WO2020237868A1

WO2020237868A1 - Data transmission method, electronic device, server and storage medium

Info

Publication number: WO2020237868A1
Application number: PCT/CN2019/102865
Authority: WO
Inventors: 赵勇; 庄光雄; 及晨光; 李耀星; 邹宗慧; 李恒
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-05-24
Filing date: 2019-08-27
Publication date: 2020-12-03
Also published as: CN110324143B; CN110324143A

Abstract

The present application provides a data transmission method, an electronic device, a server and a storage medium. The data transmission method comprises: determining whether there is a communication record with the server according to a received data transmission instruction; if there is no communication record with the server, obtaining a device fingerprint of the electronic device, randomly extracting at least one character in the device fingerprint to generate a first key, and obtaining first data to be transmitted according to the data transmission instruction; using advanced encryption standards to encrypt said first data with the first key to obtain a first ciphertext; sending the first ciphertext to the server; and when a second ciphertext fed back by the server is received, decrypting the second ciphertext by using the first key to obtain second data to be transmitted, thereby realizing data processing, achieving encrypted transmission of the data between the electronic device and the server, and further improving the security of data transmission due to the complexity of an encryption mode.

Description

Data transmission method, electronic equipment, server and storage medium

This application claims to be submitted to the Chinese Patent Office on May 24, 2019. The application number is 201910442274.9. The title of the invention is "Data transmission method, electronic equipment and storage medium". in.

Technical field

This application relates to the field of data processing technology, and in particular to a data transmission method, electronic equipment and storage medium.

Background technique

At present, in network communication, HyperText Transfer Protocol (HTTP), HyperText Transfer Protocol (over Secure Socket Layer, HTTPS), etc. are usually used to protect the transmitted data, or simply Signature verification of data, none of the above methods can effectively guarantee the security of data transmission. Even in some network communications, data is transmitted directly in plain text without taking relevant protective measures, resulting in data being easily attacked by hackers during transmission. Give way.

Summary of the invention

In view of the above, it is necessary to provide a data transmission method, electronic device, server and storage medium, which can realize the encrypted transmission of data between the electronic device and the server, and due to the complexity of the encryption method, it is necessary to effectively avoid the data being transmitted during transmission. Tampering further improves the security of data transmission.

A data transmission method applied to an electronic device, the electronic device communicating with a server, the method including:

When receiving a data transmission instruction, determine whether there is a communication record with the server according to the data transmission instruction;

When there is no communication record with the server, acquiring the device fingerprint of the electronic device;

Randomly extract at least one character in the device fingerprint to generate a first key;

Acquiring the first data to be transmitted according to the data transmission instruction;

Using an advanced encryption standard to encrypt the first data to be transmitted with the first key to obtain the first ciphertext;

Sending the first ciphertext to the server;

When receiving the second ciphertext fed back by the server, decrypt the second ciphertext with the first key to obtain the second data to be transmitted.

A data transmission method applied to a server, the server communicating with an electronic device, the method including:

When receiving the first ciphertext sent by the electronic device, obtain the device fingerprint of the electronic device from the request header of the first ciphertext;

According to the fingerprint of the device, determine whether there is a communication record with the electronic device;

When there is no communication record with the electronic device, randomly extract at least one character in the fingerprint of the device to generate a first key;

Decrypt the first ciphertext with the first key to obtain the first data to be transmitted;

Searching according to the first data to be transmitted to obtain the second data to be transmitted;

Randomly determine any character string and generate the first temporary key;

Using an advanced encryption standard to encrypt the first temporary key and the second data to be transmitted with the first key to obtain a second ciphertext;

The second ciphertext is fed back to the electronic device.

A data transmission device that runs on an electronic device, the electronic device communicates with a server, and the device includes:

The determining unit is configured to determine whether there is a communication record with the server according to the data transmission instruction when a data transmission instruction is received;

An acquiring unit, configured to acquire the device fingerprint of the electronic device when there is no communication record with the server;

A generating unit, configured to randomly extract at least one character in the device fingerprint to generate a first key;

The acquiring unit is further configured to acquire the first data to be transmitted according to the data transmission instruction;

An encryption unit, configured to use an advanced encryption standard to encrypt the first data to be transmitted with the first key to obtain a first ciphertext;

A sending unit, configured to send the first ciphertext to the server;

The decryption unit is configured to, when receiving the second ciphertext fed back by the server, decrypt the second ciphertext with the first key to obtain second data to be transmitted.

A data transmission system runs on a server, the server communicates with electronic equipment, and the system includes:

An obtaining module, configured to obtain the device fingerprint of the electronic device from the request header of the first ciphertext when the first ciphertext sent by the electronic device is received;

The determining module is configured to determine whether there is a communication record with the electronic device according to the device fingerprint;

A generating module, used to randomly extract at least one character in the fingerprint of the device when there is no communication record with the electronic device to generate a first key;

A decryption module, configured to decrypt the first ciphertext with the first key to obtain the first data to be transmitted;

The acquiring module is further configured to perform retrieval based on the first data to be transmitted to obtain second data to be transmitted;

The generating module is also used to randomly determine any character string and generate the first temporary key;

An encryption module, configured to use an advanced encryption standard to encrypt the first temporary key and the second data to be transmitted with the first key to obtain a second ciphertext;

The feedback module is used to feed back the second ciphertext to the electronic device.

An electronic device, which includes:

The memory stores at least one computer readable instruction; and

The processor executes the at least one computer-readable instruction to implement the data transmission method.

A server, the server includes:

Storage device storing at least one computer readable instruction; and

The processing device executes the at least one computer-readable instruction to implement the data transmission method.

A non-volatile readable storage medium stores at least one instruction, and the at least one instruction is executed by a processor in an electronic device to implement the data transmission method.

A non-volatile readable storage medium stores at least one instruction, and the at least one instruction is executed by a processing device in a server to implement the data transmission method.

It can be seen from the above technical solutions that this application can determine whether there is a communication record with the server according to the received data transmission instruction. When there is no communication record with the server, the device fingerprint of the electronic device is obtained, and the device fingerprint is randomly extracted To generate a first key, further obtain the first data to be transmitted according to the data transmission instruction, adopt advanced encryption standards, and encrypt the first data to be transmitted with the first key, Obtain the first ciphertext, thereby increasing the complexity of data encryption, send the first ciphertext to the server, and when the second ciphertext fed back by the server is received, decrypt it with the first key The second ciphertext obtains the second data to be transmitted, so as to realize the encrypted transmission of the data between the electronic device and the server, and due to the complexity of the encryption method, the data is effectively prevented from being tampered with in the transmission process, and the data transmission is further improved Security.

