WO2019200690A1

WO2019200690A1 - Data protection method, server and computer readable storage medium

Info

Publication number: WO2019200690A1
Application number: PCT/CN2018/091899
Authority: WO
Inventors: 朱秀军
Original assignee: 深圳市网心科技有限公司
Priority date: 2018-04-17
Filing date: 2018-06-20
Publication date: 2019-10-24
Also published as: CN108737377A

Abstract

Disclosed in the present application is a data protection method. Said method comprises: a server receiving a service request sent by a cloud service smart device, the service request being encrypted using a predetermined encryption algorithm; decoding the service request using the encryption algorithm; determining whether the decoding succeeds; forwarding the service request to a background processing server if the service request is decoded successfully; and disconnecting from the cloud service smart device if the decoding of the service request fails. The present application also provides a server and a computer readable storage medium. The data protection method, the server and the computer readable storage medium provided in the present application can improve the data security of a service request between a cloud service smart device and a server.

Description

Data protection method, server and computer readable storage medium

The present application claims priority to Chinese Patent Application No. 201810343083.2, entitled "Data Protection Method, Server and Computer Readable Storage Media", filed on April 17, 2018, the entire contents of which are incorporated by reference. In the application.

Technical field

The present application relates to the field of blockchain technology, and in particular, to a data protection method, a server, and a computer readable storage medium.

Background technique

Cloud service smart devices, such as mining machines, are electronic devices that are often used in blockchain networks. In a practical application, the cloud service smart device needs to communicate with the access server to issue a service request, and then the service request is forwarded by the access server to the background processing server to provide the cloud service smart device with the required data and other services. Supporting, so that the cloud service smart device can provide the user-side service for the user. However, the existing service request may be intercepted during the communication between the cloud service smart device and the access server, resulting in information leakage and counterfeiting, and may be copied and replayed, resulting in device status and information being tampered with. risk.

Summary of the invention

In view of this, the present application proposes a data protection method, a server, and a computer readable storage medium to solve the problem of how to improve the data security of a service request between a cloud service smart device and a server.

First, in order to achieve the above object, the present application provides a data protection method, which is applied to a communication process between a cloud service smart device and a server, and the method includes the following steps:

Receiving, by the server, a service request sent by the cloud service smart device, where the service request is encrypted by using a predetermined encryption algorithm;

Decoding the service request by using the encryption algorithm;

Determine whether the decoding is successful;

And when the service request is successfully decoded, forwarding the service request to a background processing server; and

When the service request decoding fails, the connection with the cloud service smart device is disconnected.

In addition, in order to achieve the above object, the present application further provides a server, including a memory, a processor, and a data protection program executable on the processor, where the data protection program is used by the processor The following steps are implemented during execution:

Receiving a service request sent by the cloud service smart device, where the service request is encrypted by using a predetermined encryption algorithm;

Decoding the service request by using the encryption algorithm;

Determine whether the decoding is successful;

Further, to achieve the above object, the present application further provides a computer readable storage medium storing a data protection program, the data protection program being executable by at least one processor to enable the At least one processor performs the steps of the data protection method as described above.

Compared with the prior art, the data protection method, the server and the computer readable storage medium proposed by the present application use a dedicated algorithm to encrypt and decrypt the service request, thereby reducing the message being acquired during the communication between the device and the server, resulting in the message being acquired. The risk of information disclosure and counterfeiting. In addition, a timestamp check is added to the service request, which reduces the risk that the message is copied and the replay causes the device status and information to be tampered with during the communication between the device and the server.

DRAWINGS

1 is a schematic diagram of an optional application environment of each embodiment of the present application;

2 is a schematic diagram of an optional hardware architecture of the access server of FIG. 1;

3 is a schematic diagram of a program module of a first embodiment and a second embodiment of a data protection system of the present application;

4 is a schematic flowchart of a first embodiment of a data protection method according to the present application;

FIG. 5 is a schematic flowchart of a second embodiment of a data protection method according to the present application.

The implementation, functional features and advantages of the present application will be further described with reference to the accompanying drawings.

detailed description

In order to make the objects, technical solutions, and advantages of the present application more comprehensible, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.

