WO2024114095A1 - Data transmission control method and apparatus, electronic device, and readable storage medium - Google Patents

Abstract

The present disclosure provides a data transmission control method and apparatus, an electronic device, and a readable storage medium. The data transmission control method is applied to a data management server, and the method comprises the following steps: sending a first public key to a first data system, a first private key matched with the first public key being stored in the data management server; receiving target data sent by the first data system, the target data being encrypted by the first data system by means of the first public key; decrypting the target data by means of the first private key matched with the first public key; encrypting the decrypted target data by means of a second public key, the second public key being received from a second data system; and sending the target data encrypted by means of the second public key to the second data system.

Description

Data transmission control method, device, electronic device and readable storage medium

CROSS-REFERENCE TO RELATED APPLICATIONS

This disclosure claims priority to Chinese patent application 202211527443.7 filed in China on November 30, 2022, the entire contents of which are incorporated herein by reference.

Technical Field

The embodiments of the present disclosure relate to the field of computer technology, and in particular, to a data transmission control method, device, electronic device, and readable storage medium.

Background technique

With the development of information technology, the information management of data has become a trend. In order to realize the interaction and utilization of data, various data usually need to be transmitted in different data systems. The data may include a lot of important or private information. Therefore, the security and privacy of data transmission need to be improved.

Summary of the invention

The embodiments of the present disclosure provide a data transmission control method, an apparatus, a data management server, an electronic device, and a readable storage medium.

To solve the above problems, the present disclosure is implemented as follows:

In a first aspect, an embodiment of the present disclosure provides a data transmission control method, which is applied to a data management server, and the method comprises the following steps:

Sending the first public key to the first data system, wherein the data management server stores a first private key matching the first public key;

Receiving target data sent by a first data system, wherein the target data is encrypted by the first data system using a first public key;

decrypting the target data using a first private key that matches the first public key;

encrypting the decrypted target data using a second public key, wherein the second public key is received from a second data system;

The target data encrypted by the second public key is sent to the second data system.

In some embodiments, before encrypting the decrypted target data using the second public key, the method further includes:

Using the first private key to digitally sign the target data in a decrypted state;

The step of encrypting the decrypted target data by using a second public key comprises:

The digitally signed target data is encrypted using a second public key.

In some embodiments, before using the first private key to digitally sign the target data in a decrypted state, the method further includes:

confirming whether the first public key is stored in the second data system;

In the case where the first public key is stored in the second data system, executing the step of digitally signing the target data in a decrypted state using the first private key;

In the case where the first public key is not stored in the second data system, the decrypted target data that is not digitally signed is encrypted using the second public key.

In some embodiments, the step of digitally signing the target data in a decrypted state using the first private key includes:

Generate a hash value of the target data by using a hash algorithm;

Adding a timestamp and a random string to the hash value, and encrypting it with the first private key to obtain a digital signature; encrypting the decrypted target data with the second public key, including:

The digital signature is encrypted using the second public key.

In some embodiments, before encrypting the decrypted target data using the second public key, the method further includes:

Verifying verification information of a first data system corresponding to the target data, wherein the verification information includes at least one of an IP address and hardware information;

When the verification information passes the verification, a step of encrypting the decrypted target data using a second public key is performed.

In some embodiments, verifying verification information of the first data system corresponding to the target data includes:

Get the correspondence between IP address and hardware information;

extracting target hardware information contained in the target data decrypted by the first private key;

Verify the target IP address of the first data system that sends the target data and the target hardware information whether the corresponding relationship is satisfied between the information;

When the corresponding relationship is satisfied, it is confirmed that the verification information passes the verification.

In a second aspect, an embodiment of the present disclosure provides a data transmission control device, which is applied to a data management server, and the data transmission control device includes:

A first public key sending module, configured to send the first public key to the first data system, wherein the data management server stores a first private key matching the first public key;

A target data receiving module, used to receive target data sent by a first data system, wherein the target data is encrypted by the first data system using a first public key;

a decryption module, configured to decrypt the target data using a first private key matching the first public key;

an encryption module, configured to encrypt the decrypted target data using a second public key, wherein the second public key is received from a second data system;

A data sending module is used to send the target data encrypted by the second public key to the second data system.

In some embodiments, it also includes:

A digital signature module, used to digitally sign the target data in a decrypted state using the first private key;

The encryption module is specifically used to encrypt the digitally signed target data using a second public key.

