CN115603906A - A data processing method, device, equipment and medium - Google Patents

Abstract

The embodiment of the present application provides a data processing method, device, equipment, and medium to solve the problem in the prior art that when generating a key, random numbers need to be generated by hardware, resulting in a small scope of application of the method for generating a key . Electronic devices process the received data through hash operations to generate corresponding random numbers. Since hash operations have strong anti-collision properties, the quality of random numbers processed by hash operations is high, so high-quality random numbers that meet the requirements can be generated. Quality random numbers, and the data in the embodiment of this application is the data sent by any sensor set in the terminal, and the data collected by the sensor comes from a physical random event, which belongs to a true random data source. By processing the data sent by the sensor, it can The quality of the generated random number is further improved, and the embodiment of the present application does not need to generate the random number through hardware, and the key is generated based on the random number, which can improve the scope of application of the key generation method.

Description

A data processing method, device, equipment and medium

technical field

The present application relates to the technical field of information security, and in particular to a data processing method, device, equipment and medium.

Background technique

With the continuous development of information security technology, there are more and more scenarios that need to be applied to keys. Among them, keys need to be applied to national secret algorithms. When generating a key, it is generally necessary to generate a random number first, and then generate a corresponding key based on the generated random number.

However, due to the high requirements of the key on the quality of random numbers, it is proposed in the prior art to generate random numbers through hardware. Specifically, through the Linear Feedback Shift Register (Linear Feedback Shift Register, LFSR), using the properties of primitive polynomials, Perform shift processing on the data saved in the register, and output the m-sequence with high random characteristics. This method relies on application-specific integrated circuits. Therefore, in the prior art, only devices equipped with corresponding hardware can generate random numbers that meet high requirements, thereby generating corresponding keys based on random numbers. That is to say, generating keys in the prior art The method has been greatly restricted, affecting its scope of application.

Contents of the invention

The embodiment of the present application provides a data processing method, device, equipment, and medium to solve the problem in the prior art that when generating a key, random numbers need to be generated by hardware, resulting in a small scope of application of the method for generating a key .

In the first aspect, the embodiment of the present application provides a data processing method, the method comprising:

Receive data sent by any sensor set in the terminal;

Processing the data through a hash operation to generate a corresponding random number;

The random number is stored in a random number entropy pool, wherein the random number in the random number entropy pool is used to generate a key.

Further, after receiving the data sent by any sensor set in the terminal and before processing the data through hash operation, the method further includes:

Acquiring previous data of the data sent by the sensor sending the data;

According to the value of each bit of the last data and the value of each bit of the data, determine the correlation between the last data and the data;

judging whether the correlation degree is greater than a preset correlation degree;

If not, perform subsequent steps of processing the data through a hash operation.

Further, said processing said data through hash operation includes:

According to the preset splicing mode, splicing the data and the time of receiving the data;

Perform at least one hash operation on the spliced data.

Further, after receiving the data sent by any sensor set in the terminal and before processing the data through hash operation, the method further includes:

judging whether the number of random numbers in the random number entropy pool reaches a preset number;

If not, perform subsequent steps of processing the data through a hash operation.

Further, the method also includes:

Receive a request to generate a key;

In the random number entropy pool, any target random number is obtained;

Generate a corresponding key according to the target random number and a pre-configured generation algorithm.

Further, after acquiring any target random number, before generating a corresponding key according to the target random number and a pre-configured generation algorithm, the method further includes:

Obtain a pre-configured target length; wherein, the target length does not exceed the length of any random number in the random number entropy pool;

In the target random number, obtain a sub-random number of the target length; use the sub-random number to update the target random number, and for the updated target random number, perform subsequent The configured generation algorithm, the step of generating the corresponding key.

Further, the request carries the key identifier of the key to be generated; the method also includes:

Obtain the pixel value of each preset pixel point in the pre-saved image; and obtain the preset binary data corresponding to the key; wherein, the number of each preset pixel point is the same as the number of digits of the data same;

According to the preset sorting method corresponding to each preset pixel point, adjust the pixel value of each preset pixel point in turn according to the value of the corresponding bit in the data; save the image after pixel value adjustment and the key identification corresponding relationship.

Further, the method also includes:

If a key acquisition request carrying a target key identifier is received, then acquire a target image corresponding to the target key identifier; acquire the pixel value of each preset pixel in the target image;

According to the preset sorting method corresponding to each preset pixel point, the numerical values corresponding to the pixel values of each preset pixel point are correspondingly sorted, and the sorted numerical values are used as the target key identifier to be obtained The key corresponds to the target value in base.

In the second aspect, the embodiment of the present application also provides a data processing device, the device comprising:

A receiving module, configured to receive data sent by any sensor set in the terminal;

A processing module, configured to process the data through a hash operation to generate a corresponding random number;

A saving module, configured to save the random number in a random number entropy pool, wherein the random number in the random number entropy pool is used to generate a key.

Further, the processing module is also used to obtain the last data of the data sent by the sensor sending the data; according to the value of each bit of the last data and the value of each bit of the data, determine the The degree of correlation between the previous data and the data; judging whether the degree of correlation is greater than the preset degree of correlation; if not, performing the subsequent step of processing the data through a hash operation.

Further, the processing module is specifically configured to splice the data and the time of receiving the data according to a preset splicing manner; and perform at least one hash operation on the spliced data.

Further, the processing module is also used for judging whether the number of random numbers in the random number entropy pool reaches a preset number; if not, then execute the subsequent step of processing the data through a hash operation.

Further, the processing module is also configured to receive a request for generating a key; obtain any target random number in the random number entropy pool; generate a corresponding key according to the target random number and a pre-configured generation algorithm. key.

Further, the processing module is also used to obtain a pre-configured target length; wherein, the target length does not exceed the length of any random number in the random number entropy pool; in the target random number, obtain the A sub-random number of the target length; use the sub-random number to update the target random number, and perform subsequent generation of the corresponding key according to the target random number and a pre-configured generation algorithm for the updated target random number A step of.

