CN113542284B

CN113542284B - id packet translation application method, system, storage medium and electronic device

Info

Publication number: CN113542284B
Application number: CN202110814114.XA
Authority: CN
Inventors: 钱晨涛
Original assignee: Enyike Beijing Data Technology Co ltd
Current assignee: Enyike Beijing Data Technology Co ltd
Priority date: 2021-07-19
Filing date: 2021-07-19
Publication date: 2023-06-30
Anticipated expiration: 2041-07-19
Also published as: CN113542284A

Abstract

The application discloses an id package translation application method, a system, a storage medium and electronic equipment, wherein the id package translation application method comprises the following steps: and a client source data transmission step: the client source data is transmitted to a third party translation provider via the BDH platform in an encrypted manner: translation step: the third party translation provider translates the customer source data and encrypts and transmits the result file to the BDH platform. The invention realizes data storage isolation and access isolation, the unencrypted plaintext data is only stored in the intranet, and the data exposed in the public network is only encrypted data, thereby ensuring the data security of the client.

Description

id packet translation application method, system, storage medium and electronic device

Technical Field

The invention belongs to the field of id packet translation application, and particularly relates to a cross-id packet translation application method, a system, a storage medium and electronic equipment.

Background

The BDH clients have a need to translate phone number data into device id, but BDH itself does not have translation capability, which is accomplished by third party translation providers. Therefore, to meet this business scenario, BDH needs to develop a secure platform to transmit customer data to a third party provider with translation capability for translation and retrieve the translation results for user download, and in the process to secure customer source data.

Disclosure of Invention

The embodiment of the application provides an id package translation application method, an id package translation application system, a storage medium and electronic equipment, which at least solve the problem that a BDH platform in the existing id package translation application method does not have translation capability and needs to be completed by a third party translation provider.

The invention provides an id packet translation application method, which comprises the following steps:

and a client source data transmission step: the client source data is transmitted to a third party translation provider via the BDH platform in an encrypted manner:

translation step: the third party translation provider translates the customer source data and encrypts and transmits the result file to the BDH platform.

The above id packet translation application method, wherein the client source data transmission step includes:

uploading id packets: a user creates an id translation application task on the BDH platform and uploads an id package;

BHD platform processing steps: the BDH platform stores the file uploaded by the user into an intranet and submits an encryption task to a local encryption service to request encryption of the file;

the local encryption service processing step: the local encryption service receives a task, reads the file from the intranet, encrypts the file, stores the encrypted file to the public network, and calls back a task result to the BDH platform;

a file acquisition step: the BDH platform submits a translation task to the third party translation provider, which then requests remote encryption services, obtains the file and decrypts.

The above id packet translation application method, wherein the translating step includes:

translation completion step: the third party translation provider translates the document and transmits the document to the public network, and then notifies the BDH platform that translation is completed;

submitting a decryption task: the BDH platform submits a decryption task to a local encryption service;

decryption: the local encryption service acquires a file from the public network and decrypts the file, the file is transferred to the intranet, and then the local encryption service notifies the BDH platform of finishing the decryption task;

the acquisition step: and submitting a task for downloading the result file by a user in the BDH platform, and acquiring the processed result file from the intranet by the BDH platform.

The above-mentioned id packet translation application method, wherein the translation completion step includes:

translation processing step: the third party translation provider translates the document;

and (3) encryption transmission: the third party translation provider requests an encryption service deployed at a remote end, encrypts the file and transmits the file to the public network;

the task completion step: the third party translation provider notifies the BDH platform that the translation task is complete.

The invention also provides an id packet translation application system, which comprises:

the client source data transmission module is used for transmitting the client source data to the third party translation provider in an encrypted manner through the BDH platform:

and the translation module is used for carrying out translation processing on the client source data by the third party translation provider and encrypting and transmitting a result file to the BDH platform.

The above id packet translation application system, wherein the client source data transmission module comprises:

an uploading id package unit, wherein a user creates an id translation application task on the BDH platform and uploads an id package;

the BHD platform processing unit is used for storing the file uploaded by the user into an intranet, submitting an encryption task to a local encryption service and requesting to encrypt the file;

the local encryption service processing unit is used for receiving a task and reading the file from the intranet, carrying out encryption processing on the file by the local encryption service processing unit, storing the encrypted file to the public network, and calling back a task result to the BDH platform by the local encryption service;

and the BDH platform submits a translation task to the third party translation provider, and then the third party translation provider requests a remote encryption service, and the file acquisition unit acquires and decrypts the file.

The above id packet translation application system, wherein the translation module includes:

a translation completion unit that performs a translation process on the document and transmits the document to the public network, and then notifies the BDH platform of the completion of the translation;

the submitting decryption task unit submits a decryption task to the local encryption service;

the decryption unit acquires a file from the public network and decrypts the file, the file is transferred to the intranet, and then the decryption unit informs the BDH platform that the decryption task is completed;

and the acquisition unit is used for submitting a task for downloading the result file in the BDH platform by a user and acquiring the result file after processing is completed from the intranet.

