[go: up one dir, main page]

CN117240617A - Public cloud storage access methods, devices, equipment and storage media - Google Patents

Public cloud storage access methods, devices, equipment and storage media Download PDF

Info

Publication number
CN117240617A
CN117240617A CN202311504549.XA CN202311504549A CN117240617A CN 117240617 A CN117240617 A CN 117240617A CN 202311504549 A CN202311504549 A CN 202311504549A CN 117240617 A CN117240617 A CN 117240617A
Authority
CN
China
Prior art keywords
file
storage
public cloud
data
random key
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202311504549.XA
Other languages
Chinese (zh)
Other versions
CN117240617B (en
Inventor
陈海锋
李朝霞
杨一帆
王茜
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Unicom Digital Technology Co Ltd
Unicom Cloud Data Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Unicom Digital Technology Co Ltd
Unicom Cloud Data Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd, Unicom Digital Technology Co Ltd, Unicom Cloud Data Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN202311504549.XA priority Critical patent/CN117240617B/en
Publication of CN117240617A publication Critical patent/CN117240617A/en
Application granted granted Critical
Publication of CN117240617B publication Critical patent/CN117240617B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Storage Device Security (AREA)

Abstract

The application provides a public cloud storage access method, a public cloud storage access device, public cloud storage access equipment and a public cloud storage medium, wherein a household cloud storage box generates a random key after receiving a storage file sent by a user terminal; according to a preset encryption algorithm, encrypting the storage file through a random key to obtain an encrypted file; uploading the encrypted file to public cloud; receiving receipt data sent by the public cloud, wherein the receipt data is generated by the public cloud after receiving the encrypted file, and the receipt data comprises a storage address of the encrypted file; generating a mapping relation of receipt data, a random key and a public cloud access password, and generating and storing file storage data, wherein the file storage data comprises a file name, the receipt data, the random key and the public cloud access password.

Description

公有云存储访问方法、装置、设备及存储介质Public cloud storage access methods, devices, equipment and storage media

技术领域Technical field

本申请涉及云服务器技术领域,尤其涉及一种公有云存储访问方法、装置、设备及存储介质。This application relates to the technical field of cloud servers, and in particular to a public cloud storage access method, device, equipment and storage medium.

背景技术Background technique

公有云通常指第三方提供商为用户提供的能够使用的云,公有云一般可通过互联网使用,可能是免费或成本低廉的,公有云的核心属性是共享资源服务。这种云有许多实例,可在当今整个开放的公有网络中提供服务。Public cloud usually refers to a cloud that third-party providers provide for users to use. Public cloud is generally available through the Internet and may be free or low-cost. The core attribute of public cloud is shared resource services. There are many instances of this cloud that provide services across today's open public networks.

当用户数据式文件存储到公有云的时候,由于公有云不在用户控制范围内,很容易造成数据泄密,需要用密钥加密后再存储,因此密钥的安全和存放地点将成为关键。一般公有云的密钥由用户和公有云运营者都有一份,需要共享。When user data files are stored in the public cloud, since the public cloud is not within the control of the user, it is easy to cause data leakage and need to be encrypted with a key before storage. Therefore, the security and storage location of the key will become key. Generally, the public cloud key is shared by both the user and the public cloud operator and needs to be shared.

然而,现有技术无法保证公有云存储访问的安全性。However, existing technologies cannot guarantee the security of public cloud storage access.

发明内容Contents of the invention

本申请提供一种公有云存储访问方法、装置、设备及存储介质,以解决现有技术无法保证公有云存储访问的安全性的技术问题。This application provides a public cloud storage access method, device, equipment and storage medium to solve the technical problem that the existing technology cannot guarantee the security of public cloud storage access.

第一方面,本申请提供公有云存储访问方法,应用于家庭云存储盒子,所述方法包括:In the first aspect, this application provides a public cloud storage access method, which is applied to home cloud storage boxes. The method includes:

在接收到用户终端发送的存储文件后,生成随机密钥;After receiving the storage file sent by the user terminal, generate a random key;

根据预设加密算法,通过所述随机密钥对所述存储文件进行加密处理,得到加密文件;According to the preset encryption algorithm, the stored file is encrypted using the random key to obtain an encrypted file;

将所述加密文件上传至公有云;Upload the encrypted file to the public cloud;

接收所述公有云发送的收据数据,其中,所述收据数据为所述公有云在接收到所述加密文件后生成的,所述收据数据中包括所述加密文件的存储地址;Receive receipt data sent by the public cloud, wherein the receipt data is generated by the public cloud after receiving the encrypted file, and the receipt data includes the storage address of the encrypted file;

生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据,其中,所述文件存储数据包括文件名、收据数据、所述随机密钥和所述公有云的访问密码。Generate a mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save file storage data, where the file storage data includes a file name, receipt data, the random key and The access password for the public cloud.

本申请实施例提供了一种通过家庭云存储盒子访问公有云存储的方法,云存储盒子负责将用户需要存储的数据或文件在本地首先采用随机密钥进行加密,将加密后的数据上传到公有云,该随机密钥既不与公有云共享,也无需共享给公户,由于除了家庭云存储盒子外,其他的任何人都没有加密的密钥,所以可以保证在公有云上的数据足够安全,提高了公有云存储访问的安全性。The embodiment of this application provides a method for accessing public cloud storage through a home cloud storage box. The cloud storage box is responsible for encrypting the data or files that the user needs to store locally using a random key first, and then uploading the encrypted data to the public cloud storage box. Cloud, the random key does not need to be shared with the public cloud, nor does it need to be shared with public users. Since no one except the home cloud storage box has an encrypted key, the data on the public cloud can be guaranteed to be secure enough. , improving the security of public cloud storage access.

可选地,在所述生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据之后,还包括:Optionally, after generating the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generating and saving the file storage data, the method further includes:

根据所述文件存储数据生成存储文件图标;在预设显示界面上显示所述存储文件图标。Generate a storage file icon according to the file storage data; display the storage file icon on a preset display interface.

这里,本申请实施例中的家庭云存储盒子能够在预设显示界面上显示存储文件图标,用户可通过存储文件图标获取存储文件,实现了公有云访问的可视化,用户访问方便快捷,进一步地提高了公有云访问的用户体验。Here, the home cloud storage box in the embodiment of the present application can display the storage file icon on the preset display interface, and the user can obtain the storage file through the storage file icon, realizing the visualization of public cloud access, making the user's access convenient and fast, and further improving the Improve the user experience of public cloud access.