It should be noted that the descriptions of "first", "second" and the like in the present application are for the purpose of description only, and are not to be construed as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. . Thus, features defining "first" or "second" may include at least one of the features, either explicitly or implicitly. In addition, the technical solutions between the various embodiments may be combined with each other, but must be based on the realization of those skilled in the art, and when the combination of the technical solutions is contradictory or impossible to implement, it should be considered that the combination of the technical solutions does not exist. Nor is it within the scope of protection required by this application.

Referring to FIG. 1 , it is a schematic diagram of an optional application environment of each embodiment of the present application.

In this embodiment, the present application is applicable to an application environment including, but not limited to, a background processing server 1, an access server 2, and a cloud service smart device 4. The background processing server 1, the access server 2, and the cloud service smart device 4 perform data communication through the network.

The cloud service smart device 4 is configured to send a service request, such as a connection request, a data request, to the access server 2, and receive feedback from the access server 2, thereby providing the user with the service of the APP. The cloud service smart device 4 may be a mining machine or the like.

The access server 2 is configured to receive the service request sent by the cloud service smart device 4, forward it to the background processing server 1, and then receive the feedback of the background processing server 1 and forward it to the cloud service smart device 4, or according to other servers. The feedback determines whether to remain connected to the cloud service smart device 4.

The background processing server 1 and the access server 2 may be a computer, a single network server, a server group composed of a plurality of network servers, or a cloud-based cloud composed of a large number of hosts or network servers.

Referring to FIG. 2, it is a schematic diagram of an optional hardware architecture of the access server 2 in FIG. In this embodiment, the access server 2 may include, but is not limited to, the memory 11, the processor 12, and the network interface 13 being communicably connected to each other through a system bus. It is noted that Figure 2 only shows the access server 2 with components 11-13, but it should be understood that not all illustrated components may be implemented, and more or fewer components may be implemented instead.

The memory 11 includes at least one type of readable storage medium including a flash memory, a hard disk, a multimedia card, a card type memory (eg, SD or DX memory, etc.), and a random access memory (RAM). , static random access memory (SRAM), read only memory (ROM), electrically erasable programmable read only memory (EEPROM), programmable read only memory (PROM), magnetic memory, magnetic disk, optical disk, and the like. In some embodiments, the memory 11 may be an internal storage unit of the access server 2, such as a hard disk or memory of the access server 2. In other embodiments, the memory 11 may also be an external storage device of the access server 2, such as a plug-in hard disk provided on the access server 2, a smart memory card (SMC), Secure Digital (SD) card, Flash Card, etc. Of course, the memory 11 may also include both the internal storage unit of the access server 2 and its external storage device. In this embodiment, the memory 11 is generally used to store an operating system installed in the access server 2 and various types of application software, such as program code of the data protection system 200. Further, the memory 11 can also be used to temporarily store various types of data that have been output or are to be output.

The processor 12 may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor, or other data processing chip in some embodiments. The processor 12 is typically used to control the overall operation of the access server 2. In this embodiment, the processor 12 is configured to run program code or process data stored in the memory 11, such as running the data protection system 200 and the like.

The network interface 13 may comprise a wireless network interface or a wired network interface, which is typically used to establish a communication connection between the access server 2 and other electronic devices. In this embodiment, the network interface 13 is mainly used to connect the access server 2 to one or more of the background processing servers 1 and the cloud service smart device 4 through a network, where the access server 2 and the Establishing a data transmission channel and a communication connection between the one or more background processing servers 1 and the cloud service smart device 4.

So far, the application environment of the various embodiments of the present application and the hardware structure and functions of related devices have been described in detail. Hereinafter, various embodiments of the present application will be proposed based on the above-described application environment and related devices.

First, the present application proposes a data protection system 200.

Referring to FIG. 3, it is a program module diagram of the first embodiment and the second embodiment of the data protection system 200 of the present application.

