WO2019223094A1

WO2019223094A1 - Block chain-based file protection method, and terminal device

Info

Publication number: WO2019223094A1
Application number: PCT/CN2018/097119
Authority: WO
Inventors: 谢丹力; 张宇; 陆陈一帆
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2018-05-22
Filing date: 2018-07-25
Publication date: 2019-11-28
Also published as: SG11201912786WA; CN108733990B; CN108733990A

Abstract

The present application is applicable to the technical field of computers, and provided thereby are a block chain-based file protection method and a terminal device, the method comprising: acquiring type information of a first file needing to be protected, the type information being used for identifying a program design language employed by a source file corresponding to the first file; determining protection information of the first file according to the type information, the protection information being used for preventing decompilation; and configuring the protection information to the first file according to a preset configuration policy to obtain a second file, the execution logic of the second file being the same as that of the first file. According to the present application, protection information is configured for a first file of a data interaction port used for setting up a block chain, and content in the first file is obfuscated by means of the configured protection information. Therefore, the data security of the first file may be improved, and the security of user information or user properties in an application program corresponding to the first file is improved.

Description

File protection method and terminal equipment based on blockchain

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on May 22, 2018, with application number 201810496143.4, and the invention name is "A Blockchain-Based File Protection Method and Terminal Device". Citations are incorporated in this application.

Technical field

The present application belongs to the field of computer technology, and particularly relates to a file protection method based on a blockchain and a terminal device.

Background technique

With the development of the mobile Internet, applications that provide various services have emerged at the historic moment. Users can download and install applications on the terminal and use the applications (Application, App) to enjoy the corresponding services. For example, Blockchain App, Taxi App, Financial App, etc.

However, after the application program is installed on the terminal, it is easy for hackers or criminals to attack through decompilation tools, obtain the executable file in the application installation package, and decompile the executable file to obtain the source code of the feasible file. , Stealing the algorithm contained in the source code or tampering with the source code, etc., which leads to the theft of user information or user property of the application, and even brings huge economic losses to the user, and the data security is low.

technical problem

The embodiments of the present application provide a method and a terminal device for protecting a file based on a blockchain, so as to solve the problem of low data security in the prior art because an executable file of an application program is decompiled to leak source code.

Technical solutions

A first aspect of the embodiments of the present application provides a blockchain-based file protection method, including:

Acquire type information of a first file to be protected; wherein the first file is used to build a data interaction port of the blockchain, the first file is an object file or an executable file, and the object file is a source file. A binary file generated by a compiler and executable by a processor. The executable file is a file formed by linking an object file. The type information is used to identify a programming language used by a source file corresponding to the first file. ;

Determining protection information of the first file according to the type information; wherein the protection information is used to prevent decompilation;

The protection information is configured to the first file according to a preset configuration policy to obtain a second file. The execution logic of the second file is the same as the execution logic of the first file.

A second aspect of the embodiments of the present application provides a terminal device, including:

An obtaining unit, configured to obtain type information of a first file to be protected; wherein the first file is used to build a data interaction port of a blockchain, and the first file is an object file or an executable file, and the object The file is a binary file that can be executed by the processor after the source file is compiled. The executable file is a file formed by linking the target file. The type information is used to identify the source file corresponding to the first file. The programming language used;

A protection information determining unit, configured to determine protection information of the first file according to the type information; the protection information is used to prevent decompilation;

A configuration unit is configured to configure the protection information to the first file according to a preset configuration policy to obtain a second file; wherein the execution logic of the second file is the same as the execution logic of the first file.

A third aspect of the embodiments of the present application provides a terminal device, including a memory, a processor, and computer-readable instructions stored in the memory and executable on the processor, where the processor executes the computer Implement the following steps when reading instructions:

A fourth aspect of the embodiments of the present application provides a computer-readable storage medium. The computer-readable storage medium stores computer-readable instructions. When the computer-readable instructions are executed by a processor, the following steps are implemented:

Beneficial effect

In the embodiment of the present application, protection information is configured for the first file used to build a data interaction port of the blockchain, so that the content of the first file is obfuscated by the configured protection information, thereby preventing the first file from being exposed when it is decompiled. The source code caused the algorithm in the first file to be leaked. Because the first file is a binary file, by processing the first file instead of processing the source code of the first file, the complexity and difficulty of decompiling the first file to obtain the source code can be improved, thereby improving the data security of the first file. Sex. Since the first interaction file is used to build a data interaction port of the blockchain, while improving the security of the first file, it can also improve the security of data transmitted through the data interaction port of the blockchain, thereby increasing the corresponding value of the first file. Security of application user information or user property.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is an implementation flowchart of a blockchain-based file protection method according to an embodiment of the present application; FIG.