可选地,在所述在预设显示界面上显示所述存储文件图标之后,还包括:Optionally, after displaying the stored file icon on the preset display interface, the method further includes:

响应于用户在所述预设显示界面上对所述存储文件图标的点击操作,获取所述存储文件图标对应的文件存储数据;根据所述文件存储数据,在所述公有云获取所述加密文件;根据所述随机密钥对所述加密文件进行解密,得到所述存储文件;将所述存储文件发送至用户终端。In response to the user's click operation on the stored file icon on the preset display interface, obtain the file storage data corresponding to the stored file icon; according to the file storage data, obtain the encrypted file in the public cloud ;Decrypt the encrypted file according to the random key to obtain the stored file; send the stored file to the user terminal.

其中,本申请实施例能够在用户点击存储文件图标之后,自动为用户获取存储文件并发送至用户终端,提高了公有云访问存储的便捷性,提高了用户体验。Among them, the embodiment of the present application can automatically obtain the stored file for the user after the user clicks the stored file icon and send it to the user terminal, which improves the convenience of public cloud storage access and improves the user experience.

可选地,在所述在预设显示界面上显示所述存储文件图标之后,还包括:Optionally, after displaying the stored file icon on the preset display interface, the method further includes:

响应于用户在所述预设显示界面上对所述存储文件图标的点击操作,获取所述存储文件图标对应的文件存储数据;将所述文件存储数据发送至用户终端,以使所述用户终端根据所述文件存储数据在所述公有云获取所述加密文件并解密处理得到所述存储文件。In response to the user's click operation on the stored file icon on the preset display interface, obtain the file storage data corresponding to the stored file icon; send the file storage data to the user terminal, so that the user terminal Obtain the encrypted file in the public cloud according to the file storage data and decrypt it to obtain the storage file.

其中,本申请实施例还可以在用户点击存储文件图标之后,将文件存储数据发送至用户终端,供用户自行访问公有云获取存储文件,进一步地提高了公有云存储访问的安全性。Among them, the embodiment of the present application can also send the file storage data to the user terminal after the user clicks the storage file icon, so that the user can access the public cloud to obtain the stored files, further improving the security of public cloud storage access.

可选地,在所述根据预设加密算法,通过所述随机密钥对所述存储文件进行加密处理,得到加密文件之前,还包括:Optionally, before encrypting the stored file using the random key according to the preset encryption algorithm to obtain the encrypted file, the method further includes:

对所述存储文件进行压缩处理,得到压缩文件;Perform compression processing on the stored file to obtain a compressed file;

相应地,所述根据预设加密算法,通过所述随机密钥对所述存储文件进行加密处理,得到加密文件,包括:根据预设加密算法,通过所述随机密钥对所述压缩文件进行加密处理,得到压缩文件。Correspondingly, encrypting the stored file with the random key according to the preset encryption algorithm to obtain the encrypted file includes: performing encryption on the compressed file with the random key according to the preset encryption algorithm. Encryption processing to obtain compressed files.

这里,本申请实施例先将存储文件压缩再加密,能够节约空间,节省资源,提高了公有云的资源利用率。Here, the embodiment of the present application first compresses the storage file and then encrypts it, which can save space, save resources, and improve the resource utilization of the public cloud.

可选地,在所述生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据之后,还包括:Optionally, after generating the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generating and saving the file storage data, the method further includes:

删除存储文件。Delete storage files.

这里,为了进一步地保证存储文件、公有云存储的安全性,本申请实施例的家庭云存储盒子在确定上传加密文件之后删除存储文件,同时也释放了家庭云存储盒子的空间资源,提高了资源利用率。Here, in order to further ensure the security of stored files and public cloud storage, the home cloud storage box in the embodiment of the present application deletes the stored files after determining to upload the encrypted files. At the same time, it also releases the space resources of the home cloud storage box and improves resources. Utilization.

可选地,在所述生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据之后,还包括:Optionally, after generating the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generating and saving the file storage data, the method further includes:

显示选择界面,其中,所述选择界面上包括删除存储文件按钮和不删除存储文件按钮;响应于用户在所述选择界面上的选择操作,确定是否删除所述存储文件。Display a selection interface, wherein the selection interface includes a button to delete the stored file and a button to not delete the stored file; in response to the user's selection operation on the selection interface, determine whether to delete the stored file.

这里,本申请实施例为用户提供选择界面,供用户选择是否在家庭云存储盒子删除存储文件,进一步地提高了公有云存储访问的灵活性。Here, the embodiment of the present application provides a selection interface for the user to choose whether to delete the stored files in the home cloud storage box, further improving the flexibility of public cloud storage access.

第二方面,本申请提供了一种公有云存储访问装置,应用于家庭云存储盒子,所述装置包括:In the second aspect, this application provides a public cloud storage access device, which is applied to a home cloud storage box. The device includes:

密钥生成模块,用于在接收到用户终端发送的存储文件后,生成随机密钥;The key generation module is used to generate a random key after receiving the storage file sent by the user terminal;

加密模块,用于根据预设加密算法,通过所述随机密钥对所述存储文件进行加密处理,得到加密文件;An encryption module, configured to encrypt the stored file using the random key according to a preset encryption algorithm to obtain an encrypted file;

上传模块,用于将所述加密文件上传至公有云;An upload module, used to upload the encrypted file to the public cloud;

接收模块,用于接收所述公有云发送的收据数据,其中,所述收据数据为所述公有云在接收到所述加密文件后生成的,所述收据数据中包括所述加密文件的存储地址;A receiving module, configured to receive receipt data sent by the public cloud, where the receipt data is generated by the public cloud after receiving the encrypted file, and the receipt data includes the storage address of the encrypted file. ;

处理模块,用于生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据,其中,所述文件存储数据包括文件名、收据数据、所述随机密钥和所述公有云的访问密码。A processing module, configured to generate a mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save file storage data, where the file storage data includes file name, receipt data, all the random key and the access password to the public cloud.

可选地,在所述处理模块用于生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据之后,上述装置还包括显示模块,用于:Optionally, after the processing module is used to generate the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save the file storage data, the above device also includes a display module, with At:

根据所述文件存储数据生成存储文件图标;Generate a storage file icon according to the file storage data;

在预设显示界面上显示所述存储文件图标。Display the stored file icon on the preset display interface.

可选地,在所述显示模块用于在预设显示界面上显示所述存储文件图标之后,上述装置还包括第一下载模块,用于:Optionally, after the display module is used to display the stored file icon on the preset display interface, the above device further includes a first download module for:

响应于用户在所述预设显示界面上对所述存储文件图标的点击操作,获取所述存储文件图标对应的文件存储数据;In response to the user's click operation on the stored file icon on the preset display interface, obtain the file storage data corresponding to the stored file icon;

根据所述文件存储数据,在所述公有云获取所述加密文件;Obtain the encrypted file from the public cloud according to the file storage data;

根据所述随机密钥对所述加密文件进行解密,得到所述存储文件;Decrypt the encrypted file according to the random key to obtain the stored file;

将所述存储文件发送至用户终端。Send the stored file to the user terminal.

