, a Hash is performed to character string after splicing The i-th wheel encrypted result is calculated, wherein, the initial value of the i is 1, and as i=1, the i-th -1 wheel encrypted result is institute State subscriber identity information;When i is less than a, i=i+1 is made, and again from i-th by the i-th -1 wheel encrypted result and the first salt group Salt splices, and performing a step of Hash calculation obtains the i-th wheel encrypted result to character string after splicing starts to perform, until i etc. Terminate flow when a, and the described i-th wheel encrypted result is determined as the user identifier.
- 8. according to the method described in claim 6, it is characterized in that, the second salt group includes b salt, the b is just whole Number;It is described that key is obtained at least one wheel encryption of subscriber identity information execution using second group of salt, including:J-th of salt jth -1 taken turns in encrypted result and the second salt group splices, and a Hash is performed to character string after splicing Jth wheel encrypted result is calculated, wherein, the initial value of the j is 1, and as j=1, it is institute that the jth -1, which takes turns encrypted result, State subscriber identity information;When j is less than b, j=j+1 is made, and again from j-th taken turns jth -1 in encrypted result and the second salt group Salt splices, and performing a step of Hash calculation obtains jth wheel encrypted result to character string after splicing starts to perform, until j etc. Terminate flow when b, and the jth wheel encrypted result is determined as the key.
- 9. according to claim 6 to 8 any one of them method, it is characterised in that described to obtain by the use of the first application generation After subscriber identity information of the family in the second application, further include:Hash calculation at least once is performed to the subscriber identity information, a character string is obtained and is identified as salt;Obtain the first salt group of corresponding with salt mark storage and the second salt group, wherein, the first salt group with Each salt in the second salt group generates at random.
- 10. according to the method described in claim 9, it is characterized in that, described perform at least once the subscriber identity information Hash calculation, obtains a character string and is identified as salt, including:First time Hash calculation is performed to the subscriber identity information, obtains a character string as salt;The subscriber identity information and the salt are spliced, second of Hash calculation is performed to character string after splicing, obtains a word Symbol string is identified as the salt.
- 11. a kind of information-storing device, it is characterised in that described device includes:Data obtaining module, for obtaining the subscriber identity information by the user of the first application generation in the second application;First encrypting module, user's mark is obtained for performing at least one wheel encryption to the subscriber identity information using the first salt group Know, the first salt group includes at least one salt;Second encrypting module, key is obtained for performing at least one wheel encryption to the subscriber identity information using second group of salt, The second salt group includes at least one salt;3rd encrypting module, for being encrypted using the key to information to be stored, obtains encryption information;Information storage module, stores to the information of the described second application for the user identifier and the encryption information to be corresponded to In database.
- 12. a kind of information acquisition device, it is characterised in that described device includes:Data obtaining module, for obtaining the subscriber identity information by the user of the first application generation in the second application;First encrypting module, user's mark is obtained for performing at least one wheel encryption to the subscriber identity information using the first salt group Know, the first salt group includes at least one salt;Second encrypting module, key is obtained for performing at least one wheel encryption to the subscriber identity information using second group of salt, The second salt group includes at least one salt;Data obtaining module, for obtaining storage corresponding with the user identifier from the information database of the described second application Encryption information;Information deciphering module, for being decrypted using the key to the encryption information, obtains cleartext information.
- 13. a kind of computer equipment, it is characterised in that the computer equipment includes processor and memory, the memory In be stored with least one instruction, at least one section of program, code set or instruction set, at least one instruction, described at least one Duan Chengxu, the code set or described instruction collection are realized such as any one of claims 1 to 10 institute when being performed by the processor The method stated.