Further, the processing module is also used to acquire the pixel value of each preset pixel point in the pre-saved image; and acquire the preset binary data corresponding to the key; wherein, each preset The number of pixels is the same as the number of digits of the data; according to the preset sorting method corresponding to each preset pixel, the pixel value of each preset pixel is adjusted sequentially according to the value of the corresponding bit in the data; The corresponding relationship between the image after pixel value adjustment and the key identifier is stored; the request carries the key identifier of the key to be generated.

Further, the processing module is further configured to acquire a target image correspondingly stored for the target key ID if a key acquisition request carrying a target key ID is received; acquire each preset key in the target image The pixel value of the pixel point; according to the preset sorting method corresponding to each preset pixel point, the numerical value corresponding to the pixel value of each preset pixel point is correspondingly sorted, and the value formed after sorting is used as the value to be obtained The key identified by the target key corresponds to the base target value.

In the third aspect, the embodiment of the present application also provides an electronic device, the electronic device includes at least a processor and a memory, and the processor is used to execute any one of the data processing methods described above when executing the computer program stored in the memory A step of.

In a fourth aspect, the embodiment of the present application further provides a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, the steps of any one of the data processing methods described above are executed.

In the embodiment of the present application, the electronic device receives the data sent by any sensor set in the terminal, processes the received data through a hash operation, generates a corresponding random number, and saves the generated random number in the random number entropy pool , where random numbers in the random number entropy pool are used to generate keys. Since in the embodiment of the present application, the electronic device processes the received data through a hash operation to generate a corresponding random number, since the hash operation has strong anti-collision property, the quality of the random number processed by the hash operation is relatively high , so high-quality random numbers that meet the requirements can be generated, and the data in the embodiment of the application is the data sent by any sensor set in the terminal, and the data collected by the sensor comes from a physical random event, which belongs to a true random data source. Processing the data sent by the sensor can further improve the quality of the generated random number, and the embodiment of the present application does not need to generate a random number through hardware, and generating a key based on the random number can improve the scope of application of the key generation method.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings that need to be used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For Those of ordinary skill in the art can also obtain other drawings based on these drawings without making creative efforts.

FIG. 1 is a schematic diagram of a data processing process provided by an embodiment of the present application;

FIG. 2 is a schematic diagram of a process for generating random numbers provided in an embodiment of the present application;

FIG. 3 is a schematic diagram of a key steganography process provided by an embodiment of the present application;

FIG. 4 is a schematic diagram of a process for obtaining a target key provided by an embodiment of the present application;

FIG. 5 is a detailed schematic diagram of a key correlation process provided by an embodiment of the present application;

FIG. 6 is a schematic structural diagram of a data processing device provided in an embodiment of the present application;

FIG. 7 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

detailed description

The application will be further described in detail below in conjunction with the accompanying drawings. Apparently, the described embodiments are only some of the embodiments of the application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

In order to improve the scope of application of the key generation method, embodiments of the present application provide a data processing method, device, device, and medium. The data processing method includes: the electronic device receives data sent by any sensor set in the terminal, processes the received data through a hash operation, generates a corresponding random number, and saves the generated random number in a random number entropy pool , where the random numbers in the random number entropy pool are used to generate keys. The random numbers in the random number entropy pool do not need to be generated by hardware, and keys are generated based on the random numbers in the random number entropy pool, which can improve the scope of application of the key generation method.

Example 1:

Fig. 1 is a schematic diagram of a data processing process provided by the embodiment of the present application, the process includes the following steps:

S101: Receive data sent by any sensor set in the terminal.

The data processing method provided in the embodiment of the present application is applied to an electronic device, and the electronic device may be a device such as a terminal or a server.

In this embodiment of the application, in order to generate random numbers that meet the high requirements of the key, multiple sensors are provided in the terminal, wherein the sensors provided in the terminal may include: acceleration sensors, magnetic sensors, direction sensors, gyroscope sensors, A plurality of sensors such as light sensing sensors, pressure sensors, temperature sensors, proximity sensors, gravity sensors, linear acceleration sensors, and rotation vector sensors.

If the electronic device is a terminal, the terminal can obtain the data sent by any sensor installed inside itself; if the electronic device is a non-terminal device such as a server, after the terminal obtains the data sent by any sensor installed inside itself, The data is sent to a non-terminal device such as a server, and the non-terminal device such as a server can receive the data sent by any sensor set in the terminal. Among them, the terminal can also obtain the data sent by multiple sensors set inside itself. If the data sent by multiple sensors is obtained, it will perform subsequent processing on each data, or send each data to a non-terminal device such as a server. , and non-terminal devices such as servers perform subsequent processing on each data. In the embodiment of the present application, it is equivalent to collecting source data through each sensor.

S102: Process the data through a hash operation to generate a corresponding random number.

After receiving the data sent by any sensor set in the terminal, the electronic device may process the received data by using a hash operation to generate a random number corresponding to the data. Specifically, the SM3 national secret hash algorithm can be used to process the data. Wherein, in the embodiment of the present application, the electronic device may perform multiple hash operations on the received data. In the embodiment of the present application, the length of the random number generated through the hash operation is 256 bits (binary digit, bit).

It is worth noting that the hash operation has strong anti-collision, can fully confuse the input sensor data, and the generated random numbers are of high quality, which can meet the high requirements of the key, and do not need to be generated by hardware.

S103: Save the random number in a random number entropy pool, where the random number in the random number entropy pool is used to generate a key.

In the embodiment of the present application, after the random number is generated, the electronic device can save the random number in the random number entropy pool, and the random number entropy pool stores a plurality of random numbers generated by the method described in the embodiment of the present application , and the random numbers in the random number entropy pool are used to generate keys. Subsequent electronic devices or other devices can generate keys based on the random numbers in the random number entropy pool.

