CN114430345A - A data transmission method, device, storage medium and electronic device - Google Patents

Abstract

The embodiments of the present application disclose a data transmission method, an apparatus, a storage medium, and an electronic device. The method includes: using a dynamic token predetermined by a data sender as an encryption key of a symmetric encryption algorithm, encrypting original data to obtain a ciphertext of the original data; using a predetermined first public key to encrypt the dynamic token Encryption is performed to obtain the dynamic token ciphertext; wherein, the first public key is the public key of the asymmetric encryption algorithm sent by the data receiving end; the original data ciphertext, the dynamic token ciphertext and the predetermined device The identifier is sent to the data receiver. The technical solution can improve the efficiency of data transmission and improve the security of data transmission.

Description

A data transmission method, device, storage medium and electronic device

technical field

The embodiments of the present application relate to the technical field of data transmission, and in particular, to a data transmission method, an apparatus, a storage medium, and an electronic device.

Background technique

At present, when data is securely transmitted between multiple subjects (for example, data is transmitted up level by level), in order to ensure data security, the data will be encrypted before transmission.

The common idea is to use RSA asymmetric or AES (Advanced Encryption Standard) symmetric encryption algorithm to encrypt and transmit data.

This idea has certain flaws. Using RSA asymmetric encryption, when the transmission data is relatively long, the performance of asymmetric encryption is very low. AES has good symmetric encryption performance, but both sides of encryption and decryption use the same key, which has potential security risks.

SUMMARY OF THE INVENTION

Embodiments of the present application provide a data transmission method, apparatus, storage medium, and electronic device, which can improve data transmission efficiency and improve data transmission security.

In a first aspect, an embodiment of the present application provides a data transmission method, and the method is executed by a data sending end; the method includes:

Using the dynamic token pre-determined by the data sender as the encryption key of the symmetric encryption algorithm, encrypting the original data to obtain the original data ciphertext;

The dynamic token is encrypted with a predetermined first public key to obtain a dynamic token ciphertext; wherein, the first public key is the public key of the asymmetric encryption algorithm sent by the data receiving end;

The original data ciphertext, the dynamic token ciphertext and the predetermined device identification are sent to the data receiving end.

In a second aspect, an embodiment of the present application provides a data transmission method, and the method is executed by a data receiving end; the method includes:

Receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identifier sent by the data sender;

Determine the first private key according to the device identification; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end;

Decrypt the dynamic token ciphertext using the first private key to obtain the dynamic token plaintext;

Using the dynamic token as the decryption key of the symmetric encryption algorithm, the original data ciphertext is decrypted to obtain the original data plaintext.

In a third aspect, an embodiment of the present application provides a data transmission device, where the device is configured at a data sending end; the device includes:

The original data ciphertext obtaining module is used to encrypt the original data by using the dynamic token predetermined by the data sender as the encryption key of the symmetric encryption algorithm to obtain the original data ciphertext;

The dynamic token ciphertext obtaining module is used for encrypting the dynamic token by using a predetermined first public key to obtain the dynamic token ciphertext; wherein, the first public key is an asymmetric data sent by the data receiving end The public key of the encryption algorithm;

The data sending module is used for sending the original data ciphertext, the dynamic token ciphertext and the predetermined device identification to the data receiving end.

In a fourth aspect, an embodiment of the present application provides a data transmission device, where the device is configured at a data receiving end; the device includes:

The data receiving module is used to receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identification sent by the data sender;

a first private key determination module, configured to determine a first private key according to the device identifier; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end;

a dynamic token plaintext obtaining module, configured to decrypt the dynamic token ciphertext by using the first private key to obtain the dynamic token plaintext;

The original data plaintext obtaining module is used for decrypting the original data ciphertext by using the dynamic token as the decryption key of the symmetric encryption algorithm to obtain the original data plaintext.

In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, implements the data transmission method described in the embodiment of the present application.

In a sixth aspect, an embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executed by the processor, and the processor executes the computer program to achieve the same implementation as the present application. The data transfer method described in the example.