- 14. a kind of computer-readable recording medium, it is characterised in that at least one is stored with the computer-readable recording medium Bar instruction, at least one section of program, code set or instruction set, at least one instruction, at least one section of program, the code Collection or described instruction collection are realized such as claims 1 to 10 any one of them method when executed.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711179733.6A CN107948152B (en) | 2017-11-23 | 2017-11-23 | Information storage method, information acquisition method, information storage device, information acquisition device and information acquisition equipment |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711179733.6A CN107948152B (en) | 2017-11-23 | 2017-11-23 | Information storage method, information acquisition method, information storage device, information acquisition device and information acquisition equipment |
Publications (2)
Publication Number | Publication Date |
---|---|
CN107948152A true CN107948152A (en) | 2018-04-20 |
CN107948152B CN107948152B (en) | 2021-05-14 |
Family
ID=61930868
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201711179733.6A Active CN107948152B (en) | 2017-11-23 | 2017-11-23 | Information storage method, information acquisition method, information storage device, information acquisition device and information acquisition equipment |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN107948152B (en) |
Cited By (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108616533A (en) * | 2018-04-27 | 2018-10-02 | 正方软件股份有限公司 | Sensitive data encryption method and device |
CN109599170A (en) * | 2018-12-05 | 2019-04-09 | 易必祥 | Medical management method and system based on big data |
CN109670329A (en) * | 2018-12-28 | 2019-04-23 | 东信和平科技股份有限公司 | A kind of safe lead-in and lead-out method of server data and server |
CN109858255A (en) * | 2018-12-19 | 2019-06-07 | 杭州安恒信息技术股份有限公司 | Data encryption storage method, device and realization device |
CN110008745A (en) * | 2019-03-29 | 2019-07-12 | 深圳供电局有限公司 | Encryption method, computer equipment and computer storage medium |
CN110048835A (en) * | 2019-03-27 | 2019-07-23 | 北京三快在线科技有限公司 | The method and apparatus of encryption, storage medium |
CN110717827A (en) * | 2019-09-03 | 2020-01-21 | 网联清算有限公司 | Database determination method and device and transaction processing system |
CN110781419A (en) * | 2020-01-02 | 2020-02-11 | 成都四方伟业软件股份有限公司 | Multi-system cooperative use method based on block chain |
CN111062047A (en) * | 2019-12-25 | 2020-04-24 | 中国联合网络通信集团有限公司 | Data storage method, system, device and storage medium |
CN113486375A (en) * | 2021-07-16 | 2021-10-08 | 青岛海尔科技有限公司 | Method and device for storing equipment information, storage medium and electronic device |
CN115242540A (en) * | 2022-08-03 | 2022-10-25 | 平安银行股份有限公司 | Data processing method and system |
CN115438324A (en) * | 2022-09-20 | 2022-12-06 | 中国建设银行股份有限公司 | Identity verification method, device and equipment |
Citations (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060095786A1 (en) * | 2004-11-01 | 2006-05-04 | Aaron Jeffrey A | Communication networks and methods and computer program products for preventing tracking of network activity thereon through use of identity pseudonym domains |
US7716206B2 (en) * | 2004-11-01 | 2010-05-11 | At&T Intellectual Property I, L.P. | Communication networks and methods and computer program products for performing searches thereon while maintaining user privacy |
US20100251347A1 (en) * | 2002-02-26 | 2010-09-30 | Aol Inc. | Simple, secure login with multiple authentication providers |
CN102594779A (en) * | 2011-01-05 | 2012-07-18 | 中国移动通信集团公司 | User data processing method and device thereof |
CN102638468A (en) * | 2012-04-12 | 2012-08-15 | 华为技术有限公司 | Method, sending end, receiving end and system for protecting information transmission safety |
CN103116730A (en) * | 2013-01-21 | 2013-05-22 | 厦门市美亚柏科信息股份有限公司 | Deciphering method and system of data protection application programming interface (DPAPI) enciphered data |