In the first embodiment, the data protection system 200 includes a series of computer program instructions stored on the memory 11, and when the computer program instructions are executed by the processor 12, the data protection of the embodiments of the present application can be implemented. operating. In some embodiments, data protection system 200 can be divided into one or more modules based on the particular operations implemented by the various portions of the computer program instructions. For example, in FIG. 3, the data protection system 200 can be divided into a receiving module 201, a decoding module 202, a determining module 203, and a processing module 204. among them:

The receiving module 201 is configured to receive a service request sent by the cloud service smart device 4.

Specifically, when the cloud service smart device 4 needs to request a service from the access server 3, a service request, such as a connection request, a data request, or the like, is sent to the access server 3. The service request includes a device MAC address, a device identifier, a device encryption manner, and the like of the cloud service smart device 4. In order to ensure the data security of the service request, in the embodiment, the service request is encrypted by using a predetermined encryption algorithm, and then sent to the access server 2 to reduce the risk of being tampered with. The encryption algorithm may be an AES symmetric encryption algorithm or other similar encryption algorithm.

The decoding module 202 is configured to decode the service request.

Specifically, after receiving the service request, the receiving module 201 decodes the service request by using the same encryption algorithm as the cloud service smart device 4 end.

The principle of the encryption algorithm includes: transmitting in a confusing binary encoding manner; the cloud service smart device 4 encrypts data using a key key; the access server 2 decrypts data using the same key key.

The determining module 203 is configured to determine whether the decoding of the service request by the decoding module 202 is successful.

Specifically, if the service request is tampered with, the decoding module 202 fails to decode the service request by using the same encryption algorithm and key key as the cloud service smart device 4. When it is judged that the decoding is successful, it indicates that the service request has not been tampered with.

The processing module 204 is configured to forward the service request to the background processing server 1 when the service request is successfully decoded, or disconnect (or reject) the cloud service intelligence when the service request fails to be decoded. Connection of device 4.

Further, in the second embodiment, the determining module 203 is further configured to: when the service request is successfully decoded, determine whether the timeliness of the service request is expired.

Specifically, when the service request is successfully decoded, the determining module 203 further determines the timeliness of the service request. In this embodiment, the service request further includes an effective time point. After the decoding module 202 successfully decodes the service request, and obtains the valid time point, the determining module 203 determines whether the current time point is earlier than or equal to the valid time point. If the current time point is earlier than or equal to the valid time point, it is determined that the service request has not expired and is valid. If the current time point is later than the valid time point, it is determined that the service request has expired and expired.

It is to be noted that the cloud service smart device 4 and the access server 2 are long-connected, that is, after the connection is successfully established, the connection is not released for a long time. Therefore, when the cloud service smart device 4 sends a connection request to the access server 3, the access server 3 verifies the timeliness of the connection request. After the verification succeeds, the access server 3 When the other service requests of the cloud service smart device 4 are received, the decoding is successful only, and the timeliness is not verified.

The processing module 204 is further configured to: when the service request decoding succeeds and the timeliness of the service request is not expired, forward the service request to the background processing server 1, or when it is determined that the service request decoding fails or When the timeliness of the service request has expired, the connection with the cloud service smart device 4 is disconnected (or rejected).

In addition, the present application also proposes a data protection method.

Referring to FIG. 4, it is a schematic flowchart of the first embodiment of the data protection method of the present application. In this embodiment, the order of execution of the steps in the flowchart shown in FIG. 4 may be changed according to different requirements, and some steps may be omitted. The method includes the following steps:

Step S100, receiving a service request sent by the cloud service smart device 4.

Step S102, decoding the service request.

Specifically, after receiving the service request, the access server 2 decodes the service request by using the same encryption algorithm as the cloud service smart device 4 end.

In step S104, it is determined whether the decoding is successful. If successful, step S106 is performed. If not, step S108 is performed.

Specifically, if the service request is tampered with, the access server 2 fails to decode the service request by using the same encryption algorithm and key key as the cloud service smart device 4. When it is judged that the decoding is successful, it indicates that the service request has not been tampered with.

In step S106, the service request is forwarded to the background processing server 1.