FIG. 2 is a specific implementation flowchart of S103 in a blockchain-based file protection method according to an embodiment of the present application; FIG.

FIG. 3 is a flowchart of implementing a blockchain-based file protection method according to another embodiment of the present application; FIG.

4 is a schematic block diagram of a terminal device according to an embodiment of the present application;

FIG. 5 is a schematic block diagram of a terminal device according to another embodiment of the present application.

Embodiments of the invention

In the following description, for the purpose of explanation rather than limitation, specific details such as a specific system structure and technology are provided in order to thoroughly understand the embodiments of the present application. However, it should be clear to a person skilled in the art that the present application can also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present application with unnecessary details.

Please refer to FIG. 1. FIG. 1 is an implementation flowchart of a blockchain-based file protection method provided by an embodiment of the present application. The execution subject of the blockchain-based file protection method in this embodiment is a terminal device. The terminal device includes, but is not limited to, a mobile terminal such as a smart phone, a tablet computer, a notebook computer, and may also include a desktop computer. As shown in the figure, the blockchain-based file protection method includes the following steps:

S101: Obtain type information of a first file to be protected; wherein the first file is used to build a data interaction port of a blockchain, the first file is a target file or an executable file, and the first file is used for For building a data interaction port of the blockchain, the first file is an object file or an executable file, and the object file is a binary file that can be executed by a processor after the source file is compiled by the program. The executable file is A file formed by linking an object file, and the type information is used to identify a programming language used by a source file corresponding to the first file.

When the terminal device detects that the user triggers the file hardening instruction through the interactive interface, it acquires the first file selected by the user that needs to be protected, and obtains type information of the first file. Users can be developers, testers, or software managers. The file hardening instruction is used to harden the files that need to be protected to prevent the files that need to be protected from being decompiled to expose the source program.

Among them, the blockchain architecture can be simply divided into the protocol layer, the extension layer, and the application layer. The first file can be used to build a data interaction port between the extension layer and the application layer, thereby preventing the first file from being exposed after decompilation. As a result, data uploaded by users or data stored in the extension layer is leaked.

The programming language used in the source file corresponding to the first file may be an assembly language or a high-level language. For example Java language, GO language and so on.

Specifically, in an implementation manner, the file header of the first file may include description information for identifying a programming language adopted by the source file corresponding to the first file, and the terminal device may read from the file header of the first file. Take the description information, and use the description information to determine the programming language used by the source file corresponding to the first file.

In another embodiment, the terminal device may scan the content contained in the first file, extract feature information from the content, and determine the type information of the first file by using the feature information. The characteristic information may be a key field, and the key field may identify a type of the compiler, a version number of the compiler, and the like.

S102: Determine protection information of the first file according to the type information; wherein the protection information is used to prevent decompilation.

When the terminal device obtains the type information of the first file, it can select the protection information matching the type information from the database, and determine the protection information of the first file from the matched protection information. When the number of the obtained matched protection information is at least two, the terminal device may randomly select one protection information from the at least two matched protection information as the protection information of the first file, and may also identify the matching protection information, In order to select sequentially, for example, when the terminal device performs S102 for the first time, the matched first protection information is used as the protection information corresponding to the type of information, and when S102 is performed for the second time, the matched second protection information is used as the protection information. The protection information corresponding to the type information, and so on.

It can be understood that the protection information may include invalid program fragments, or the protection information may include data obtained by compiling the invalid program fragments. Invalid program fragments are used to obfuscate or modify the execution path of the content contained in the first file, increase the difficulty of analyzing the binary data corresponding to the first file, and prevent the source code from being exposed when the first file is decompiled to protect the corresponding file. Source code, and invalid program fragments will not change the execution logic of the content contained in the first file to maintain the algorithm implementation logic of the first file. Invalid program fragments can be meaningless program instructions or invalid program instructions with execution logic. The number of program segments can be one or at least two. For example, when the program language adopted by the source file corresponding to the first file is the GO language, a program fragment written in the GO language is selected from the database. When the programming language adopted by the source file corresponding to the first file is the Java language, a program fragment written in the Java language is selected from the database.