In a third aspect, an embodiment of the present disclosure provides an electronic device, comprising: a memory, a processor, and a program stored in the memory and executable on the processor; the processor is used to read the program in the memory to implement the steps in the data transmission control method as described in any one of the above items.

In a fourth aspect, an embodiment of the present disclosure provides a readable storage medium for storing a program, which, when executed by a processor, implements the steps in the data transmission control method as described in any one of the above.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the following briefly introduces the drawings required for use in describing the embodiments of the present disclosure. Obviously, the drawings described below are only some embodiments of the present disclosure, and it is obvious that a person skilled in the art will be able to understand the technical solutions of the embodiments of the present disclosure without creative effort. On the premise of flexibility, other drawings can be obtained based on these drawings.

FIG1 is a flow chart of a data transmission control method provided by an embodiment of the present disclosure;

FIG2 is an architecture diagram of a data transmission control system provided by an embodiment of the present disclosure;

FIG3 is a structural diagram of a key pair management module provided in an embodiment of the present disclosure;

FIG4 is a structural diagram of a data encryption module provided by an embodiment of the present disclosure;

FIG. 5 is another flow chart of a data transmission control method provided by an embodiment of the present disclosure.

FIG6 is a schematic diagram of the structure of a data transmission control device provided in an embodiment of the present disclosure;

FIG. 7 is a schematic diagram of the structure of an electronic device provided by an embodiment of the present disclosure.

Detailed ways

The following will be combined with the drawings in the embodiments of the present disclosure to clearly and completely describe the technical solutions in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

The terms "first", "second" etc. in the disclosed embodiments are used to distinguish similar objects, and need not be used to describe a specific order or sequential order. In addition, the terms "include" and "have" and any variation thereof are intended to cover non-exclusive inclusions, for example, the process, method, system, product or equipment comprising a series of steps or units need not be limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or equipment. In addition, "and/or" is used in the present application to represent at least one of the connected objects, such as A and/or B and/or C, indicating that A alone, B alone, C alone, and A and B all exist, B and C all exist, A and C all exist, and 7 situations in which A, B and C all exist.

An embodiment of the present disclosure provides a data transmission control method.

As shown in FIG1 , the method is applied to a data management server in a data transmission control system.

As shown in FIG. 2 , in an exemplary embodiment, the data transmission control system includes a first data system, a data management server, and a second data system, and both the first data system and the second data system are communicatively connected to the data management server.

As shown in Figure 2, the data management server includes an adapter module, a processor module, a control module, The controller module is used to control the working process of the adapter module, the processor module and the forwarder module.

Please refer to Figures 2 to 4 at the same time. The processor module includes a data encryption module and a key pair management module, wherein the adapter module, the processor module, the controller module and the repeater module. The data encryption module is used to perform data encryption and decryption control, and the key pair management module is used to implement the first key management, the second key management, the address information management and the data interface functions, wherein the key pair management module performs data transmission based on the data interface. The data encryption module is used to generate the first key and data encryption, and the data encryption module also includes a data interface for data transmission.

As shown in FIG. 1 and FIG. 5 , in one embodiment, the method includes the following steps:

Step 101: Send the first public key to the first data system, wherein the data management server stores a first private key matching the first public key.

In some of the embodiments, in this embodiment, a first public key and a first private key that match each other are generated by a data management server, and then the first public key is sent to the first data system.

Specifically, in this embodiment, the data management server first generates a first secret key, which includes a first public key and a first private key that match each other. It can be understood that when the first public key is used to encrypt data, the first private key is required to decrypt the data.

When each data system is connected to the data management server, the data management server sends the first public key to each data system, for example, the first data system and the second data system.

It is understandable that, during implementation, data systems may be sent only to data systems that have data transmission requirements, where data systems that have data transmission requirements refer to data systems that need to send data to other data systems through the data management platform. For data systems that only need to receive data and do not need to send data, the first public key may not be obtained.

In some other embodiments, it is necessary to send the first public key to all data systems connected to the data management server, and further perform secondary encryption and decryption on the transmitted data to further improve the security of data transmission.

Taking the first data system as an example, when the first data system needs to send target data to the data management server, the first data system sends the data management server encrypted by the first public key. The target data, that is, the first data system first encrypts the target data by using the first public key, and then sends the target data encrypted by using the first public key to the data management server.