It is worth noting that in the prior art, in order to generate high-quality random numbers, it is usually necessary to generate random numbers corresponding to the collected data through hardware, but in the embodiment of this application, hash operations can be used to generate high-quality random numbers without Realized by hardware. Moreover, the random number generated by the method provided in the embodiment of the present application is a qualified random number that meets the requirements of the "GM/T0005-2021 Randomness Inspection Specification", and is a parameter for important algorithms such as key generation.

The way of the prior art significantly reduces the portability, scalability and convenience of the constructed system. With the explosive development of mobile Internet technology, the data processing method adopted in the embodiment of this application does not need hardware implementation when generating random numbers, which is of great significance for commercial secret algorithms that meet the requirements of random number standards. The random number generated in the embodiment of this application can be used to generate a key, and the key can be applied to the national secret algorithm. Among them, the national secret algorithm has been widely used in various information systems, which can protect the security of sensitive data and make the transmission Information has confidentiality, integrity, authenticity and non-repudiation.

Since in the embodiment of the present application, the electronic device processes the received data through a hash operation to generate a corresponding random number, since the hash operation has strong anti-collision property, the quality of the random number processed by the hash operation is relatively high , so high-quality random numbers that meet the requirements can be generated, and the data in the embodiment of the application is the data sent by any sensor set in the terminal, and the data collected by the sensor comes from a physical random event, which belongs to a true random data source. Processing the data sent by the sensor can further improve the quality of the generated random number, and the embodiment of the present application does not need to generate a random number through hardware, and generating a key based on the random number can improve the scope of application of the key generation method.

Example 2:

In order to generate a random number that meets the requirements, on the basis of the above-mentioned embodiments, in the embodiment of the present application, after receiving the data sent by any sensor set in the terminal, before processing the data through the hash operation, The method also includes:

Acquiring previous data of the data sent by the sensor sending the data;

According to the value of each bit of the last data and the value of each bit of the data, determine the correlation between the last data and the data;

judging whether the correlation degree is greater than a preset correlation degree;

If not, perform subsequent steps of processing the data through a hash operation.

Since in practical application scenarios, the data collected by sensors has a strong time correlation, the data sent continuously by the same sensor may be relatively close. In order to ensure the quality of the generated random numbers, after receiving the data sent by any connected sensor, the electronic device can first calculate the correlation between the data and the previous data sent by the sensor. If the correlation between the previous data sent by the sensors is low, it means that the random number corresponding to the data is relatively random, and it is determined to generate the random number corresponding to the data.

In this embodiment of the application, after the electronic device receives the data sent by any one of the sensors set in the terminal, it can obtain the previous data sent by the sensor that sent the data. Specifically, if the electronic device If the device is a terminal, the terminal can determine the last data sent by the sensor that sent the data according to the acquired time of each data sent by each sensor; if the electronic device is a non-terminal device such as a server, the terminal After obtaining the data sent by any sensor, send the corresponding identification of the sensor and the data to the server and other non-terminal devices. , to determine the previous data sent by the sensor that sent the data.

Since the number of bits of data sent by the same sensor is the same, for example, the data sent by a certain sensor are all 32-bit data, so after the last data is determined, the electronic device can compare the value of each bit of the data with the previous data. The value of the bit determines the correlation between the data and the previous data. Specifically, the electronic device can determine the value of each bit of the data, which is the same as the value of the corresponding bit of the previous data, and determine that the number is the same as the value of the data. The ratio of digits is the degree of correlation between the data and the previous data. For example, if the value of each bit of the data is the same as that of the corresponding bit of the previous data is 31, and the number of bits of the data is 32, then the correlation degree is determined to be 31/32.

After determining the correlation between the previous data and the data, the electronic device can judge whether the correlation is greater than the preset correlation, wherein the preset correlation can be 15/16, if the correlation is not greater than the preset correlation degree, it means that the data is relatively close to the previous data, and the data has a strong correlation with the previous data. If the corresponding random number is generated according to the data, the corresponding random number is not random enough, so it is determined that the data Invalid electronic devices can delete the data without performing subsequent steps of processing the data through hash operations; if the correlation degree is greater than the preset correlation degree, it means that the data is quite different from the previous data The corresponding random number is relatively random, so the electronic device can perform subsequent steps of processing the data through a hash operation for the data.

Since in the embodiment of the present application, when the adjacent data sent by the same sensor differ greatly, the electronic device processes the received data to generate a corresponding random number, and adds the generated random number to the random number entropy pool, Therefore, the random numbers in the random number entropy pool are relatively random, and the corresponding key can be accurately generated based on the random numbers in the random number entropy pool.

FIG. 2 is a schematic diagram of a process of generating random numbers provided by an embodiment of the present application.

It can be seen from Figure 2 that the electronic device can receive data sent by any sensor set in the terminal, wherein the sensors set in the terminal include an acceleration sensor, a gyroscope sensor, a magnetic field sensor, etc., and the electronic device receives data sent by any sensor Afterwards, it is judged whether the data is invalid. Specifically, if the difference between the previous data sent by the sensor sending the data and the data is within the preset range, the data is determined to be invalid and the invalid data is deleted. If the data is valid , the electronic device performs a hash operation on the data, generates a random number corresponding to the data, and adds the random number to the random number entropy pool.

Example 3:

In order to generate random numbers accurately, on the basis of the above-mentioned embodiments, in the embodiment of the present application, according to the data, processing the data through a hash operation includes:

According to the preset splicing mode, splicing the data and the time of receiving the data;

Perform at least one hash operation on the spliced data.