In another embodiment, S102 may be specifically: randomly generating interference information that needs to be inserted into the first file according to the type information; wherein the interference information is used to obfuscate the execution of content contained in the first file path.

For example, the terminal device may randomly generate protection information matching the type information according to the type information of the first file. The randomly generated protection information may include interference information. The interference information may be invalid program fragments. The data length of each invalid program fragment generated may be the same or different. The randomly generated interference information contains different contents. For example, the length of the program fragment included in the protection information that is randomly generated when the terminal device executes S102 for the first time and matches the type information of the first file is the first length, and that the terminal device randomly generates the The length of the program fragment included in the protection information matching the type information of the file is the second length.

S103: Configure the protection information to the first file according to a preset configuration policy to obtain a second file. The execution logic of the second file is the same as the execution logic of the first file.

A preset configuration strategy is stored in the terminal device in advance. The preset configuration strategy is used to indicate how to configure the determined protection information. The preset configuration strategy can be set according to actual needs, and is not limited here.

It can be understood that the terminal device can mark the location or address of the protection information configured in the first file in the second file, so that the terminal device can accurately load the second file or the executable file corresponding to the second file. The configured protection information is identified. The execution logic of the second file is the same as the execution logic of the first file to ensure that the execution logic of the algorithm or main function before and after the addition of the protection information is unchanged, so that the algorithm or the main function's preset can be executed. Operation to achieve the desired function.

In another embodiment, in order to improve the data security of the first file and increase the difficulty of analyzing the first file after decompilation, the protection information includes invalid program fragments, and the invalid program fragments are used to obfuscate the content contained in the first file. The execution path does not change the execution logic of the first file. S103 may include steps S1031 to S1032. Specifically, please refer to FIG. 2 together, and refer to FIG. 2, which is a specific implementation flowchart of S103 in a blockchain-based file protection method provided by an embodiment of the present application, as follows:

S1031: Determine the location information of the invalid program segment.

The preset configuration strategy can be used to indicate that invalid program fragments are allocated to the head or tail of the data area of the first file. At this time, the position information of the inserted invalid program fragments corresponds to the head of the data area of the first file. Or the end; the preset configuration strategy can also be used to instruct the configuration of invalid program fragments in the binary data corresponding to the function to be protected in the first file. At this time, the position information of the inserted invalid program fragments corresponds to the first file. The corresponding position in the function that needs to be protected; the preset configuration strategy can also be used to instruct the binary information of the first file to be grouped, and to instruct the invalid program fragment to be inserted between any two sets of data. At this time, the insert is invalid The position information of the program fragment corresponds to the connection point of the two sets of data that need to be inserted into the invalid program fragment.

S1032: Configure the invalid program fragment to the first file according to the position information to obtain a second file.

For example, when the terminal device determines a preset configuration policy for instructing to configure the protection information to the head or tail of the data area of the first file, if the protection information of the first file contains an invalid program fragment, use a compilation tool Compile invalid program fragments to obtain interference data, and insert the interference data into the beginning or end of the data area of the first file; if the protection information of the first file contains interference data obtained by compiling the invalid program fragments, Then directly insert the interference data into the head or tail of the data area of the first file. After the terminal device inserts the interference data into the head or tail of the data area of the first file, the terminal device compiles the processed first file to obtain a second file through a compiler.

When the terminal device determines a preset configuration policy to instruct the protection information to be configured in the binary data corresponding to the function to be protected in the first file, if the protection information of the first file contains invalid program fragments, Compile the invalid program fragments to obtain interference data, and insert the interference data into the binary data corresponding to the function to be protected in the first file; if the protection information of the first file contains the interference data obtained by compiling the invalid program fragments, Then directly insert the interference data into the binary data corresponding to the function to be protected in the first file. After the terminal device inserts the interference data into the binary data corresponding to the function to be protected in the first file, it compiles the processed first file through a compiler to obtain a second file.