In the technical solution provided by the embodiments of the present application, the dynamic token predetermined by the data sending end is used as the encryption key of the symmetric encryption algorithm, and the original data is encrypted to obtain the ciphertext of the original data, and the predetermined first public key is used to encrypt the original data. The key encrypts the dynamic token to obtain the ciphertext of the dynamic token, and then sends the ciphertext of the original data, the ciphertext of the dynamic token and the predetermined device identification to the data receiving end. The technical solution can improve the efficiency of data transmission and improve the security of data transmission.

Description of drawings

1 is a flowchart of a data transmission method provided in Embodiment 1 of the present application;

2 is a flowchart of a data transmission method provided in Embodiment 2 of the present application;

3 is a schematic structural diagram of a data transmission device provided in Embodiment 3 of the present application;

4 is a schematic structural diagram of a data transmission device provided in Embodiment 4 of the present application;

FIG. 5 is a schematic structural diagram of an electronic device provided in Embodiment 6 of the present application.

Detailed ways

The present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application. In addition, it should be noted that, for the convenience of description, the drawings only show some but not all the structures related to the present application.

Before discussing the exemplary embodiments in greater detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although the flowchart depicts the steps as a sequential process, many of the steps may be performed in parallel, concurrently, or concurrently. Furthermore, the order of the steps can be rearranged. The process may be terminated when its operation is complete, but may also have additional steps not included in the figures. The processes may correspond to methods, functions, procedures, subroutines, subroutines, and the like.

Example 1

FIG. 1 is a flowchart of a data transmission method provided in Embodiment 1 of the present application. This embodiment is applicable to the case of encrypting transmitted data. The method can be executed by the data transmission device provided by the embodiment of the present application, and the device can be performed by It can be implemented by means of software and/or hardware, and can be integrated into devices such as smart terminals for data encryption processing.

As shown in Figure 1, the data transmission method includes:

S110, using the dynamic token predetermined by the data sending end as the encryption key of the symmetric encryption algorithm, and encrypting the original data to obtain the original data ciphertext;

The dynamic token may be a token automatically generated by the data sender through a preset tool. Preferably, the dynamic token can be composed of a 16-bit character string.

In this solution, the original data may refer to the data that needs to be transmitted.

In this embodiment, the symmetric encryption algorithm may refer to an AES (Advanced Encryption Standard) encryption algorithm. The 16-bit string dynamic token automatically generated by the data sender can be used as the encryption key of the AES encryption algorithm to encrypt the original data.

S120, using a predetermined first public key to encrypt the dynamic token to obtain a dynamic token ciphertext; wherein, the first public key is the public key of the asymmetric encryption algorithm sent by the data receiving end;

The asymmetric encryption algorithm may refer to the RSA encryption algorithm. The algorithm uses different keys for encryption and decryption. The RSA asymmetric key pair, that is, the first public key and the first private key, can be automatically generated by the data receiving end through a preset tool. The first private key is stored in the database of the data receiving end, and the first public key is sent to the data sending end. After the data sending end receives the first public key sent by the data receiving end, the first public key is stored in the data sending end. in the database.

In this solution, the data sending end can obtain the first public key from the database, and use the first public key to encrypt the dynamic token, so that the data encryption performance is better.

S130. Send the original data ciphertext, the dynamic token ciphertext, and the predetermined device identifier to the data receiving end.

The device identification may be a character string composed of letters or numbers. The device identifiers corresponding to different data receivers are different, and the device identifiers can be set for the data receivers in advance.

In this solution, the original data ciphertext, the dynamic token ciphertext and the predetermined device identification can be sent to the data receiving end through the network.

In this technical solution, optionally, the method further includes:

Perform digital signature processing on the original data to obtain a signature string;

The signature string is encrypted by the second private key to obtain the ciphertext of the signature string; wherein the second private key is the private key of the asymmetric encryption algorithm generated by the data sending end.

Among them, the digital signature is a digital string that can only be generated by the data sending end and cannot be forged by other ends, and is used to verify the authenticity of the sent data.

In this embodiment, a key pair of an asymmetric encryption algorithm, that is, a second private key and a second public key, is generated by the data sending end using a preset tool, and the signature string is encrypted by the second private key.