可选地,在所述显示模块用于在预设显示界面上显示所述存储文件图标之后,上述装置还包括第二下载模块,用于:Optionally, after the display module is used to display the stored file icon on the preset display interface, the above device further includes a second download module for:

响应于用户在所述预设显示界面上对所述存储文件图标的点击操作,获取所述存储文件图标对应的文件存储数据;In response to the user's click operation on the stored file icon on the preset display interface, obtain the file storage data corresponding to the stored file icon;

将所述文件存储数据发送至用户终端,以使所述用户终端根据所述文件存储数据在所述公有云获取所述加密文件并解密处理得到所述存储文件。The file storage data is sent to the user terminal, so that the user terminal obtains the encrypted file in the public cloud according to the file storage data and decrypts it to obtain the storage file.

可选地,在所述加密模块用于根据预设加密算法,通过所述随机密钥对所述存储文件进行加密处理,得到加密文件之前,上述装置还包括压缩模块,用于:对所述存储文件进行压缩处理,得到压缩文件;Optionally, before the encryption module is used to encrypt the storage file using the random key according to the preset encryption algorithm to obtain the encrypted file, the above device further includes a compression module for: The stored file is compressed to obtain a compressed file;

相应地,所述加密模块具体用于:Correspondingly, the encryption module is specifically used for:

根据预设加密算法,通过所述随机密钥对所述压缩文件进行加密处理,得到压缩文件。According to the preset encryption algorithm, the compressed file is encrypted using the random key to obtain the compressed file.

可选地,在所述处理模块用于生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据之后,上述装置还包括删除模块,用于:Optionally, after the processing module is used to generate the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save the file storage data, the above device further includes a deletion module, with At:

删除存储文件。Delete storage files.

可选地,在所述处理模块用于生成所述收据数据、所述随机密钥和所述公有云的访问密码的映射关系,生成并保存文件存储数据之后,上述装置还包括删除选择模块,用于:Optionally, after the processing module is used to generate the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save the file storage data, the above device further includes a deletion selection module, Used for:

显示选择界面,其中,所述选择界面上包括删除存储文件按钮和不删除存储文件按钮;Display a selection interface, wherein the selection interface includes a button to delete stored files and a button to not delete stored files;

响应于用户在所述选择界面上的选择操作,确定是否删除所述存储文件。In response to the user's selection operation on the selection interface, it is determined whether to delete the storage file.

第三方面,本申请提供一种公有云存储访问设备,包括:至少一个处理器和存储器;In a third aspect, this application provides a public cloud storage access device, including: at least one processor and memory;

所述存储器存储计算机执行指令;The memory stores computer execution instructions;

所述至少一个处理器执行所述存储器存储的计算机执行指令,使得所述至少一个处理器执行如上第一方面以及第一方面各种可能的设计所述的公有云存储访问方法。The at least one processor executes the computer execution instructions stored in the memory, so that the at least one processor executes the public cloud storage access method described in the above first aspect and various possible designs of the first aspect.

第四方面,本申请提供一种计算机可读存储介质,所述计算机可读存储介质中存储有计算机执行指令,当处理器执行所述计算机执行指令时,实现如上第一方面以及第一方面各种可能的设计所述的公有云存储访问方法。In a fourth aspect, the present application provides a computer-readable storage medium. Computer-executable instructions are stored in the computer-readable storage medium. When the processor executes the computer-executable instructions, the above first aspect and each aspect of the first aspect are implemented. A possible design for the public cloud storage access method described.

第五方面,本申请提供一种计算机程序产品,包括计算机程序,所述计算机程序被处理器执行时,实现如上第一方面以及第一方面各种可能的设计所述的公有云存储访问方法。In a fifth aspect, this application provides a computer program product, including a computer program that, when executed by a processor, implements the public cloud storage access method described in the first aspect and various possible designs of the first aspect.

本申请提供的公有云存储访问方法、装置、设备及存储介质,其中该方法通过家庭云存储盒子访问公有云存储,云存储盒子负责将用户需要存储的数据或文件在本地首先采用随机密钥进行加密,将加密后的数据上传到公有云,该随机密钥既不与公有云共享,也无需共享给公户,由于除了家庭云存储盒子外,其他的任何人都没有加密的密钥,所以可以保证在公有云上的数据足够安全,提高了公有云存储访问的安全性。This application provides public cloud storage access methods, devices, equipment and storage media. The method accesses public cloud storage through a home cloud storage box. The cloud storage box is responsible for storing the data or files that the user needs to store locally using a random key. Encrypt and upload the encrypted data to the public cloud. The random key is neither shared with the public cloud nor shared with public households. Since no one else has the encryption key except the home cloud storage box, It can ensure that the data on the public cloud is sufficiently secure and improve the security of public cloud storage access.

附图说明Description of drawings

为了更清楚地说明本申请实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本申请的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动性的前提下,还可以根据这些附图获得其他的附图。In order to explain the embodiments of the present application or the technical solutions in the prior art more clearly, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings in the following description are only These are some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without exerting any creative effort.

图1为本申请实施例提供的一种公有云存储访问方法系统架构示意图;Figure 1 is a schematic diagram of the system architecture of a public cloud storage access method provided by an embodiment of the present application;

图2为本申请实施例提供的一种公有云存储访问方法的流程示意图;Figure 2 is a schematic flow chart of a public cloud storage access method provided by an embodiment of the present application;

图3为本申请实施例提供的一种公有云存储访问装置的结构示意图;Figure 3 is a schematic structural diagram of a public cloud storage access device provided by an embodiment of the present application;

图4为本申请实施例提供的一种公有云存储访问设备的结构示意图。Figure 4 is a schematic structural diagram of a public cloud storage access device provided by an embodiment of the present application.

通过上述附图,已示出本公开明确的实施例,后文中将有更详细的描述。这些附图和文字描述并不是为了通过任何方式限制本公开构思的范围,而是通过参考特定实施例为本领域技术人员说明本公开的概念。Specific embodiments of the present disclosure have been shown through the above-mentioned drawings and will be described in more detail below. These drawings and written description are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the concepts of the present disclosure to those skilled in the art with reference to the specific embodiments.