In order to further ensure the randomness of the generated random numbers, in the embodiment of the present application, the electronic device can splice the received data and the time of receiving the data according to the preset splicing method, and generate corresponding data based on the spliced data. of random numbers. Specifically, the electronic device can put the received data before the time of receiving the data to realize splicing of the data and the time of receiving the data; it can also put the time of receiving the data before the time of receiving the data to realize splicing The concatenation of the data and the time at which the data was received. How to splice the received data and the time of receiving the data is not limited here.

After acquiring the spliced data, the electronic device may perform at least one hash operation on the spliced data to generate a corresponding random number. It is worth noting that processing data through a hash operation can generate relatively random data. Specifically, in the embodiment of the present application, the electronic device can perform two hash operations on the spliced data to obtain a random number. The random number is added to the random number entropy pool, which can be called a true random number.

If the data collected by the sensor is 512-bit data, the electronic device can splice the 512-bit data with the time of receiving the data, and perform at least one hash operation based on the spliced data to generate a 256-bit random number.

Example 4:

In order to avoid waste of resources, on the basis of the above-mentioned embodiments, in the embodiment of the present application, after receiving the data sent by any sensor set in the terminal, before processing the data through the hash operation, The method also includes:

judging whether the number of random numbers in the random number entropy pool reaches a preset number;

If not, perform subsequent steps of processing the data through a hash operation.

In the embodiment of the present application, the number of random numbers that can be stored in the random number entropy pool is limited, so in the embodiment of the present application, a preset number is pre-stored in the electronic device, wherein the preset number is a random number The maximum number of random numbers that can be kept in the entropy pool. After the electronic device receives the data sent by any sensor set in the terminal, it can judge whether the number of random numbers in the random number entropy pool reaches the preset number, if the number of random numbers in the random number entropy pool reaches the preset number , it means that there is no space for storing newly generated random numbers in the random number entropy pool, so there is no need to perform subsequent steps of processing the data through hash operations to generate corresponding random numbers; if the random number in the random number entropy pool If the number does not reach the preset number, it means that there is still space to continue to store newly generated random numbers in the random number entropy pool, and the electronic device can perform subsequent steps of processing the data through hash operations to generate corresponding random numbers .

In the embodiment of the present application, the total maximum length of the random numbers that can be stored in the random number entropy pool is fixed, and the maximum length can be 8192 bits, and the length of the random numbers after the hash operation is fixed, which is 256 bits, so The preset number can be 32, that is, 8192bit/256bit.

Example 5:

In order to generate a key, on the basis of the above-mentioned embodiments, in the embodiment of this application, the method further includes:

receive a request to generate a key;

In the random number entropy pool, any target random number is obtained;

Generate a corresponding key according to the target random number and a pre-configured generation algorithm.

When the user needs to generate a key, the user can operate the terminal used by the user, and the terminal used by the user can recognize the user operation, so that the terminal can receive the request to generate the key. If the electronic device is a server, the terminal can send a request for generating a key to the server, and the server can receive the request for generating a key. In this step, when the user needs to generate a key, the user can click a preset button, such as "generate button", on a preset page in the terminal used by the user, and the terminal can receive the request for generating a key.

In order to generate a key, multiple random numbers are stored in the random number entropy pool. After the electronic device receives a request to generate a key, it can obtain a random number in the random number entropy pool, which is the target random number. . Wherein, the random numbers in the random number entropy pool may be randomly arranged, and when the electronic device obtains a target random number, the electronic device may randomly obtain a random number in the random number entropy pool. Wherein, the random numbers in the random number entropy pool are relatively random, and the random numbers in the random number entropy pool are random numbers that meet the key's high requirement for random number quality.

After obtaining the target random number, the electronic device can generate a corresponding key according to the target random number and a pre-configured generation algorithm. Wherein, in the case of known random numbers and generation algorithms, how to generate corresponding keys is a prior art, and will not be repeated here.

Among them, in the embodiment of the present application, after the key is generated, the commercial secret algorithm can be executed according to the key. The commercial secret algorithm includes SM2 signature verification, SM2 encryption and decryption, SM3 abstract, SM4 symmetric encryption and decryption algorithm, etc. The specific electronic equipment can use The streamlined National Secret Algorithm Library software (openssl) operation library uses C or C++ language to implement a commercial secret algorithm in the form of software.

Embodiment 6:

In order to accurately generate keys, on the basis of the above embodiments, in the embodiments of this application, after acquiring any target random number, generate the corresponding key according to the target random number and a pre-configured generation algorithm. Before the key, the method also includes:

Obtain a pre-configured target length; wherein, the target length does not exceed the length of any random number in the random number entropy pool;

In the target random number, obtain a sub-random number of the target length; use the sub-random number to update the target random number, and for the updated target random number, perform subsequent The configured generation algorithm, the step of generating the corresponding key.

Since in actual application scenarios, when different types of keys are generated, the required lengths of random numbers may be different. Therefore, in the embodiment of this application, after the electronic device obtains the target random number, it can Obtain the sub-random number of the current required length, and generate the corresponding key according to the sub-random number.

In this embodiment of the present application, the electronic device is pre-configured with a target length, which is the length of the random number required by the electronic device to generate a key, wherein the target length does not exceed any random number in the random number entropy pool. The length of the number, in order to generate the corresponding key, after the electronic device obtains the target random number, it can obtain a pre-configured target length, and obtain a sub-random number of the target length from the obtained target random number. In the embodiment of the present application, the electronic device can obtain a sub-random number of a target length from the target random number, which is equivalent to obtaining a sub-random number of a corresponding length according to actual application requirements.

Among them, the electronic device can obtain a sub-random number of the target length after the preset length in the target random number, or arbitrarily obtain a sub-random number of the target length in the target random number. It is worth noting that the length of the sub-random number is equal to The target length, for example, the electronic device may obtain a sub-random number of the target length after the target random number 10 bits, wherein the preset length may be 10 bits (binary digit, bit), 20 bits, and so on.

For example, if the length of the target random number is 256 bits, the pre-configured target length is 10 bits, and the preset length is 10 bits, then the electronic device can obtain sub-random numbers from the 11th bit to the 20th bit in the target random number.