By digitally signing the original data, the authenticity of the original data can be guaranteed, the original data can be prevented from being tampered with, and the security of data transmission can be improved.

In this technical solution, optionally, digital signature processing is performed on the original data to obtain a signature string, including:

Use the SHA256 algorithm to perform data signature processing on the original data to obtain a signature string.

Among them, the SHA256 algorithm is a method of creating a small digital fingerprint from any kind of data. Compress messages or data into digests to reduce the amount of data and fix the format of the data. The algorithm shuffles the data and recreates a fingerprint called a hash or hash.

The original data is digitally signed by the SHA256 algorithm, which can ensure the authenticity of the original data, prevent the original data from being tampered with, and improve the security of data transmission.

In this technical solution, optionally, sending the original data ciphertext, the dynamic token ciphertext and the predetermined device identification to the data receiving end, including:

Send the original data ciphertext, the dynamic token ciphertext, the signature string ciphertext and the predetermined device identification to the data receiving end.

In this solution, the encrypted original data ciphertext, dynamic token ciphertext, signature string ciphertext and predetermined device identification can be sent to the data receiving end, so that the data receiving end can decrypt the original data and judge Whether the original data has been tampered with.

By sending the original data ciphertext, the dynamic token ciphertext, the signature string ciphertext and the predetermined device identification to the data receiving end, the data transmission efficiency and the data transmission security can be improved.

In the technical solution provided by the embodiments of the present application, the dynamic token predetermined by the data sending end is used as the encryption key of the symmetric encryption algorithm, and the original data is encrypted to obtain the ciphertext of the original data, and the predetermined first public key is used to encrypt the original data. The key encrypts the dynamic token to obtain the ciphertext of the dynamic token, and then sends the ciphertext of the original data, the ciphertext of the dynamic token and the predetermined device identification to the data receiving end. By implementing the technical solution, the efficiency of data transmission and the security of data transmission can be improved.

Embodiment 2

FIG. 2 is a flowchart of a data transmission method provided in Embodiment 2 of the present application, and the method is executed by a data receiving end. As shown in FIG. 2 , the method includes the following steps:

S210. Receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identifier sent by the data sending end;

In this embodiment, the data receiving end receives the original data ciphertext, the dynamic token ciphertext and the predetermined device identification transmitted by the data transmitting end.

S220, determining a first private key according to the device identification; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end;

Wherein, the RSA asymmetric key pair, that is, the first public key and the first private key, can be automatically generated by the data receiving end through a preset tool, and the first private key and the predetermined device identifier are stored in the database.

In this solution, when the data receiving end obtains the device identification, the first private key corresponding to the device identification can be obtained from the data.

S230, using the first private key to decrypt the dynamic token ciphertext to obtain the dynamic token plaintext;

In this embodiment, the first private key and the first public key are respectively the key pair of the asymmetric encryption algorithm generated by the data receiving end, and the dynamic token ciphertext can be decrypted by using the first private key.

S240. Using the dynamic token as the decryption key of the symmetric encryption algorithm, decrypt the original data ciphertext to obtain the original data plaintext.

In this embodiment, by decrypting the dynamic token, the dynamic token can be used as the decryption key of the symmetric encryption algorithm, and the original data ciphertext can be decrypted to obtain the original data plaintext.

In this technical solution, optionally, the method further includes:

Receive the ciphertext of the signature string sent by the data sender;

Determine the second public key according to the device identification; wherein, the second public key is the public key of the asymmetric encryption algorithm sent by the data sending end;

The ciphertext of the signature string is decrypted by using the second public key to obtain the plaintext of the signature string, which is used for judging that the original data is changed.

Wherein, the second public key and the second private key are the key pair of the asymmetric encryption algorithm generated by the data sending end, then the second public key corresponding to the device identification can be obtained from the database of the data receiving end, and the second public key can be obtained through the second The public key decrypts the ciphertext of the signature string.

In this scheme, if the decrypted plaintext of the signature string is consistent with the content of the signature string obtained by digital signature processing, the original data has not been changed. If the plaintext of the decrypted signature string is inconsistent with the content of the signature string obtained by digital signature processing, the original data is tampered with and data leakage occurs.