Specifically, when the service request is successfully decoded, the access server 2 maintains a long connection with the cloud service smart device 4, and forwards the service request to the background processing server 1 to make the background The processing server 1 provides corresponding services to the cloud service smart device 4, such as feedback of required data and the like.

In step S108, the connection with the cloud service smart device 4 is disconnected.

Specifically, when it is determined that the service request decoding fails, the access server 2 disconnects (or rejects) the connection with the cloud service smart device 4. In this embodiment, the connection is a TCP (Transmission Control Protocol) connection. The access server 2 removes the cloud service smart device 4 from the TCP connection list.

The data protection method provided in this embodiment can use a dedicated algorithm to encrypt and decrypt the service request, which reduces the risk of information leakage and counterfeiting when the device and the server communicate with each other.

As shown in FIG. 5, it is a schematic flowchart of a second embodiment of the data protection method of the present application. In this embodiment, some steps of the data protection method are similar to the steps of the first embodiment, except that the method further includes step S206.

The method includes the following steps:

Step S200, receiving a service request sent by the cloud service smart device 4.

Step S202, decoding the service request.

In step S204, it is determined whether the decoding is successful. If successful, step S206 is performed. If it is not successful, step S210 is performed.

Step S206, determining whether the timeliness of the service request is expired. If it has not expired, step S208 is performed. If it expires, step S210 is performed.

Specifically, when the service request is successfully decoded, the access server 2 further determines the timeliness of the service request. In this embodiment, the service request further includes a timestamp, that is, a valid time point of the service request. After the access server 2 successfully decodes the service request, the valid time point is obtained therefrom, and then it is determined whether the current time point is earlier than or equal to the valid time point. If the current time point is earlier than or equal to the valid time point, it is determined that the service request has not expired and is valid. If the current time point is later than the valid time point, it is determined that the service request has expired and expired.

Step S208, forwarding the service request to the background processing server 1.

Specifically, when the service request decoding is successful and the timeliness of the service request is not expired, the access server 2 maintains a long connection with the cloud service smart device 4, and forwards the service request to the The server 1 is processed in the background to enable the background processing server 1 to provide corresponding services for the cloud service smart device 4, such as feedback of required data and the like.

In step S210, the connection with the cloud service smart device 4 is disconnected.

Specifically, when it is determined that the service request decoding fails or the timeliness of the service request has expired, the access server 2 disconnects (or rejects) the connection with the cloud service smart device 4. In this embodiment, the connection is a TCP connection. The access server 2 removes the cloud service smart device 4 from the TCP connection list.

The data protection method provided in this embodiment adds a timestamp check to the service request by using a dedicated algorithm to encrypt and decrypt the service request to prevent the phishing attack, thereby reducing the communication between the device and the server. During the process, the message is copied and the replay causes the device status and information to be tampered with.

The serial numbers of the embodiments of the present application are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present application, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a client (which may be a cell phone, computer, server, air conditioner, or network device, etc.) to perform the methods described in various embodiments of the present application.

The above is only a preferred embodiment of the present application, and is not intended to limit the scope of the patent application, and the equivalent structure or equivalent process transformations made by the specification and the drawings of the present application, or directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of this application.

Claims

A data protection method is applied to a communication process between a cloud service intelligent device and a server, wherein the method includes the following steps:

Receiving, by the server, a service request sent by the cloud service smart device, where the service request is encrypted by using a predetermined encryption algorithm;

Decoding the service request by using the encryption algorithm;

Determine whether the decoding is successful;

And when the service request is successfully decoded, forwarding the service request to a background processing server; and

When the service request decoding fails, the connection with the cloud service smart device is disconnected.
The data protection method according to claim 1, wherein the method further comprises the steps of: when the service request is successfully decoded:

Determining whether the timeliness of the service request is expired, if not expired, performing the step of forwarding the service request to the background processing server, if the expiration, performing the disconnecting the connection with the cloud service smart device .
The data protection method according to claim 1, wherein the encryption algorithm is an AES symmetric encryption algorithm, and the cloud service smart device and the server encrypt and decode the service request by using the same key.
The data protection method according to claim 2, wherein the encryption algorithm is an AES symmetric encryption algorithm, and the cloud service smart device and the server encrypt and decode the service request by using the same key.
The data protection method according to claim 2, wherein said service request includes an effective time point.
The data protection method according to claim 4, wherein the service request includes an effective time point.
The data protection method according to claim 5, wherein the step of determining whether the timeliness of the service request is expired comprises:

Obtaining the valid time point from the decoded service request;

Determining whether the current time point is earlier than or equal to the valid time point;

Determining that the service request is not expired and valid if the current time point is earlier than or equal to the valid time point;

If the current time point is later than the valid time point, it is determined that the service request has expired and expired.
The data protection method according to claim 6, wherein the step of determining whether the timeliness of the service request is expired comprises:

Obtaining the valid time point from the decoded service request;

Determining whether the current time point is earlier than or equal to the valid time point;

Determining that the service request is not expired and valid if the current time point is earlier than or equal to the valid time point;

If the current time point is later than the valid time point, it is determined that the service request has expired and expired.
A server, comprising: a memory, a processor, wherein the memory stores a data protection program executable on the processor, and when the data protection program is executed by the processor, the following is implemented as follows step:

Receiving a service request sent by the cloud service smart device, where the service request is encrypted by using a predetermined encryption algorithm;

Decoding the service request by using the encryption algorithm;

Determine whether the decoding is successful;

And when the service request is successfully decoded, forwarding the service request to a background processing server; and

When the service request decoding fails, the connection with the cloud service smart device is disconnected.
The server according to claim 9, wherein said data protection program is further executed by said processor:

When the service request is successfully decoded, determining whether the timeliness of the service request is expired, if not expired, performing the step of forwarding the service request to the background processing server, and if it has expired, executing the disconnection The steps of connecting the cloud service smart device.
The server according to claim 9, wherein said encryption algorithm is an AES symmetric encryption algorithm, and said cloud service smart device and said server encrypt and decode said service request using the same key.
The server according to claim 10, wherein said encryption algorithm is an AES symmetric encryption algorithm, and said cloud service smart device and said server encrypt and decode said service request using the same key.
The server of claim 10 wherein said service request includes a valid point in time.
The server according to claim 13, wherein the step of determining whether the timeliness of the service request is expired comprises:

Obtaining the valid time point from the decoded service request;

Determining whether the current time point is earlier than or equal to the valid time point;

Determining that the service request is not expired and valid if the current time point is earlier than or equal to the valid time point;

If the current time point is later than the valid time point, it is determined that the service request has expired and expired.
A computer readable storage medium storing a data protection program, the data protection program being executable by at least one processor to cause the at least one processor to perform the following steps:

Receiving a service request sent by the cloud service smart device, where the service request is encrypted by using a predetermined encryption algorithm;

Decoding the service request by using the encryption algorithm;

Determine whether the decoding is successful;

And when the service request is successfully decoded, forwarding the service request to a background processing server; and

When the service request decoding fails, the connection with the cloud service smart device is disconnected.
The computer readable storage medium of claim 15 wherein said data protection program is further implemented when said processor is executed:

When the service request is successfully decoded, determining whether the timeliness of the service request is expired, if not expired, performing the step of forwarding the service request to the background processing server, and if it has expired, executing the disconnection The steps of connecting the cloud service smart device.
A computer readable storage medium according to claim 15, wherein said encryption algorithm is an AES symmetric encryption algorithm, said cloud service smart device and said server encrypting said service request using the same key decoding.
The computer readable storage medium according to claim 16, wherein said encryption algorithm is an AES symmetric encryption algorithm, said cloud service smart device and said server encrypting said service request using the same key decoding.
The computer readable storage medium of claim 16 wherein the service request includes a valid point in time.
The computer readable storage medium of claim 19, wherein the step of determining whether the timeliness of the service request has expired comprises:

Obtaining the valid time point from the decoded service request;

Determining whether the current time point is earlier than or equal to the valid time point;

Determining that the service request is not expired and valid if the current time point is earlier than or equal to the valid time point;

If the current time point is later than the valid time point, it is determined that the service request has expired and expired.