Description of the drawings

Fig. 1 is an application environment diagram of a preferred embodiment of the data transmission method of the present application.

Fig. 2 is a flowchart of a preferred embodiment of the data transmission method of the present application applied to an electronic device.

Fig. 3 is a flowchart of a preferred embodiment of the data transmission method of the present application applied to a server.

Fig. 4 is a functional module diagram of an electronic device of a preferred embodiment of the data transmission device of the present application.

Fig. 5 is a functional module diagram of a server in a preferred embodiment of the data transmission system of the present application.

FIG. 6 is a schematic structural diagram of an electronic device implementing a preferred embodiment of the data transmission method according to the present application.

FIG. 7 is a schematic structural diagram of a server in a preferred embodiment of the data transmission method according to the present application.

Detailed ways

As shown in Figure 1, it is an application environment diagram of a preferred embodiment of the data transmission method of the present application. The application environment diagram includes the electronic device 1 and the server 2. The electronic device 1 communicates with the server 2. Wherein, the electronic device 1 is used to generate the first ciphertext. The server 2 is configured to obtain second data to be transmitted according to the first ciphertext, generate a second ciphertext according to the second data to be transmitted, and feed back the second ciphertext to the electronic device 1.

Preferably, the data transmission method of the present application is applied to one or more electronic devices 1 and one or more servers 2. The electronic device 1 and the server 2 are a type that can be automatically set or stored in accordance with pre-set or stored instructions. Equipment for numerical calculation and/or information processing. Its hardware includes, but is not limited to, microprocessors, Application Specific Integrated Circuits (ASICs), Field-Programmable Gate Arrays (FPGAs), digital processors (Digital Signal Processor, DSP), embedded devices, etc.

The electronic device 1 and the server 2 can be any electronic products that can interact with users with humans, such as personal computers, tablet computers, smart phones, personal digital assistants (PDAs), and game consoles. , Interactive Network Television (Internet Protocol Television, IPTV), smart wearable devices, etc.

The electronic device 1 and the server 2 may also include network devices and/or user equipment. Wherein, the network device includes, but is not limited to, a single network server, a server group composed of multiple network servers, or a cloud composed of a large number of hosts or network servers based on Cloud Computing.

The network where the electronic device 1 and the server 2 are located includes, but is not limited to, the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (Virtual Private Network, VPN), etc.

As shown in FIG. 2, it is a flowchart of a preferred embodiment of the data transmission method of the present application applied to an electronic device. According to different needs, the order of the steps in the flowchart can be changed, and some steps can be omitted.

S10: When a data transmission instruction is received, determine whether there is a communication record with the server 2 according to the data transmission instruction.

In at least one embodiment of the present application, when a signal that a user triggers a preset service is detected, the electronic device 1 determines to receive the data transmission instruction.

Specifically, the preset service refers to a service that needs to obtain data from the server 2, such as a search service, a login service, and the like.

In at least one embodiment of the present application, determining whether the electronic device 1 has a communication record with the server 2 according to the data transmission instruction includes:

The electronic device 1 obtains the application program corresponding to the data transmission instruction, further determines the storage directory of the application program, and detects whether the temporary key generated by the server 2 exists in the storage directory.

Furthermore, when the temporary key generated by the server 2 exists in the storage directory, the electronic device 1 determines that there is a communication record with the server 2, or when the server 2 does not exist in the storage directory. When the temporary key is generated, the electronic device 1 determines that there is no communication record with the server.

It is understandable that the electronic device 1 will respond differently to whether the electronic device 1 and the server 2 have a communication record, which will be described in detail later.

S11: Acquire the device fingerprint of the electronic device 1 when there is no communication record with the server.

In at least one embodiment of the present application, the device fingerprint refers to a device feature or a unique device identifier that can be used to uniquely identify the electronic device 1. The device fingerprint includes some unique device identifications that are inherently difficult to tamper with.

Specifically, generating the device fingerprint by the electronic device 1 includes:

The electronic device 1 obtains the device information of the electronic device 1 and generates the device fingerprint according to the device information.

Wherein, the device information includes, but is not limited to one or a combination of the following:

The serial number of the electronic device 1, the SIM (Subscriber Identification Module) card number of the electronic device 1, the manufacturer code of the electronic device 1, the model of the electronic device 1, and the electronic device 1 Hardware identification code, etc.

Through the foregoing implementation manners, the electronic device 1 generates a device fingerprint that can uniquely identify the electronic device 1, and the device fingerprint may consist of a string of characters.

For example: the device fingerprint can consist of 32-bit numbers/letters.

S12: Randomly extract at least one character in the device fingerprint to generate a first key.

In at least one embodiment of the present application, the first key is used to encrypt data to be transmitted by the electronic device 1.

Specifically, the randomly extracting at least one character in the device fingerprint to generate the first key includes:

The electronic device 1 performs a remainder operation on the at least one character to obtain a first numerical value, and performs a logical operation on the first numerical value relative to the configuration numerical value to generate a first character string. Accumulate to obtain a second value, perform a remainder operation on the second value to obtain a third value, and perform a binary conversion on the third value to generate a second character string, and concatenate the first character string and the The second character string is used to obtain the first key.

For example: the electronic device 1 performs an ASCII code-based operation on the at least one character to obtain 30 digits/letters, and performs an operation based on the obtained 30 digits/letters to generate two check digits, and then obtains a A 32-bit character string, and the obtained 32-bit character string is used as the first key.

Through the foregoing implementation manner, the electronic device 1 randomly extracts at least one character in the device fingerprint to generate the first key, which can prevent the first key from being cracked due to the certainty of the device fingerprint In the case of the electronic device 1 randomly extracting at least one character in the device fingerprint may include many possibilities, thus increasing the difficulty of cracking.

S13: Acquire first data to be transmitted according to the data transmission instruction.

In at least one embodiment of the present application, according to the data transmission instruction, the electronic device 1 can obtain the user information of the user who triggered the data transmission instruction.

At the same time, the electronic device 1 can also obtain relevant data corresponding to the preset service from the data transmission instruction, including the first data to be transmitted.

For example: when a search service triggered by user A is detected, the electronic device 1 determines to obtain the data transmission instruction. Further, the electronic device 1 obtains the text B to be searched by the user A, and combines the The text B is determined as the first data to be transmitted.