After obtaining the sub-random number, the electronic device can use the sub-random number to update the target random number, and generate a corresponding key according to the updated target random number and a pre-configured generation algorithm.

Because in the embodiment of the present application, after the electronic device obtains the target random number, it obtains the sub-random number of the pre-configured target length according to the target random number, and generates the corresponding key according to the sub-random number and the pre-configured generation algorithm , so that the key generation requirements can be met, and the corresponding key can be accurately generated.

In this embodiment of the application, after the key is generated, the key is applied to the National Secret Algorithm. Business personnel can introduce large number operations, elliptic curves, high-level cryptographic functions (high-level cryptographic functions, EVP) encapsulation, MultiplyAccumulate (MultiplyAccumulate, MAC) operation and other documents, and according to national secret algorithm standards such as "GM/T 0002SM4 Grouping Algorithm", "GM/T 0003SM2 Elliptic Curve Public Key National Secret Algorithm", "GM/T 0004SM3 Cryptographic Hash Algorithm", based on software developers Advanced programming tools (Visual Studio2022, VS2022) to design efficient national secret algorithms. According to the division of functions, including SM2 signature verification, SM2 encryption and decryption, SM4 encryption and decryption, SM3 digest generation, etc., it can provide simplified software algorithms for national secret algorithms. Among them, the use of a streamlined openssl computing library can improve the operating efficiency and resource utilization of electronic equipment.

Embodiment 7:

In order to improve the security of the key, on the basis of the above-mentioned embodiments, in the embodiment of the present application, the request carries the key identifier of the key to be generated; the method further includes:

Obtain the pixel value of each preset pixel point in the pre-saved image; and obtain the preset binary data corresponding to the key; wherein, the number of each preset pixel point is the same as the number of digits of the data same;

According to the preset sorting method corresponding to each preset pixel point, adjust the pixel value of each preset pixel point in turn according to the value corresponding to the corresponding bit in the data; save the image after pixel value adjustment and the key ID correspondence.

In the embodiment of this application, after the key is generated, if the key is directly stored in the electronic device, the security of the key is low. In order to improve the security of the key, the electronic device can store some The pixel value of the pixel point is adjusted to the pixel value corresponding to the key, so that the key is steganographically written in the image and the security of the key is improved.

In this embodiment of the present application, the electronic device has an image pre-stored, and after the electronic device generates a key, it can obtain the pixel value of each preset pixel in the pre-saved image, wherein each preset pixel can be is the preset number of pixels at the lower left corner of the image (the up, down, left, and right mentioned here are the up, down, left, and right in the figure), and obtain the preset binary data corresponding to the generated key, where the preset is The system can be binary, quaternary, etc., wherein the number of preset pixels is the same as the number of digits of data in the preset system corresponding to the key.

The electronic device can adjust the pixel value of each preset pixel point to the value of the corresponding bit of the data described above. Specifically, the electronic device can sequentially convert The pixel value of each preset pixel point is adjusted to the value of the corresponding bit in the data.

In the embodiment of the present application, the electronic device may also determine the adjusted pixel value according to the pixel value of each preset pixel point and the value of the corresponding bit of the data. In order to make the adjustment of the pixel value in the image smaller, the electronic device can adjust the value of the least significant bit (the least significant bit, LSB) of the pixel value of each preset pixel point to the value of the corresponding bit in the data. For example, if the value of the corresponding bit is 0, the pixel value of the preset pixel point is 255, and the value of the least significant bit in the pixel value is 5, then the electronic device can adjust the pixel value to 250. How to obtain the value of the LSB of a certain pixel value in the prior art will not be repeated here.

Wherein, the key generation request received by the electronic device carries the key identification of the key to be generated. In this step, after the key is steganographically written into the image, that is, after the pixel value of the image is adjusted, the The corresponding relationship between the image after pixel value adjustment and the key identifier carried in the request is saved, so as to obtain the corresponding image when obtaining the key. Specifically, when a user needs to generate a key, he can select the key ID on the preset page of the terminal he uses, and click the preset button, the terminal can receive the request for generating a key, and the generated key The request carries the key ID of the key to be generated. If the electronic device is a server, the terminal may send the key generation request carrying the key identifier of the key to be generated to the electronic device.

In the embodiment of the present application, in order to steganographically hide the key in the image, the electronic device can determine whether the saved image is an image in bitmap (Bitmap, BMP) format, and if the saved image is not an image in BMP format, the image Convert to an image in BMP format, and perform the adjustment described above based on the pixel value of each preset pixel in the converted image.

In the embodiment of the present application, the electronic device steganographically stores the key in the pre-saved image, thereby ensuring the security of the key and realizing safe storage of the key. Wherein, the pre-saved image can be the image with the highest access authority, that is to say, the electronic device can hide the key in the image with the highest access authority, which can effectively prevent the eavesdropping attack of the opponent and prevent other processes from accessing sensitive data. The key mentioned in the embodiment of this application, so as to ensure the security of the key. Wherein, the key may be sensitive information such as a symmetric key in a national secret algorithm, a private key in a public key pair, etc.

FIG. 3 is a schematic diagram of a key steganography process provided by an embodiment of the present application.

The electronic device may first acquire a locally stored image, determine whether the image is an image in BMP format, and if the image is not in BMP format, convert the image into an image in BMP format. And for the image in BMP format, obtain the pixel value of each preset pixel in the image, obtain the data of the preset binary system corresponding to the key, and sequentially sort each preset pixel according to the preset sorting method corresponding to each preset pixel. The pixel values of preset pixel points are adjusted to the values corresponding to the corresponding bits in the acquired data. And save the image after adjusting the pixel value.

In the embodiment of this application, the openssl operation library is used to implement a specific national secret algorithm, in which the required key is embedded into a predetermined image through a steganographic algorithm, and can be encrypted and stored using a cryptographic library, thereby solving the problem of key security The problem.