CN103179134A (en) * | 2013-04-19 | 2013-06-26 | 中国建设银行股份有限公司 | Single sign on method and system based on Cookie and application server thereof |
CN104079539A (en) * | 2013-03-28 | 2014-10-01 | 阿里巴巴集团控股有限公司 | Data privacy storage method and client |
CN104734854A (en) * | 2013-12-23 | 2015-06-24 | 西门子公司 | Secure Provision of a Key |
CN105978878A (en) * | 2016-05-11 | 2016-09-28 | 腾讯科技(深圳)有限公司 | Webpage verification method and device |
CN106060078A (en) * | 2016-07-11 | 2016-10-26 | 浪潮(北京)电子信息产业有限公司 | User information encryption method, user registration method and user validation method applied to cloud platform |
US20170085562A1 (en) * | 2015-09-18 | 2017-03-23 | Case Wallet, Inc. | Biometric data hashing, verification and security |
CN106656476A (en) * | 2017-01-18 | 2017-05-10 | 腾讯科技(深圳)有限公司 | Password protecting method and device |
CN107070948A (en) * | 2017-05-23 | 2017-08-18 | 广东工业大学 | Signature and verification method based on hybrid encryption algorithm in cloud storage |
CN107104787A (en) * | 2017-04-26 | 2017-08-29 | 山东开创云软件有限公司 | A kind of cipher set-up method for resisting password cracking |
CN107231346A (en) * | 2017-05-03 | 2017-10-03 | 北京海顿中科技术有限公司 | A kind of method of cloud platform identification |
US20170331808A1 (en) * | 2012-06-25 | 2017-11-16 | Amazon Technologies, Inc. | Protection from data security threats |
-
2017
- 2017-11-23 CN CN201711179733.6A patent/CN107948152B/en active Active
Patent Citations (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100251347A1 (en) * | 2002-02-26 | 2010-09-30 | Aol Inc. | Simple, secure login with multiple authentication providers |
US7716206B2 (en) * | 2004-11-01 | 2010-05-11 | At&T Intellectual Property I, L.P. | Communication networks and methods and computer program products for performing searches thereon while maintaining user privacy |
US20060095786A1 (en) * | 2004-11-01 | 2006-05-04 | Aaron Jeffrey A | Communication networks and methods and computer program products for preventing tracking of network activity thereon through use of identity pseudonym domains |
CN102594779A (en) * | 2011-01-05 | 2012-07-18 | 中国移动通信集团公司 | User data processing method and device thereof |
CN102638468A (en) * | 2012-04-12 | 2012-08-15 | 华为技术有限公司 | Method, sending end, receiving end and system for protecting information transmission safety |
US20170331808A1 (en) * | 2012-06-25 | 2017-11-16 | Amazon Technologies, Inc. | Protection from data security threats |
CN103116730A (en) * | 2013-01-21 | 2013-05-22 | 厦门市美亚柏科信息股份有限公司 | Deciphering method and system of data protection application programming interface (DPAPI) enciphered data |
CN104079539A (en) * | 2013-03-28 | 2014-10-01 | 阿里巴巴集团控股有限公司 | Data privacy storage method and client |
CN103179134A (en) * | 2013-04-19 | 2013-06-26 | 中国建设银行股份有限公司 | Single sign on method and system based on Cookie and application server thereof |
CN104734854A (en) * | 2013-12-23 | 2015-06-24 | 西门子公司 | Secure Provision of a Key |
US20170085562A1 (en) * | 2015-09-18 | 2017-03-23 | Case Wallet, Inc. | Biometric data hashing, verification and security |
CN105978878A (en) * | 2016-05-11 | 2016-09-28 | 腾讯科技(深圳)有限公司 | Webpage verification method and device |
CN106060078A (en) * | 2016-07-11 | 2016-10-26 | 浪潮(北京)电子信息产业有限公司 | User information encryption method, user registration method and user validation method applied to cloud platform |
CN106656476A (en) * | 2017-01-18 | 2017-05-10 | 腾讯科技(深圳)有限公司 | Password protecting method and device |
CN107104787A (en) * | 2017-04-26 | 2017-08-29 | 山东开创云软件有限公司 | A kind of cipher set-up method for resisting password cracking |
CN107231346A (en) * | 2017-05-03 | 2017-10-03 | 北京海顿中科技术有限公司 | A kind of method of cloud platform identification |
CN107070948A (en) * | 2017-05-23 | 2017-08-18 | 广东工业大学 | Signature and verification method based on hybrid encryption algorithm in cloud storage |
Non-Patent Citations (2)
Title |
---|
潘潘: "前端数据加密分析", 《计算机与网络》 * |
祁鑫: "口令加密算法安全性分析与对比", 《网络空间安全》 * |
Cited By (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108616533A (en) * | 2018-04-27 | 2018-10-02 | 正方软件股份有限公司 | Sensitive data encryption method and device |
CN109599170A (en) * | 2018-12-05 | 2019-04-09 | 易必祥 | Medical management method and system based on big data |