S14. Using an advanced encryption standard, encrypt the first data to be transmitted with the first key to obtain a first ciphertext.

In at least one embodiment of the present application, the Advanced Encryption Standard (AES) is a symmetric encryption algorithm. Under the premise of ensuring data security, the algorithm is open and the amount of calculation is small, so the encryption speed is Faster and higher encryption efficiency.

In at least one embodiment of the present application, the first ciphertext refers to data transmitted by the electronic device 1 to the server, so as to obtain data from the server 2 according to the first ciphertext.

For example: when the first data to be transmitted is the character B, after the electronic device 1 transmits the first ciphertext containing the character B to the server 2, a search for the character B will be obtained result.

S15: Send the first ciphertext to the server 2.

In at least one embodiment of the present application, the server 2 is configured to receive the first ciphertext, and obtain the first data to be transmitted from the first ciphertext, and further according to the first data to be transmitted The data requested by the electronic device 1 to be returned is determined.

In at least one embodiment of the present application, the electronic device 1 sends the first ciphertext to the server 2 to avoid data being intercepted due to plaintext transmission, which affects the security of the data during network transmission.

S16: When the second ciphertext fed back by the server is received, decrypt the second ciphertext with the first key to obtain second data to be transmitted.

In at least one embodiment of the present application, the second ciphertext is data fed back by the server 2 according to the first ciphertext.

In at least one embodiment of the present application, the second data to be transmitted is data obtained by the electronic device 1 after decrypting the second ciphertext. After acquiring the second data to be transmitted, the electronic device 1 can complete the task of requesting data from the server 2.

For example: when the first data to be transmitted in the first ciphertext is the character B, the second ciphertext includes the search result of the character B.

In at least one embodiment of the present application, the method further includes:

After decrypting the second ciphertext with the first key, the electronic device 1 obtains a first temporary key, encrypts the first temporary key, and further, the electronic device 1 determines with the The application program corresponding to the data transmission instruction saves the encrypted first temporary key in the storage directory of the application program.

Specifically, the first temporary key is a string of random data.

For example: the first temporary key may be a string of 16-bit random numbers/letters.

Further, using any encryption algorithm to encrypt the first temporary key can realize the encrypted storage of the first temporary key and ensure the security of the first temporary key.

Through the foregoing implementation manner, the electronic device 1 encrypts and saves the first temporary key to the storage directory of the application program, so that it can be directly adjusted from the storage directory of the application program during subsequent data transmission. At the same time, the first temporary key is synchronized with the application program. When the application program is uninstalled, the first temporary key will also be deleted, which further improves security.

In at least one embodiment of the present application, when there is a communication record with the server 2, the method further includes:

The electronic device 1 obtains the device fingerprint, randomly extracts at least one character from the device fingerprint and the first temporary key to generate a second key, and obtains the first key according to the data transmission instruction. For the data to be transmitted, further, the electronic device 1 uses advanced encryption standards to encrypt the first data to be transmitted with the second key to obtain a third ciphertext, and send the third ciphertext To the server 2.

Through the foregoing implementation manner, when the electronic device 1 has a communication record with the server 2, the electronic device 1 generates the second key simultaneously based on the device fingerprint and the first temporary key, Further improve the security of data transmission.

It can be seen from the above technical solutions that this application can determine whether there is a communication record with the server according to the received data transmission instruction. When there is no communication record with the server, the device fingerprint of the electronic device is obtained, and the device fingerprint is randomly extracted To generate a first key, further obtain the first data to be transmitted according to the data transmission instruction, adopt advanced encryption standards, and encrypt the first data to be transmitted with the first key, Obtain the first ciphertext, thereby increasing the complexity of data encryption, send the first ciphertext to the server, and when the second ciphertext fed back by the server is received, decrypt it with the first key The second ciphertext obtains the second data to be transmitted, thereby realizing the encrypted transmission of the data between the electronic device and the server, and due to the complexity of the encryption method, it effectively prevents the data from being tampered with during the transmission process, and further improves the data transmission Security.

As shown in FIG. 3, it is a flowchart of a preferred embodiment of the data transmission method of the present application applied to the server 2. According to different needs, the order of the steps in the flowchart can be changed, and some steps can be omitted.

S20: When the first ciphertext sent by the electronic device 1 is received, obtain the device fingerprint of the electronic device 1 from the request header of the first ciphertext.

In at least one embodiment of the present application, when the electronic device 1 sends the first ciphertext to the server 2, it uses the device fingerprint as a request header, carries the first ciphertext, and sends it to the server 2. 2 Send a data request.

S21: Determine whether there is a communication record with the electronic device 1 according to the device fingerprint.

In at least one embodiment of the present application, after the server 2 has a communication record with the electronic device 1, the related information is recorded as a proof of communication, which will be described in detail later.

S22: When there is no communication record with the electronic device 1, at least one character in the fingerprint of the device is randomly extracted to generate a first key.

In at least one embodiment of the present application, the method of generating the first key according to the device fingerprint is the same as the method of generating the first key by the electronic device 1 in the foregoing, which is not repeated in this application.

S23: Decrypt the first ciphertext with the first key to obtain first data to be transmitted.

In at least one embodiment of the present application, when the encryption method of the first key and the first ciphertext are the same, the server 2 can successfully decrypt the first ciphertext to obtain the first ciphertext. Data to be transmitted.

When the encryption method of the first key and the first ciphertext are inconsistent, the server 2 will not be able to decrypt the first ciphertext, and thus cannot obtain the first ciphertext from the first ciphertext. A data to be transmitted.

Through the foregoing implementation manners, the security of data during network transmission can be effectively guaranteed.

S24: Retrieve according to the first data to be transmitted to obtain second data to be transmitted.

In at least one embodiment of the present application, based on the first data to be transmitted, the server 2 can determine the data that the electronic device 1 wants to acquire.

For example: when the first data to be transmitted is the character B, the server determines that the electronic device 1 needs to obtain the search result of the character B, and further, the server 2 searches for the character B The result is determined to be the second data to be transmitted.

S25, randomly determining any character string, and generating a first temporary key.

In at least one embodiment of the present application, the first temporary key is a string of random data.

In at least one embodiment of the present application, after randomly determining any character string and generating the first temporary key, the method further includes:

The server 2 records the corresponding relationship between the first temporary key and the device fingerprint. Further, the server 2 saves the corresponding relationship in a pre-configured device list, where the device list is used for Store all terminal devices that have communication records with the server 2.