Embodiment 8:

In order to obtain the corresponding key, on the basis of the above-mentioned embodiments, in the embodiment of this application, the method further includes:

If a key acquisition request carrying a target key identifier is received, then acquire a target image corresponding to the target key identifier; acquire the pixel value of each preset pixel in the target image;

According to the preset sorting method corresponding to each preset pixel point, the numerical values corresponding to the pixel values of each preset pixel point are correspondingly sorted, and the sorted numerical values are used as the target key identifier to be obtained The key corresponds to the target value in base.

In this step, the terminal can identify the user's operation to determine that the key acquisition request carrying the target key identifier has been received, and if the electronic device is a server, the terminal can send the key acquisition request to the electronic device. Specifically, when the user has a request to obtain the key, the user can select the target key identifier through the preset page of the terminal used by the user, and click the preset button, such as "acquire button", at this time the terminal can receive the portable key. For the key acquisition request of the target key identifier, if the electronic device is a server, the terminal can send the key acquisition request carrying the target key identifier to the server, and the server can receive the key acquisition request carrying the target key identifier.

In order to obtain the target key, after the electronic device receives the key acquisition request carrying the target key ID, it can determine the target image corresponding to the target key ID according to the pre-stored correspondence between the key ID and the image. The image is the image that steganographically identifies the target key corresponding to the target key, and the electronic device can determine the corresponding target key based on the pixel values of the pixel points in the target image. The electronic device can acquire the pixel value of each preset pixel in the target image, and after acquiring the pixel value of each preset pixel, can sort the The numerical values corresponding to the pixel values of each preset pixel point are sorted accordingly, and the electronic device can obtain the numerical values formed after sorting, and use the numerical values as the target numerical values corresponding to the binary system of the target key to be obtained.

In the above-mentioned embodiment, if the pixel value of each preset pixel is adjusted to the value of the corresponding bit in the obtained preset data when the key is steganographically written into the image, then for each preset pixel, the value corresponding to the pixel value of the preset pixel is the pixel value of the preset pixel; if the key is steganographically written into the image, the value of each preset pixel is The value of LSB in the pixel value is adjusted to the value of the corresponding bit in the obtained preset data, then for each preset pixel, the value corresponding to the pixel value of the preset pixel is the preset The value of the LSB in the pixel value of the pixel. In this step, when the electronic device generates the key, the value of the LSB in the pixel value of each preset pixel can be obtained, and according to the value corresponding to each preset pixel The preset sorting method is to sort the LSB value of the pixel value of each preset pixel point correspondingly, and the electronic device can obtain the value composed after sorting, and use this value as the target key to be obtained to identify the target of the corresponding base value.

Among them, in the embodiment of the present application, if the key is converted from decimal to binary when the key is steganographically written into the image, then in this step, after the electronic device obtains the value, convert the value from binary to decimal The converted value is the key corresponding to the target key identifier.

FIG. 4 is a schematic diagram of a process for obtaining a target key provided by an embodiment of the present application.

It can be seen from Fig. 4 that after the electronic device receives the key acquisition request carrying the target key identifier, it acquires the target image correspondingly saved for the target key identifier, and if there is a corresponding target image, it acquires each preset key in the target image. Set the pixel value of the pixel point, and sort the numerical value corresponding to the pixel value of each preset pixel point according to the preset sorting method corresponding to each preset pixel point, and use the sorted numerical value as the to-be-obtained The key identified by the target key corresponds to the target value in base. The target key is thus extracted from the target image.

In the embodiment of this application, when the target key needs to be used, the key can be recovered from the image in the manner described in the above embodiment to ensure key security.

The preset pixels in the image can be the pixels in areas with complex textures and obvious edges preset by business personnel, so that the electronic device can use the steganography method described in the above embodiments to steganographically hide the key in the image For areas with more complex textures and more obvious edges, fully consider the texture characteristics of the image. The advantage of adopting the embodiment of the present application is that it can not only keep the image information presented externally of the image, retain the visual integrity, but also reduce the analysis accuracy of the special steganalysis algorithm, and has a strong anti-analysis ability.

FIG. 5 is a detailed schematic diagram of a key correlation process provided by an embodiment of the present application.

It can be seen from Figure 5 that electronic devices can obtain random numbers from the random number entropy pool, generate keys based on random numbers, and steganographically hide the keys in pre-saved images, which can be images with the highest access authority. The key can be extracted in the image when the need for the key is applied. The key can be applied to the national secret algorithm, wherein the openssl computing library can be used to implement the national secret algorithm.

In order to accurately generate the key, on the basis of the above-mentioned embodiments, in the embodiment of the present application, the method further includes:

The target random number is deleted from the random number entropy pool.

In this embodiment of the application, after the key is generated according to the obtained target random number and the pre-configured algorithm, the electronic device can delete the target random number from the random number entropy pool, so that the random number in the random number entropy pool The number has not been used, further increasing the randomness of the random number in the random number entropy pool.

In order to further increase the generation rate of random numbers, in the embodiment of the present application, a sensor data pool may also be stored in the electronic device, and the data sent by the sensor is stored in the sensor data pool before being processed, and the electronic device may use a thread The concurrency mechanism processes the connected sensor data, and the producer process writes the data generated by each sensor into the sensor data pool until the sensor data pool is full; the consumer process continues to consume the data in the sensor data pool, using twice The hash operation generates random numbers until the random number entropy pool where the random numbers are stored is full.

Embodiment 9:

Fig. 6 is a schematic structural diagram of a data processing device provided in an embodiment of the present application, the device comprising:

A receiving module 601, configured to receive data sent by any sensor set in the terminal;

A processing module 602, configured to process the data through a hash operation to generate a corresponding random number;

The saving module 603 is configured to save the random number in a random number entropy pool, wherein the random number in the random number entropy pool is used to generate a key.