When the terminal device confirms that the preset configuration policy is used to instruct the binary information of the first file to be grouped, and instructs to insert the protection information between any two sets of data, the terminal device splits the binary data of the data area in the first file It is a preset number of data sets. If the protection information of the first file contains invalid program fragments, the invalid program fragments are compiled by a compilation tool to obtain interference data, and the interference data is inserted into any two data corresponding to the first file. Between groups; if the protection information of the first file contains interference data obtained by compiling invalid program fragments, the interference data is directly inserted between any two data groups corresponding to the first file. After the terminal device inserts the interference data between any two data groups corresponding to the first file, the terminal device compiles the processed first file through a compiler to obtain a second file.

Further, when the protection information includes invalid program fragments or interference data obtained by compiling the invalid program fragments, and when the terminal device configures the protection information, it also sets information for indicating an execution strategy of the protection information, S1032 may specifically include The following steps:

Determine the tag information of the invalid program fragment according to the invalid program fragment and the location information, wherein the tag information includes an identifier or a tag value, and the identification information is used to indicate the invalid program fragment Execution strategy

And configuring the invalid program segment and the mark information of the invalid program segment to the first file according to the position information to obtain a second file.

For example, when configuring the protection information, the terminal device can mark the position or address corresponding to the protection information, set a flag bit for indicating the execution strategy of the protection information according to the type of the protection information, and set an identifier or a flag value in the flag bit . The location or address corresponding to the protection information is used to accurately identify the protection information. The execution strategy of the protection information refers to whether or not the protection information is performed or how to perform the protection information. For example, when the flag value of the flag bit is 0, it means that the protection information is not executed; when the flag value of the flag bit is 1, it means that the protection information is executed.

In one embodiment, it is assumed that the data area of the first file is composed of a binary array a and a binary array b. When the protection information is interference data obtained by compiling an invalid program segment, and the invalid program segment has execution logic, If the interference data c obtained after the invalid program fragment is compiled is inserted between the binary array a and the binary array b in the first file, the terminal device can set the first identifier at the end of the binary array a and A second identifier is set at the end of the interference data c obtained after the program fragment is compiled.

The program instructions corresponding to the binary array a and the binary array b are complete. The first identifier is used to instruct to jump to the entry address corresponding to the invalid program segment after executing the instruction corresponding to the binary array a, and execute the invalid program segment. The second identifier is used to instruct to jump to the program instruction corresponding to the binary array b after executing the invalid program fragment, so as to execute the program instruction corresponding to the binary array b.

Before inserting the interference data c obtained by compiling the invalid program fragment, the execution path of the first file is: binary array a, binary array b; after inserting the interference data c obtained by compiling the invalid program fragment, the second The execution path of the file changes accordingly: binary array a, interference data c, and binary array b.

In another embodiment, when the protection information is interference data after the invalid program segment is compiled and the invalid program segment does not have execution logic, the invalid program segment is garbled or junk code, and the terminal device does not need to execute The invalid program segment, therefore, the terminal device may set an identifier or a flag value in the header of the invalid program segment to indicate that the invalid program segment is not executed.

When the first file is the target file and the second file obtained by configuring the protection information is also the target file, the terminal device may also set the address where the protection information is located in the symbol area of the second file and an execution policy for indicating the protection information. Identifier in the process of linking the second file to form an executable file, an identifier indicating the execution strategy of the protection information is set in the symbol descriptor table, so that the terminal device can load the When the file is executed, the protection information can be identified according to the address where the protection information is located, and the identifier of the execution policy of the protection information is queried from the symbol descriptor table of the executable file corresponding to the second file, and the protection information is executed. Analyze the execution strategy of the protection information to execute the protection information according to the execution strategy of the protection information.

When the first file is an executable file, the terminal device may configure related information of an identifier indicating an execution policy of the protection information in the symbol descriptor table of the second file. For example, the related information may include the corresponding information of the protection information. The address segment and the address corresponding to the marker bit may further include an identifier corresponding to the marker bit. The address segment corresponding to the protection information is used to identify the protection information, and the address corresponding to the tag bit is used to obtain the tag value or the tag, so that when the execution strategy of the tag value or the tag's protection information execution strategy is parsed, The execution strategy of the protection information is processed.