具体实施方式Detailed ways

这里将详细地对示例性实施例进行说明,其示例表示在附图中。下面的描述涉及附图时,除非另有表示,不同附图中的相同数字表示相同或相似的要素。以下示例性实施例中所描述的实施方式并不代表与本公开相一致的所有实施方式。相反,它们仅是与如所附权利要求书中所详述的、本公开的一些方面相一致的装置和方法的例子。Exemplary embodiments will be described in detail herein, examples of which are illustrated in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with aspects of the disclosure as detailed in the appended claims.

本申请的说明书和权利要求书及上述附图中的术语“第一”、“第二”、“第三”及“第四”等(如果存在)是用于区别类似的对象,而不必用于描述特定的顺序或先后次序。应该理解这样使用的数据在适当情况下可以互换,以便这里描述的本申请的实施例能够以除了在这里图示或描述的那些以外的顺序实施。此外,术语“包括”和“具有”以及他们的任何变形,意图在于覆盖不排他的包含,例如,包含了一系列步骤或单元的过程、方法、系统、产品或设备不必限于清楚地列出的那些步骤或单元,而是可包括没有清楚地列出的或对于这些过程、方法、产品或设备固有的其它步骤或单元。The terms "first", "second", "third" and "fourth" (if present) in the description and claims of this application and the above-mentioned drawings are used to distinguish similar objects without necessarily using Used to describe a specific order or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances so that the embodiments of the application described herein can be practiced in sequences other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, e.g., a process, method, system, product, or apparatus that encompasses a series of steps or units and need not be limited to those explicitly listed. Those steps or elements may instead include other steps or elements not expressly listed or inherent to the process, method, product or apparatus.

需要说明的是,本申请所涉及的用户信息(包括但不限于用户设备信息、用户个人信息等)和数据(包括但不限于用于分析的数据、存储的数据、展示的数据等),均为经用户授权或者经过各方充分授权的信息和数据,并且相关数据的收集、使用和处理需要遵守相关法律法规和标准,并提供有相应的操作入口,供用户选择授权或者拒绝。It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all It is information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards, and a corresponding operation entrance is provided for the user to choose to authorize or refuse.

当用户数据式文件存储到公有云的时候,由于公有云不在用户控制范围内,很容易造成数据泄密,如果用密钥加密后再存储,则密钥的安全和存放地点将成为关键。一般公有云的密钥由用户和公有云运营者都有一份,需要共享。所以安全问题并不能得到保障。现有技术无法保证公有云存储访问的安全性。When user data files are stored in the public cloud, since the public cloud is not within the control of the user, it is easy to cause data leakage. If it is encrypted with a key and then stored, the security and storage location of the key will become critical. Generally, the public cloud key is shared by both the user and the public cloud operator and needs to be shared. Therefore, safety issues cannot be guaranteed. Existing technologies cannot guarantee the security of public cloud storage access.

为了解决上述技术问题,本申请实施例提供一种公有云存储访问方法、装置、设备及存储介质,该方法通过家庭云存储盒子访问公有云存储,云存储盒子负责将用户需要存储的数据或文件在本地首先采用随机密钥进行加密,将加密后的数据上传到公有云,该随机密钥既不与公有云共享,也无需共享给公户,由于除了家庭云存储盒子外,其他的任何人都没有加密的密钥。In order to solve the above technical problems, embodiments of the present application provide a public cloud storage access method, device, equipment and storage medium. This method accesses public cloud storage through a home cloud storage box. The cloud storage box is responsible for storing the data or files that the user needs to store. First, a random key is used for encryption locally, and the encrypted data is uploaded to the public cloud. The random key is neither shared with the public cloud nor needs to be shared with public households, because except for the home cloud storage box, anyone else There is no encryption key.

可选的,图1为本申请实施例提供的一种公有云存储访问系统架构示意图。其中,本申请实施例中的公有云存储访问系统为家庭云存储盒子的处理系统或者家庭云存储盒子。在图1中,上述架构包括数据采集设备101、处理设备102和显示设备103中至少一种。Optionally, Figure 1 is a schematic diagram of a public cloud storage access system architecture provided by an embodiment of the present application. Among them, the public cloud storage access system in the embodiment of the present application is a processing system of a home cloud storage box or a home cloud storage box. In FIG. 1 , the above-mentioned architecture includes at least one of a data acquisition device 101 , a processing device 102 and a display device 103 .

可以理解的是,本申请实施例示意的结构并不构成对公有云存储访问系统架构的具体限定。在本申请另一些可行的实施方式中,上述架构可以包括比图示更多或更少的部件,或者组合某些部件,或者拆分某些部件,或者不同的部件布置,具体可根据实际应用场景确定,在此不做限制。图1所示的部件可以以硬件,软件,或软件与硬件的组合实现。It can be understood that the structure illustrated in the embodiment of this application does not constitute a specific limitation on the architecture of the public cloud storage access system. In other possible implementations of the present application, the above architecture may include more or fewer components than shown in the figures, or combine certain components, or split certain components, or arrange different components, which may be determined according to actual applications. The scene is determined and there are no restrictions here. The components shown in Figure 1 may be implemented in hardware, software, or a combination of software and hardware.

在具体实现过程中,数据采集设备101可以包括输入/输出接口,也可以包括通信接口,数据采集设备101可以通过输入/输出接口或者是通信接口与处理设备连接。In a specific implementation process, the data collection device 101 may include an input/output interface or a communication interface, and the data collection device 101 may be connected to the processing device through the input/output interface or the communication interface.

处理设备102可以将用户需要存储的数据或文件在本地首先采用随机密钥进行加密,将加密后的数据上传到公有云,该随机密钥既不与公有云共享,也无需共享给公户,由于除了家庭云存储盒子外,其他的任何人都没有加密的密钥。The processing device 102 can first encrypt the data or files that the user needs to store locally using a random key, and upload the encrypted data to the public cloud. The random key does not need to be shared with the public cloud, nor does it need to be shared with public accounts. Since no one except the home cloud storage box has the encryption key.

显示设备103还可以是触摸显示屏或者终端设备的屏幕,用于在显示的上述内容的同时接收用户指令,以实现与用户的交互。The display device 103 may also be a touch display screen or a screen of a terminal device, used to receive user instructions while displaying the above content, so as to realize interaction with the user.

应理解,上述处理设备可以通过处理器读取存储器中的指令并执行指令的方式实现,也可以通过芯片电路实现。It should be understood that the above processing device can be implemented by a processor reading instructions in a memory and executing the instructions, or it can also be implemented by a chip circuit.