Step 102: Receive target data sent by the first data system, wherein the target data is encrypted by the first data system using the first public key. The data management server in this embodiment can be understood as providing a data management interface or data transmission platform for data transmission. It should be understood that different data systems are usually required to implement different services, and different data systems need to interact with each other in order to implement business communication.

For example, each company can manage employee data information through its own company data system. When it is necessary to arrange a physical examination for an employee, the employee data information can be exported from the company data system and then sent to the physical examination data system of the physical examination institution to establish a physical examination plan and conduct employee health management. During this process, the data needs to be transferred from the company data system to the physical examination data system through the data management interface.

In order to reduce management costs, the data management interface can provide services for data interaction between multiple different data systems.

In one embodiment, the target data may include one or more of the following information: access authorization code, application id (number), business system id, user information object, user primary key, ID card, mobile phone number, resident name, indicator data set, organization id, indicator id, batch id, test time, test results, extended field, device information object, device SN (Serial Number) code, device name, product type id, device model, indicator definition Map set, indicator id, indicator unit, indicator code, indicator name.

In the above information, the access authorization code is used to implement access authorization verification, and the application id and business system id are used to indicate the specific business used by the user. User information objects, user primary keys, ID cards, mobile phone numbers, and resident names are used to represent the user's identity information and contact information. The relevant data needs to be collected and transmitted with the user's authorization and meet various regulations and privacy restrictions. The organization id, indicator id, batch id, test time, test results, equipment information object, equipment SN code, equipment name, product type id and equipment model are used by the user to indicate the items to be tested, the test results, and the equipment used for the test and other related information. The extended field user stores extended information, which can be, for example, an identification code for a device that can be used by multiple people. The indicator definition Map set, indicator id, indicator unit, indicator code and indicator name are used to represent information related to the test indicator.

Step 103: Decrypt the target data using a first private key that matches the first public key.

Since the data management server stores the first private key corresponding to the first public key, after the data management server receives the target data encrypted by the first public key, the data management server can decrypt the target data sent by the first data system by using the first private key.

In some embodiments, the method further comprises:

Verifying verification information of a first data system corresponding to the target number, wherein the verification information includes at least one of an IP address and hardware information;

When the verification information passes the verification, a step of encrypting the decrypted target data using a second public key is performed.

In some embodiments, in order to further improve the security of data transmission, a security check may be performed on the target data before or after the target data is decrypted.

In an exemplary embodiment, an IP (Internet Protocol) address whitelist may be established. When decrypting target data, the IP address of the first data system is verified. If the IP address of the first data system is in the IP address whitelist, it is considered to have passed the verification and the transmission of the target data is allowed. If the IP address fails the verification, the transmission of the target data is prohibited. This can directly prevent unauthorized data systems from sending data, thereby improving security.

In some of the embodiments, a cross-check may also be performed based on the above information and the IP address included in the target data.

In some embodiments, verifying verification information of the first data system corresponding to the target data includes:

Get the correspondence between IP address and hardware information;

extracting target hardware information contained in the target data decrypted by the first private key;

Verifying whether the target IP address of the first data system sending the target data and the target hardware information satisfy the corresponding relationship;

When the corresponding relationship is satisfied, it is confirmed that the verification information passes the verification.

In an exemplary embodiment, the IP addresses and hardware information of each data system that may serve as the first data system may be collected first. Exemplarily, the hardware information may be hardware information such as the device SN code and physical address. After the IP addresses and hardware information are collected, a corresponding relationship is established.

During implementation, while verifying the IP address corresponding to the target information, verify the device SN code Whether the correspondence between the IP address and the pre-collected and saved relationship is satisfied. If so, it is considered to have passed the verification. If not, it is considered that the data may have been tampered with.

In some other embodiments, the target data may be verified by different methods such as physical address, hardware address, data hash value, etc. to improve the security of data transmission.

By adding a verification process, the legitimacy of data system access can be ensured and the possibility of key leakage endangering information security can be reduced.

In some embodiments, the method further comprises:

The target data in a decrypted state is digitally signed using the first private key.

Accordingly, encrypting the decrypted target data using the second public key includes:

The digitally signed target data is encrypted using a second public key.

In some of the embodiments, the target data is encrypted twice via a digital signature.

In some of the embodiments, when secondary encryption and decryption are required, the target data is digitally signed using the first private key, and the secondary encrypted data is appended to the target data in a decrypted state.

