CN114760063A - Home decoration data processing method, system, storage medium and equipment - Google Patents

Abstract

The invention provides a home decoration data processing method, a home decoration data processing system, a storage medium and home decoration data processing equipment. The method comprises the following steps: acquiring client funding information acquired by a third party funding platform through https funding api; sending a key acquisition request to a key database through a key query api to the information leaving the resources according to the sensitive data type; receiving a key returned by the key database and calling an encryption algorithm to generate a ciphertext for the information left; and storing the ciphertext to a resource reservation database. The method and the system reduce the database leakage risk in the plaintext storage data of the sensitive data at the system level, and reduce the legal risk of a decoration company caused by leakage of user information and huge economic benefit loss caused by the legal risk.

Description

Data processing method, system, storage medium and device for home improvement retained funds

technical field

The present invention relates to the field of data processing, in particular to a method, system, storage medium and device for processing home improvement retained capital data.

Background technique

At present, most decoration companies in the market offer decoration services on third-party platforms, and customers will push sensitive data information (including mobile phone number, name, address, decoration time, planned decoration cost, etc.) to the decoration company through authorization, and the back-end system of decoration hours This information is displayed in clear text by default. Due to the complexity of the decoration scene, it is often necessary to have multiple designers and multiple construction managers to follow up on a customer's decoration wishes. In this communication process, there is a risk of sensitive data leakage. In addition, there is also a database leakage in the clear text storage of sensitive data at the system level. Risks will eventually lead to huge loss of economic benefits and legal risks for decoration companies. Therefore, the home improvement industry is particularly important for the protection of sensitive customer information.

SUMMARY OF THE INVENTION

In view of the above-mentioned shortcomings of the prior art, the purpose of the present invention is to provide a method, system, storage medium and device for processing home improvement retention data, which are used to solve the above problems in the prior art.

In order to achieve the above-mentioned purpose and other related purposes, the present invention provides a method for processing home improvement retention data. Send a key acquisition request to the key database through the key query api according to the sensitive data type; receive the key returned by the key database and call the encryption algorithm to generate the ciphertext for the reserved information; save the ciphertext to the reserved information database.

In an embodiment of the present invention, the method further includes: the customer retention information includes: name, mobile phone number, decoration style, and overall budget; defining a sensitive data type registration key for the retention information according to the business type and Obtaining a key; generating a corresponding key according to the sensitive data type for the customer retention information; storing the key in a distributed manner in the key database.

In an embodiment of the present invention, the method further includes: converting the capital reservation information into a hexadecimal value; calling a corresponding AES symmetric encryption algorithm scheme according to the length of the generated key to generate a ciphertext for the capital reservation information .

In an embodiment of the present invention, the method further includes: generating the key by using the server IP, database name, table name, field name, and random number as parameters through the MD5 algorithm, wherein the number of digits of the random number cannot be less than N.

In an embodiment of the present invention, the method further includes: receiving a plaintext request from a business person to view the retained capital information; verifying the identity, authority, and viewing quantity information of the business personnel; according to the sensitive data type of the reserved capital information Send the key acquisition request to the key management module; extract the ciphertext in the retention database after receiving the key; call the AES symmetric decryption algorithm through the key to convert it into plaintext; record the business personnel to view the Reservation information is recorded in plaintext as log.

In an embodiment of the present invention, the method further includes: before sending the key acquisition request: establishing a server ip mutual access whitelist; adding an authentication parameter to the header of the key request information data, the authentication The parameters include request id, service serial number, and timestamp; set the valid duration k min for the timestamp; filter authentication parameters whose parameter type is byte type and whose parameter value is empty, and sort them according to the natural order of authentication parameters; The authentication parameters and their corresponding parameter values are concatenated to generate a first character string in combination; an authentication signature is generated from the first character string using the MD5 algorithm.

In an embodiment of the present invention, the method further includes the key management module verifying the validity of the request information after receiving the key acquisition request: judging whether the sending ip of the key acquisition request information is in a whitelist ; verify the authentication parameter ordering and the signature method; determine whether the receiving time is within the valid duration according to the timestamp.

In order to achieve the above-mentioned purpose and other related purposes, the present invention provides a home improvement data processing system, the system includes: a data acquisition module, used to obtain the customer's capital-reservation information obtained by a third-party capital-retention platform through the https capital-reservation api, according to the sensitive information. The data type obtains the key for the retention information; the key management module is used to generate the key and manage the key; the data processing module is used to receive the key returned by the key database and call the encryption algorithm pair. The reserved capital information generates ciphertext; the storage database module is used to store the key and ciphertext.

In order to achieve the above object and other related objects, the present invention provides a computer-readable storage medium, which stores a computer program, and when the computer program is loaded and executed by a processor, realizes the method for processing the data of home improvement retained funds.

In order to achieve the above object and other related objects, the present invention provides an electronic device, comprising: a processor, a memory and a communication interface; wherein, the memory is used to store a computer program; the processor is used to load and execute the computer program, so that the electronic device executes the method for processing the data of home improvement retention; the communication interface is used to realize the communication between the access device and other devices.

As described above, the present invention provides a method, system, storage medium and device for processing home improvement capital retention data, which is aimed at the problem of data leakage caused by the storage of customer capital retention information in plain text by encrypting it with high precision, and by distributing it. The key is stored in the system, which avoids the personnel who check the retained information from avoiding obtaining sensitive information in the application, and achieves high security performance and is easy to implement.

Description of drawings

FIG. 1 is a schematic flowchart of a method for processing home improvement retained capital data according to an embodiment of the present invention.

FIG. 2 is a schematic block diagram of a system for processing home improvement retention data according to an embodiment of the present invention.

FIG. 3 is a schematic structural diagram of an electronic device in an embodiment of the present invention.

Detailed ways

The embodiments of the present invention are described below through specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments may be combined with each other under the condition of no conflict. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present invention.

It should be noted that the drawings provided in the following embodiments are only used to illustrate the basic concept of the present invention in a schematic way, so the drawings only show the components related to the present invention rather than the number, shape and number of components in actual implementation. For dimension drawing, the type, quantity and proportion of each component can be changed at will in actual implementation, and the component layout may also be more complicated.

In order to solve the problem of database data leakage due to uncontrollable reasons in the prior art because a large number of customer retention data are stored in plaintext in the database and files of the home improvement system, the present invention provides a home improvement retention data processing method and system. , storage media and equipment.

As shown in FIG. 1 , the present embodiment provides a method for processing data on retained funds for home improvement, and the method includes the following steps:

S11: Obtain the customer retention information obtained by the third-party retention platform through the https retention API.

Specifically, the user's name, mobile phone number, decoration style, overall budget and other personal information reserved on third-party platforms such as the official website of the installation enterprise platform, Douyin, Kuaishou, Weibo, etc. are obtained through the https retention api.

S12: Send a key acquisition request to the key database through the key query api according to the sensitive data type for the reserved capital information.

Specifically, firstly define the sensitive data type for the reserved information according to the business type in advance, and then apply to the key management module for a registration key.

Further, a corresponding key is generated according to the sensitive data type of the customer retention information. In detail, use the server IP (Host), database name (schema), table name (table), field name (column), and random number as parameters to generate the key through the MD5 algorithm, where the number of random numbers cannot be lower than N, for example : The key generation rule is String keyStr=Host+schema+table+column+random number (uuid 64 bits), Key=md5 (keyStr).

Further, the key is distributed and stored in the key database.

Preferably, the key is persistently stored, and the creation time and the identification of whether it has been changed are recorded.

Secondly, send a key acquisition request to the query api provided by the key management module through the sensitive data type of the retention information. Among them, before sending the acquisition request, the original request information data is processed: first, add authentication parameters to the header of the key request information data. The authentication parameters include request id, service serial number, timestamp and other necessary parameters, and then the timestamp Set the valid duration k min, for example, set the valid duration to 3 minutes for the timestamp.

Further, the authentication parameters whose parameter type is byte type and whose parameter value is empty are filtered. Such parameters are not added to the header part of the request information and are not passed to the gateway. Then sort according to the natural order of the authentication parameters, connect the authentication parameters and their corresponding parameter values to combine to generate a first string, for example: combine the sorted parameters and their corresponding values into a format of "parameter=parameter value", and Connect these parameters with the & character, and the generated string is the string to be signed.

Further, the MD5 algorithm is used to generate an authentication signature for the first character string.

Preferably, the key management module verifies the validity of the request information after receiving the key acquisition request: establishes a server ip mutual access whitelist for the requesting party and the requested party in advance, and after receiving the key request information, First, determine whether the source IP of the request information is in the whitelist. If so, verify the authentication parameters in the request information. If not, return the request failure.

Further, after first receiving the key request, verify the authentication parameters in the request information according to the above sorting order and signature method. If the sorting order of the authentication parameters or the signature method is different from the agreement, the verification fails.

Preferably, after the verification of the authentication parameters and the signature is successful, it is determined whether the receiving time is within the preset valid time period of the timestamp invoked by adding the request parameter, and if so, the verification is successful, and if not, the verification fails.

S13: Receive the key returned by the key database and invoke an encryption algorithm to generate a ciphertext for the reserved capital information.

Specifically, the obtained customer reservation information is converted into a hexadecimal value, and then the corresponding AES symmetric encryption algorithm scheme is invoked according to the length of the generated key to generate a ciphertext for the reservation information. For example, if the key length is 16 bits, the 16-bit AES-128 with both performance and security attributes is used to encrypt the reserved plaintext data of the hexadecimal value by byte substitution, row shift, column obfuscation or round cipher. key and other algorithms for encryption.

S14: Save the ciphertext to the reserve database.

Specifically, the encrypted retained capital information is stored in the retained capital database.

Further, when the business needs to view the plaintext of the capital reservation information, a request for viewing the plaintext of the capital reservation information sent by it is received. After receiving the request, first verify the identity, authority and view quantity information of the business personnel.

Further, when the user's identity, authority and the amount of information requested to view the retained information all meet the request, then the key is obtained according to the sensitive data type of the retained information requested to be viewed. After the key management module verifies that the key acquisition request is correct, it extracts the key from the key database and returns it.

Further, after receiving the key, extract the ciphertext information stored in the reserved capital database, and then use the AES symmetric decryption algorithm to convert it into plaintext by calling the decryption interface through the key.

Preferably, it is recorded that the business personnel view the resource reservation information as a log, so that when a problem occurs, it is convenient to find the source.

All or part of the steps for implementing the above method embodiments may be completed by hardware related to computer programs. Based on this understanding, the present invention also provides a computer program product comprising one or more computer instructions. The computer instructions may be stored in a computer-readable storage medium. The computer-readable storage medium may be any available medium that can be stored by a computer, or a data storage device such as a server, data center, etc., which includes one or more available media integrated.

Referring to FIG. 2 , this embodiment provides a home improvement retention data processing system 20 , which is installed in an electronic device as a piece of software to execute the home improvement retention data processing method described in the foregoing method embodiments at runtime. Since the technical principles of the present system embodiments are similar to those of the foregoing method embodiments, the same technical details will not be repeated.

The home improvement capital retention data processing system 20 in this embodiment specifically includes: a data acquisition module 21 , a key management module 22 , a data processing module 23 , and a storage database module 24 . The data acquisition module 21 is used to obtain the customer retention information obtained by the third-party retention platform through the https retention api, and obtain the key according to the sensitive data type for the retention information; the key management module 22 is used to generate the key. and managing the key, wherein, managing the key includes verifying the key to request authentication parameters, and returning the key after the verification is successful; the data processing module 23 is used to receive the key returned by the key database and call an encryption algorithm to The ciphertext generated from the reserved capital information also includes adding authentication parameter data processing to the key acquisition request information and generating a signature; the storage database module 24 is used for storing the key and ciphertext, especially for distributed storage of the key.

Those skilled in the art should understand that the division of each module in the embodiment of FIG. 2 is only a division of logical functions, and may be fully or partially integrated into one or more physical entities in actual implementation. And these modules can all be implemented in the form of software calling through processing elements, or all of them can be implemented in hardware, and some modules can be implemented in the form of calling software through processing elements, and some modules can be implemented in hardware. For example, the data processing module 23 can be a separately established processing element, or can be integrated in a certain chip to realize, in addition, it can also be stored in the memory in the form of program code, and the data processing module 23 can be called and executed by a certain processing element. function. The implementation of other modules is similar. The processing element described here may be an integrated circuit with signal processing capability. In the implementation process, each step of the above-mentioned method or each of the above-mentioned modules can be completed by an integrated logic circuit of hardware in the processor element or an instruction in the form of software.

Referring to FIG. 3 , this embodiment provides an electronic device, and the electronic device may be a portable computer, a smart phone, a tablet computer, or the like. In detail, the electronic device includes at least: a memory 32, a processor 33, and a communication interface 34 connected through the bus 31, wherein the communication interface 34 is used for realizing communication between the data access device and other devices, wherein the memory 32 is used for A computer program is stored, and the processor 33 is configured to execute the computer program stored in the memory 32 to perform all or part of the steps in the foregoing method embodiments.

The system bus mentioned above may be a Peripheral Pomponent Interconnect (PCI for short) bus or an Extended Industry Standard Architecture (EISA for short) bus or the like. The system bus can be divided into address bus, data bus, control bus and so on. For ease of presentation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus. The communication interface is used to realize the communication between the database access device and other devices (eg client, read-write library and read-only library). The memory may include random access memory (Random Access Memory, RAM for short), and may also include non-volatile memory (non-volatile memory), such as at least one disk storage.

