WO2020000765A1

WO2020000765A1 - Off-line data storage method and apparatus, computer device and storage medium

Info

Publication number: WO2020000765A1
Application number: PCT/CN2018/109559
Authority: WO
Inventors: 李洋
Original assignee: 平安科技（深圳）有限公司
Priority date: 2018-06-29
Filing date: 2018-10-10
Publication date: 2020-01-02
Also published as: CN108900510A

Abstract

Disclosed are an off-line data storage method and apparatus, a computer device and a storage medium. The method comprises: if acknowledgment information, which indicates that a user successfully logs in to a cloud server for the first time and is sent by the cloud server, is received, creating a secure disk space in a local disk (S101); receiving directory index information sent by the cloud server for the user to obtain directory selection information by means of selection, and sending the directory selection information to the cloud server (S102); receiving data information by means of an HTTPS encryption transmission protocol (S103); and storing the data information in the secure disk space, and encrypting the stored data information according to identifier information bound with the logged-in user and a download timestamp of the data information (S104).

Description

Offline data storage method, device, computer equipment and storage medium

This application claims the priority of a Chinese patent application filed on June 29, 2018 with the Chinese Patent Office, application number 201810700551.7, and application name "Offline Data Storage Method, Device, Computer Equipment, and Storage Medium", the entire contents of which are hereby incorporated by reference Incorporated in this application.

Technical field

The present application relates to the technical field of offline data storage, and in particular, to an offline data storage method, device, computer equipment, and storage medium.

Background technique

In the course of mobile work for corporate employees, employees need to use their mobile devices to communicate with cloud servers for data transmission. However, in the actual application process, due to network fluctuations, mobile devices cannot always maintain a network connection with the cloud server. Therefore, this real-time data transmission method cannot meet the requirements of mobile office security and efficiency.

The existing technical methods have problems of insecure data transmission and data storage, which makes data information easy to be stolen or intercepted by others, resulting in insufficient security of data information offline storage.

Summary of the invention

The embodiments of the present application provide an offline data storage method, device, computer equipment, and storage medium, which are aimed at solving the problem of insufficient safety of offline storage of data information in the prior art methods.

In a first aspect, an embodiment of the present application provides an offline data storage method, which includes: if a confirmation message from a cloud server that a user successfully logs in to the cloud server for the first time is received, creating a virtualized secure disk space in a local disk; receiving Directory index information sent by the cloud server and displayed for user selection, obtaining directory selection information obtained by the user from the directories included in the directory index information, and sending the obtained directory selection information to the cloud server; via HTTPS The encrypted transmission protocol establishes a data transmission connection with the cloud server to receive data information in the directory included in the directory selection information; and stores the received data information in a secure disk space, and according to the identifier bound by the logged-in user Message and data message download timestamp encrypts the stored data message.

In a second aspect, an embodiment of the present application provides an offline data storage device, including: a secure disk space creation unit, configured to create a local disk if a confirmation message from a cloud server that a user successfully logs in to the cloud server for the first time is received; Virtualized secure disk space; a directory index information selecting unit, configured to receive directory index information sent by the cloud server and display it for user selection, and obtain directory selection information obtained by the user from the directories included in the directory index information And sending the obtained directory selection information to a cloud server; a data transmission unit configured to establish a data transmission connection with the cloud server through the HTTPS encrypted transmission protocol to receive data information in the directory included in the directory selection information; and The storage encryption unit is configured to store the received data information in a secure disk space, and encrypt the stored data information according to the identification information and the data information download timestamp bound by the logged-in user.

In a third aspect, an embodiment of the present application further provides a computer device including a memory, a processor, and a computer program stored on the memory and executable on the processor, where the processor executes the computer The program implements the offline data storage method according to the first aspect.

According to a fourth aspect, an embodiment of the present application further provides a storage medium, where the storage medium stores a computer program, and when the computer program is executed by a processor, causes the processor to execute the offline according to the first aspect. Data storage method.