Through the foregoing implementation manner, the server 2 can record the corresponding relationship in the device list, so that it is convenient to subsequently determine whether the electronic device 1 and the server 2 have communicated with the device list.

In at least one embodiment of the present application, the determining whether there is a communication record with the electronic device 1 according to the device fingerprint includes:

The server 2 matches the device fingerprint with the device list, and when the device fingerprint exists in the device list, it determines that there is a communication record with the electronic device; or when all the device fingerprints do not exist in the device list. When the device fingerprints, it is determined that there is no communication record with the electronic device.

Through the foregoing implementation manners, it can be determined whether the electronic device 1 has communicated with the server 2, and further different countermeasures can be taken.

S26. Using an advanced encryption standard, encrypt the first temporary key and the second data to be transmitted with the first key to obtain a second ciphertext.

In at least one embodiment of the present application, the generation of the second ciphertext is also combined with the first temporary key, which increases the complexity of data encryption. Due to the randomness of the first temporary key, the The cracking of the second ciphertext is more difficult to ensure that the security of the second ciphertext is higher.

S27: Feed back the second ciphertext to the electronic device.

In at least one embodiment of the present application, the second ciphertext includes the content requested by the electronic device 1.

In at least one embodiment of the present application, when there is a communication record with the electronic device 1, the method further includes:

The server 2 obtains the first temporary key corresponding to the device fingerprint from the device list, and randomly extracts at least one character from the device fingerprint and the first temporary key to generate the first temporary key Two keys, further, the server 2 uses advanced encryption standards to encrypt the second data to be transmitted with the second key to obtain a fourth ciphertext, and feeds back the fourth ciphertext to the述电子设备1。述电子设备1.

Through the foregoing implementation manner, the server 2 directly uses the stored first temporary key to generate the second key.

Next, the communication between the server 2 and the electronic device 1 will all rely on the second key until a special situation occurs.

Specifically, the method further includes:

When it is detected that any one of the electronic device 1 and the server 2 loses the first temporary key, and/or the configuration service is started, the first temporary key is regenerated and saved.

Specifically, the configuration service may include, but is not limited to: user login service, etc.

For example: when the application program stored in the first temporary key is uninstalled, causing the loss of the first temporary key, the first temporary key is regenerated and saved.

Through the foregoing implementation manners, on the premise of ensuring that the server 2 and the electronic device 1 conduct normal data communication, the security of data transmission can be further ensured.

When it is detected that the decryption cannot be performed with the second key, the server 2 obtains the number of decryption failures within a preset time, and when the number is greater than or equal to a preset value, the electronic device 1 is locked.

Specifically, the preset value can be customized, which is not limited in this application.

It is understandable that if the second key cannot be used for decryption, it means that the electronic device 1 does not store the first temporary key. Therefore, since the data transmission between the server 2 and the electronic device 1 mainly depends on The first temporary key indicates that the electronic device 1 is likely to be in an abnormal situation of maliciously stealing information.

When the electronic device 1 is locked, the server 2 will no longer accept the request data of the electronic device 1.

Of course, in other embodiments, the server can also be configured to reject all requests of the electronic device within the configured time, and this application is not limited.

Through the foregoing implementation manners, data theft can be effectively avoided, the protection of the data transmission process is stronger, and information leakage can be avoided.

As shown in FIG. 4, it is a functional module diagram of the electronic device of the preferred embodiment of the data transmission device of the present application. The data transmission device 11 includes a determination unit 100, an acquisition unit 101, a generation unit 102, an encryption unit 103, a transmission unit 104, a decryption unit 105, and a storage unit 106. The unit referred to in this application refers to a series of computer-readable instruction segments that can be executed by the processor 13 and can complete fixed functions, and are stored in the memory 12. In this embodiment, the function of each unit will be described in detail in subsequent embodiments.

When receiving the data transmission instruction, the determining unit 100 determines whether there is a communication record with the server 2 according to the data transmission instruction.

In at least one embodiment of the present application, when a signal that a user triggers a preset service is detected, the determining unit 100 determines that the data transmission instruction is received.

In at least one embodiment of the present application, the determining unit 100 determining whether there is a communication record with the server 2 according to the data transmission instruction includes:

The determining unit 100 obtains the application program corresponding to the data transmission instruction, further determines the storage directory of the application program, and detects whether the temporary key generated by the server exists in the storage directory.

Furthermore, when the temporary key generated by the server 2 exists in the storage directory, the determining unit 100 determines that there is a communication record with the server 2, or when the server 2 does not exist in the storage directory. When the temporary key is generated, the determining unit 100 determines that there is no communication record with the server.

It is understandable that the data transmission device 11 will respond differently as to whether there is a communication record between the data transmission device 11 and the server 2, which will be described in detail later.

When there is no communication record with the server, the acquiring unit 101 acquires the device fingerprint of the electronic device 1.

Specifically, generating the device fingerprint by the acquiring unit 101 includes:

The acquiring unit 101 acquires the device information of the electronic device 1, and generates the device fingerprint according to the device information.

Through the foregoing implementation manner, the acquiring unit 101 generates a device fingerprint that can uniquely identify the electronic device 1, and the device fingerprint may be composed of a string of characters.

For example: the device fingerprint can consist of 32-bit numbers/letters.

The generating unit 102 randomly extracts at least one character in the device fingerprint to generate a first key.

Specifically, the generating unit 102 randomly extracting at least one character in the device fingerprint to generate the first key includes:

The generating unit 102 performs a remainder operation on the at least one character to obtain a first numerical value, and performs a logical operation on the first numerical value relative to the configuration numerical value to generate a first character string. Accumulate to obtain a second value, perform a remainder operation on the second value to obtain a third value, and perform a binary conversion on the third value to generate a second character string, and concatenate the first character string and the The second character string is used to obtain the first key.

For example, the generating unit 102 performs an ASCII code-based operation on the at least one character to obtain 30 digits/letters, and performs an operation based on the obtained 30 digits/letters to generate two check digits, thereby obtaining a A 32-bit character string, and the obtained 32-bit character string is used as the first key.

Through the foregoing implementation manners, at least one character in the device fingerprint is randomly extracted to generate the first key, which can avoid the situation that the first key is cracked due to the certainty of the device fingerprint, and randomly extract At least one character in the device fingerprint can include many possibilities, thus increasing the difficulty of cracking.

The acquiring unit 101 acquires the first data to be transmitted according to the data transmission instruction.

In at least one embodiment of the present application, according to the data transmission instruction, the acquisition unit 101 can acquire the user information of the user who triggered the data transmission instruction.