The above id packet translation application system, wherein the translation completion unit includes:

a translation processing component that performs a translation process on the document;

the encryption transmission component requests encryption service deployed at a remote end, encrypts and transmits the file to the public network;

and the task completion component informs the BDH platform of the completion of translation tasks.

An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements any of the id packet translation application methods when executing the computer program.

A storage medium having stored thereon a computer program, wherein the program when executed by a processor implements any of the id packet translation application methods.

The invention has the beneficial effects that:

the invention belongs to the field of data transmission in data capacity. The scheme realizes data storage isolation and access isolation, unencrypted plaintext data is only stored in the intranet, and the data exposed in the public network only has encrypted data, so that the data security of a client is ensured. This design concept can be multiplexed in other scenarios involving the external transmission of sensitive data.

The role of the encryption and decryption service component does not participate in business interaction, ensures the purity and standard of encryption and decryption service, and can be multiplexed in any other business scene related to encryption and decryption in multiparty interaction. Encryption and decryption services can be independently developed by other teams except BDH, so that the neutrality is ensured.

Drawings

The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiments of the application and together with the description serve to explain the application and do not constitute an undue limitation to the application.

In the drawings:

FIG. 1 is a flow chart of an uploading technical route of an id packet translation application method of the present invention;

FIG. 2 is a flow chart of the downloading technique route of the id packet translation application method of the present invention;

FIG. 3 is a flow chart of an id packet translation application method of the present invention;

FIG. 4 is a flow chart of substep S1 of the present invention;

FIG. 5 is a flow chart of substep S2 of the present invention;

FIG. 6 is a flow chart of substep S21 of the present invention;

FIG. 7 is a schematic diagram of the architecture of an id packet translation application of the present invention;

fig. 8 is a frame diagram of an electronic device according to an embodiment of the invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present application more apparent, the present application is described and illustrated below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the present application. All other embodiments, which can be made by one of ordinary skill in the art without undue burden on the person of ordinary skill in the art based on the embodiments provided herein, are intended to be within the scope of the present application.

It is apparent that the drawings in the following description are only some examples or embodiments of the present application, and it is possible for those of ordinary skill in the art to apply the present application to other similar situations according to these drawings without inventive effort. Moreover, it should be appreciated that while such a development effort might be complex and lengthy, it would nevertheless be a routine undertaking of design, fabrication, or manufacture for those of ordinary skill having the benefit of this disclosure, and thus should not be construed as having the benefit of this disclosure.

Reference in the specification to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment may be included in at least one embodiment of the application. The appearances of such phrases in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. It is to be expressly and implicitly understood by those of ordinary skill in the art that the embodiments described herein can be combined with other embodiments without conflict.

Unless defined otherwise, technical or scientific terms used herein should be given the ordinary meaning as understood by one of ordinary skill in the art to which this application belongs. Reference to "a," "an," "the," and similar terms herein do not denote a limitation of quantity, but rather denote the singular or plural. The terms "comprising," "including," "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, article, or apparatus that comprises a list of steps or modules (elements) is not limited to only those steps or elements but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus. The terms "connected," "coupled," and the like in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. The term "plurality" as used herein refers to two or more. "and/or" describes an association relationship of an association object, meaning that there may be three relationships, e.g., "a and/or B" may mean: a exists alone, A and B exist together, and B exists alone. The character "/" generally indicates that the context-dependent object is an "or" relationship. The terms "first," "second," "third," and the like, as used herein, are merely distinguishing between similar objects and not representing a particular ordering of objects.

The present invention will be described in detail below with reference to the embodiments shown in the drawings, but it should be understood that the embodiments are not limited to the present invention, and functional, method, or structural equivalents and alternatives according to the embodiments are within the scope of protection of the present invention by those skilled in the art.

Before explaining the various embodiments of the invention in detail, the core inventive concepts of the invention are summarized and described in detail by the following examples.

Embodiment one:

the invention provides an application method for translation of an id packet, which has the main technical route shown in fig. 1 and 2 and comprises the following specific steps:

referring to fig. 3, fig. 3 is a flowchart of an id packet translation application method. As shown in fig. 3, the id packet translation application method of the present invention includes:

customer source data transmission step S1: the customer source data is transmitted encrypted to the third party translation provider via the BDH platform.