In some embodiments, the step of digitally signing includes:

Generate a hash value of the target data by using a hash algorithm;

Adding a timestamp and a random string to the hash value, and encrypting it with the first private key to obtain a digital signature; encrypting the decrypted target data with the second public key, including:

The digital signature is encrypted using the second public key.

Here, the digital signature includes a timestamp and may also include an encrypted field. Exemplarily, the encrypted field may include a random string, etc. During implementation, a hash value of the target data is first generated by a hash algorithm, and then a timestamp and a random string are added to the hash value to complete the digital signature of the target data.

It can be understood that the secondary encryption includes two encryption processes: digital signature of the first private key and encryption of the second public key. Correspondingly, the decryption process of the target data also includes two steps: decryption of the second private key and decryption of the first public key.

Step 104: Encrypt the decrypted target data using a second public key, wherein the second public key is received from a second data system.

Next, the digitally signed target data is encrypted using the second public key.

In some embodiments, before step 104, the method further includes:

Receive a second public key sent by the second data system.

In this embodiment, the second public key corresponds to the second data system. Specifically, each second public key uniquely corresponds to one second data system, and each second data system may correspond to one or more groups of secret keys, each group of secret keys including public keys and secret keys that match each other.

In an exemplary embodiment, the second data system first generates a set of second keys, the second keys including a second public key and a second private key.

When the second data system is connected to the data management server, the second public key is sent to the data management server. When the data management server needs to send data to the second data system, the target data is encrypted using the second public key.

It should be understood that, in the above process, if the first public key is not stored in the second data system, the data management server does not need to digitally sign the target data in a decrypted state before sending the target data to the second data system.

In some embodiments, before step 104, the method further includes:

Using the first private key to digitally sign the target data in a decrypted state;

The step of encrypting the decrypted target data by using a second public key comprises:

The digitally signed target data is encrypted using a second public key.

If the first public key is stored in the second data system, the data management server may refer to the above steps to digitally sign the target data in a decrypted state before sending the target data to the second data system to further improve security.

When the target data is digitally signed by the first public key, step 104 includes:

The target data and the data information are encrypted using the second public key.

In some embodiments, before using the first private key to digitally sign the target data in a decrypted state, the method further includes:

confirming whether the first public key is stored in the second data system;

In the case where the first public key is stored in the second data system, executing the step of digitally signing the target data in a decrypted state using the first private key;

In the case where the first public key is not stored in the second data system, the target data that has been decrypted and not digitally signed is encrypted using the second public key.

In this embodiment, it is possible to first detect whether the first public key is stored in the second data system. It can be done by detecting whether there is a record of sending the first public key to the second data system, or by sending a query message to the second data system, and then confirming whether the first public key exists in the second data system according to a reply result of the second data system.

If the first public key exists in the second data system, the step of digital signature is performed with reference to the above process.

If the first public key does not exist in the second data system, the target data may be encrypted only once. Specifically, for the target data in a decrypted state, the target data is encrypted only by the second public key and then sent to the second data system.

In some other embodiments, the first public key may be sent to the second data system first, and then the target data may be re-encrypted according to the above process to ensure data transmission security.

Step 105: Send the target data encrypted by the second public key to the second data system.

After the target data is encrypted using the second public key, the encrypted target data is sent to the second data system.

After the second data system receives the target data, it uses the second private key to decrypt the target data. When the target data is digitally signed by the first private key, it is further necessary to decrypt the target data by using the first public key. In this way, the target data to be transmitted is obtained.

It should be understood that there may be multiple data systems, and each data system may also be connected to multiple data management platforms. In this embodiment, since the target data is encrypted by the second public key provided by the second data system, even if the target data is mistakenly transmitted to other data systems, other data systems cannot decrypt and unsign the target data, thereby ensuring the uniqueness of the target data path confirmation, that is, the second data system can uniquely confirm the corresponding data management server through the first public key used, and at the same time, it also ensures the uniqueness of the data decryption and reading path, ensuring that the target data cannot be read by other data systems.

The embodiment of the present disclosure also provides a data management server, which is configured to execute each step of the above-mentioned data transmission control method embodiment and can achieve similar or identical technical effects.