CN109858255A (en) * | 2018-12-19 | 2019-06-07 | 杭州安恒信息技术股份有限公司 | Data encryption storage method, device and realization device |
CN109670329A (en) * | 2018-12-28 | 2019-04-23 | 东信和平科技股份有限公司 | A kind of safe lead-in and lead-out method of server data and server |
CN110048835A (en) * | 2019-03-27 | 2019-07-23 | 北京三快在线科技有限公司 | The method and apparatus of encryption, storage medium |
CN110008745A (en) * | 2019-03-29 | 2019-07-12 | 深圳供电局有限公司 | Encryption method, computer equipment and computer storage medium |
CN110008745B (en) * | 2019-03-29 | 2024-01-16 | 深圳供电局有限公司 | Encryption method, computer equipment and computer storage medium |
CN110717827B (en) * | 2019-09-03 | 2022-08-30 | 网联清算有限公司 | Database determination method and device and transaction processing system |
CN110717827A (en) * | 2019-09-03 | 2020-01-21 | 网联清算有限公司 | Database determination method and device and transaction processing system |
CN111062047A (en) * | 2019-12-25 | 2020-04-24 | 中国联合网络通信集团有限公司 | Data storage method, system, device and storage medium |
CN110781419A (en) * | 2020-01-02 | 2020-02-11 | 成都四方伟业软件股份有限公司 | Multi-system cooperative use method based on block chain |
CN113486375A (en) * | 2021-07-16 | 2021-10-08 | 青岛海尔科技有限公司 | Method and device for storing equipment information, storage medium and electronic device |
CN113486375B (en) * | 2021-07-16 | 2024-04-19 | 青岛海尔科技有限公司 | Storage method and device of equipment information, storage medium and electronic device |
CN115242540A (en) * | 2022-08-03 | 2022-10-25 | 平安银行股份有限公司 | Data processing method and system |
CN115242540B (en) * | 2022-08-03 | 2023-09-26 | 平安银行股份有限公司 | Data processing method and system |
CN115438324A (en) * | 2022-09-20 | 2022-12-06 | 中国建设银行股份有限公司 | Identity verification method, device and equipment |
Also Published As
Publication number | Publication date |
---|---|
CN107948152B (en) | 2021-05-14 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN107948152A (en) | Information storage means, acquisition methods, device and equipment | |
Arockiam et al. | Efficient cloud storage confidentiality to ensure data security | |
US9430655B1 (en) | Split tokenization | |
Gupta et al. | Layer-based privacy and security architecture for cloud data sharing | |
CN108256340B (en) | Data acquisition method and device, terminal equipment and storage medium | |
CN107078899B (en) | Method of obfuscating data | |
CN107113286A (en) | The roaming content erasing operation of striding equipment | |
US8619978B2 (en) | Multiple account authentication | |
US11757625B2 (en) | Multi-factor-protected private key distribution | |
CN107918731A (en) | Method and apparatus for controlling the authority to access to open interface | |
CN112953974B (en) | Data collision method, device, equipment and computer readable storage medium | |
US20180115535A1 (en) | Blind En/decryption for Multiple Clients Using a Single Key Pair | |
CA3066701A1 (en) | Controlling access to data | |
CN112422287B (en) | Multi-level role authority control method and device based on cryptography | |
Hemalatha et al. | A comparative analysis of encryption techniques and data security issues in cloud computing | |
CN109818923A (en) | A kind of attribute base cloud service access control method based on attribute ciphertext re-encryption | |
US11133926B2 (en) | Attribute-based key management system | |
CN105553661B (en) | Key management method and device | |
CN106789963A (en) | Asymmetric whitepack cipher encrypting method and device and equipment | |
Thiyagarajan et al. | Data integrity and security in cloud environment using AES algorithm | |
Olanrewaju et al. | Cryptography as a service (CaaS): quantum cryptography for secure cloud computing | |
CN110392035A (en) | System and method for secure data processing | |
CN114866317A (en) | Multi-party data security calculation method and device, electronic equipment and storage medium | |
CN114553557A (en) | Key calling method, key calling device, computer equipment and storage medium | |
CN111740944A (en) | KYC solution based on block chain and client information sharing and protection |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |