WO2018076879A1

WO2018076879A1 - Data backup method and apparatus, storage medium, and terminal

Info

Publication number: WO2018076879A1
Application number: PCT/CN2017/095904
Authority: WO
Inventors: 马志峰
Original assignee: 广东欧珀移动通信有限公司
Priority date: 2016-10-25
Filing date: 2017-08-03
Publication date: 2018-05-03
Also published as: CN106528334A

Abstract

A data backup method and apparatus, a storage medium, and a terminal. The method comprises the following steps: using an encryption algorithm to encrypt data to be backed up, in order to obtain encrypted data; using a segmentation algorithm to segment the encrypted data, in order to obtain a plurality of data segments; adding identification information to each data segment; uploading the plurality of data segments to at least two first servers for distributed storage, and uploading the identification information to a second server.

Description

Data backup method, device, storage medium and terminal

The present application claims the priority of the Chinese Patent Application, filed on Oct. 25, 2016, the entire disclosure of which is hereby incorporated by reference.

Technical field

The present invention relates to the field of network technologies, and in particular, to a data backup method, apparatus, storage medium, and terminal.

Background technique

With the development of network technologies, the use of technologies such as cloud big data, cloud backup, and cloud synchronization is becoming more and more common.

The user needs to log in to the cloud account to obtain the data that has been backed up in the cloud from the mobile terminal side, and then download it from the cloud server. If the server is hacked or the internal staff of the operator fails, the backup data of a server is leaked, and the user's information is obtained by the criminals, which may cause serious economic losses to the user.

technical problem

The embodiment of the invention provides a data backup method, device, storage medium and terminal, which have the beneficial effects of improving the security of the backup data.

Technical solution

In a first aspect, an embodiment of the present invention provides a data backup method, including the following steps:

Encrypting the backup data with an encryption algorithm to obtain encrypted data;

Separating the encrypted data by using a segmentation algorithm to obtain a plurality of data segments;

Adding identification information to each of the data segments, the identification information being associated with name information of the data to be backed up;

Uploading the plurality of data segments to at least two first servers for distributed storage, and uploading the identification information to the second server.

In a second aspect, the embodiment of the present invention further provides a data backup device, including:

An encryption module, configured to encrypt the backup data by using an encryption algorithm to obtain encrypted data;

a segmentation module, configured to segment the encrypted data by using a segmentation algorithm to obtain a plurality of data segments;

An identifier module, configured to add identification information to each of the data segments, where the identifier information is associated with name information of the data to be backed up;

And an uploading module, configured to upload the plurality of data segments to at least two first servers for distributed storage, and upload the identification information to the second server.

In a third aspect, an embodiment of the present invention further provides a storage medium, where the storage medium stores a plurality of instructions, the instructions being adapted to be loaded by a processor to perform the data backup method according to any one of the foregoing.

In a fourth aspect, an embodiment of the present invention further provides a terminal, including a processor and a memory, the processor is electrically connected to the memory, the memory is used to store instructions and data, and the processor is configured to perform the following steps. :

Adding identification information to each data segment, the identification information being associated with the name information of the data to be backed up;

Beneficial effect

DRAWINGS

FIG. 1 is a scene diagram of a data backup system according to an embodiment of the present invention.

FIG. 2 is a flowchart of a data backup method in an embodiment of the present invention.

FIG. 3 is another flowchart of a data backup method according to an embodiment of the present invention.

FIG. 4 is a structural diagram of a data backup apparatus according to an embodiment of the present invention.

FIG. 5 is a structural diagram of a terminal in an embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

Referring to the drawings, wherein like reference numerals refer to the same components, the principles of the invention are illustrated in the context of a suitable computing environment. The following description is based on the specific embodiments of the invention, which are not to be construed as limiting the invention.

In the following description, the preferred embodiments of the present invention will be described with reference to the steps and symbols of the operations performed by one or more computers, unless otherwise stated. Thus, it will be appreciated that these steps and operations, several of which are referred to as being performed by a computer, include manipulation by a computer processing unit that represents an electronic signal of data in a structured version. This manipulation converts the data or maintains it at a location in the memory system of the computer, which can be reconfigured or otherwise alter the operation of the computer in a manner well known to those skilled in the art. The data structure maintained by the data is the physical location of the memory, which has specific characteristics defined by the data format. However, the principles of the present invention are described in the above text, which is not intended to be a limitation, and those skilled in the art will appreciate that the various steps and operations described below can also be implemented in hardware.

An embodiment of the present invention provides a data backup method, including the following steps:

In some embodiments, the step of encrypting the data to be backed up to obtain encrypted data includes:

Obtain unique feature information of the user;

Obtaining a corresponding encryption algorithm according to the unique feature information;

The data to be backed up is encrypted according to the encryption algorithm to obtain encrypted data.

In some embodiments, the step of segmenting the encrypted data by using a segmentation algorithm to obtain a plurality of data segments comprises:

Obtaining a corresponding segmentation algorithm according to the unique feature information;

The segmentation algorithm is used to segment the encrypted data to obtain a plurality of data segments.

In some embodiments, before the step of encrypting the backup data by using an encryption algorithm to obtain the encrypted data, the method further includes:

Obtain target data to be backed up;

Obtaining masquerading data according to the target data to be backed up;

The target data to be backed up and the spoofed data are combined to obtain data to be backed up.

In some embodiments, the step of acquiring the masquerading data according to the target data to be backed up includes:

Obtaining type information of the target data to be backed up;

Obtaining masquerading data of a corresponding type according to the type information.

The data backup system provided by the embodiment of the present invention mainly includes a data backup device and a server, wherein the data backup device can be integrated into a mobile terminal such as a tablet computer or a mobile phone, and the server and the mobile terminal can be connected through a wired or wireless network. connection.

For example, please refer to FIG. 1. FIG. 1 is a schematic diagram of a data backup system provided by the present invention. The data backup device is specifically integrated in a mobile phone, and is mainly used to encrypt data to be encrypted by using an encryption algorithm to obtain encrypted data; Encoding the encrypted data to obtain a plurality of data segments; adding identification information to each of the data segments, the identification information being associated with name information of the data to be backed up; and the plurality of data segments Uploading to at least two first servers for distributed storage, and uploading the identification information to the second server.

In this embodiment, it will be described from the perspective of a data backup device, which may be integrated into a mobile terminal such as a tablet computer or a mobile phone.

Referring to FIG. 2, FIG. 2 is a flowchart of a data backup method in a preferred embodiment of the present invention, which is mainly used in a mobile terminal. The data backup method includes the following steps:

S101. Encrypt the backup data by using an encryption algorithm to obtain encrypted data.

S102. Segment the encrypted data by using a segmentation algorithm to obtain a plurality of data segments.

S103. Add identification information to each of the data segments, where the identifier information is associated with name information of the data to be backed up;

S104. Upload the plurality of data segments to at least two first servers for distributed storage, and upload the identification information to the second server.

The steps of the data backup method are described in detail below.

In the step S101, the encryption algorithm may adopt a conventional encryption algorithm in the prior art, or may adopt a specially customized encryption algorithm. The data to be backed up is data with a high degree of confidentiality, such as a bank card number and password, a privacy photo, an important file, and the like.

In the step S102, the segmentation algorithm may be divided according to the data capacity, and the data capacity of each data segment may be the same value or a different value. For example, the first segment is 2B, and the second segment is 3B, the third segment is 4B and the like. Of course, it is not limited to this. The segmentation algorithm can also be segmented to form data segments according to other criteria.

In the step S103, each data segment is added with an identification information, and the identification information is associated with the name information of the data to be backed up. For example, the name of the data to be backed up is a1, and the identification information is a1b1, where b1 Is the identification number of the data segment to distinguish each data segment.

In the step S104, the plurality of data segments are distributed and stored in the at least two first servers, so that even if the data in one of the first servers is leaked, the complete data of the user cannot be obtained. And storing the identification information in the second server.

When the user needs to download the data, the plurality of identification information is obtained from the second server according to the name information of the data to be synchronized, and each identification information is associated with the name information. Then, according to the plurality of identification information, acquiring corresponding data segments from the at least two first servers, and then combining the plurality of data segments into encrypted data by using a combination algorithm corresponding to the segmentation algorithm, and finally adopting an encryption algorithm The decryption algorithm can obtain the data to be synchronized.

As can be seen from the above, the present invention uses an encryption algorithm to encrypt the backup data to obtain encrypted data; the segmentation algorithm is used to segment the encrypted data to obtain a plurality of data segments; and each of the data segments is added with identification information. The identifier information is associated with the name information of the data to be backed up; the plurality of data segments are uploaded to at least two first servers for distributed storage, and the identification information is uploaded to the second server, thereby completing the data backup. And, because the encrypted data of the data to be backed up is divided into a plurality of data segments and distributed and stored in at least two first servers, so that even if another person acquires data in one of the first servers through hacking technology, The user cannot obtain the complete backup data of the user, and since the plurality of identification information is stored in the second server, even if the illegal user acquires the data in the plurality of first servers at the same time, without the identification information, the illegal user cannot Each piece of data of the backup data is extracted from the massive data; To prevent the user's backup data was informed that with improved security of backup data benefits.

Please refer to FIG. 3. FIG. 3 is a flowchart of a data backup method in another preferred embodiment of the present invention, which is mainly used in a mobile terminal, and the data backup method includes the following steps:

S201. Obtain target data to be backed up;

S202. Acquire masquerading data according to the target data to be backed up;

S203. Combine the target data to be backed up and the spoofed data to obtain data to be backed up;

S204. Encrypt the backup data by using an encryption algorithm to obtain encrypted data.

S205. Perform segmentation on the encrypted data by using a segmentation algorithm to obtain multiple data segments.

S206. Add identification information to each of the data segments, where the identifier information is associated with name information of the data to be backed up;

S207. Upload the plurality of data segments to at least two first servers for distributed storage, and upload the identification information to the second server.

The steps of the data backup method are described in detail below.

In the step S201, when the terminal detects the data update with a higher security level, the updated data is extracted as the target data to be backed up, wherein the data with the higher security level may be the bank account password data, the photo, the important contract. Documents, important technical documents, etc.

In the step S202, during specific implementation, the spoofed data is obtained according to the type of the target data to be backed up. Therefore, the step S202 specifically includes:

S2021: Acquire type information of the target data to be backed up; for example, the type information may be a text type, a digital type, a picture type, and the like.

S2022: Acquire masquerading data of a corresponding type according to the type information. For example, when the target data to be backed up is a photo, the acquired camouflage data is also a photo. The photo can be downloaded automatically from the web or from a local database.

In this step S203, the data target data to be backed up is combined with the masquerading data to form data to be backed up.

In the step S204, the encryption algorithm may adopt a conventional encryption algorithm in the prior art, or may adopt a specially customized encryption algorithm.

For example, when a specially customized encryption algorithm is employed, the step S204 includes the following sub-steps:

S2041: Obtain unique feature information of the user; the unique feature information may be fingerprint information, iris information, or sound information of the user.

S2042: Acquire a corresponding encryption algorithm according to the unique feature information; for example, the user inputs fingerprint information, then the corresponding encryption algorithm is an A algorithm, and if the input is sound information, the corresponding encryption algorithm is a B algorithm, if input Is the iris information, then the encryption algorithm for the C algorithm.

S2043: Encrypt the data to be backed up according to the encryption algorithm to obtain encrypted data. The encryption data obtained in step S2043 is used to encrypt the backup data. After downloading the data, the same unique feature information must be input before the corresponding decryption algorithm can be obtained, thereby decrypting the encrypted data.

In the step S205, the segmentation algorithm may be divided according to the data capacity, and the data capacity of each data segment may be the same value or a different value. For example, the first segment is 2B, and the second segment is 3B, the third segment is 4B and the like. Of course, it is not limited to this. The segmentation algorithm can also form segments of data according to segmentation according to other criteria. Specifically, in this embodiment, the step S205 specifically includes the following sub-steps:

S2051: Acquire a corresponding segmentation algorithm according to the unique feature information; for example, if the user inputs fingerprint information, then the corresponding segmentation algorithm is a W algorithm, and if the input is sound information, the corresponding segmentation algorithm is a Y algorithm, if input The input iris information, then the segmentation algorithm is the Z algorithm.

S2052: Segment the encrypted data by using the segmentation algorithm to obtain a plurality of data segments.

In the step S206, each data segment is added with an identification information, and the identification information is associated with the name information of the data to be backed up. For example, the name of the data to be backed up is a1, and the identification information is a1b1, where b1 is The identification number of the data segment to distinguish each data segment.

In the step S207, the plurality of data segments are distributed and stored in at least two first servers, so that even if the data in one of the servers is leaked, the user's completion data cannot be obtained. The identification information is stored in the second server.

When the user needs to download the data, the plurality of identification information is obtained from the second server according to the name information of the data to be synchronized, and each identification information is associated with the name information. Then, according to the plurality of identification information, acquiring corresponding data segments from the at least two first servers, and then combining the plurality of data segments into encrypted data by using a combination algorithm corresponding to the segmentation algorithm, and finally adopting an encryption algorithm The decryption algorithm can obtain the data to be synchronized. Then, the spoofed data in the data to be synchronized is removed, and the target data that is finally needed is obtained.

The embodiment of the invention further provides a data backup device, comprising:

In some embodiments, the encryption module comprises:

a first acquiring unit, configured to acquire unique feature information of the user;

a second acquiring unit, configured to acquire a corresponding encryption algorithm according to the unique feature information;

And an encryption unit, configured to encrypt the data to be backed up according to the encryption algorithm to obtain encrypted data.

In some embodiments, the segmentation module comprises:

a third acquiring unit, configured to acquire a corresponding segmentation algorithm according to the unique feature information;

a dividing unit, configured to divide the encrypted data by using the segmentation algorithm to obtain a plurality of data segments.

In some embodiments, the method further includes:

a first acquiring module, configured to acquire target data to be backed up;

a second acquiring module, configured to obtain masquerading data according to the target data to be backed up;

The combination module combines the target data to be backed up and the spoofed data to obtain data to be backed up.

In some embodiments, the first obtaining module comprises:

a fourth acquiring unit, configured to acquire type information of the target data to be backed up;

And a fifth acquiring unit, configured to acquire the masquerading data of the corresponding type according to the type information.

Referring to FIG. 4, FIG. 4 is a structural diagram of a data backup apparatus 300 according to an embodiment of the present invention, which is mainly used in a mobile terminal. The data backup apparatus 300 includes: a first obtaining module 301, a second acquiring module 302, The combination module 303, the encryption module 304, the segmentation module 305, the identification module 306, and the upload module 307.

The first obtaining module 301 is configured to acquire target data to be backed up. The first obtaining module 301 includes a fourth obtaining unit 3011 and a fifth obtaining unit 3012. The fourth obtaining unit 3011 is configured to acquire the type information of the target data to be backed up; the fifth obtaining unit 3012 is configured to obtain the masquerading data of the corresponding type according to the type information.

The second obtaining module 302 is configured to obtain the masquerading data according to the target data to be backed up.

The combination module 303 is configured to combine the target data to be backed up and the spoofed data to obtain data to be backed up.

The encryption module 304 is configured to encrypt the backup data by using an encryption algorithm to obtain encrypted data. The encryption module 304 includes a first acquisition unit 3041, a second acquisition unit 3042, and an encryption unit 3043. The first obtaining unit 3041 is configured to acquire unique feature information of the user; the second acquiring unit 3042 is configured to obtain a corresponding encryption algorithm according to the unique feature information; the encrypting unit 3043 is configured to use the encryption algorithm according to the encryption algorithm The backup data is described as being encrypted to obtain encrypted data.

The segmentation module 305 is configured to segment the encrypted data by using a segmentation algorithm to obtain a plurality of data segments. The segmentation module 305 includes a third acquisition unit 3051 and a segmentation unit 3052. The third obtaining unit 3051 is configured to obtain a corresponding segmentation algorithm according to the unique feature information. The segmentation unit 3052 is configured to segment the encrypted data by using the segmentation algorithm to obtain a plurality of data segments.

The identification module 306 is configured to add identification information to each of the data segments, where the identification information is associated with the name information of the data to be backed up.

The uploading module 307 is configured to upload the plurality of data segments to at least two first servers for distributed storage, and upload the identification information to the second server.

It can be seen from the above that the encryption module uses the encryption algorithm to encrypt the backup data to obtain the encrypted data; the segmentation module divides the encrypted data by using a segmentation algorithm to obtain a plurality of data segments; the identification module is given to each Adding identification information to the data segment, the identification information is associated with the name information of the data to be backed up; the uploading module uploads the plurality of data segments to at least two first servers for distributed storage, and the identification information is Uploading to the second server to complete the data backup operation; and, since the encrypted data of the data to be backed up is divided into a plurality of data segments and distributed and stored in at least two first servers, even if others acquire the hacking technology, The data in one of the first servers cannot obtain the complete backup data of the user, and since the plurality of identification information is stored in the second server, even if the illegal user acquires the data in the plurality of first servers at the same time, Without this identification information, illegal users cannot also use the backup data. Data segments extracted from data in the mass; having improved backup data security benefits.

As shown in FIG. 5, an embodiment of the present invention further provides a terminal 400, which may include a radio frequency (RF, Radio). Circuit 401, memory 402 including one or more computer readable storage media, input unit 403, display unit 404, sensor 405, audio circuit 406, wireless fidelity (WiFi, Wireless) The Fidelity module 407 includes a processor 408 having one or more processing cores, and a power supply 409 and the like. It will be understood by those skilled in the art that the terminal shown in FIG. 5 does not constitute a limitation to the terminal, and may include more or less components than those illustrated, or a combination of certain components, or different component arrangements. among them:

The RF circuit 401 can be used for transmitting and receiving information or during a call, and receiving and transmitting signals. Specifically, after receiving downlink information of the base station, the downlink information is processed by one or more processors 408. In addition, the data related to the uplink is sent to the base station. . Typically, RF circuitry 401 includes, but is not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a subscriber identity module (SIM, Subscriber Identity Module) Card, Transceiver, Coupler, Low Noise Amplifier (LNA, Low Noise) Amplifier), duplexer, etc. In addition, the RF circuit 401 can also communicate with the network and other devices through wireless communication. The wireless communication can use any communication standard or protocol, including but not limited to a global mobile communication system (GSM, Global System of Mobile communication), General Packet Radio Service (GPRS, General Packet Radio) Service), Code Division Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA, Wideband Code) Division Multiple Access), Long Term Evolution (LTE), e-mail, short message service (SMS, Short) Messaging Service) and so on.

The memory 402 can be used to store software programs and modules, and the processor 408 executes various functional applications and data processing by running software programs and modules stored in the memory 402. The memory 402 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may be stored according to Data created by the use of the terminal (such as audio data, phone book, etc.). Moreover, memory 402 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device. Accordingly, memory 402 may also include a memory controller to provide access to memory 402 by processor 408 and input unit 403.

Input unit 403 can be used to receive input numeric or character information, as well as to generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function controls. In particular, in one particular embodiment, input unit 403 can include a touch-sensitive surface as well as other input devices. Touch-sensitive surfaces, also known as touch screens or trackpads, collect touch operations on or near the user (such as the user using a finger, stylus, etc., any suitable object or accessory on a touch-sensitive surface or touch-sensitive Operation near the surface), and drive the corresponding connecting device according to a preset program. Alternatively, the touch sensitive surface may include two parts of a touch detection device and a touch controller. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information. The processor 408 is provided and can receive commands from the processor 408 and execute them. In addition, touch-sensitive surfaces can be implemented in a variety of types, including resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch-sensitive surface, the input unit 403 can also include other input devices. Specifically, other input devices may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.

Display unit 404 can be used to display information entered by the user or information provided to the user, as well as various graphical user interfaces of the terminal, which can be composed of graphics, text, icons, video, and any combination thereof. The display unit 404 can include a display panel, and optionally, a liquid crystal display (LCD, Liquid) can be used. Crystal Display), Organic Light-Emitting (OLED) Diode) and other forms to configure the display panel. Further, the touch-sensitive surface can cover the display panel, and when the touch-sensitive surface detects a touch operation thereon or nearby, it is transmitted to the processor 408 to determine the type of the touch event, and then the processor 408 displays the type according to the type of the touch event. A corresponding visual output is provided on the panel. Although in FIG. 5, the touch-sensitive surface and display panel are implemented as two separate components to perform input and input functions, in some embodiments, the touch-sensitive surface can be integrated with the display panel to implement input and output functions.

The terminal may also include at least one type of sensor 405, such as a light sensor, motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel according to the brightness of the ambient light, and the proximity sensor may close the display panel and/or the backlight when the terminal moves to the ear. . As a kind of motion sensor, the gravity acceleration sensor can detect the magnitude of acceleration in all directions (usually three axes). When it is stationary, it can detect the magnitude and direction of gravity. It can be used to identify the gesture of the mobile phone (such as horizontal and vertical screen switching, related Game, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping), etc.; Other sensors such as a gyroscope, a barometer, a hygrometer, a thermometer, an infrared sensor, and the like that can be configured in the terminal are not described herein.

The audio circuit 406, the speaker, and the microphone provide an audio interface between the user and the terminal. The audio circuit 406 can transmit the converted electrical signal of the audio data to the speaker, and convert it into a sound signal output by the speaker; on the other hand, the microphone converts the collected sound signal into an electrical signal, which is received by the audio circuit 406 and then converted. The audio data is then processed by the audio data output processor 408, sent via RF circuitry 401 to, for example, another terminal, or the audio data is output to memory 402 for further processing. The audio circuit 406 may also include an earbud jack to provide communication between the peripheral earphone and the terminal.

WiFi is a short-range wireless transmission technology, and the terminal can help users to send and receive emails, browse web pages, and access streaming media through the WiFi module 407, which provides wireless broadband Internet access for users. Although FIG. 5 shows the WiFi module 407, it can be understood that it does not belong to the necessary configuration of the terminal, and may be omitted as needed within the scope of not changing the essence of the invention.

Processor 408 is the control center of the terminal, which connects various portions of the entire handset using various interfaces and lines, by executing or executing software programs and/or modules stored in memory 402, and by invoking data stored in memory 402, The various functions of the terminal and processing data to monitor the mobile phone as a whole. Optionally, the processor 408 may include one or more processing cores; preferably, the processor 408 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like. The modem processor primarily handles wireless communications. It will be appreciated that the above described modem processor may also not be integrated into the processor 408.

The terminal also includes a power source 409 (such as a battery) that supplies power to the various components. Preferably, the power source can be logically coupled to the processor 408 through a power management system to manage functions such as charging, discharging, and power management through the power management system. The power supply 409 may also include any one or more of a DC or AC power source, a recharging system, a power failure detection circuit, a power converter or inverter, a power status indicator, and the like.

Although not shown, the terminal may further include a camera, a Bluetooth module, and the like, and details are not described herein again. Specifically, in this embodiment, the processor 408 in the terminal loads the executable file corresponding to the process of one or more applications into the memory 402 according to the following instruction, and is executed by the processor 408 to be stored in the memory. The application program in 402, thereby implementing the data backup method and the functions of the device in the foregoing embodiment: encrypting the backup data by using an encryption algorithm to obtain encrypted data; and dividing the encrypted data by using a segmentation algorithm to obtain more Adding identification information to each of the data segments, the identification information being associated with the name information of the data to be backed up; uploading the plurality of data segments to at least two first servers for distributed storage And uploading the identification information to the second server.

In some embodiments, the data to be backed up is encrypted to obtain encrypted data, and the processor is configured to perform the following steps:

Obtain unique feature information of the user;

In some embodiments, when the encrypted data is segmented using a segmentation algorithm to obtain a plurality of data segments, the processor is configured to perform the following steps:

In some embodiments, the processor is configured to perform the following steps:

Obtain target data to be backed up;

Obtaining masquerading data according to the target data to be backed up;

In some embodiments, when the masquerading data is acquired according to the target data to be backed up, the processor is configured to perform the following steps:

Obtaining type information of the target data to be backed up;

Various operations of the embodiments are provided herein. In one embodiment, the one or more operations may constitute computer readable instructions stored on one or more computer readable media that, when executed by an electronic device, cause the computing device to perform the operations. The order in which some or all of the operations are described should not be construed as implying that the operations must be sequential. Those skilled in the art will appreciate alternative rankings that have the benefit of this specification. Moreover, it should be understood that not all operations must be present in every embodiment provided herein.

Moreover, the word "preferred" as used herein is intended to serve as an example, instance, or illustration. Any aspect or design described as "preferred" by the text is not necessarily to be construed as being more advantageous than other aspects or designs. Instead, the use of the word "preferred" is intended to present a concept in a specific manner. The term "or" as used in this application is intended to mean an "or" or "an" That is, unless otherwise specified or clear from the context, "X employs A or B" means naturally including any one of the permutations. That is, if X uses A; X uses B; or X uses both A and B, then "X uses A or B" is satisfied in any of the foregoing examples.

Rather, the present invention has been shown and described with respect to the embodiments of the present invention. The present disclosure includes all such modifications and variations, and is only limited by the scope of the appended claims. With particular regard to various functions performed by the above-described components (e.g., elements, resources, etc.), the terms used to describe such components are intended to correspond to performing the specified functions of the components (e.g., they are functionally equivalent). Any component (unless otherwise indicated) is not equivalent in structure to the disclosed structure for performing the functions in the exemplary implementations of the present disclosure as shown herein. Moreover, although certain features of the present disclosure have been disclosed with respect to only one of several implementations, such features may be combined with one or more other implementations as may be desired and advantageous for a given or particular application. Other feature combinations. Furthermore, the terms "comprising," "having," "having," or "include" or "comprising" are used in the particular embodiments or claims, and such terms are intended to be encompassed in a manner similar to the term "comprising."

Each functional unit in the embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. The integrated modules, if implemented in the form of software functional modules and sold or used as stand-alone products, may also be stored in a computer readable storage medium. The above mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like. Each of the above described devices or systems can perform the methods of the corresponding method embodiments.

In the above, the present invention has been disclosed in the above preferred embodiments, but the preferred embodiments are not intended to limit the present invention, and those skilled in the art can make various modifications without departing from the spirit and scope of the invention. The invention is modified and retouched, and the scope of the invention is defined by the scope defined by the claims.

Claims

A data backup method, which includes the following steps:

Encrypting the backup data with an encryption algorithm to obtain encrypted data;

Separating the encrypted data by using a segmentation algorithm to obtain a plurality of data segments;

Adding identification information to each data segment, the identification information being associated with the name information of the data to be backed up;

Uploading the plurality of data segments to at least two first servers for distributed storage, and uploading the identification information to the second server.
The data backup method according to claim 1, wherein the step of encrypting the data to be backed up to obtain encrypted data comprises:

Obtain unique feature information of the user;

Obtaining a corresponding encryption algorithm according to the unique feature information;

The data to be backed up is encrypted according to the encryption algorithm to obtain encrypted data.
The data backup method according to claim 2, wherein the step of dividing the encrypted data by using a segmentation algorithm to obtain a plurality of data segments comprises:

Obtaining a corresponding segmentation algorithm according to the unique feature information;

The segmentation algorithm is used to segment the encrypted data to obtain a plurality of data segments.
The data backup method according to claim 1, wherein the step of encrypting the backup data to obtain the encrypted data by using the encryption algorithm further comprises:

Obtain target data to be backed up;

Obtaining masquerading data according to the target data to be backed up;

The target data to be backed up and the spoofed data are combined to obtain data to be backed up.
The data backup method according to claim 4, wherein the step of acquiring the masquerading data according to the target data to be backed up comprises:

Obtaining type information of the target data to be backed up;

Obtaining masquerading data of a corresponding type according to the type information.
A data backup device, comprising:

An encryption module, configured to encrypt the backup data by using an encryption algorithm to obtain encrypted data;

a segmentation module, configured to segment the encrypted data by using a segmentation algorithm to obtain a plurality of data segments;

An identifier module, configured to add identification information to each of the data segments, where the identifier information is associated with name information of the data to be backed up;

And an uploading module, configured to upload the plurality of data segments to at least two first servers for distributed storage, and upload the identification information to the second server.
The data backup device of claim 6, wherein the encryption module comprises:

a first acquiring unit, configured to acquire unique feature information of the user;

a second acquiring unit, configured to acquire a corresponding encryption algorithm according to the unique feature information;

And an encryption unit, configured to encrypt the data to be backed up according to the encryption algorithm to obtain encrypted data.
The data backup device of claim 7, wherein the segmentation module comprises:

a third acquiring unit, configured to acquire a corresponding segmentation algorithm according to the unique feature information;

a dividing unit, configured to divide the encrypted data by using the segmentation algorithm to obtain a plurality of data segments.
The data backup device according to claim 6, further comprising:

a first acquiring module, configured to acquire target data to be backed up;

a second acquiring module, configured to obtain masquerading data according to the target data to be backed up;

The combination module combines the target data to be backed up and the spoofed data to obtain data to be backed up.
The data backup device of claim 9, wherein the first obtaining module comprises:

a fourth acquiring unit, configured to acquire type information of the target data to be backed up;

And a fifth acquiring unit, configured to acquire the masquerading data of the corresponding type according to the type information.
A storage medium, wherein the storage medium stores a plurality of instructions adapted to be loaded by a processor to perform the data backup method according to any one of claims 1 to 5.
A terminal, comprising a processor and a memory, the processor being electrically connected to the memory, the memory for storing instructions and data, and the processor for performing the following steps:

Encrypting the backup data with an encryption algorithm to obtain encrypted data;

Separating the encrypted data by using a segmentation algorithm to obtain a plurality of data segments;

Adding identification information to each data segment, the identification information being associated with the name information of the data to be backed up;

Uploading the plurality of data segments to at least two first servers for distributed storage, and uploading the identification information to the second server.
The terminal of claim 12, wherein the data to be backed up is encrypted to obtain encrypted data, and the processor is configured to perform the following steps:

Obtain unique feature information of the user;

Obtaining a corresponding encryption algorithm according to the unique feature information;

The data to be backed up is encrypted according to the encryption algorithm to obtain encrypted data.
The terminal according to claim 13, wherein when the encrypted data is segmented by a segmentation algorithm to obtain a plurality of data segments, the processor is configured to perform the following steps:

Obtaining a corresponding segmentation algorithm according to the unique feature information;

The segmentation algorithm is used to segment the encrypted data to obtain a plurality of data segments.
The terminal of claim 12, wherein the processor is configured to perform the following steps:

Obtain target data to be backed up;

Obtaining masquerading data according to the target data to be backed up;

The target data to be backed up and the spoofed data are combined to obtain data to be backed up.
The terminal according to claim 15, wherein when the masquerading data is acquired according to the target data to be backed up, the processor is configured to perform the following steps:

Obtaining type information of the target data to be backed up;

Obtaining masquerading data of a corresponding type according to the type information.