Specifically, the interaction steps are as follows:

a user creates an id translation application task on a BDH platform and uploads an id package;

BDH front-end service directly stores the user uploading file to the intranet sftp;

the BDH submits an encryption task to the local encryption service and requests to encrypt the file;

the local encryption service receives the task, reads the file from the intranet sftp, and performs encryption processing;

the local encryption service stores the encrypted file to a public network SFTP;

the local encryption service calls back a task result to the BDH service;

the BDH submits a translation task to a third party translation service;

the third party translation service requests a remote encryption service, obtains the file and decrypts it.

Translation step S2: the third party translation provider translates the customer source data and encrypts and transmits the result file to the BDH platform.

Specifically, the interaction steps are as follows:

the third party carries out translation processing;

the third party requests the encryption service deployed at the remote end, encrypts the result file and transmits the result file to the public network SFTP;

the third party informs the BDH of the completion of the translation task;

the BDH submits a decryption task to the local encryption service;

the local encryption service obtains a file from a public network SFTP;

the local encryption service decrypts the file and transfers the file to the internal network SFTP;

the local encryption service informs the BDH of the completion of the decryption task;

a user submits a task of downloading a result file in the BDH;

BDH obtains result file from internal network SFTP for user to download.

Referring to fig. 4, fig. 4 is a flowchart of a client source data transmission step S1. As shown in fig. 4, the client source data transmission step S1 includes:

step S11 of uploading id packets: a user creates an id translation application task on the BDH platform and uploads an id package;

the BHD platform processes step S12: the BDH platform stores the file uploaded by the user into an intranet and submits an encryption task to a local encryption service to request encryption of the file;

local encryption service processing step S13: the local encryption service receives a task, reads the file from the intranet, encrypts the file, stores the encrypted file to the public network, and calls back a task result to the BDH platform;

file acquisition step S14: the BDH platform submits a translation task to the third party translation provider, which then requests remote encryption services, obtains the file and decrypts.

Referring to fig. 5, fig. 5 is a flowchart of the translation step S2. As shown in fig. 5, the translating step S2 includes:

translation completion step S21: the third party translation provider translates the document and transmits the document to the public network, and then notifies the BDH platform that translation is completed;

submitting a decryption task step S22: the BDH platform submits a decryption task to a local encryption service;

decryption step S23: the local encryption service acquires a file from the public network and decrypts the file, the file is transferred to the intranet, and then the local encryption service notifies the BDH platform of finishing the decryption task;

acquisition step S24: and submitting a task for downloading the result file by a user in the BDH platform, and acquiring the processed result file from the intranet by the BDH platform.

Referring to fig. 6, fig. 6 is a flowchart of the translation completing step S21. As shown in fig. 6, the translation completion step S21 includes:

the translation processing step S211: the third party translation provider translates the document;

encryption transmission step S212: the third party translation provider requests an encryption service deployed at a remote end, encrypts the file and transmits the file to the public network;

task completion step S213: the third party translation provider notifies the BDH platform that the translation task is complete.

Embodiment two:

referring to fig. 7, fig. 7 is a schematic diagram of an id packet translation application system according to the present invention. An id packet translation application system of the present invention as shown in fig. 7, comprises:

Wherein, the customer source data transmission module includes:

Wherein the translation module comprises:

Wherein the translation completion unit includes:

Embodiment III:

referring to fig. 8, a specific implementation of an electronic device is disclosed in this embodiment. The electronic device may include a processor 81 and a memory 82 storing computer program instructions.

In particular, the processor 81 may include a Central Processing Unit (CPU), or an application specific integrated circuit (Application Specific Integrated Circuit, abbreviated as ASIC), or may be configured to implement one or more integrated circuits of embodiments of the present application.

Memory 82 may include, among other things, mass storage for data or instructions. By way of example, and not limitation, memory 82 may comprise a Hard Disk Drive (HDD), floppy Disk Drive, solid state Drive (Solid State Drive, SSD), flash memory, optical Disk, magneto-optical Disk, tape, or universal serial bus (Universal Serial Bus, USB) Drive, or a combination of two or more of the foregoing. The memory 82 may include removable or non-removable (or fixed) media, where appropriate. The memory 82 may be internal or external to the data processing apparatus, where appropriate. In a particular embodiment, the memory 82 is a Non-Volatile (Non-Volatile) memory. In a particular embodiment, the Memory 82 includes Read-Only Memory (ROM) and random access Memory (Random Access Memory, RAM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable ROM (Programmable Read-Only Memory, abbreviated PROM), an erasable PROM (Erasable Programmable Read-Only Memory, abbreviated EPROM), an electrically erasable PROM (Electrically Erasable Programmable Read-Only Memory, abbreviated EEPROM), an electrically rewritable ROM (Electrically Alterable Read-Only Memory, abbreviated EAROM), or a FLASH Memory (FLASH), or a combination of two or more of these. The RAM may be Static Random-Access Memory (SRAM) or dynamic Random-Access Memory (Dynamic Random Access Memory DRAM), where the DRAM may be a fast page mode dynamic Random-Access Memory (Fast Page Mode Dynamic Random Access Memory FPMDRAM), extended data output dynamic Random-Access Memory (Extended Date Out Dynamic Random Access Memory EDODRAM), synchronous dynamic Random-Access Memory (Synchronous Dynamic Random-Access Memory SDRAM), or the like, as appropriate.