The embodiments of the present application provide an offline data storage method, device, computer equipment, and storage medium. The data information is transmitted through the HTTPS encrypted transmission protocol, the data information is stored in a virtualized secure disk space, and the stored data information is encrypted. It can prevent other users from cracking and stealing data information, greatly improving the security of offline storage of data information, and reducing the risk of users in mobile office.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to explain the technical solutions of the embodiments of the present application more clearly, the drawings used in the description of the embodiments are briefly introduced below. Obviously, the drawings in the following description are some embodiments of the present application. For ordinary technicians, other drawings can be obtained based on these drawings without paying creative labor.

FIG. 1 is a schematic flowchart of an offline data storage method according to an embodiment of the present application;

2 is a schematic diagram of an application scenario of an offline data storage method according to an embodiment of the present application;

3 is a schematic diagram of a sub-flow of an offline data storage method according to an embodiment of the present application;

FIG. 4 is a schematic diagram of another sub-flow of an offline data storage method according to an embodiment of the present application; FIG.

5 is a schematic diagram of another sub-flow of an offline data storage method according to an embodiment of the present application;

6 is another schematic flowchart of an offline data storage method according to an embodiment of the present application;

7 is a schematic block diagram of an offline data storage device according to an embodiment of the present application;

8 is a schematic block diagram of a subunit of an offline data storage device according to an embodiment of the present application;

9 is a schematic block diagram of another subunit of an offline data storage device according to an embodiment of the present application;

10 is a schematic block diagram of another subunit of an offline data storage device according to an embodiment of the present application;

11 is another schematic block diagram of an offline data storage device according to an embodiment of the present application;

FIG. 12 is a schematic block diagram of a computer device according to an embodiment of the present application.

detailed description

In the following, the technical solutions in the embodiments of the present application will be clearly and completely described with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

Please refer to FIG. 1. FIG. 1 is a schematic flowchart of an offline data storage method according to an embodiment of the present application. FIG. 2 is a schematic diagram of an application scenario of the offline data storage method provided by an embodiment of the present application. In 10, the method is executed by application software installed in the mobile device 10. The mobile device 10 logs in to the cloud server 20, receives the directory index information sent by the cloud server 20 for selection by the user (user of the mobile device 10), and sends the directory selection information selected by the user to the cloud server 20, and the mobile device 10 By establishing a network connection with the cloud server 20, data information in the cloud server 20 is transmitted to the mobile device 10 for storage. The mobile device 10 is a user terminal having a data information storage function, such as a laptop computer, a tablet computer, or a mobile phone. The cloud server 20 is an enterprise terminal for storing and managing data information.

It should be noted that FIG. 2 only illustrates that one mobile device 10 performs information transmission with the cloud server 20. In practical applications, the cloud server 20 may also perform information transmission with multiple mobile devices 10.

As shown in FIG. 1, the method includes steps S101 to S104.

S101. If a confirmation message from a cloud server that the user successfully logs in to the cloud server for the first time is received, a virtualized secure disk space is created in the local disk.

If the information from the cloud server that the user successfully logged in to the cloud server via the mobile device is received, and this is the first successful login, a secure disk space is created in the local disk of the mobile device through virtualization technology. Among them, the cloud server is an enterprise terminal that stores all the office data information of the enterprise, and is used to store and manage the data information. A mobile device is a device used by a user to log in to a cloud server, and the mobile device includes a local disk. The local disk is the information storage unit used to store data information in the mobile device. The secure disk space is the disk space allocated in the local disk to store the data information downloaded from the cloud server. It can be realized through virtualization operations. Part of the disk space on the local disk is divided into secure disk space.

The mobile device used by the user may be a laptop computer, a tablet computer, or a mobile phone including a local disk. All the office data information of the enterprise is stored in the cloud server. The user establishes a network connection with the cloud server through a mobile device and logs in to the cloud server to read, download, and other operations on the data information in the cloud server.

For example, if the user successfully receives the information that the user successfully logs in to the cloud server through the mobile device, and this is the first time that the user has successfully logged in, then the virtual technology is used to create "E: \ Safespace" as the safe disk space in the local disk "E: \" For use.

S102. Receive directory index information sent by the cloud server and display it for user selection, obtain directory selection information selected by the user from the directories included in the directory index information, and send the acquired directory selection information to the cloud server. .