The above-mentioned processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, referred to as CPU), a network processor (Network Processor, referred to as NP), etc.; may also be a digital signal processor (Digital Signal Processing, referred to as DSP) , Application Specific Integrated Circuit (ASIC for short), Field-Programmable Gate Array (FPGA for short) or other programmable logic devices, discrete gate or transistor logic devices, and discrete hardware components.

To sum up, the present invention provides a method, system, storage medium and device for processing home improvement capital retention data, aiming at the problem of data leakage caused by the storage of customer capital retention information in plain text, by encrypting and storing the customer capital retention information, In addition, it extracts plaintext information for restricted auditing, and stores the keys in a distributed manner to avoid user information being arbitrarily extracted, viewed and forwarded, achieving high security performance and being easy to implement, and the present invention reduces system-level sensitivity to sensitive data. The risk of database leakage in plaintext stored data reduces the legal risk caused by the decoration company due to leakage of user information and the huge loss of economic benefits caused thereby. Therefore, the present invention effectively overcomes various shortcomings in the prior art and has high industrial utilization value.

The above-mentioned embodiments merely illustrate the principles and effects of the present invention, but are not intended to limit the present invention. Anyone skilled in the art can modify or change the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or changes made by those with ordinary knowledge in the technical field without departing from the spirit and technical idea disclosed in the present invention should still be covered by the claims of the present invention.

Claims (10)

1. A home decoration refund data processing method is characterized by comprising the following steps:

acquiring client funding information acquired by a third party funding platform through an https funding api;

sending a key acquisition request to a key database through a key query api according to the sensitive data type for the information leaving the resources;

receiving a key returned by the key database and calling an encryption algorithm to generate a ciphertext for the information leaving the data;

and storing the ciphertext to a funding database.

2. The method of claim 1, further comprising:

the client information comprises: name, mobile phone number, decoration style and overall budget;

defining a sensitive data type registration key for the information to be reserved according to the service type;

generating a corresponding key according to the sensitive data type of the client funding information;

and storing the key in the key database in a distributed mode.

3. The method of claim 2, further comprising:

converting the information of the reserved data into a hexadecimal numerical value;

and calling a corresponding AES symmetric encryption algorithm scheme according to the length of the generated key to generate a ciphertext for the information.

4. The method of claim 2, further comprising:

And generating the key by using the MD5 algorithm by taking the server IP, the database name, the table name, the field name and the random number as parameters, wherein the number of the random number cannot be lower than N.

5. The method of claim 1, further comprising:

receiving a request for business personnel to check the plaintext of the information left;

verifying the identity, the authority and the checking quantity information of the service personnel;

sending the key acquisition request to a key management module according to the sensitive data type of the funding information;

after receiving the key, extracting a ciphertext in the resource reserving database;

an AES symmetric decryption algorithm is called through a secret key to be converted into a plaintext;

and recording the plaintext record of the information left by the service personnel as log.

6. The method of claim 5, further comprising, prior to sending the key acquisition request:

establishing a server ip mutual access white list;

adding authentication parameters to the head part of the key request information data, wherein the authentication parameters comprise a request id, a service serial number and a time stamp;

setting an effective time length k min for the timestamp;

filtering the authentication parameters with byte type and empty parameter values, and sequencing according to the natural sequence of the authentication parameters;

Connecting the authentication parameters and the corresponding parameter values thereof to combine to generate a first character string;

the first string is generated into an authentication signature using the MD5 algorithm.

7. The method of claim 6, further comprising a key management module verifying the validity of the requested information after receiving the key acquisition request:

judging whether the key acquisition request information sending ip is in a white list or not;

verifying the authentication parameter sequencing and signature method;

and judging whether the receiving time is within the effective duration according to the timestamp.

8. A home improvement data processing system, said system comprising:

the data acquisition module is used for acquiring the client funding information acquired by the third-party funding platform through the https funding api and acquiring a key for the funding information according to the type of sensitive data;

a key management module for generating the key and managing the key;

the data processing module is used for receiving the key returned by the key database and calling an encryption algorithm to generate a ciphertext for the information left;

and the storage database module is used for storing the secret key and the ciphertext.

9. A computer-readable storage medium, in which a computer program is stored, which, when loaded and executed by a processor, carries out a method of processing homedress funding data according to any one of claims 1 to 7.

10. An electronic device, comprising: a processor, a memory, and a communication interface; wherein,

the memory is used for storing a computer program;

the processor is used for loading and executing the computer program to enable the electronic equipment to execute the home decoration funding data processing method according to any one of claims 1 to 7;

the communication interface is used for realizing communication between the access device and other equipment.

Images