另外,本申请实施例描述的网络架构以及业务场景是为了更加清楚的说明本申请实施例的技术方案,并不构成对于本申请实施例提供的技术方案的限定,本领域普通技术人员可知,随着网络架构的演变和新业务场景的出现,本申请实施例提供的技术方案对于类似的技术问题,同样适用。In addition, the network architecture and business scenarios described in the embodiments of this application are for the purpose of explaining the technical solutions of the embodiments of this application more clearly, and do not constitute a limitation on the technical solutions provided by the embodiments of this application. Those of ordinary skill in the art will know that, With the evolution of network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.

下面以具体地实施例对本申请的技术方案以及本申请的技术方案如何解决上述技术问题进行详细说明。下面这几个具体的实施例可以相互结合,对于相同或相似的概念或过程可能在某些实施例中不再赘述。下面将结合附图,对本申请的实施例进行描述。The technical solution of the present application and how the technical solution of the present application solves the above technical problems will be described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of the present application will be described below with reference to the accompanying drawings.

图2为本申请实施例提供的一种公有云存储访问方法的流程示意图,本申请实施例可以应用于图1中的处理设备102,具体执行主体可以根据实际应用场景确定。如图2所示,该方法包括如下步骤:Figure 2 is a schematic flow chart of a public cloud storage access method provided by an embodiment of the present application. The embodiment of the present application can be applied to the processing device 102 in Figure 1, and the specific execution subject can be determined according to the actual application scenario. As shown in Figure 2, the method includes the following steps:

S201:在接收到用户终端发送的存储文件后,生成随机密钥。S201: After receiving the storage file sent by the user terminal, generate a random key.

可选地,用户可以通过点击家庭云存储盒子显示屏幕上的指定区域,触发上传操作。Optionally, users can trigger the upload operation by clicking on a designated area on the home cloud storage box display screen.

可选地,用户可以通过扫描粘贴在家庭云存储盒子上的二维码、通过近场通信(Near Field Communication,NFC)触碰等方式实现存储文件的向家庭云存储盒子的上传。Optionally, users can upload stored files to the home cloud storage box by scanning the QR code pasted on the home cloud storage box, touching via Near Field Communication (NFC), and other methods.

可选地,家庭云存储盒子部署在家庭内网内,只有家庭内网的用户可以访问存储盒子,北向接入公有云(由用户输入公有云的密钥),南向可接受家庭终端的访问。用户终端可以通过内网传输存储文件至家庭云存储盒子。Optionally, the home cloud storage box is deployed in the home intranet. Only users on the home intranet can access the storage box. The northbound access is to the public cloud (the user enters the public cloud key), and the southbound access is accessible from home terminals. . The user terminal can transfer storage files to the home cloud storage box through the intranet.

S202:根据预设加密算法,通过随机密钥对存储文件进行加密处理,得到加密文件。S202: According to the preset encryption algorithm, the stored file is encrypted with a random key to obtain the encrypted file.

其中,预设加密算法可以根据实际情况确定,本申请实施例对此不作具体限制。The preset encryption algorithm can be determined according to actual conditions, and the embodiments of this application do not specifically limit this.

可选地,在根据预设加密算法,通过随机密钥对存储文件进行加密处理,得到加密文件之前,还包括:Optionally, before encrypting the stored file with a random key according to the preset encryption algorithm to obtain the encrypted file, it also includes:

对存储文件进行压缩处理,得到压缩文件;Compress the stored files to obtain compressed files;

相应地,根据预设加密算法,通过随机密钥对存储文件进行加密处理,得到加密文件,包括:根据预设加密算法,通过随机密钥对压缩文件进行加密处理,得到压缩文件。Correspondingly, encrypting the stored file with a random key according to the preset encryption algorithm to obtain the encrypted file includes: encrypting the compressed file with a random key according to the preset encryption algorithm to obtain the compressed file.

这里,本申请实施例先将存储文件压缩再加密,能够节约空间,节省资源,提高了公有云的资源利用率。Here, the embodiment of the present application first compresses the storage file and then encrypts it, which can save space, save resources, and improve the resource utilization of the public cloud.

在一种可能的实现方式中,家庭云存储盒子收到文件后,生成随机密钥key,并对文件按照预先约定的算法进行加密得到加密文件Ekey(M)=M’。In one possible implementation, after receiving the file, the home cloud storage box generates a random key, and encrypts the file according to a pre-agreed algorithm to obtain the encrypted file Ekey (M) = M’.

可选地,为了节省空间,也可以将文件先压缩后再进行加密。Optionally, in order to save space, you can also compress the file first and then encrypt it.

S203:将加密文件上传至公有云。S203: Upload the encrypted file to the public cloud.

在一种可能的实现方式中,家庭云存储盒子将加密后的文件M’上传到公有云中,对于上传后的文件公有云给家庭与存储盒子返回一个收据数据RM,其中,RM中含有存储地址address。In one possible implementation, the home cloud storage box uploads the encrypted file M' to the public cloud. For the uploaded file, the public cloud returns a receipt data RM to the home and storage box, where RM contains storage address address.

S204:接收公有云发送的收据数据。S204: Receive receipt data sent by the public cloud.

其中,收据数据为公有云在接收到加密文件后生成的,收据数据中包括加密文件的存储地址。Among them, the receipt data is generated by the public cloud after receiving the encrypted file, and the receipt data includes the storage address of the encrypted file.

S205:生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据。S205: Generate a mapping relationship between receipt data, random keys and public cloud access passwords, and generate and save file storage data.

其中,文件存储数据包括文件名、收据数据、随机密钥和公有云的访问密码。Among them, the file storage data includes file names, receipt data, random keys and public cloud access passwords.

可选地,家庭云存储盒子与密钥key做一个映射,并可选地删除原文件,保留文件名M(RM,Ak,key),其中,Ak为公有云的接入密码。Optionally, map the home cloud storage box to the key, and optionally delete the original file, retaining the file name M (RM, Ak, key), where Ak is the access password to the public cloud.

可选地,用户需获取文件的时候,从家庭云存储盒子中点击对应文件的图标下载,家庭云存储盒子自动找到RM提取地址,下载加密文件,并用key解密获得M即可,用户也可以直接从RM中提取地址,输入访问密钥Ak,然后下载M’,并通过key解密获得M。Optionally, when the user needs to obtain a file, click the icon of the corresponding file from the home cloud storage box to download. The home cloud storage box will automatically find the RM extraction address, download the encrypted file, and use the key to decrypt it to obtain M. The user can also directly Extract the address from RM, enter the access key Ak, then download M' and obtain M through key decryption.