In a possible implementation manner, the processing module 602 is further configured to obtain the last data of the data sent by the sensor sending the data; A one-bit value to determine the degree of correlation between the last data and the data; judge whether the degree of correlation is greater than a preset degree of correlation; if not, execute the subsequent step of processing the data through a hash operation.

In a possible implementation manner, the processing module 602 is specifically configured to splice the data and the time of receiving the data according to a preset splicing manner; and perform at least one hash operation on the spliced data.

In a possible implementation manner, the processing module 602 is also used to judge whether the number of random numbers in the random number entropy pool reaches a preset number; Steps for processing.

In a possible implementation manner, the processing module 602 is further configured to receive a request for generating a key; obtain any target random number from the random number entropy pool; The generation algorithm to generate the corresponding key.

In a possible implementation manner, the processing module 602 is further configured to acquire a pre-configured target length; wherein, the target length does not exceed the length of any random number in the random number entropy pool; In the target random number, obtain a sub-random number of the target length; use the sub-random number to update the target random number, and perform subsequent generation according to the target random number and pre-configuration for the updated target random number Algorithm, the step of generating the corresponding key.

In a possible implementation manner, the processing module 602 is further configured to acquire the pixel value of each preset pixel in the pre-saved image; and acquire the preset binary data corresponding to the key; wherein , the number of each preset pixel is the same as the number of digits of the data; according to the preset sorting method corresponding to each preset pixel, each preset is sequentially adjusted according to the value of the corresponding bit in the data Set the pixel value of the pixel point; save the corresponding relationship between the image after pixel value adjustment and the key identifier; the request carries the key identifier of the key to be generated.

In a possible implementation manner, the processing module 602 is further configured to, if a key acquisition request carrying a target key identifier is received, acquire a target image corresponding to the target key identifier; acquire the The pixel value of each preset pixel point in the target image; according to the preset sorting method corresponding to each preset pixel point, the numerical value corresponding to the pixel value of each preset pixel point is correspondingly sorted, and the sorted The composed value is used as the target value in the base corresponding to the key identified by the target key to be obtained.

Example 10:

On the basis of the above-mentioned embodiments, FIG. 7 is a schematic structural diagram of an electronic device provided by the embodiment of the present application, as shown in FIG. 7, including: a processor 701, a communication interface 702, a memory 703, and a communication bus 704, wherein , the processor 701 , the communication interface 702 , and the memory 703 communicate with each other through the communication bus 704 .

A computer program is stored in the memory 703, and when the program is executed by the processor 701, the processor 701 is made to perform the following steps:

Receive data sent by any sensor set in the terminal;

Processing the data through a hash operation to generate a corresponding random number;

The random number is stored in a random number entropy pool, wherein the random number in the random number entropy pool is used to generate a key.

Further, the processor 701 is further configured to acquire the last data of the data sent by the sensor sending the data;

According to the value of each bit of the last data and the value of each bit of the data, determine the correlation between the last data and the data;

judging whether the correlation degree is greater than a preset correlation degree;

If not, perform subsequent steps of processing the data through a hash operation.

Further, the processor 701 is specifically configured to splice the data and the time of receiving the data according to a preset splicing manner;

Perform at least one hash operation on the spliced data.

Further, the processor 701 is further configured to determine whether the number of random numbers in the random number entropy pool reaches a preset number;

If not, perform subsequent steps of processing the data through a hash operation.

Further, the processor 701 is also configured to receive a request for generating a key;

In the random number entropy pool, any target random number is obtained;

Generate a corresponding key according to the target random number and a pre-configured generation algorithm.

Further, the processor 701 is also configured to acquire a pre-configured target length; wherein, the target length does not exceed the length of any random number in the random number entropy pool;

In the target random number, obtain a sub-random number of the target length; use the sub-random number to update the target random number, and for the updated target random number, perform subsequent The configured generation algorithm, the step of generating the corresponding key.

Further, the processor 701 is also configured to acquire the pixel value of each preset pixel in the pre-saved image; and acquire the preset binary data corresponding to the key; wherein, each preset Assume that the number of pixels is the same as the number of bits of the data;

According to the preset sorting method corresponding to each preset pixel point, adjust the pixel value of each preset pixel point in turn according to the value of the corresponding bit in the data; save the image after pixel value adjustment and the key identification The corresponding relationship; the request carries the key identifier of the key to be generated.

Further, the processor 701 is further configured to, if a key acquisition request carrying a target key identifier is received, acquire a target image correspondingly stored for the target key identifier; acquire each preset key in the target image Set the pixel value of the pixel point;

According to the preset sorting method corresponding to each preset pixel point, the numerical values corresponding to the pixel values of each preset pixel point are correspondingly sorted, and the sorted numerical values are used as the target key identifier to be obtained The key corresponds to the target value in base.

The communication bus mentioned in the above server may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (Extended Industry Standard Architecture, EISA) bus or the like. The communication bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

The communication interface 702 is used for communication between the above-mentioned electronic devices and other devices.

The memory may include a random access memory (Random Access Memory, RAM), and may also include a non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

Above-mentioned processor can be general-purpose processor, comprises central processing unit, network processor (NetworkProcessor, NP) etc.; Programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.

Example 11:

On the basis of the above-mentioned embodiments, the embodiment of the present application also provides a computer-readable storage medium, the computer-readable storage medium stores a computer program executable by the electronic device, when the program is stored in the electronic When running on the device, the electronic device implements the following steps when executing:

A computer program is stored in the memory, and when the program is executed by the processor, the processor is made to perform the following steps:

Receive data sent by any sensor set in the terminal;

Processing the data through a hash operation to generate a corresponding random number;

The random number is stored in a random number entropy pool, wherein the random number in the random number entropy pool is used to generate a key.