By decrypting the signature string, it can be determined whether the original data has been changed, which can prevent the data from being tampered with during the transmission process, and improve the security of the data transmission.

The technical solutions provided by the embodiments of the present application receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identification sent by the data sending end, determine the first private key according to the device identification, and use the first private key to pair The dynamic token ciphertext is decrypted to obtain the dynamic token plaintext, and then the dynamic token is used as the decryption key of the symmetric encryption algorithm, and the original data ciphertext is decrypted to obtain the original data plaintext. By implementing the technical solution, the efficiency of data transmission and the security of data transmission can be improved.

Embodiment 3

FIG. 3 is a schematic structural diagram of a data transmission device provided in Embodiment 3 of the present application, and the device is configured at a data sending end; as shown in FIG. 3 , the data transmission device includes:

The original data ciphertext obtaining module 310 is configured to use the dynamic token predetermined by the data sender as the encryption key of the symmetric encryption algorithm, and encrypt the original data to obtain the original data ciphertext;

The dynamic token ciphertext obtaining module 320 is used for encrypting the dynamic token by using a predetermined first public key to obtain the dynamic token ciphertext; wherein, the first public key is a non-volatile token sent by the data receiving end. The public key of the symmetric encryption algorithm;

The data sending module 330 is configured to send the original data ciphertext, the dynamic token ciphertext and the predetermined device identification to the data receiving end.

In this technical solution, optionally, the device further includes:

The signature string obtaining module is used to perform digital signature processing on the original data to obtain the signature string;

The signature string ciphertext obtaining module is used for encrypting the signature string by using the second private key to obtain the signature string ciphertext; wherein, the second private key is the private key of the asymmetric encryption algorithm generated by the data sender .

In this technical solution, optionally, the signature string obtaining module is specifically used for:

Use the SHA256 algorithm to perform data signature processing on the original data to obtain a signature string.

In this technical solution, optionally, the data sending module 330 is specifically used for:

Send the original data ciphertext, the dynamic token ciphertext, the signature string ciphertext and the predetermined device identification to the data receiving end.

The above product can execute the method provided in the first embodiment of the present application, and has corresponding functional modules and beneficial effects for executing the method.

Embodiment 4

FIG. 4 is a schematic structural diagram of a data transmission device provided in Embodiment 4 of the present application, and the device is configured at a data receiving end; as shown in FIG. 4 , the data transmission device includes:

The data receiving module 410 is used for receiving the original data ciphertext, the dynamic token ciphertext and the predetermined device identification sent by the data sending end;

The first private key determination module 420 is configured to determine the first private key according to the device identification; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end;

The dynamic token plaintext obtaining module 430 is used for decrypting the dynamic token ciphertext by using the first private key to obtain the dynamic token plaintext;

The original data plaintext obtaining module 440 is used for decrypting the original data ciphertext by using the dynamic token as the decryption key of the symmetric encryption algorithm to obtain the original data plaintext.

In this technical solution, optionally, the device further includes:

The signature string ciphertext receiving module is used to receive the signature string ciphertext sent by the data sender;

The second public key determination module is configured to determine the second public key according to the device identification; wherein, the second public key is the public key of the asymmetric encryption algorithm sent by the data sending end;

The signature string plaintext obtaining module is used for decrypting the signature string ciphertext by using the second public key to obtain the signature string plaintext, which is used for judging that the original data is changed.

The above product can execute the method provided by the second embodiment of the present application, and has corresponding functional modules and beneficial effects for executing the method.

Embodiment 5

Embodiments of the present application further provide a storage medium containing computer-executable instructions, where the computer-executable instructions are used to execute a data transmission method when executed by a computer processor, and the method includes:

Using the dynamic token pre-determined by the data sender as the encryption key of the symmetric encryption algorithm, encrypting the original data to obtain the original data ciphertext;

The dynamic token is encrypted with a predetermined first public key to obtain a dynamic token ciphertext; wherein, the first public key is the public key of the asymmetric encryption algorithm sent by the data receiving end;

The original data ciphertext, the dynamic token ciphertext and the predetermined device identification are sent to the data receiving end.

or,

Receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identifier sent by the data sender;

Determine the first private key according to the device identification; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end;