本申请实施例提供了一种通过家庭云存储盒子访问公有云存储的方法,云存储盒子负责将用户需要存储的数据或文件在本地首先采用随机密钥进行加密,将加密后的数据上传到公有云,该随机密钥既不与公有云共享,也无需共享给公户,由于除了家庭云存储盒子外,其他的任何人都没有加密的密钥,所以可以保证在公有云上的数据足够安全,提高了公有云存储访问的安全性。The embodiment of this application provides a method for accessing public cloud storage through a home cloud storage box. The cloud storage box is responsible for encrypting the data or files that the user needs to store locally using a random key first, and then uploading the encrypted data to the public cloud storage box. Cloud, the random key does not need to be shared with the public cloud, nor does it need to be shared with public users. Since no one except the home cloud storage box has an encrypted key, the data on the public cloud can be guaranteed to be secure enough. , improving the security of public cloud storage access.

可选地,在生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据之后,还包括:Optionally, after generating the mapping relationship between receipt data, random keys, and public cloud access passwords, and generating and saving the file storage data, it also includes:

根据文件存储数据生成存储文件图标;在预设显示界面上显示存储文件图标。Generate a storage file icon based on the file storage data; display the storage file icon on the preset display interface.

其中,存储文件图标、预设显示界面的具体展现形式及内容本申请实施例不作具体限制。Among them, the specific presentation form and content of the storage file icon and the default display interface are not specifically limited in this embodiment of the application.

这里,本申请实施例中的家庭云存储盒子能够在预设显示界面上显示存储文件图标,用户可通过存储文件图标获取存储文件,实现了公有云访问的可视化,用户访问方便快捷,进一步地提高了公有云访问的用户体验。Here, the home cloud storage box in the embodiment of the present application can display the storage file icon on the preset display interface, and the user can obtain the storage file through the storage file icon, realizing the visualization of public cloud access, making the user's access convenient and fast, and further improving the Improve the user experience of public cloud access.

可选地,在在预设显示界面上显示存储文件图标之后,还包括:Optionally, after displaying the storage file icon on the preset display interface, it also includes:

响应于用户在预设显示界面上对存储文件图标的点击操作,获取存储文件图标对应的文件存储数据;根据文件存储数据,在公有云获取加密文件;根据随机密钥对加密文件进行解密,得到存储文件;将存储文件发送至用户终端。In response to the user's click operation on the stored file icon on the preset display interface, the file storage data corresponding to the stored file icon is obtained; according to the file storage data, the encrypted file is obtained in the public cloud; the encrypted file is decrypted according to the random key to obtain Store files; send stored files to user terminals.

其中,本申请实施例能够在用户点击存储文件图标之后,自动为用户获取存储文件并发送至用户终端,提高了公有云访问存储的便捷性,提高了用户体验。Among them, the embodiment of the present application can automatically obtain the stored file for the user after the user clicks the stored file icon and send it to the user terminal, which improves the convenience of public cloud storage access and improves the user experience.

可选地,在在预设显示界面上显示存储文件图标之后,还包括:Optionally, after displaying the storage file icon on the preset display interface, it also includes:

响应于用户在预设显示界面上对存储文件图标的点击操作,获取存储文件图标对应的文件存储数据;将文件存储数据发送至用户终端,以使用户终端根据文件存储数据在公有云获取加密文件并解密处理得到存储文件。In response to the user's click operation on the stored file icon on the preset display interface, obtain the file storage data corresponding to the stored file icon; send the file storage data to the user terminal, so that the user terminal obtains the encrypted file in the public cloud based on the file storage data And decrypt it to obtain the stored file.

其中,本申请实施例还可以在用户点击存储文件图标之后,将文件存储数据发送至用户终端,供用户自行访问公有云获取存储文件,进一步地提高了公有云存储访问的安全性。Among them, the embodiment of the present application can also send the file storage data to the user terminal after the user clicks the storage file icon, so that the user can access the public cloud to obtain the stored files, further improving the security of public cloud storage access.

可选地,在生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据之后,还包括:Optionally, after generating the mapping relationship between receipt data, random keys, and public cloud access passwords, and generating and saving the file storage data, it also includes:

删除存储文件。Delete storage files.

这里,为了进一步地保证存储文件、公有云存储的安全性,本申请实施例的家庭云存储盒子在确定上传加密文件之后删除存储文件,同时也释放了家庭云存储盒子的空间资源,提高了资源利用率。Here, in order to further ensure the security of stored files and public cloud storage, the home cloud storage box in the embodiment of the present application deletes the stored files after determining to upload the encrypted files. At the same time, it also releases the space resources of the home cloud storage box and improves resources. Utilization.

可选地,在生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据之后,还包括:Optionally, after generating the mapping relationship between receipt data, random keys, and public cloud access passwords, and generating and saving the file storage data, it also includes:

显示选择界面,其中,选择界面上包括删除存储文件按钮和不删除存储文件按钮;响应于用户在选择界面上的选择操作,确定是否删除存储文件。Display a selection interface, where the selection interface includes a button to delete the stored file and a button to not delete the stored file; in response to the user's selection operation on the selection interface, determine whether to delete the stored file.

其中,选择界面的具体展现形式及内容本申请实施例不作具体限制。The specific presentation form and content of the selection interface are not specifically limited in this embodiment of the application.

这里,本申请实施例为用户提供选择界面,供用户选择是否在家庭云存储盒子删除存储文件,进一步地提高了公有云存储访问的灵活性。Here, the embodiment of the present application provides a selection interface for the user to choose whether to delete the stored files in the home cloud storage box, further improving the flexibility of public cloud storage access.

图3为本申请实施例提供的一种公有云存储访问装置的结构示意图,应用于家庭云存储盒子,如图3所示,本申请实施例的装置包括:密钥生成模块301、加密模块302、上传模块303、接收模块304和处理模块305。这里的公有云存储访问装置可以是服务器或者终端设备,或者是实现服务器或者终端设备的功能的芯片或者集成电路。这里需要说明的是,密钥生成模块301、加密模块302、上传模块303、接收模块304和处理模块305的划分只是一种逻辑功能的划分,物理上两者可以是集成的,也可以是独立的。Figure 3 is a schematic structural diagram of a public cloud storage access device provided by an embodiment of the present application, which is applied to a home cloud storage box. As shown in Figure 3, the device of the embodiment of the present application includes: a key generation module 301 and an encryption module 302 , upload module 303, receiving module 304 and processing module 305. The public cloud storage access device here may be a server or terminal device, or a chip or integrated circuit that implements the functions of the server or terminal device. It should be noted here that the division of the key generation module 301, the encryption module 302, the upload module 303, the receiving module 304 and the processing module 305 is only a division of logical functions. Physically, the two can be integrated or independent. of.