In a possible implementation manner, after receiving the data sent by any sensor set in the terminal and before processing the data through a hash operation, the method further includes:

Acquiring previous data of the data sent by the sensor sending the data;

According to the value of each bit of the last data and the value of each bit of the data, determine the correlation between the last data and the data;

judging whether the correlation degree is greater than a preset correlation degree;

If not, perform subsequent steps of processing the data through a hash operation.

In a possible implementation manner, the processing the data through a hash operation includes:

According to the preset splicing mode, splicing the data and the time of receiving the data;

Perform at least one hash operation on the spliced data.

In a possible implementation manner, after receiving the data sent by any sensor set in the terminal and before processing the data through a hash operation, the method further includes:

judging whether the number of random numbers in the random number entropy pool reaches a preset number;

If not, perform subsequent steps of processing the data through a hash operation.

In a possible implementation manner, the method also includes:

Receive a request to generate a key;

In the random number entropy pool, any target random number is obtained;

Generate a corresponding key according to the target random number and a pre-configured generation algorithm.

In a possible implementation manner, after acquiring any target random number and before generating a corresponding key according to the target random number and a pre-configured generation algorithm, the method further includes:

Obtain a pre-configured target length; wherein, the target length does not exceed the length of any random number in the random number entropy pool;

In the target random number, obtain a sub-random number of the target length; use the sub-random number to update the target random number, and for the updated target random number, perform subsequent The configured generation algorithm, the step of generating the corresponding key.

In a possible implementation manner, the request carries a key identifier of the key to be generated; the method further includes:

Obtain the pixel value of each preset pixel point in the pre-saved image; and obtain the preset binary data corresponding to the key; wherein, the number of each preset pixel point is the same as the number of digits of the data same;

According to the preset sorting method corresponding to each preset pixel point, adjust the pixel value of each preset pixel point in turn according to the value of the corresponding bit in the data; save the image after pixel value adjustment and the key identification corresponding relationship.

In a possible implementation manner, the method also includes:

If a key acquisition request carrying a target key identifier is received, then acquire a target image corresponding to the target key identifier; acquire the pixel value of each preset pixel in the target image;

According to the preset sorting method corresponding to each preset pixel point, the numerical values corresponding to the pixel values of each preset pixel point are correspondingly sorted, and the sorted numerical values are used as the target key identifier to be obtained The key corresponds to the target value in base.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to the present application. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

Obviously, those skilled in the art can make various changes and modifications to the application without departing from the spirit and scope of the application. In this way, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalent technologies, the present application is also intended to include these modifications and variations.

Claims (11)

1. A data processing method, characterized in that the method comprises: Receive data sent by any sensor set in the terminal; Processing the data through a hash operation to generate a corresponding random number; The random number is stored in a random number entropy pool, wherein the random number in the random number entropy pool is used to generate a key. 2. The method according to claim 1, characterized in that, after the data sent by any sensor provided in the receiving terminal, before the data is processed by the hash operation, the method further comprises: Acquiring previous data of the data sent by the sensor sending the data; According to the value of each bit of the last data and the value of each bit of the data, determine the correlation between the last data and the data; judging whether the correlation degree is greater than a preset correlation degree; If not, perform subsequent steps of processing the data through a hash operation. 3. The method according to claim 1, wherein said processing said data through a hash operation comprises: According to the preset splicing mode, splicing the data and the time of receiving the data; Perform at least one hash operation on the spliced data. 4. The method according to claim 1, characterized in that, after the data sent by any sensor provided in the receiving terminal, before the data is processed by hash operation, the method further comprises: judging whether the number of random numbers in the random number entropy pool reaches a preset number; If not, perform subsequent steps of processing the data through a hash operation. 5. The method according to any one of claims 1-4, characterized in that the method further comprises: Receive a request to generate a key; In the random number entropy pool, any target random number is obtained; Generate a corresponding key according to the target random number and a pre-configured generation algorithm. 6. The method according to claim 5, characterized in that, after the acquisition of any target random number, before generating a corresponding key according to the target random number and a pre-configured generation algorithm, the method Also includes: Obtain a pre-configured target length; wherein, the target length does not exceed the length of any random number in the random number entropy pool; In the target random number, obtain a sub-random number of the target length; use the sub-random number to update the target random number, and for the updated target random number, perform subsequent The configured generation algorithm, the step of generating the corresponding key. 7. The method according to claim 5, wherein the request carries the key identifier of the key to be generated; the method further comprises: Obtain the pixel value of each preset pixel point in the pre-saved image; and obtain the preset binary data corresponding to the key; wherein, the number of each preset pixel point is the same as the number of digits of the data same; According to the preset sorting method corresponding to each preset pixel point, adjust the pixel value of each preset pixel point in turn according to the value of the corresponding bit in the data; save the image after pixel value adjustment and the key identification corresponding relationship. 8. The method according to claim 7, further comprising: If a key acquisition request carrying a target key identifier is received, then acquire a target image corresponding to the target key identifier; acquire the pixel value of each preset pixel in the target image; According to the preset sorting method corresponding to each preset pixel point, the numerical values corresponding to the pixel values of each preset pixel point are correspondingly sorted, and the sorted numerical values are used as the target key identifier to be obtained The key corresponds to the target value in base. 9. A data processing device, characterized in that the device comprises: A receiving module, configured to receive data sent by any sensor set in the terminal; A processing module, configured to process the data through a hash operation to generate a corresponding random number; A saving module, configured to save the random number in a random number entropy pool, wherein the random number in the random number entropy pool is used to generate a key. 10. An electronic device comprising a memory, a processor, and a computer program stored on the memory and operable on the processor, wherein the processor according to claim 1 is implemented when executing the program. - the step of the data processing method described in any one of 8. 11. A computer-readable storage medium, on which a computer program is stored, wherein when the program is executed by a processor, the steps in the data processing method according to any one of claims 1-8 are implemented.

Images