The user receives the directory index information sent by the cloud server through the mobile device, the user selects from the directories included in the directory index information to obtain the directory selection information, and the mobile device sends the obtained directory selection information to the cloud server. The directory index information includes the file directory information, size, and number of files of the data information. After the user logs in to the cloud server, the directory index information belonging to the logged-in user can be obtained from the cloud server. The directory index information does not contain specific data information, only the file directory information, size, and number of files corresponding to the data information stored in the cloud server. The file directory information is the file path information of the folder stored in the cloud server, the size is the information of the storage space occupied by all the files in the folder, and the number of files is the number of files in the folder.

By selecting the directory index information, the user selects the data information in the cloud server according to his own needs. After the directory selection information is sent to the cloud server, the data information in the directory in the cloud server directory selection information can be downloaded. To the secure disk space of the mobile device, so that the user can use the data information stored in the secure disk space of the mobile device for office work when offline.

For example, the received directory index information belonging to the logged-in user is shown in Table 1.

Table 1

As shown in Table 1, the directory index information includes file directory information, size, and number of files of two large folders, and file directory information, size, and number of files of subfolders in each large folder. The directory selection information obtained by the user after receiving the directory index information and selecting it is shown in Table 2.

Table 2

In this embodiment, the directory selection information is received, and the directory selection information is obtained according to the user's selection of the directory index, and the directory selection information is sent to the cloud server. In this process, there is no need to directly obtain specific data information, but only the file directory information corresponding to the data information stored in the cloud server, which reduces the information transmission time between the cloud server and the mobile device and improves the data information selection. The efficiency can realize the rapid selection and acquisition of the required data information.

S103. Establish a data transmission connection with the cloud server through the HTTPS encrypted transmission protocol to receive data information in the directory included in the directory selection information.

The mobile device establishes a data transmission connection with the cloud server through the HTTPS encrypted transmission protocol, and receives the data information in the directory included in the directory selection information, that is, the data information is downloaded from the cloud server to the mobile device.

The HTTPS encrypted transmission protocol is a secure upgrade of the HTTP transmission protocol. The HTTP transport protocol is an application layer protocol, and under the HTTP transport protocol is the TCP protocol. The TCP protocol is responsible for transmission, and the HTTP transmission protocol defines how data is packaged. The HTTPS encrypted transmission protocol is a layer of TLS / SSL protocol added between the HTTP transmission protocol and the TCP protocol. Among them, the SSL protocol is an encryption suite that is responsible for encrypting the data of the HTTP transmission protocol, and the TLS protocol is the SSL protocol. An upgraded version.

The cloud server transmits the data information in the corresponding directory in the directory selection information to the mobile device through the HTTPS encrypted transmission protocol, and transmits the data information through the HTTPS encrypted transmission protocol, which greatly reduces the security risk of the transmitted data information and avoids other users Intercept data information.

S104. Store the received data information in a secure disk space, and encrypt the stored data information according to the identification information and data information download timestamp bound by the logged-in user.

The received data information is stored in the established secure disk space, and the stored data information is encrypted according to the identification information and data information download time stamp bound by the logged-in user. The identification information bound by the login user may be security identifier information (SID) of the user login operating system (for example, the Windows operating system) that receives the data information, where the security identifier information is the only identifier that identifies the user login to the operating system. , The data message download timestamp is the time when the data message was downloaded from the cloud server to the mobile device.

In an embodiment, as shown in FIG. 3, step S104 includes sub-steps S1041 and S1042.

S1041: Slicing the received data information to obtain slice data, storing the slice data in a secure disk space, copying the slice data according to a preset number of slice copies to generate a slice copy, and storing the slice copy To secure disk space.

When storing data information in secure disk space, slice storage is required based on the size of the data information that needs to be stored. By slicing the data information, the reading and writing speed of the data information can be greatly improved. The specific steps are: obtaining the size of the data information, obtaining the number of slices according to the size of the data information and a preset slicing rule, slicing the data information according to the obtained number of slices and obtaining slice data, and storing the slice data in a secure disk space .

A slice copy is a copy of slice data after the slice data is copied. The number of slice copies can be preset according to the actual usage of the user. The more slices are stored, the more secure the data information is and the higher the cost. The specific steps are: generating a slice copy according to the preset number of slice copies, and storing the slice copy in a secure disk space.

S1042. Perform AES symmetric encryption on the stored slice data and the slice copy according to the identification information bound by the logged-in user and the data information download timestamp.