其中,密钥生成模块,用于在接收到用户终端发送的存储文件后,生成随机密钥;Among them, the key generation module is used to generate a random key after receiving the storage file sent by the user terminal;

加密模块,用于根据预设加密算法,通过随机密钥对存储文件进行加密处理,得到加密文件;The encryption module is used to encrypt the stored files with random keys according to the preset encryption algorithm to obtain encrypted files;

上传模块,用于将加密文件上传至公有云;Upload module, used to upload encrypted files to the public cloud;

接收模块,用于接收公有云发送的收据数据,其中,收据数据为公有云在接收到加密文件后生成的,收据数据中包括加密文件的存储地址;The receiving module is used to receive receipt data sent by the public cloud, where the receipt data is generated by the public cloud after receiving the encrypted file, and the receipt data includes the storage address of the encrypted file;

处理模块,用于生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据,其中,文件存储数据包括文件名、收据数据、随机密钥和公有云的访问密码。The processing module is used to generate the mapping relationship between receipt data, random keys and public cloud access passwords, and generate and save file storage data, where the file storage data includes file names, receipt data, random keys and public cloud access passwords. .

可选地,在处理模块用于生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据之后,上述装置还包括显示模块,用于:Optionally, after the processing module is used to generate the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save the file storage data, the above device also includes a display module for:

根据文件存储数据生成存储文件图标;Generate storage file icons based on file storage data;

在预设显示界面上显示存储文件图标。Display the stored file icon on the default display interface.

可选地,在显示模块用于在预设显示界面上显示存储文件图标之后,上述装置还包括第一下载模块,用于:Optionally, after the display module is used to display the stored file icon on the preset display interface, the above device further includes a first download module for:

响应于用户在预设显示界面上对存储文件图标的点击操作,获取存储文件图标对应的文件存储数据;In response to the user's click operation on the stored file icon on the preset display interface, obtain the file storage data corresponding to the stored file icon;

根据文件存储数据,在公有云获取加密文件;Store data based on files and obtain encrypted files in the public cloud;

根据随机密钥对加密文件进行解密,得到存储文件;Decrypt the encrypted file based on the random key to obtain the stored file;

将存储文件发送至用户终端。Send the stored file to the user terminal.

可选地,在显示模块用于在预设显示界面上显示存储文件图标之后,上述装置还包括第二下载模块,用于:Optionally, after the display module is used to display the stored file icon on the preset display interface, the above device further includes a second download module for:

响应于用户在预设显示界面上对存储文件图标的点击操作,获取存储文件图标对应的文件存储数据;In response to the user's click operation on the stored file icon on the preset display interface, obtain the file storage data corresponding to the stored file icon;

将文件存储数据发送至用户终端,以使用户终端根据文件存储数据在公有云获取加密文件并解密处理得到存储文件。The file storage data is sent to the user terminal, so that the user terminal obtains the encrypted file in the public cloud according to the file storage data and decrypts it to obtain the storage file.

可选地,在加密模块用于根据预设加密算法,通过随机密钥对存储文件进行加密处理,得到加密文件之前,上述装置还包括压缩模块,用于:对存储文件进行压缩处理,得到压缩文件;Optionally, before the encryption module is used to encrypt the stored file with a random key according to the preset encryption algorithm to obtain the encrypted file, the above device further includes a compression module for: compressing the stored file to obtain the compressed file. document;

相应地,加密模块具体用于:Accordingly, the encryption module is specifically used to:

根据预设加密算法,通过随机密钥对压缩文件进行加密处理,得到压缩文件。According to the preset encryption algorithm, the compressed file is encrypted with a random key to obtain the compressed file.

可选地,在处理模块用于生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据之后,上述装置还包括删除模块,用于:Optionally, after the processing module is used to generate the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save the file storage data, the above device also includes a deletion module for:

删除存储文件。Delete storage files.

可选地,在处理模块用于生成收据数据、随机密钥和公有云的访问密码的映射关系,生成并保存文件存储数据之后,上述装置还包括删除选择模块,用于:Optionally, after the processing module is used to generate the mapping relationship between the receipt data, the random key and the access password of the public cloud, and generate and save the file storage data, the above device also includes a deletion selection module for:

显示选择界面,其中,选择界面上包括删除存储文件按钮和不删除存储文件按钮;Display a selection interface, wherein the selection interface includes a button to delete the stored file and a button to not delete the stored file;

响应于用户在选择界面上的选择操作,确定是否删除存储文件。In response to the user's selection operation on the selection interface, it is determined whether to delete the stored file.

参考图4,其示出了适于用来实现本公开实施例的公有云存储访问设备400的结构示意图,该公有云存储访问设备400可以为家庭云存储盒子,也可以为其他能够实现家庭云存储盒子功能的服务器或者终端设备。其中,终端设备可以包括但不限于诸如移动电话、笔记本电脑、数字广播接收器、个人数字助理(Personal Digital Assistant,简称PDA)、平板电脑(Portable Android Device,简称PAD)、便携式多媒体播放器(Portable MediaPlayer,简称PMP)、车载终端(例如车载导航终端)等等的移动终端以及诸如数字TV、台式计算机等等的固定终端。图4示出的公有云存储访问设备仅仅是一个示例,不应对本公开实施例的功能和使用范围带来任何限制。Referring to Figure 4, a schematic structural diagram of a public cloud storage access device 400 suitable for implementing an embodiment of the present disclosure is shown. The public cloud storage access device 400 may be a home cloud storage box or other device capable of implementing a home cloud. Server or terminal device that stores box functions. Among them, terminal devices may include, but are not limited to, mobile phones, notebook computers, digital broadcast receivers, personal digital assistants (Personal Digital Assistant, PDA for short), tablet computers (Portable Android Device, PAD for short), portable multimedia players (Portable Mobile terminals such as MediaPlayer (PMP for short), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), and fixed terminals such as digital TVs, desktop computers, etc. The public cloud storage access device shown in Figure 4 is only an example, and should not bring any restrictions to the functions and usage scope of the embodiments of the present disclosure.

如图4所示,公有云存储访问设备400可以包括处理装置(例如中央处理器、图形处理器等)401,其可以根据存储在只读存储器(Read Only Memory ,简称ROM)402中的程序或者从存储装置408加载到随机访问存储器(Random Access Memory ,简称RAM)403中的程序而执行各种适当的动作和处理。在RAM 403中,还存储有公有云存储访问设备400操作所需的各种程序和数据。处理装置401、ROM 402以及RAM 403通过总线404彼此相连。输入/输出(I/O)接口405也连接至总线404。As shown in Figure 4, the public cloud storage access device 400 may include a processing device (such as a central processing unit, a graphics processor, etc.) 401, which may be configured according to a program stored in a read-only memory (Read Only Memory, ROM for short) 402 or The program loaded from the storage device 408 into the random access memory (Random Access Memory, RAM for short) 403 executes various appropriate actions and processes. In the RAM 403, various programs and data required for the operation of the public cloud storage access device 400 are also stored. The processing device 401, ROM 402 and RAM 403 are connected to each other via a bus 404. An input/output (I/O) interface 405 is also connected to bus 404.