At the same time, the acquiring unit 101 can also acquire related data corresponding to the preset service from the data transmission instruction, including the first data to be transmitted.

For example: when a search service triggered by user A is detected, the acquiring unit 101 determines that the data transmission instruction is acquired. Further, the acquiring unit 101 acquires the text B to be searched by the user A, and combines the The text B is determined as the first data to be transmitted.

The encryption unit 103 adopts an advanced encryption standard to encrypt the first data to be transmitted with the first key to obtain the first ciphertext.

In at least one embodiment of the present application, the first ciphertext refers to data transmitted to the server by the encryption unit 103, so as to obtain data from the server 2 according to the first ciphertext.

For example: when the first data to be transmitted is the character B, the encryption unit 103 transmits the first ciphertext containing the character B to the server 2 to obtain a search for the character B result.

The sending unit 104 sends the first ciphertext to the server 2.

In at least one embodiment of the present application, the sending unit 104 sends the first ciphertext to the server 2 to avoid data interception due to plaintext transmission, which affects the security of the data during network transmission.

When receiving the second ciphertext fed back by the server, the decryption unit 105 decrypts the second ciphertext with the first key to obtain the second data to be transmitted.

In at least one embodiment of the present application, the second data to be transmitted is the data obtained after the decryption unit 105 decrypts the second ciphertext. After obtaining the second data to be transmitted, the decryption unit 105 can complete the task of requesting data from the server 2.

The decryption unit 105 obtains a first temporary key after decrypting the second ciphertext with the first key, the encryption unit 103 encrypts the first temporary key, and further, the determining unit 100 determines the application program corresponding to the data transmission instruction, and the saving unit 106 saves the encrypted first temporary key in the storage directory of the application program.

Specifically, the first temporary key is a string of random data.

Through the above implementation, the first temporary key is encrypted and stored in the storage directory of the application program, so that when subsequent data transmission is performed, it can be directly retrieved from the storage directory of the application program, and all The first temporary key is synchronized with the application program. When the application program is uninstalled, the first temporary key will also be deleted, which further improves security.

The acquiring unit 101 acquires the device fingerprint, the generating unit 102 randomly extracts at least one character from the device fingerprint and the first temporary key to generate a second key, and the acquiring unit 101 according to The data transmission instruction acquires the first data to be transmitted, and further, the encryption unit 103 adopts an advanced encryption standard to encrypt the first data to be transmitted with the second key to obtain a third ciphertext , The sending unit 104 sends the third ciphertext to the server 2.

Through the foregoing implementation manner, when there is a communication record with the server 2, the generating unit 102 generates the second key simultaneously based on the device fingerprint and the first temporary key, which further improves the data transmission Security.

As shown in FIG. 5, it is a functional module diagram of a server in a preferred embodiment of the data transmission system of the present application. The data transmission system 21 includes an acquisition module 200, a determination module 201, a generation module 202, a decryption module 203, an encryption module 204, a feedback module 205, a recording module 206, a storage module 207, and a locking module 208. The module referred to in this application refers to a series of computer-readable instruction segments that can be executed by the processing device 23 and can complete fixed functions, and are stored in the storage device 22. In this embodiment, the function of each module will be described in detail in subsequent embodiments.

When the first ciphertext sent by the electronic device 1 is received, the acquiring module 200 obtains the device fingerprint of the electronic device 1 from the request header of the first ciphertext.

In at least one embodiment of the present application, when the electronic device 1 sends the first ciphertext to the acquisition module 200, it uses the device fingerprint as a request header and carries the first ciphertext to The acquiring module 200 sends a data request.

According to the device fingerprint, the determining module 201 determines whether there is a communication record with the electronic device 1.

When there is no communication record with the electronic device 1, the generating module 202 randomly extracts at least one character in the fingerprint of the device to generate the first key.

The decryption module 203 decrypts the first ciphertext with the first key to obtain the first data to be transmitted.

In at least one embodiment of the present application, when the encryption method of the first key and the first ciphertext are the same, the decryption module 203 can successfully decrypt the first ciphertext to obtain the first ciphertext. A data to be transmitted.

When the encryption method of the first key is inconsistent with the first ciphertext, the decryption module 203 will not be able to decrypt the first ciphertext, and therefore cannot obtain the first ciphertext from the The first data to be transmitted.

The acquisition module 200 searches according to the first data to be transmitted, and obtains the second data to be transmitted.

In at least one embodiment of the present application, according to the first data to be transmitted, the acquisition module 200 can determine the data that the electronic device 1 wants to acquire.

For example: when the first data to be transmitted is the character B, the obtaining module 200 determines that the electronic device 1 needs to obtain the search result of the character B, and further, the obtaining module 200 converts the character The search result of B is determined to be the second data to be transmitted.

The generating module 202 randomly determines any character string and generates a first temporary key.

In at least one embodiment of the present application, after randomly determining any character string and generating the first temporary key, the recording module 206 records the correspondence between the first temporary key and the fingerprint of the device, and further, the storage module 207 saves the corresponding relationship in a pre-configured device list, where the device list is used to store all terminal devices that have communication records with the server 2.

Through the foregoing implementation manners, the corresponding relationship can be recorded in the device list, which facilitates subsequent determination of whether the electronic device 1 and the server 2 have communicated with the device list.

In at least one embodiment of the present application, the determining module 201 determining whether there is a communication record with the electronic device 1 according to the device fingerprint includes:

The determining module 201 matches the device fingerprint with the device list, and when the device fingerprint exists in the device list, it determines that there is a communication record with the electronic device; or when the device fingerprint does not exist in the device list When the device fingerprints, it is determined that there is no communication record with the electronic device.

The encryption module 204 adopts an advanced encryption standard to encrypt the first temporary key and the second data to be transmitted with the first key to obtain a second ciphertext.

The feedback module 205 feeds back the second ciphertext to the electronic device.

In at least one embodiment of the present application, when there is a communication record with the electronic device 1, the acquisition module 200 acquires the first temporary key corresponding to the device fingerprint from the device list, so The generating module 202 randomly extracts at least one character from the device fingerprint and the first temporary key to generate a second key. Further, the encryption module 204 uses advanced encryption standards to use the second key The second data to be transmitted is encrypted to obtain a fourth ciphertext, and the feedback module 205 feeds back the fourth ciphertext to the electronic device 1.

Through the foregoing implementation manner, the stored first temporary key is directly used to generate the second key.