The embodiment of the present disclosure also provides a data transmission control method, which is applied to a data transmission control system, wherein the data transmission control system includes a first data system, a data management server, and a second data system, the first data system and the second data system are both connected to the data management server in communication, and the method comprises the following steps:

The data management server generates a first public key and a first private key that match each other;

The data management server sends the first public key to the first data system and the second data system;

The first data system sends the target data encrypted by the first public key to the data management server;

The data management server decrypts the target data using the first private key;

The data management server digitally signs the decrypted target data using the first private key;

The second data system generates a second public key and a second private key;

The second data system sends the second public key to the data management server;

The data management server encrypts the digitally signed target data using a second public key;

The data management server sends the target data signed by the second public key to the second data system;

The second data system decrypts the target data using a second private key;

The second book system decrypts the decrypted target data using the second private key.

The various steps of the data transmission control method of this embodiment can refer to the above-mentioned data transmission method embodiment, and will not be repeated here.

The disclosed embodiment also provides a data transmission control system, which includes a first data system, a data management server and a second data system, wherein the first data system and the second data system are both communicatively connected to the data management server; the data transmission control system of this embodiment is configured to execute each step of the above-mentioned data transmission control method.

The disclosed embodiment also provides a data transmission control device, which is applied to a data management server.

As shown in FIG6 , in one embodiment, the data transmission control device 600 includes:

A first public key sending module 601 is used to send the first public key to the first data system, wherein the data management server stores a first private key matching the first public key;

The target data receiving module 602 is used to receive target data sent by the first data system, wherein the target data is encrypted by the first data system using a first public key;

A decryption module 603, configured to decrypt the target data using a first private key matching the first public key;

An encryption module 604, configured to encrypt the decrypted target data using a second public key, wherein the second public key is received from a second data system;

The data sending module 605 is used to send the target data encrypted by the second public key to the second data system.

In some embodiments, it also includes:

A digital signature module, used to digitally sign the target data in a decrypted state using the first private key;

The encryption module 604 is specifically configured to encrypt the digitally signed target data using a second public key.

In some embodiments, it also includes:

A first public key detection module, used to confirm whether the first public key is stored in the second data system;

The digital signature module is used to execute the step of digitally signing the target data in a decrypted state using the first private key when the first public key is stored in the second data system;

In the case where the first public key is not stored in the second data system, the decrypted target data that is not digitally signed is encrypted using the second public key.

In some embodiments, the digital signature module includes:

A hash value calculation submodule, used to generate a hash value of the target data through a hash algorithm;

Add submodules for adding timestamp and random string to the hash value;

The encryption module 604 is specifically configured to use the first private key to encrypt the hash value to which the timestamp and the random character string are added to obtain a digital signature; and use the second public key to encrypt the digital signature.

In some embodiments, it also includes:

A verification module, used to verify verification information of the first data system corresponding to the target data, wherein the verification information includes at least one of an IP address and hardware information;

The encryption module 604 is used to execute the step of encrypting the decrypted target data using the second public key when the verification information passes the verification.

In some embodiments, the inspection module includes:

The corresponding relationship acquisition submodule is used to obtain the corresponding relationship between the IP address and the hardware information;

An extraction submodule, used to extract target hardware information contained in the target data decrypted by the first private key;

A verification submodule, used to verify whether the target IP address of the first data system sending the target data and the target hardware information satisfy the corresponding relationship;

The confirmation submodule is used to confirm that the verification information passes the verification when the corresponding relationship is met.

The data transmission control device 600 of this embodiment can implement each step of the above-mentioned data transmission control method embodiment and can achieve basically the same technical effects, which will not be described in detail here.

The embodiment of the present disclosure further provides an electronic device. Referring to FIG. 7 , the electronic device may include a processor 701 , a memory 702 , and a program 7021 stored in the memory 702 and executable on the processor 701 .

When program 7021 is executed by processor 701, any steps in the above method embodiment can be implemented and the same beneficial effects can be achieved, which will not be described in detail here.

Those skilled in the art will appreciate that all or part of the steps of implementing the above-mentioned embodiment method can be completed by hardware associated with program instructions, and the program can be stored in a readable medium.

The embodiments of the present disclosure also provide a readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, any step in the above method embodiment can be implemented and the same technical effect can be achieved. To avoid repetition, it will not be described here.