Memory 82 may be used to store or cache various data files that need to be processed and/or communicated, as well as possible computer program instructions for execution by processor 81.

The processor 81 implements any of the id packet translation application methods of the above embodiments by reading and executing computer program instructions stored in the memory 82.

In some of these embodiments, the electronic device may also include a communication interface 83 and a bus 80. As shown in fig. 8, the processor 81, the memory 82, and the communication interface 83 are connected to each other via the bus 80 and perform communication with each other.

The communication interface 83 is used to implement communications between various modules, devices, units, and/or units in embodiments of the present application. Communication port 83 may also enable communication with other components such as: and the external equipment, the image/data acquisition equipment, the database, the external storage, the image/data processing workstation and the like are used for data communication.

Bus 80 includes hardware, software, or both that couple components of the electronic device to one another. Bus 80 includes, but is not limited to, at least one of: data Bus (DataBus), address Bus (Address Bus), control Bus (Control Bus), expansion Bus (Expansion Bus), local Bus (Local Bus). By way of example, and not limitation, bus 80 may include a graphics acceleration interface (Accelerated Graphics Port), abbreviated AGP, or other graphics Bus, an enhanced industry standard architecture (Extended Industry Standard Architecture, abbreviated EISA) Bus, a Front Side Bus (FSB), a HyperTransport (HT) interconnect, an industry standard architecture (Industry Standard Architecture, ISA) Bus, a wireless bandwidth (InfiniBand) interconnect, a Low Pin Count (LPC) Bus, a memory Bus, a micro channel architecture (Micro Channel Architecture, abbreviated MCa) Bus, a peripheral component interconnect (Peripheral Component Interconnect, abbreviated PCI) Bus, a PCI-Express (PCI-X) Bus, a serial advanced technology attachment (Serial Advanced Technology Attachment, abbreviated SATA) Bus, a video electronics standards association local (Video Electronics Standards Association Local Bus, abbreviated VLB) Bus, or other suitable Bus, or a combination of two or more of the foregoing. Bus 80 may include one or more buses, where appropriate. Although embodiments of the present application describe and illustrate a particular bus, the present application contemplates any suitable bus or interconnect.

The electronic device may translate the application based on the id packet, thereby implementing the methods described in connection with fig. 3-6.

In addition, in combination with the id packet translation application method in the above embodiment, the embodiment of the application may be implemented by providing a computer readable storage medium. The computer readable storage medium has stored thereon computer program instructions; the computer program instructions, when executed by a processor, implement any of the id packet translation application methods of the above embodiments.

The technical features of the above-described embodiments may be arbitrarily combined, and all possible combinations of the technical features in the above-described embodiments are not described for brevity of description, however, as long as there is no contradiction between the combinations of the technical features, they should be considered as the scope of the description.

In summary, the data storage isolation and access isolation are realized based on the scheme, the unencrypted plaintext data is only stored in the intranet, and the data exposed in the public network is only encrypted, so that the data security of the client is ensured. This design concept can be multiplexed in other scenarios involving the external transmission of sensitive data.

The above examples merely represent a few embodiments of the present application, which are described in more detail and are not to be construed as limiting the scope of the invention. It should be noted that it would be apparent to those skilled in the art that various modifications and improvements could be made without departing from the spirit of the present application, which would be within the scope of the present application. The scope of the invention should, therefore, be determined with reference to the appended claims.

Claims

1. An id packet translation application method, comprising:

translation step: the third party translation provider translates the client source data and encrypts and transmits a result file to the BDH platform;

the client source data transmission step comprises the following steps:

a file acquisition step: the BDH platform submits a translation task to the third party translation provider, and then the third party translation provider requests a remote encryption service, acquires the file and decrypts the file;

the translating step includes:

2. The id packet translation application method according to claim 1, wherein the translation completion step comprises:

3. An id packet translation application system, comprising:

a translation module, wherein the third party translation provider translates the customer source data, and the translation module encrypts and transmits a result file to the BDH platform;

wherein, the customer source data transmission module includes:

a document acquisition unit that submits a translation task to the third party translation provider, which then requests a remote encryption service, the document acquisition unit acquiring the document and decrypting the document;

the translation module includes:

4. The id packet translation application system of claim 3, wherein the translation completion unit comprises:

5. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the id packet translation application method of any one of claims 1 to 2 when the computer program is executed.

6. A storage medium having stored thereon a computer program, which when executed by a processor implements the id packet translation application method of any of claims 1 to 2.