Specifically, when it is detected that any one of the electronic device 1 and the server 2 has lost the first temporary key, and/or the configuration service is started, the saving module 207 regenerates and saves the first temporary key. Temporary key.

In at least one embodiment of the present application, when it is detected that decryption with the second key cannot be performed, the obtaining module 200 obtains the number of decryption failures within a preset time, and when the number of times is greater than or equal to a preset value , The locking module 208 locks the electronic device 1.

As shown in FIG. 6, it is a schematic structural diagram of an electronic device implementing a preferred embodiment of the data transmission method of the present application.

The electronic device 1 is a device that can automatically perform numerical calculation and/or information processing according to pre-set or stored instructions. Its hardware includes, but is not limited to, a microprocessor, an Application Specific Integrated Circuit (ASIC) ), programmable gate array (Field-Programmable Gate Array, FPGA), digital processor (Digital Signal Processor, DSP), embedded equipment, etc.

The electronic device 1 can also be, but is not limited to, any electronic product that can interact with the user through a keyboard, a mouse, a remote control, a touch panel, or a voice control device, for example, a personal computer, a tablet computer, or a smart phone. , Cloud server, personal digital assistant (PDA), game console, interactive network television (Internet Protocol Television, IPTV), smart wearable devices, etc.

The network where the electronic device 1 is located includes, but is not limited to, the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (Virtual Private Network, VPN), etc.

In an embodiment of the present application, the electronic device 1 includes, but is not limited to, a memory 12, a processor 13, and a computer program stored in the memory 12 and running on the processor 13, such as Data transfer program.

Those skilled in the art can understand that the schematic diagram is only an example of the electronic device 1 and does not constitute a limitation on the electronic device 1. It may include more or less components than those shown in the figure, or a combination of certain components, or different components. Components, for example, the electronic device 1 may also include input and output devices, network access devices, buses, and the like.

The processor 13 may be a central processing unit (Central Processing Unit, CPU), other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (ASIC), Ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The processor 13 is the computing core and control center of the electronic device 1 and connects the entire electronic device with various interfaces and lines. Each part of 1, and executes the operating system of the electronic device 1, and various installed applications, program codes, etc.

The processor 13 executes the operating system of the electronic device 1 and various installed applications. The processor 13 executes the application program to implement the steps in the foregoing data transmission method embodiments, such as steps S10, S11, S12, S13, S14, S15, and S16 shown in FIG. 2.

Alternatively, when the processor 13 executes the computer program, the function of each module/unit in the foregoing device embodiments is realized, for example: when a data transmission instruction is received, it determines whether there is a connection with the server according to the data transmission instruction. Communication record; when there is no communication record with the server, obtain the device fingerprint of the electronic device; randomly extract at least one character in the device fingerprint to generate the first key; obtain the first key according to the data transmission instruction A data to be transmitted; using advanced encryption standards to encrypt the first data to be transmitted with the first key to obtain a first ciphertext; sending the first ciphertext to the server; when received When the second ciphertext is fed back by the server, the second ciphertext is decrypted with the first key to obtain the second data to be transmitted.

Exemplarily, the computer program may be divided into one or more modules/units, and the one or more modules/units are stored in the memory 12 and executed by the processor 13 to complete this Application. The one or more modules/units may be a series of computer-readable instruction segments capable of completing specific functions, and the instruction segments are used to describe the execution process of the computer program in the electronic device 1. For example, the computer program may be divided into a determination unit 100, an acquisition unit 101, a generation unit 102, an encryption unit 103, a transmission unit 104, a decryption unit 105, and a storage unit 106.

The memory 12 may be used to store the computer program and/or module, and the processor 13 runs or executes the computer program and/or module stored in the memory 12 and calls the data stored in the memory 12, Various functions of the electronic device 1 are realized. The memory 12 may mainly include a storage program area and a storage data area. The storage program area may store an operating system, an application program required by at least one function (such as a sound playback function, an image playback function, etc.), etc.; the storage data area may Store data (such as audio data, etc.) created based on the use of electronic devices. In addition, the memory 12 may include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a Secure Digital (SD) card, a flash memory card (Flash Card), At least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device.

The memory 12 may be an external memory and/or an internal memory of the electronic device 1. Further, the memory 12 may also be a non-volatile memory in physical form, such as a memory stick, a TF card (Trans-flash Card), and so on.

If the integrated module/unit of the electronic device 1 is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a non-volatile readable storage medium. Based on this understanding, this application implements all or part of the processes in the above-mentioned embodiments and methods, and can also be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile readable storage medium. When the computer program is executed by the processor, it can implement the steps of the foregoing method embodiments.

Wherein, the computer program includes computer readable instruction code, and the computer readable instruction code may be in the form of source code, object code, executable file, or some intermediate form. The non-volatile readable medium may include: any entity or device capable of carrying the computer readable instruction code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory) etc.

As shown in FIG. 7, it is a schematic diagram of the structure of the server in the preferred embodiment of the data transmission method according to the present application.

The server 2 is a device that can automatically perform numerical calculation and/or information processing in accordance with pre-set or stored instructions. Its hardware includes, but is not limited to, a microprocessor and an application specific integrated circuit (ASIC) , Field-Programmable Gate Array (FPGA), Digital Processor (Digital Signal Processor, DSP), embedded equipment, etc.

The server 2 can also be, but is not limited to, any electronic product that can interact with the user through a keyboard, a mouse, a remote control, a touch panel, or a voice control device, for example, a personal computer, a tablet computer, a smart phone, Personal digital assistants (Personal Digital Assistant, PDA), game consoles, interactive network television (Internet Protocol Television, IPTV), smart wearable devices, etc.

The server 2 may also be a computing device such as a desktop computer, a notebook, a palmtop computer, and a cloud server.

The network where the server 2 is located includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (Virtual Private Network, VPN), etc.

In an embodiment of the present application, the server 2 includes, but is not limited to, a storage device 22, a processing device 23, and a computer program stored in the storage device 22 and running on the processing device 23, For example, data transfer programs.

Those skilled in the art can understand that the schematic diagram is only an example of the server 2 and does not constitute a limitation on the server 2. It may include more or fewer components than those shown in the figure, or a combination of certain components, or different components. For example, the server 2 may also include input and output devices, network access devices, buses, and the like.

The processing device 23 may be a central processing unit (Central Processing Unit, CPU), other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (ASIC), Ready-made programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The processing device 23 is the computing core and control center of the server 2 and connects the entire server 2 with various interfaces and lines. Each part, and executes the operating system of the server 2 and various installed applications, program codes, etc.