The storage medium described herein may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

It should be noted that it should be understood that the division of the above modules is only a division of logical functions. In actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. And these modules can all be implemented in the form of software calling through processing elements; they can also be all implemented in the form of hardware; some modules can be implemented in the form of processing elements calling software, and some modules can be implemented in the form of hardware. For example, the determination module can be a separately established processing element, or it can be integrated in a chip of the above device, and it can also be stored in the form of program code. In the memory of the above-mentioned device, a processing element of the above-mentioned device calls and executes the function of the above-mentioned determined module. The implementation of other modules is similar. In addition, all or part of these modules can be integrated together, or they can be implemented independently. The processing element described here can be an integrated circuit with signal processing capabilities. In the implementation process, each step of the above-mentioned method or each of the above modules can be completed by an integrated logic circuit of hardware in the processor element or an instruction in the form of software.

For example, each module, unit, sub-unit or sub-module may be one or more integrated circuits configured to implement the above method, such as one or more application specific integrated circuits (ASIC), or one or more microprocessors (digital signal processors, DSP), or one or more field programmable gate arrays (FPGA), etc. For another example, when a module above is implemented in the form of a processing element scheduling program code, the processing element may be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call program code. For another example, these modules can be integrated together and implemented in the form of a system-on-a-chip (SOC).

The above is a preferred implementation of the embodiment of the present disclosure. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles described in the present disclosure. These improvements and modifications should also be regarded as the scope of protection of the present disclosure.

Claims (10)

1. A data transmission control method is applied to a data management server, the method comprising the following steps:

   Sending the first public key to the first data system, wherein the data management server stores a first private key matching the first public key;

   Receiving target data sent by a first data system, wherein the target data is encrypted by the first data system using a first public key;

   decrypting the target data using a first private key that matches the first public key;

   encrypting the decrypted target data using a second public key, wherein the second public key is received from a second data system;

   The target data encrypted by the second public key is sent to the second data system.
2. The method according to claim 1, wherein, before encrypting the decrypted target data using the second public key, the method further comprises:

   Using the first private key to digitally sign the target data in a decrypted state;

   The step of encrypting the decrypted target data by using a second public key comprises:

   The digitally signed target data is encrypted using a second public key.
3. The method according to claim 2, wherein before using the first private key to digitally sign the target data in a decrypted state, the method further comprises:

   confirming whether the first public key is stored in the second data system;

   In the case where the first public key is stored in the second data system, executing the step of digitally signing the target data in a decrypted state using the first private key;

   In the case where the first public key is not stored in the second data system, the decrypted target data that is not digitally signed is encrypted using the second public key.
4. The method of claim 1, wherein the step of digitally signing the target data in a decrypted state using the first private key comprises:

   Generate a hash value of the target data by using a hash algorithm;

   Adding a timestamp and a random string to the hash value, and encrypting it with the first private key to obtain a digital signature; encrypting the decrypted target data with the second public key, including:

   The digital signature is encrypted using the second public key.
5. The method according to any one of claims 1 to 4, wherein before encrypting the decrypted target data by using a second public key, the method further comprises:

   Verifying verification information of a first data system corresponding to the target data, wherein the verification information includes at least one of an IP address and hardware information;

   When the verification information passes the verification, a step of encrypting the decrypted target data using a second public key is performed.
6. The method of claim 5, wherein the verifying the verification information of the first data system corresponding to the target data comprises:

   Get the correspondence between IP address and hardware information;

   extracting target hardware information contained in the target data decrypted by the first private key;

   Verifying whether the target IP address of the first data system sending the target data and the target hardware information satisfy the corresponding relationship;

   When the corresponding relationship is satisfied, it is confirmed that the verification information passes the verification.
7. A data transmission control device, applied to a data management server, the data transmission control device comprising:

   A first public key sending module, configured to send the first public key to the first data system, wherein the data management server stores a first private key matching the first public key;

   A target data receiving module, used to receive target data sent by a first data system, wherein the target data is encrypted by the first data system using a first public key;

   a decryption module, configured to decrypt the target data using a first private key matching the first public key;

   an encryption module, configured to encrypt the decrypted target data using a second public key, wherein the second public key is received from a second data system;

   A data sending module is used to send the target data encrypted by the second public key to the second data system.
8. The device according to claim 7, further comprising:

   A digital signature module, used to digitally sign the target data in a decrypted state using the first private key;

   The encryption module is specifically used to transmit the target data with digital signature to the second public Key encryption.
9. An electronic device comprises: a memory, a processor and a program stored in the memory and executable on the processor; the processor is used to read the program in the memory to implement the steps in the data transmission control method as described in any one of claims 1 to 6.
10. A readable storage medium is used to store a program, and when the program is executed by a processor, the steps in the data transmission control method according to any one of claims 1 to 6 are implemented.