Decrypt the dynamic token ciphertext using the first private key to obtain the dynamic token plaintext;

Using the dynamic token as the decryption key of the symmetric encryption algorithm, the original data ciphertext is decrypted to obtain the original data plaintext.

storage medium - any of various types of memory devices or storage devices. The term "storage medium" is intended to include: installation media, such as CD-ROMs, floppy disks, or tape devices; computer system memory or random access memory, such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc. ; non-volatile memory, such as flash memory, magnetic media (eg hard disk or optical storage); registers or other similar types of memory elements, etc. The storage medium may also include other types of memory or combinations thereof. In addition, the storage medium may be located in the computer system in which the program is executed, or may be located in a different second computer system connected to the computer system through a network such as the Internet. The second computer system may provide program instructions to the computer for execution. The term "storage medium" may include two or more storage media that may reside in different locations (eg, in different computer systems connected by a network). The storage medium may store program instructions (eg, embodied as a computer program) executable by one or more processors.

Of course, a storage medium containing computer-executable instructions provided by the embodiments of the present application, the computer-executable instructions of which are not limited to the above-mentioned data transmission operations, and can also execute any of the data transmission methods provided in any of the embodiments of the present application. related operations.

Embodiment 6

The embodiments of the present application provide an electronic device, in which the data transmission apparatus provided by the embodiments of the present application can be integrated. FIG. 5 is a schematic structural diagram of an electronic device according to Embodiment 6 of the present application. As shown in FIG. 5 , this embodiment provides an electronic device 500, which includes: one or more processors 520; and a storage device 510 for storing one or more programs, when the one or more programs are The one or more processors 520 execute, so that the one or more processors 520 implement the data transmission method provided by the embodiments of the present application, and the method includes:

Using the dynamic token pre-determined by the data sender as the encryption key of the symmetric encryption algorithm, encrypting the original data to obtain the original data ciphertext;

The dynamic token is encrypted by using a predetermined first public key to obtain a dynamic token ciphertext; wherein, the first public key is the public key of the asymmetric encryption algorithm sent by the data receiving end;

The original data ciphertext, the dynamic token ciphertext and the predetermined device identification are sent to the data receiving end.

or,

Receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identifier sent by the data sender;

Determine the first private key according to the device identification; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end;

Decrypt the dynamic token ciphertext using the first private key to obtain the dynamic token plaintext;

Using the dynamic token as the decryption key of the symmetric encryption algorithm, the original data ciphertext is decrypted to obtain the original data plaintext.

Of course, those skilled in the art can understand that the processor 520 also implements the technical solution of the data transmission method provided by any embodiment of the present application.

The electronic device 500 shown in FIG. 5 is only an example, and should not impose any limitations on the functions and scope of use of the embodiments of the present application.

As shown in FIG. 5 , the electronic device 500 includes a processor 520 , a storage device 510 , an input device 530 and an output device 540 ; the number of processors 520 in the electronic device may be one or more, and one processor 520 is used in FIG. 5 . For example, the processor 520 , the storage device 510 , the input device 530 and the output device 540 in the electronic device may be connected by a bus or other means, and the connection by the bus 550 is taken as an example in FIG. 5 .

As a computer-readable storage medium, the storage device 510 may be used to store software programs, computer-executable programs, and module units, such as program instructions corresponding to the data transmission methods in the embodiments of the present application.

The storage device 510 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function; the storage data area may store data created according to the use of the terminal, and the like. Additionally, storage device 510 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid-state storage device. In some examples, storage device 510 may further include memory located remotely from processor 520, which may be connected through a network. Examples of such networks include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

The input device 530 may be used to receive input numbers, character information or voice information, and generate key signal input related to user settings and function control of the electronic device. The output device 540 may include electronic devices such as a display screen, a speaker, and the like.

The electronic device provided by the embodiments of the present application can achieve the purpose of improving the efficiency of data transmission and improving the security of data transmission.

The data transmission apparatus, storage medium and electronic device provided in the above embodiments can execute the data transmission method provided by any embodiment of the present application, and have corresponding functional modules and beneficial effects for executing the method. For technical details not described in detail in the foregoing embodiments, reference may be made to the data transmission method provided by any embodiment of the present application.