The processing device 23 executes the operating system of the server 2 and various installed applications. The processing device 23 executes the application program to implement the steps in the foregoing data transmission method embodiments, such as steps S20, S21, S22, S23, S24, S25, S26, and S27 shown in FIG. 3.

Alternatively, when the processing device 23 executes the computer program, the function of each module/unit in the foregoing device embodiments is realized, for example: when the first ciphertext sent by the electronic device is received, the The device fingerprint of the electronic device is obtained from the request header of the text; according to the device fingerprint, it is determined whether there is a communication record with the electronic device; when there is no communication record with the electronic device, the device fingerprint is randomly extracted At least one character to generate the first key; decrypt the first cipher text with the first key to obtain the first data to be transmitted; search according to the first data to be transmitted to obtain the second data to be transmitted Data; randomly determine an arbitrary character string to generate a first temporary key; use advanced encryption standards to encrypt the first temporary key and the second data to be transmitted with the first key to obtain a second secret Text; feedback the second cipher text to the electronic device.

Exemplarily, the computer program may be divided into one or more modules, and the one or more modules are stored in the storage device 22 and executed by the processing device 23 to complete the application. The one or more modules may be a series of computer-readable instruction segments capable of completing specific functions, and the instruction segments are used to describe the execution process of the computer program in the server 2. For example, the computer program can be divided into an acquisition module 200, a determination module 201, a generation module 202, a decryption module 203, an encryption module 204, a feedback module 205, a recording module 206, a saving module 207, and a locking module 208.

The storage device 22 can be used to store the computer program and/or module, and the processing device 23 runs or executes the computer program and/or module stored in the storage device 22 and calls the computer program and/or module stored in the storage device 22 , Realize various functions of the server 2. The storage device 22 may mainly include a storage program area and a storage data area. The storage program area may store an operating system, an application program required by at least one function (such as a sound playback function, an image playback function, etc.), etc.; a storage data area Data (such as audio data, etc.) created according to the use of the server can be stored. In addition, the storage device 22 may include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a Secure Digital (SD) card, and a flash memory card (Flash Card). , At least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device.

The storage device 22 may be an external memory and/or an internal memory of the server 2. Further, the storage device 22 may be a non-volatile memory in physical form, such as a memory stick, a TF card (Trans-flash Card), and so on.

If the integrated modules/units of the server 2 are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile readable storage medium. Based on this understanding, this application implements all or part of the processes in the above-mentioned embodiments and methods, and can also be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile readable storage medium. When the computer program is executed by the processing device, it can implement the steps of the foregoing method embodiments.

Wherein, the computer program includes computer readable instruction code, and the computer readable instruction code may be in the form of source code, object code, executable file, or some intermediate form. The non-volatile readable medium may include: any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM, Read- Only Memory) and so on.

In the several embodiments provided in this application, it should be understood that the disclosed system, device, and method may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation.

In addition, the functional modules in the various embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional modules.

In addition, it is obvious that the word "including" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices stated in the system claims can also be implemented by one unit or device through software or hardware. The second class words are used to indicate names, and do not indicate any specific order.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the application and not to limit them. Although the application has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the application can be Modifications or equivalent replacements are made without departing from the spirit and scope of the technical solution of this application.

Claims

A data transmission method applied to an electronic device that communicates with a server, characterized in that the method includes:

When receiving a data transmission instruction, determine whether there is a communication record with the server according to the data transmission instruction;

When there is no communication record with the server, acquiring the device fingerprint of the electronic device;

Randomly extract at least one character in the device fingerprint to generate a first key;

Acquiring the first data to be transmitted according to the data transmission instruction;

Using an advanced encryption standard to encrypt the first data to be transmitted with the first key to obtain the first ciphertext;

Sending the first ciphertext to the server;

When receiving the second ciphertext fed back by the server, decrypt the second ciphertext with the first key to obtain the second data to be transmitted.
The data transmission method according to claim 1, wherein said randomly extracting at least one character in said device fingerprint to generate a first key comprises:

Performing a remainder operation on the at least one character to obtain a first value;

Performing a logical operation on the first value relative to the configuration value to generate a first character string;

Accumulate the bits of the first character string to obtain the second value;

Performing a remainder operation on the second value to obtain a third value;

Performing a hexadecimal conversion on the third value to generate a second character string;

Splicing the first character string and the second character string to obtain the first key.
The data transmission method according to claim 1, wherein the method further comprises:

After decrypting the second ciphertext with the first key, a first temporary key is obtained;

Encrypting the first temporary key;

Determining the application program corresponding to the data transmission instruction;

The encrypted first temporary key is stored in the storage directory of the application program.
The data transmission method according to claim 3, wherein when there is a communication record with the server, the method further comprises:

Acquiring the device fingerprint;

Randomly extract at least one character from the device fingerprint and the first temporary key to generate a second key;

Acquiring the first data to be transmitted according to the data transmission instruction;

Using an advanced encryption standard to encrypt the first data to be transmitted with the second key to obtain a third ciphertext;

Sending the third ciphertext to the server.
A data transmission method applied to a server that communicates with an electronic device, characterized in that the method includes:

When receiving the first ciphertext sent by the electronic device, obtain the device fingerprint of the electronic device from the request header of the first ciphertext;

According to the fingerprint of the device, determine whether there is a communication record with the electronic device;

When there is no communication record with the electronic device, randomly extract at least one character in the fingerprint of the device to generate a first key;

Decrypt the first ciphertext with the first key to obtain the first data to be transmitted;

Searching according to the first data to be transmitted to obtain the second data to be transmitted;

Randomly determine any character string and generate the first temporary key;

Using an advanced encryption standard to encrypt the first temporary key and the second data to be transmitted with the first key to obtain a second ciphertext;

The second ciphertext is fed back to the electronic device.
The data transmission method according to claim 5, wherein after randomly determining an arbitrary character string and generating the first temporary key, the method further comprises:

Record the correspondence between the first temporary key and the device fingerprint;

Saving the corresponding relationship to a pre-configured device list;

Wherein, the device list is used to store all terminal devices that have communication records with the server.
7. The data transmission method according to claim 6, wherein the determining whether there is a communication record with the electronic device according to the device fingerprint comprises:

Matching the device fingerprint with the device list;

When the device fingerprint exists in the device list, it is determined that there is a communication record with the electronic device; or

When the device fingerprint does not exist in the device list, it is determined that there is no communication record with the electronic device.
The data transmission method according to claim 5, wherein the method further comprises:

When there is a communication record with the electronic device, obtain the first temporary key corresponding to the device fingerprint from the device list;

Randomly extract at least one character from the device fingerprint and the first temporary key to generate a second key;

When it is detected that decryption cannot be performed with the second key, obtain the number of decryption failures within a preset time;

When the number of times is greater than or equal to a preset value, the electronic device is locked.
An electronic device that communicates with a server, wherein the electronic device includes:

The memory stores at least one computer readable instruction; and

The processor executes the at least one computer-readable instruction to implement the following steps:

When receiving a data transmission instruction, determine whether there is a communication record with the server according to the data transmission instruction;

When there is no communication record with the server, acquiring the device fingerprint of the electronic device;

Randomly extract at least one character in the device fingerprint to generate a first key;

Acquiring the first data to be transmitted according to the data transmission instruction;

Using an advanced encryption standard to encrypt the first data to be transmitted with the first key to obtain the first ciphertext;

Sending the first ciphertext to the server;

When receiving the second ciphertext fed back by the server, decrypt the second ciphertext with the first key to obtain the second data to be transmitted.
The electronic device according to claim 9, wherein the processor executes at least one computer-readable instruction to implement the random extraction of at least one character in the device fingerprint to generate the first key, It includes the following steps:

Performing a remainder operation on the at least one character to obtain a first value;

Performing a logical operation on the first value relative to the configuration value to generate a first character string;

Accumulate the bits of the first character string to obtain the second value;

Performing a remainder operation on the second value to obtain a third value;

Performing a hexadecimal conversion on the third value to generate a second character string;

Splicing the first character string and the second character string to obtain the first key.
9. The electronic device of claim 9, wherein the processor executing at least one computer readable instruction is further used to implement the following steps:

After decrypting the second ciphertext with the first key, a first temporary key is obtained;

Encrypting the first temporary key;

Determining the application program corresponding to the data transmission instruction;

The encrypted first temporary key is stored in the storage directory of the application program.
The electronic device of claim 11, wherein when there is a communication record with the server, the processor executing at least one computer-readable instruction is further used to implement the following steps:

Acquiring the device fingerprint;

Randomly extract at least one character from the device fingerprint and the first temporary key to generate a second key;

Acquiring the first data to be transmitted according to the data transmission instruction;

Using an advanced encryption standard to encrypt the first data to be transmitted with the second key to obtain a third ciphertext;

Sending the third ciphertext to the server.
A server that communicates with an electronic device, wherein the server includes:

The memory stores at least one computer readable instruction; and

The processor executes the at least one computer-readable instruction to implement the following steps:

When receiving the first ciphertext sent by the electronic device, obtain the device fingerprint of the electronic device from the request header of the first ciphertext;

According to the fingerprint of the device, determine whether there is a communication record with the electronic device;

When there is no communication record with the electronic device, randomly extract at least one character in the fingerprint of the device to generate a first key;

Decrypt the first ciphertext with the first key to obtain the first data to be transmitted;

Searching according to the first data to be transmitted to obtain the second data to be transmitted;

Randomly determine any character string and generate the first temporary key;

Using an advanced encryption standard to encrypt the first temporary key and the second data to be transmitted with the first key to obtain a second ciphertext;

The second ciphertext is fed back to the electronic device.
The server of claim 13, wherein after randomly determining an arbitrary character string and generating the first temporary key, the processor executes at least one computer-readable instruction to further implement the following steps:

Record the correspondence between the first temporary key and the device fingerprint;

Saving the corresponding relationship to a pre-configured device list;

Wherein, the device list is used to store all terminal devices that have communication records with the server.
The server of claim 14, wherein the processor executes at least one computer-readable instruction to implement the determining whether there is a communication record with the electronic device according to the device fingerprint, comprising:

Matching the device fingerprint with the device list;

When the device fingerprint exists in the device list, it is determined that there is a communication record with the electronic device; or

When the device fingerprint does not exist in the device list, it is determined that there is no communication record with the electronic device.
The server of claim 13, wherein the processor executes at least one computer readable instruction to further implement the following steps:

When there is a communication record with the electronic device, obtain the first temporary key corresponding to the fingerprint of the device from the device list;

Randomly extract at least one character from the device fingerprint and the first temporary key to generate a second key;

When it is detected that decryption cannot be performed with the second key, obtain the number of decryption failures within a preset time;

When the number of times is greater than or equal to a preset value, the electronic device is locked.
A non-volatile readable storage medium, wherein the non-volatile readable storage medium stores at least one computer readable instruction, and the at least one computer readable instruction is used by a processor in an electronic device Perform the following steps:

When receiving a data transmission instruction, determine whether there is a communication record with the server according to the data transmission instruction;

When there is no communication record with the server, acquiring the device fingerprint of the electronic device;

Randomly extract at least one character in the device fingerprint to generate a first key;

Acquiring the first data to be transmitted according to the data transmission instruction;

Using an advanced encryption standard to encrypt the first data to be transmitted with the first key to obtain the first ciphertext;

Sending the first ciphertext to the server;

When receiving the second ciphertext fed back by the server, decrypt the second ciphertext with the first key to obtain the second data to be transmitted.
The storage medium of claim 17, wherein the at least one computer-readable instruction is executed by a processor to implement the random extraction of at least one character in the device fingerprint to generate the first key , Including the following steps:

Performing a remainder operation on the at least one character to obtain a first value;

Performing a logical operation on the first value relative to the configuration value to generate a first character string;

Accumulate the bits of the first character string to obtain the second value;

Performing a remainder operation on the second value to obtain a third value;

Performing a hexadecimal conversion on the third value to generate a second character string;

Splicing the first character string and the second character string to obtain the first key.
18. The storage medium of claim 17, wherein the at least one computer readable instruction is executed by the processor to further implement the following steps:

After decrypting the second ciphertext with the first key, a first temporary key is obtained;

Encrypting the first temporary key;

Determining the application program corresponding to the data transmission instruction;

The encrypted first temporary key is stored in the storage directory of the application program.
The storage medium of claim 19, wherein when there is a communication record with the server, the at least one computer readable instruction is executed by the processor to further implement the following steps:

Acquiring the device fingerprint;

Randomly extract at least one character from the device fingerprint and the first temporary key to generate a second key;

Acquiring the first data to be transmitted according to the data transmission instruction;

Using an advanced encryption standard to encrypt the first data to be transmitted with the second key to obtain a third ciphertext;

Sending the third ciphertext to the server.