In the above solution, protection information is configured for the first file used to build the data interaction port of the blockchain, so that the content of the first file is obfuscated through the configured protection information, thereby preventing the first file from being exposed when the source code is decompiled As a result, the algorithm in the first file was leaked. Because the first file is a binary file, by processing the first file instead of processing the source code of the first file, the complexity and difficulty of decompiling the first file to obtain the source code can be improved, thereby improving the data security of the first file. Sex. Since the first interaction file is used to build a data interaction port of the blockchain, while improving the security of the first file, it can also improve the security of data transmitted through the data interaction port of the blockchain, thereby increasing the corresponding value of the first file. Security of application user information or user property.

Please refer to FIG. 3, which is a flowchart of another method for protecting a file based on a blockchain provided by an embodiment of the present application. The difference between this embodiment and the foregoing embodiment is that before the protection information is configured to the first file to obtain the second file according to a preset configuration policy, the entry of the objective function corresponding to the objective data to be protected can also be hidden or modified address. Specifically, the blockchain-based file protection method shown in FIG. 3 specifically includes the following steps:

S201: Obtain type information of a first file to be protected; wherein the first file is used to build a data interaction port of a blockchain, the first file is an object file or an executable file, and the object file is a source A binary file that can be executed by a processor after a file is compiled. The executable file is a file formed by linking an object file. The type information is used to identify a program used by a source file corresponding to the first file. Design language.

S201 in this embodiment is the same as S101 in the foregoing embodiment. For details, refer to the related description of S101 in the foregoing embodiment, and details are not described herein.

S202: Determine protection information of the first file according to the type information; the protection information is used to prevent decompilation.

S202 in this embodiment is the same as S102 in the foregoing embodiment. For details, refer to the related description of S102 in the foregoing embodiment, and details are not described herein.

S203: Determine target data that needs to be protected in the first file; where the target data is used to implement an objective function that needs to be protected.

The objective function can be a main function or a function containing a core algorithm. The terminal device may determine the target data to be protected in the first file by using the identifier of the target function; and may also determine the target data to be protected in the first file according to the address segment corresponding to the target function in the first file.

It can be understood that S201 and S203 are executed in no particular order. You can execute S201 ~ S202 and then S203, you can also execute S203 and then S201 ~ S202, and you can also execute S201 and S203 at the same time. There is no limitation here.

S204: Hide or modify the entry address of the objective function, and add identification information to the first file; where the identification information is used to describe the entry address.

Specifically, when the terminal device determines the target data to be protected in the first file through the identifier of the target function, it can obtain the target address segment to which the target data is allocated, set the address offset of the target data, and then press the set address The offset modifies the target address segment, thereby modifying the entry address of the target function. The address offset can be randomly assigned or a preset value, which is not limited here.

When the terminal device determines the target data to be protected in the first file according to the address segment corresponding to the target function in the first file, the terminal device can set the address offset of the target data, and then modify the target address segment according to the set address offset, thereby Modify the entry address of the target function.

After the entry address of the target function is modified, identification information describing the address offset of the entry address may be added to the symbol area of the first file according to the address offset.

The terminal device may also insert invalid data before the target address segment according to the target address segment to which the target data is allocated, thereby hiding the entry address of the target function corresponding to the target data.

S205: Configure the protection information to the first file according to a preset configuration policy to obtain a second file. The execution logic of the second file is the same as the execution logic of the first file.

S205 in this embodiment is the same as S103 in the foregoing embodiment. For details, refer to the related description of S103 in the foregoing embodiment, and details are not described herein.

In the above solution, protection information is configured for the first file used to build the data interaction port of the blockchain, so that the content of the first file is obfuscated through the configured protection information, thereby preventing the first file from being exposed when the source code is decompiled. As a result, the algorithm in the first file was leaked. Because the first file is a binary file, by processing the first file instead of processing the source code of the first file, the complexity and difficulty of decompiling the first file to obtain the source code can be improved, thereby improving the data security of the first file. Sex. Since the first interaction file is used to build a data interaction port of the blockchain, while improving the security of the first file, it can also improve the security of data transmitted through the data interaction port of the blockchain, thereby increasing the corresponding value of the first file. Security of application user information or user property.