Note that the above are only preferred embodiments of the present application and applied technical principles. Those skilled in the art will understand that the present application is not limited to the specific embodiments described herein, and various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the protection scope of the present application. Therefore, although the present application has been described in detail through the above embodiments, the present application is not limited to the above embodiments, and can also include more other equivalent embodiments without departing from the concept of the present application. The scope is determined by the scope of the appended claims.

Claims (10)

1. a data transmission method, is characterized in that, described method is carried out by data sending end; Described method comprises: Using the dynamic token pre-determined by the data sender as the encryption key of the symmetric encryption algorithm, encrypting the original data to obtain the original data ciphertext; The dynamic token is encrypted with a predetermined first public key to obtain a dynamic token ciphertext; wherein, the first public key is the public key of the asymmetric encryption algorithm sent by the data receiving end; The original data ciphertext, the dynamic token ciphertext and the predetermined device identification are sent to the data receiving end. 2. The method according to claim 1, wherein the method further comprises: Perform digital signature processing on the original data to obtain a signature string; The signature string is encrypted by the second private key to obtain the ciphertext of the signature string; wherein the second private key is the private key of the asymmetric encryption algorithm generated by the data sending end. 3. The method according to claim 2, wherein digital signature processing is performed on the original data to obtain a signature string, comprising: Use the SHA256 algorithm to perform data signature processing on the original data to obtain a signature string. 4. The method according to claim 2, wherein sending the original data ciphertext, the dynamic token ciphertext and a predetermined device identifier to a data receiving end, comprising: Send the original data ciphertext, the dynamic token ciphertext, the signature string ciphertext and the predetermined device identification to the data receiving end. 5. A data transmission method, wherein the method is performed by a data receiving end; the method comprises: Receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identifier sent by the data sender; Determine the first private key according to the device identification; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end; Decrypt the dynamic token ciphertext by using the first private key to obtain the dynamic token plaintext; Using the dynamic token as the decryption key of the symmetric encryption algorithm, the original data ciphertext is decrypted to obtain the original data plaintext. 6. The method according to claim 5, wherein the method further comprises: Receive the ciphertext of the signature string sent by the data sender; Determine the second public key according to the device identification; wherein, the second public key is the public key of the asymmetric encryption algorithm sent by the data sending end; The ciphertext of the signature string is decrypted by using the second public key to obtain the plaintext of the signature string, which is used for judging that the original data is changed. 7. A data transmission device, wherein the device is configured at a data sending end; the device comprises: The original data ciphertext obtaining module is used to encrypt the original data by using the dynamic token predetermined by the data sender as the encryption key of the symmetric encryption algorithm to obtain the original data ciphertext; The dynamic token ciphertext obtaining module is used for encrypting the dynamic token by using a predetermined first public key to obtain the dynamic token ciphertext; wherein, the first public key is an asymmetric data sent by the data receiving end The public key of the encryption algorithm; The data sending module is used for sending the original data ciphertext, the dynamic token ciphertext and the predetermined device identification to the data receiving end. 8. A data transmission device, wherein the device is configured at a data receiving end; the device comprises: The data receiving module is used to receive the original data ciphertext, the dynamic token ciphertext and the predetermined device identification sent by the data sender; a first private key determination module, configured to determine a first private key according to the device identifier; wherein, the first private key is the private key of the asymmetric encryption algorithm generated by the data receiving end; a dynamic token plaintext obtaining module, configured to decrypt the dynamic token ciphertext by using the first private key to obtain the dynamic token plaintext; The original data plaintext obtaining module is used for decrypting the original data ciphertext by using the dynamic token as the decryption key of the symmetric encryption algorithm to obtain the original data plaintext. 9. A computer-readable storage medium on which a computer program is stored, characterized in that, when the program is executed by a processor, any one of claims 1-4 or any one of claims 5-6 is implemented. data transfer method. 10. An electronic device, comprising a memory, a processor and a computer program stored on the memory and run on the processor, wherein the processor implements the computer program as claimed in claims 1-4, or The data transmission method according to any one of claims 5-6.

Images