In order to prevent other users from reading, modifying, adding, deleting and other operations on the stored data information, the stored slice data and slice copies need to be encrypted. AES symmetric encryption can be used to store the slice data and slice copies. For encryption, AES is the advanced encryption standard, and for AES symmetric encryption, the advanced encryption standard is used for symmetric encryption. The specific operation process is that after obtaining the identification information bound to the logged-in user, the data information download timestamp, and a random character, a symmetric encryption key is obtained through hash coding. Specifically, the identification information bound by the logged-in user is the security identifier information of the operating system (such as the Windows operating system) of the user receiving the data information, and the download time stamp of the data information is the completion of downloading the data information from the cloud server to the mobile device. Time, random characters are both randomly generated character information for encryption.

The AES symmetrical encryption is performed on the stored slice data and slice copies. After the user logs out of the login account in the operating system, other users use this mobile device, or when the local disk in the mobile device is removed and read directly, the local disk is secure. Data information in the disk space is encrypted and cannot be read. Because the AES symmetric encryption method uses data information to download the timestamp and random characters to obtain the symmetric encryption key after hash encoding, it cannot be cracked by abnormal means, so the security of the stored data information is extremely high.

In this embodiment, by slicing the data information and encrypting the data information stored in the secure disk space, the reading and writing speed of the data information can be greatly improved, and the security of the offline data information can be increased to avoid other users. Crack and steal data information.

In an embodiment, as shown in FIG. 4, after step S104, steps S105, S106, and S107 are further included.

S105. If a user access request for data information is received, obtain account information of the current user, and determine whether the identification information of the current user is the same as the identification information bound by the logged-in user.

If a user's access request for data information is received, the identification information bound to the current user is obtained, and it is determined whether the identification information of the current user is the same as the identification information bound by the logged-in user. If the bound identification information is the same, the data information is decrypted and the current user can access the data information; if the identification information of the current user is different from the identification information bound by the logged-in user, the data information is not decrypted, then The current user cannot access data information stored in secure disk space.

In this process, users do not need to log in to the cloud server through a mobile device, nor do they need to make a network connection, so they can access the data information stored offline in a local secure disk space.

In the specific operation process, when the user clicks the folder to be accessed in the secure disk space, an access request for corresponding data information is generated. Receive a user access request for data information, and obtain identification information bound to the current user, that is, obtain security identifier information of the current user who logs in to the operating system. Determine whether the identification information of the current user is the same as the identification information bound by the logged-in user. Specifically, the security identifier information of the current user is compared with the security identifier information in the symmetric encryption key. If they are the same, the data is compared. The information is decrypted, and the user can access the accessed folder smoothly; if they are not the same, the data information is not decrypted, and the user cannot access the accessed folder.

In addition, the deadline information can be added to the directory selection information. The deadline information is the deadline for the mobile device to access the data information offline after obtaining the data information from the cloud server. The user can check the data information by the mobile device before the deadline. For offline access, after the deadline, users cannot access the data information stored in the mobile device offline. You must log in to the cloud server through a network connection before you can access the data information stored in the mobile device offline. By comparing the deadline information and the data information download timestamp with the current time in the user access request, it can be determined whether the user can offline access the data information stored in the mobile device.

For example, the deadline information is 7 days, the data information download timestamp is "2018-04-13", and the current time in the access request is April 22, 2018, then the current time exceeds the deadline: April 20, 2018 , So users ca n’t access offline data information stored in mobile devices.

In this embodiment, by judging whether the identification information of the current user and the identification information bound by the logged-in user are the same to decrypt the data information, it is possible to prevent other users from cracking and stealing the data information, which greatly improves the offline storage of data information. Security.

S106. If the identification information of the current user is the same as the identification information bound by the logged-in user, decrypt the data information requested by the user.

If the identification information of the current user is the same as the identification information bound by the logged-in user, the data information is decrypted, and the current user can access the decrypted data information in the secure disk space. The specific access includes reading the data information , Modify, add, delete, etc.

S107. If the modification information of the decrypted data information is received, record the file modification information and hash value modification information of the data information.

If the modification information of the decrypted data information is received, the file modification information and hash value modification information of the data information need to be recorded at this time.

The file modification information is the record information of the current user's modification, addition, and deletion of the data information; the hash value modification information is the encrypted information of the directory index information of the modified data information.

In an embodiment, as shown in FIG. 5, step S105a is further included after step S105 in another embodiment.

S105a: If the identification information of the current user is different from the identification information bound by the logged-in user, the data information is not decrypted, and an alarm prompt message is issued.

If the identification information of the current user is different from the identification information bound by the logged-in user, it indicates that the current user does not have access to the data information stored in the secure disk space, the data information is not decrypted, and an alarm prompt is issued through the mobile device information. Specifically, the voice prompt information can be sent through the loudspeaker of the mobile device.

In this embodiment, the identification information of the current user is judged according to the information in the secret key to realize the security management of the data information, which can ensure the security of the stored data information and enable users with data information access rights to the data. Information is accessed to improve the security of data information storage.

In an embodiment, as shown in FIG. 6, step S107 is further included after step S107.

S108. If the information from the cloud server that the user successfully logs in to the cloud server is not received for the first time, update the data information corresponding to the data information in the secure disk space in the cloud server according to the file modification information and the hash value modification information.

If the information from the cloud server that the user successfully logs in to the cloud server through the mobile device is not received for the first time, the file modification information and hash value modification information of the data information in the secure disk space are obtained. The data information corresponding to the data information in the secure disk space in the cloud server is updated. Specifically, the data information corresponding to the data information in the secure disk space in the cloud server is modified, added, or deleted according to the file modification information, and the data information in the cloud server and the secure disk space is modified according to the hash value modification information. Directory index information is updated.

In this embodiment, when the user logs in to the cloud server again, the data information corresponding to the data information in the secure disk space in the cloud server is automatically updated according to the file modification information and the hash value modification information, that is, through the secure disk space. The data information in the synchronization of the corresponding data information in the cloud server can ensure the accuracy of the data information stored in the cloud server and also ensure the consistency with the data information in the secure disk space.

The data information is transmitted through the HTTPS encrypted transmission protocol, the data information is stored in a virtualized secure disk space, and the stored data information is encrypted. It can prevent other users from cracking and stealing data information, greatly improving the security of offline storage of data information, and reducing the risk of users in mobile office.

An embodiment of the present application further provides an offline data storage device, and the offline data storage device is configured to execute any one of the foregoing offline data storage methods. Specifically, please refer to FIG. 7, which is a schematic block diagram of an offline data storage device according to an embodiment of the present application. The offline data storage device 100 may be configured in the mobile device 10.

As shown in FIG. 7, the offline data storage device 100 includes a secure disk space creation unit 101, a directory index information selection unit 102, a data transmission unit 103, and a storage encryption unit 104.

The secure disk space creation unit 101 is configured to create a virtualized secure disk space in a local disk if a confirmation message from a cloud server that the user successfully logs in to the cloud server for the first time is received.

The directory index information selection unit 102 is configured to receive the directory index information sent by the cloud server and display it for user selection, obtain directory selection information selected by the user from the directories included in the directory index information, and obtain the acquired directory selection information. The directory selection information is sent to the cloud server.

The data transmission unit 103 is configured to establish a data transmission connection with the cloud server through an HTTPS encrypted transmission protocol, so as to receive data information in a directory included in the directory selection information.

The storage encryption unit 104 is configured to store the received data information in a secure disk space, and encrypt the stored data information according to the identification information and the data information download timestamp bound by the login user.

In other application embodiments, as shown in FIG. 8, the storage encryption unit 104 includes sub-units: a slice storage unit 1041 and a symmetric encryption unit 1042.

A slice storage unit 1041 is configured to slice the received data information to obtain slice data, store the slice data in a secure disk space, copy the slice data according to a preset number of slice copies to generate a slice copy, and The slice copy is stored to secure disk space.

The symmetric encryption unit 1042 is configured to perform AES symmetric encryption on the stored slice data and the slice copy according to the identification information bound by the logged-in user and the data information download timestamp.

In other application embodiments, as shown in FIG. 9, the offline data storage device 100 further includes a decryption determination unit 105, a data information decryption unit 106, and a modification information recording unit 107.

The decryption judging unit 105 is configured to obtain the account information of the current user if a user's access request for data information is received, and determine whether the identification information of the current user is the same as the identification information bound by the logged-in user.

The data information decryption unit 106 is configured to decrypt the data information requested by the user if the identification information of the current user is the same as the identification information bound by the logged-in user. The modification information recording unit 107 is configured to record the file modification information and the hash value modification information of the decrypted data information if the modification information of the decrypted data information is received.

In other application embodiments, as shown in FIG. 10, in another embodiment, the offline data storage device 100 further includes an alarm prompting unit 105 a.

The alarm prompting unit 105a is configured to: if the identification information of the current user is different from the identification information bound by the logged-in user, the data information is not decrypted, and an alarm prompting message is issued.

In other application embodiments, as shown in FIG. 11, in another embodiment, the offline data storage device 100 further includes a data information update unit 108.

A data information updating unit 108 is configured to receive data corresponding to the data information in the cloud server and the secure disk space according to the file modification information and the hash value modification information if the information from the cloud server that the user has not successfully logged in to the cloud server is received for the first time. Information is updated.

The above-mentioned offline data storage device can be implemented in the form of a computer program, which can be run on a computer device as shown in FIG. 12. Please refer to FIG. 12, which is a schematic block diagram of a computer device according to an embodiment of the present application. The computer device 500 may be a terminal. The terminal may be an electronic device such as a tablet computer, a notebook computer, a personal digital assistant.

Referring to FIG. 12, the computer device 500 includes a processor 502, a memory, and a network interface 505 connected through a system bus 501. The memory may include a non-volatile storage medium 503 and an internal memory 504. The non-volatile storage medium 503 can store an operating system 5031 and a computer program 5032. When the computer program 5032 is executed, the processor 502 can execute the offline data storage method. The processor 502 is used to provide computing and control capabilities to support the operation of the entire computer device 500. The internal memory 504 provides an environment for running the computer program 5032 in the non-volatile storage medium 503. When the computer program 5032 is executed by the processor 502, the processor 502 can execute the offline data storage method. The network interface 505 is used for network communication, such as transmitting data information. Those skilled in the art can understand that the structure shown in FIG. 12 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer equipment 500 to which the solution of the present application is applied. 500 may include more or fewer components than shown in the figure, or combine certain components, or have a different component arrangement.

The processor 502 is configured to run a computer program 5032 stored in a memory to implement the offline data storage method in the embodiment of the present application.

Those skilled in the art can understand that the embodiment of the computer device shown in FIG. 12 does not constitute a limitation on the specific configuration of the computer device. In other embodiments, the computer device may include more or fewer components than shown in the figure. Either some parts are combined or different parts are arranged. For example, in some embodiments, the computer device may include only a memory and a processor. In such an embodiment, the structure and function of the memory and the processor are the same as those in the embodiment shown in FIG. 12, and details are not described herein again.

It should be understood that, in the embodiment of the present application, the processor 502 may be a central processing unit (CPU), and the processor 502 may also be another general-purpose processor, digital signal processor (Digital Signal Processor, DSP), Application Specific Integrated Circuit (ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor, or the processor may be any conventional processor.

In another embodiment of the present application, a storage medium is provided. The storage medium may be a non-transitory computer-readable storage medium. The storage medium stores a computer program, and the computer program implements the offline data storage method in the embodiment of the present application when the computer program is executed by the processor.

The storage medium may be an internal storage unit of the foregoing device, such as a hard disk or a memory of the device. The storage medium may also be an external storage device of the device, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) card, and a flash memory card provided on the device. (Flash Card), etc. Further, the storage medium may further include both an internal storage unit of the device and an external storage device.

Those skilled in the art can clearly understand that, for the convenience and brevity of the description, for the specific working processes of the devices, devices, and units described above, reference may be made to the corresponding processes in the foregoing method embodiments, and details are not described herein again.

The above description is only the specific implementation of this application, but the scope of protection of this application is not limited to this. Any person skilled in the art can easily think of various equivalents Modifications or replacements should be covered by the protection scope of this application. Therefore, the protection scope of this application shall be subject to the protection scope of the claims.

Claims

An offline data storage method includes:

If a confirmation message from the cloud server that the user successfully logs in to the cloud server is received for the first time, a virtualized secure disk space is created in the local disk;

Receiving the directory index information sent by the cloud server and displaying it for user selection, obtaining the directory selection information selected by the user from the directories included in the directory index information, and sending the acquired directory selection information to the cloud server;

Establishing a data transmission connection with a cloud server through an HTTPS encrypted transmission protocol to receive data information in a directory included in the directory selection information;

The received data information is stored in a secure disk space, and the stored data information is encrypted according to the identification information and the data information download timestamp bound by the logged-in user.
The offline data storage method according to claim 1, wherein the stored data information is stored in a secure disk space, and the stored data is downloaded based on the identification information and data information binding timestamps bound by the logged-in user Information is encrypted, including:

Slice the received data information to obtain slice data, store the slice data in a secure disk space, copy the slice data according to a preset number of slice copies to generate a slice copy, and store the slice copy in a secure disk space;

AES symmetric encryption is performed on the stored slice data and slice copies according to the identification information bound by the logged-in user and the data information download timestamp.
The offline data storage method according to claim 1, wherein after encrypting the stored data information according to the identification information and the data information download timestamp bound by the logged-in user, further comprising:

If a user's access request for data information is received, obtain the account information of the current user, and determine whether the identification information of the current user is the same as the identification information bound by the logged-in user;

If the identification information of the current user is the same as the identification information bound by the logged-in user, decrypt the data information requested by the user;

If the modification information of the decrypted data information is received, the file modification information and the hash value modification information of the data information are recorded.
The offline data storage method according to claim 3, wherein after determining whether the identification information of the current user is the same as the identification information bound by the login user, further comprising:

If the identification information of the current user is different from the identification information bound by the logged-in user, the data information is not decrypted, and an alarm prompt message is issued.
The offline data storage method according to claim 3, wherein after the file modification information and hash value modification information of the recorded data information, further comprising:

If the information from the cloud server that the user successfully logs in to the cloud server is not received for the first time, the data information corresponding to the data information in the secure disk space in the cloud server is updated according to the file modification information and the hash value modification information.
An offline data storage device includes:

A secure disk space creation unit is used to create a virtualized secure disk space in a local disk if a confirmation message from a cloud server that the user successfully logs in to the cloud server for the first time is received;

Directory index information selection unit, configured to receive directory index information sent by the cloud server and display it for user selection, obtain directory selection information selected by the user from directories included in the directory index information, and obtain the acquired directory Select information to send to the cloud server;

A data transmission unit, configured to establish a data transmission connection with a cloud server through an HTTPS encrypted transmission protocol to receive data information in a directory included in the directory selection information;

The storage encryption unit is configured to store the received data information in a secure disk space, and encrypt the stored data information according to the identification information and the data information download timestamp bound by the logged-in user.
The offline data storage device according to claim 6, wherein the storage encryption unit comprises:

A slice storage unit is configured to slice the received data information to obtain slice data, store the slice data in a secure disk space, copy the slice data according to a preset number of slice copies to generate a slice copy, and save the slice copy. The slice copy is stored in secure disk space;

The symmetric encryption unit is configured to perform AES symmetric encryption on the stored slice data and the slice copy according to the identification information bound by the logged-in user and the data information download timestamp.
The offline data storage device according to claim 6, wherein the offline data storage device further comprises:

The decryption judging unit is configured to obtain the account information of the current user if a user's access request for data information is received, and determine whether the identification information of the current user is the same as the identification information bound by the logged-in user.

A data information decryption unit, configured to decrypt the data information requested by the user if the identification information of the current user is the same as the identification information bound by the logged-in user;

The modification information recording unit, if receiving information for modifying the decrypted data information, records the file modification information and hash value modification information of the data information.
The offline data storage device according to claim 8, further comprising:

An alarm prompting unit is configured to: if the identification information of the current user is different from the identification information bound by the logged-in user, the data information is not decrypted, and an alarm prompting message is issued.
The offline data storage device according to claim 8, further comprising:

A data information updating unit is configured to receive data information corresponding to data information in the cloud server and the secure disk space according to the file modification information and the hash value modification information if the information from the cloud server that the user has not successfully logged in to the cloud server is received for the first time. Update.
A computer device includes a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein when the processor executes the computer program, the following steps are implemented:

If a confirmation message from the cloud server that the user successfully logs in to the cloud server is received for the first time, a virtualized secure disk space is created in the local disk;

Receiving the directory index information sent by the cloud server and displaying it for user selection, obtaining the directory selection information selected by the user from the directories included in the directory index information, and sending the acquired directory selection information to the cloud server;

Establishing a data transmission connection with a cloud server through an HTTPS encrypted transmission protocol to receive data information in a directory included in the directory selection information;

The received data information is stored in a secure disk space, and the stored data information is encrypted according to the identification information and the data information download timestamp bound by the logged-in user.
The computer device according to claim 11, wherein the stored data information is stored in a secure disk space, and the stored data information is performed according to the identification information and the data information download timestamp bound by the logged-in user. Encryption, including:

Slice the received data information to obtain slice data, store the slice data in a secure disk space, copy the slice data according to a preset number of slice copies to generate a slice copy, and store the slice copy in a secure disk space;

AES symmetrical encryption is performed on the stored slice data and slice copies according to the identification information bound by the logged-in user and the data information download timestamp.
The computer device according to claim 11, wherein after encrypting the stored data information according to the identification information and data information download timestamp bound by the logged-in user, further comprising:

If a user's access request for data information is received, obtain the account information of the current user, and determine whether the identification information of the current user is the same as the identification information bound by the logged-in user;

If the identification information of the current user is the same as the identification information bound by the logged-in user, decrypt the data information requested by the user;

If the modification information of the decrypted data information is received, the file modification information and the hash value modification information of the data information are recorded.
The computer device according to claim 13, wherein after determining whether the identification information of the current user is the same as the identification information bound by the logged-in user, further comprising:

If the identification information of the current user is different from the identification information bound by the logged-in user, the data information is not decrypted, and an alarm prompt message is issued.
The computer device according to claim 13, wherein after the file modification information and the hash value modification information that record the data information, further comprising:

If the information from the cloud server that the user successfully logs in to the cloud server is not received for the first time, the data information corresponding to the data information in the secure disk space in the cloud server is updated according to the file modification information and the hash value modification information.
A storage medium, wherein the storage medium stores a computer program that, when executed by a processor, causes the processor to perform the following operations:

If a confirmation message from the cloud server that the user successfully logs in to the cloud server is received for the first time, a virtualized secure disk space is created in the local disk;

Receiving the directory index information sent by the cloud server and displaying it for user selection, obtaining the directory selection information selected by the user from the directories included in the directory index information, and sending the acquired directory selection information to the cloud server;

Establishing a data transmission connection with a cloud server through an HTTPS encrypted transmission protocol to receive data information in a directory included in the directory selection information;

The received data information is stored in a secure disk space, and the stored data information is encrypted according to the identification information and the data information download timestamp bound by the logged-in user.
The storage medium according to claim 16, wherein the stored data information is stored in a secure disk space, and the stored data information is processed according to the identification information and the data information download timestamp bound by the logged-in user. Encryption, including:

Slice the received data information to obtain slice data, store the slice data in a secure disk space, copy the slice data according to a preset number of slice copies to generate a slice copy, and store the slice copy in a secure disk space;

AES symmetric encryption is performed on the stored slice data and slice copies according to the identification information bound by the logged-in user and the data information download timestamp.
The storage medium according to claim 16, wherein after encrypting the stored data information according to the identification information and data information download timestamp bound by the logged-in user, further comprising:

If a user's access request for data information is received, obtain the account information of the current user, and determine whether the identification information of the current user is the same as the identification information bound by the logged-in user;

If the identification information of the current user is the same as the identification information bound by the logged-in user, decrypt the data information requested by the user;

If the modification information of the decrypted data information is received, the file modification information and the hash value modification information of the data information are recorded.
The storage medium according to claim 18, wherein after determining whether the identification information of the current user is the same as the identification information bound by the login user, further comprising:

If the identification information of the current user is different from the identification information bound by the logged-in user, the data information is not decrypted, and an alarm prompt message is issued.
The storage medium according to claim 18, wherein after the file modification information and hash value modification information recording the data information, further comprising:

If the information from the cloud server that the user successfully logs in to the cloud server is not received for the first time, the data information corresponding to the data information in the secure disk space in the cloud server is updated according to the file modification information and the hash value modification information.