The terminal device hides or changes the entry address of the target function corresponding to the target data to be protected, which increases the difficulty of obtaining and analyzing the target data, and can improve the security of the target data.

It should be understood that the size of the sequence numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

FIG. 4 is a schematic block diagram of a terminal device according to an embodiment of the present application. Each unit included in the terminal device is configured to execute steps of a blockchain-based file protection method in any of the foregoing embodiments. Please refer to FIG. Related descriptions in the embodiments corresponding to 1 to FIG. 3. For convenience of explanation, only the parts related to this embodiment are shown. The terminal device 4 in this embodiment includes an obtaining unit 410, a protection information determining unit 420, and a configuration unit 430, as follows:

The obtaining unit 410 is configured to obtain type information of a first file to be protected; wherein the first file is used to build a data interaction port of a blockchain, and the first file is a target file or an executable file, and The target file is a binary file that can be executed by the processor after the source file is compiled by the processor. The executable file is a file formed by linking the target file. The type information is used to identify the source file corresponding to the first file. The programming language used.

A protection information determining unit 420 is configured to determine protection information of the first file according to the type information; the protection information is used to prevent decompilation.

Further, the protection information determining unit 420 is specifically configured to randomly generate interference information that needs to be inserted into the first file according to the type information; wherein the interference information is used to obfuscate the execution of the content contained in the first file. path.

The configuration unit 430 is configured to configure the protection information to the first file according to a preset configuration policy to obtain a second file; wherein the execution logic of the second file is the same as the execution logic of the first file.

Further, the protection information includes invalid program fragments, and the configuration unit 430 may include:

A position information determining unit 431, configured to determine position information for inserting the invalid program fragment;

An information configuration unit 432 is configured to configure the invalid program fragment to the first file according to the location information to obtain a second file.

Further, the information configuration unit 432 is specifically configured to:

Optionally, the terminal device may further include:

A target data determining unit 440, configured to determine target data in the first file that needs to be protected; wherein the target data is used to implement an objective function that needs to be protected;

The setting unit 450 is configured to hide or modify the entry address of the objective function, and add identification information to the first file; wherein the identification information is used to describe obtaining the entry address.

FIG. 5 is a schematic block diagram of a terminal device according to another embodiment of the present application. As shown in FIG. 5, the terminal device 5 of this embodiment includes a processor 510, a memory 520, and computer-readable instructions 530 stored in the memory 520 and executable on the processor 510, for example, based on blocks. Program for chain file protection method. When the processor 510 executes the computer-readable instructions 530, the steps in the embodiments of the foregoing blockchain-based file protection methods are implemented, such as S101 to S103 shown in FIG. 1. Alternatively, when the processor 510 executes the computer-readable instructions 530, the functions of the units in the embodiment corresponding to FIG. 4 are implemented, for example, the functions of units 410 to 450 shown in FIG. 4 are described in detail. The related descriptions in the embodiments are not repeated here.

Exemplarily, the computer-readable instructions 530 may be divided into one or more units, and the one or more units are stored in the memory 520 and executed by the processor 510 to complete the present application. . The one or more units may be instruction segments of a series of computer-readable instructions capable of performing a specific function, and the instruction segments are used to describe an execution process of the computer-readable instructions 530 in the terminal device 5. For example, the computer-readable instructions 530 may be divided into an acquisition unit, a protection information determination unit, and a configuration unit, and the specific functions of each unit are as described above.

The terminal device may include, but is not limited to, a processor 510 and a memory 520. Those skilled in the art can understand that FIG. 5 is only an example of the terminal device 5 and does not constitute a limitation on the terminal device 5. It may include more or less components than shown in the figure, or combine some components or different components For example, the air conditioner may further include an input / output device, a network access device, a bus, and the like.

The processor 510 may be a central processing unit (Central Processing Unit (CPU), or other general-purpose processors, Digital Signal Processors (DSPs), and application-specific integrated circuits (Applications) Specific Integrated Circuit (ASIC), off-the-shelf Programmable Gate Array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

The memory 520 may be an internal storage unit of the terminal device 5, such as a hard disk or a memory of the terminal device 5. The memory 520 may also be an external storage device of the terminal device 5, such as a plug-in hard disk, a smart memory card (SMC), and a secure digital (SD) provided on the terminal device 5. Card, flash card, etc. Further, the memory 520 may also include both an internal storage unit of the terminal device 5 and an external storage device. The memory 520 is configured to store the computer-readable instructions and other programs and data required by the air conditioner. The memory 520 may also be used to temporarily store data that has been output or is to be output.

The above-mentioned embodiments are only used to describe the technical solution of the present application, but not limited thereto. Although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still implement the foregoing implementations. The technical solutions described in the examples are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the application, and should be included in Within the scope of this application.

Claims

A method for file protection based on a blockchain is characterized in that it includes:

Acquire type information of a first file to be protected; wherein the first file is used to build a data interaction port of the blockchain, the first file is an object file or an executable file, and the object file is a source file. A binary file generated by a compiler and executable by a processor. The executable file is a file formed by linking an object file. The type information is used to identify a programming language used by a source file corresponding to the first file. ;

Determining protection information of the first file according to the type information; wherein the protection information is used to prevent decompilation;

The protection information is configured to the first file according to a preset configuration policy to obtain a second file. The execution logic of the second file is the same as the execution logic of the first file.
The method for protecting a file based on a blockchain according to claim 1, wherein determining the protection information of the first file according to the type information comprises:

Randomly generate interference information that needs to be inserted into the first file according to the type information; wherein the interference information is used to obfuscate the execution path of the content contained in the first file.
The method for protecting a file based on a blockchain according to claim 1 or 2, wherein the protection information includes invalid program fragments; and the protection information is configured to the first according to a preset configuration policy. One file to get the second file, including:

Determining location information for inserting the invalid program fragment;

The invalid program segment is configured to the first file according to the position information to obtain a second file.
The method for protecting a file based on a blockchain according to claim 3, wherein the configuring the protection information to the first file according to a preset configuration policy to obtain a second file comprises:

Determine the tag information of the invalid program fragment according to the invalid program fragment and the location information, wherein the tag information includes an identifier or a tag value, and the identification information is used to indicate the invalid program fragment Execution strategy

And configuring the invalid program segment and the mark information of the invalid program segment to the first file according to the position information to obtain a second file.
The method for protecting a file based on a blockchain according to claim 1, wherein before configuring the protection information to the first file according to a preset configuration policy, before obtaining the second file, the method further comprises:

Determining target data in the first file that needs to be protected; wherein the target data is used to implement an objective function that needs to be protected;

Hide or modify the entry address of the objective function, and add identification information to the first file; wherein the identification information is used to describe obtaining the entry address.
A terminal device, comprising:

An obtaining unit, configured to obtain type information of a first file to be protected; wherein the first file is used to build a data interaction port of a blockchain, and the first file is an object file or an executable file, and the object The file is a binary file that can be executed by the processor after the source file is compiled. The executable file is a file formed by linking the target file. The type information is used to identify the source file corresponding to the first file. The programming language used;

A protection information determining unit, configured to determine protection information of the first file according to the type information; the protection information is used to prevent decompilation;

A configuration unit is configured to configure the protection information to the first file according to a preset configuration policy to obtain a second file; wherein the execution logic of the second file is the same as the execution logic of the first file.
The terminal device according to claim 6, wherein the protection information determining unit is specifically configured to:

Randomly generate interference information that needs to be inserted into the first file according to the type information; wherein the interference information is used to obfuscate the execution path of the content contained in the first file.
The terminal device according to claim 6 or 7, wherein the protection information includes invalid program fragments; and the configuration unit includes:

A position information determining unit, configured to determine position information for inserting the invalid program fragment;

An information configuration unit is configured to configure the invalid program fragment to the first file according to the location information to obtain a second file.
The terminal device according to claim 8, wherein the information configuration unit is specifically configured to:

Determine the tag information of the invalid program fragment according to the invalid program fragment and the location information, wherein the tag information includes an identifier or a tag value, and the identification information is used to indicate the invalid program fragment Execution strategy

And configuring the invalid program segment and the mark information of the invalid program segment to the first file according to the position information to obtain a second file.
The terminal device according to claim 6, wherein the blockchain-based file protection device further comprises:

A target data determining unit, configured to determine target data in the first file that needs to be protected; wherein the target data is used to implement an objective function that needs to be protected;

A setting unit, configured to hide or modify the entry address of the objective function, and add identification information to the first file; wherein the identification information is used to describe obtaining the entry address.
A terminal device, characterized in that the terminal device includes a memory, a processor, and computer-readable instructions stored in the memory and executable on the processor, and the processor executes the computer-readable Implement the following steps when instructing:

Acquire type information of a first file to be protected; wherein the first file is used to build a data interaction port of the blockchain, the first file is an object file or an executable file, and the object file is a source file. A binary file generated by a compiler and executable by a processor. The executable file is a file formed by linking an object file. The type information is used to identify a programming language used by a source file corresponding to the first file. ;

Determining protection information of the first file according to the type information; wherein the protection information is used to prevent decompilation;

The protection information is configured to the first file according to a preset configuration policy to obtain a second file. The execution logic of the second file is the same as the execution logic of the first file.
The terminal device according to claim 11, wherein the determining the protection information of the first file according to the type information comprises:

Randomly generate interference information that needs to be inserted into the first file according to the type information; wherein the interference information is used to obfuscate the execution path of the content contained in the first file.
The terminal device according to claim 11 or 12, wherein the protection information includes invalid program fragments; and the protection information is configured to the first file according to a preset configuration policy to obtain a second file. Documents, including:

Determining location information for inserting the invalid program fragment;

The invalid program segment is configured to the first file according to the position information to obtain a second file.
The terminal device according to claim 13, wherein the configuring the protection information to the first file according to a preset configuration policy to obtain a second file comprises:

Determine the tag information of the invalid program fragment according to the invalid program fragment and the location information, wherein the tag information includes an identifier or a tag value, and the identification information is used to indicate the invalid program fragment Execution strategy

And configuring the invalid program segment and the mark information of the invalid program segment to the first file according to the position information to obtain a second file.
The terminal device according to claim 11, wherein the protection information is configured to the first file according to a preset configuration policy, and before the second file is obtained, the processor executes the computer may The following steps are also implemented when reading instructions:

Determining target data in the first file that needs to be protected; wherein the target data is used to implement an objective function that needs to be protected;

Hide or modify the entry address of the objective function, and add identification information to the first file; wherein the identification information is used to describe obtaining the entry address.
A computer-readable storage medium storing computer-readable instructions, wherein the computer-readable instructions implement the following steps when executed by at least one processor:

Acquire type information of a first file to be protected; wherein the first file is used to build a data interaction port of the blockchain, the first file is an object file or an executable file, and the object file is a source file. A binary file generated by a compiler and executable by a processor. The executable file is a file formed by linking an object file. The type information is used to identify a programming language used by a source file corresponding to the first file. ;

Determining protection information of the first file according to the type information; wherein the protection information is used to prevent decompilation;

The protection information is configured to the first file according to a preset configuration policy to obtain a second file. The execution logic of the second file is the same as the execution logic of the first file.
The computer-readable storage medium of claim 16, wherein the determining the protection information of the first file according to the type information comprises:

Randomly generate interference information that needs to be inserted into the first file according to the type information; wherein the interference information is used to obfuscate the execution path of the content contained in the first file.
The computer-readable storage medium according to claim 16 or 17, wherein the protection information includes invalid program fragments; and the configuring the protection information to the first file according to a preset configuration policy, Get the second file, including:

Determining location information for inserting the invalid program fragment;

The invalid program segment is configured to the first file according to the position information to obtain a second file.
The computer-readable storage medium according to claim 18, wherein the configuring the protection information to the first file according to a preset configuration policy to obtain a second file comprises:

Determine the tag information of the invalid program fragment according to the invalid program fragment and the location information, wherein the tag information includes an identifier or a tag value, and the identification information is used to indicate the invalid program fragment Execution strategy

And configuring the invalid program segment and the mark information of the invalid program segment to the first file according to the position information to obtain a second file.
The computer-readable storage medium according to claim 17, wherein before the configuring the protection information to the first file according to a preset configuration policy and obtaining a second file, the computer-readable storage medium When the instruction is executed by at least one processor, the following steps are also implemented:

Determining target data in the first file that needs to be protected; wherein the target data is used to implement an objective function that needs to be protected;

Hide or modify the entry address of the objective function, and add identification information to the first file; wherein the identification information is used to describe obtaining the entry address.