通常,以下装置可以连接至I/O接口405:包括例如触摸屏、触摸板、键盘、鼠标、摄像头、麦克风、加速度计、陀螺仪等的输入装置406;包括例如液晶显示器(Liquid CrystalDisplay ,简称LCD)、扬声器、振动器等的输出装置407;包括例如磁带、硬盘等的存储装置408;以及通信装置409。通信装置409可以允许公有云存储访问设备400与其他设备进行无线或有线通信以交换数据。虽然图4示出了具有各种装置的公有云存储访问设备400,但是应理解的是,并不要求实施或具备所有示出的装置。可以替代地实施或具备更多或更少的装置。Generally, the following devices can be connected to the I/O interface 405: input devices 406 including, for example, a touch screen, touch pad, keyboard, mouse, camera, microphone, accelerometer, gyroscope, etc.; including, for example, a liquid crystal display (Liquid Crystal Display, LCD for short) , an output device 407 such as a speaker, a vibrator, etc.; a storage device 408 including a magnetic tape, a hard disk, etc.; and a communication device 409. The communication device 409 may allow the public cloud storage access device 400 to communicate wirelessly or wiredly with other devices to exchange data. Although FIG. 4 illustrates the public cloud storage access device 400 with various means, it should be understood that implementation or availability of all illustrated means is not required. More or fewer means may alternatively be implemented or provided.

特别地,根据本公开的实施例,上文参考流程图描述的过程可以被实现为计算机软件程序。例如,本公开的实施例包括一种计算机程序产品,其包括承载在计算机可读介质上的计算机程序,该计算机程序包含用于执行流程图所示的方法的程序代码。在这样的实施例中,该计算机程序可以通过通信装置409从网络上被下载和安装,或者从存储装置408被安装,或者从ROM 402被安装。在该计算机程序被处理装置401执行时,执行本公开实施例的方法中限定的上述功能。In particular, according to embodiments of the present disclosure, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, embodiments of the present disclosure include a computer program product including a computer program carried on a computer-readable medium, the computer program containing program code for performing the method illustrated in the flowchart. In such embodiments, the computer program may be downloaded and installed from the network via communication device 409, or from storage device 408, or from ROM 402. When the computer program is executed by the processing device 401, the above-mentioned functions defined in the method of the embodiment of the present disclosure are performed.

需要说明的是,本公开上述的计算机可读介质可以是计算机可读信号介质或者计算机可读存储介质或者是上述两者的任意组合。计算机可读存储介质例如可以是——但不限于——电、磁、光、电磁、红外线、或半导体的系统、装置或器件,或者任意以上的组合。计算机可读存储介质的更具体的例子可以包括但不限于:具有一个或多个导线的电连接、便携式计算机磁盘、硬盘、随机访问存储器(RAM)、只读存储器(ROM)、可擦式可编程只读存储器(EPROM或闪存)、光纤、便携式紧凑磁盘只读存储器(CD-ROM)、光存储器件、磁存储器件、或者上述的任意合适的组合。在本公开中,计算机可读存储介质可以是任何包含或存储程序的有形介质,该程序可以被指令执行系统、装置或者器件使用或者与其结合使用。而在本公开中,计算机可读信号介质可以包括在基带中或者作为载波一部分传播的数据信号,其中承载了计算机可读的程序代码。这种传播的数据信号可以采用多种形式,包括但不限于电磁信号、光信号或上述的任意合适的组合。计算机可读信号介质还可以是计算机可读存储介质以外的任何计算机可读介质,该计算机可读信号介质可以发送、传播或者传输用于由指令执行系统、装置或者器件使用或者与其结合使用的程序。计算机可读介质上包含的程序代码可以用任何适当的介质传输,包括但不限于:电线、光缆、RF(射频)等等,或者上述的任意合适的组合。It should be noted that the computer-readable medium mentioned above in the present disclosure may be a computer-readable signal medium or a computer-readable storage medium, or any combination of the above two. The computer-readable storage medium may be, for example, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or any combination thereof. More specific examples of computer readable storage media may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard drive, random access memory (RAM), read only memory (ROM), removable Programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above. In this disclosure, a computer-readable storage medium may be any tangible medium that contains or stores a program for use by or in connection with an instruction execution system, apparatus, or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code therein. Such propagated data signals may take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium that can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device . Program code embodied on a computer-readable medium may be transmitted using any suitable medium, including but not limited to: wire, optical fiber cable, RF (radio frequency), etc., or any suitable combination of the foregoing.

上述计算机可读介质可以是上述公有云存储访问设备中所包含的;也可以是单独存在,而未装配入该公有云存储访问设备中。The above-mentioned computer-readable medium may be included in the above-mentioned public cloud storage access device; it may also exist independently without being assembled into the public cloud storage access device.

上述计算机可读介质承载有一个或者多个程序,当上述一个或者多个程序被该公有云存储访问设备执行时,使得该公有云存储访问设备执行上述实施例所示的方法。The computer-readable medium carries one or more programs. When the one or more programs are executed by the public cloud storage access device, the public cloud storage access device executes the method shown in the above embodiment.

可以以一种或多种程序设计语言或其组合来编写用于执行本公开的操作的计算机程序代码,上述程序设计语言包括面向对象的程序设计语言—诸如Java、Smalltalk、C++,还包括常规的过程式程序设计语言—诸如“C”语言或类似的程序设计语言。程序代码可以完全地在用户计算机上执行、部分地在用户计算机上执行、作为一个独立的软件包执行、部分在用户计算机上部分在远程计算机上执行、或者完全在远程计算机或服务器上执行。在涉及远程计算机的情形中,远程计算机可以通过任意种类的网络——包括局域网(LocalArea Network ,简称LAN)或广域网(Wide Area Network ,简称WAN)—连接到用户计算机,或者,可以连接到外部计算机(例如利用因特网服务提供商来通过因特网连接)。Computer program code for performing the operations of the present disclosure may be written in one or more programming languages, including object-oriented programming languages such as Java, Smalltalk, C++, and conventional Procedural programming language—such as "C" or a similar programming language. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or it can be connected to an external computer (e.g. using an internet service provider to connect via the internet).

在本申请所提供的几个实施例中,应该理解到,所揭露的系统,装置和方法,可以通过其它的方式实现。例如,以上所描述的装置实施例仅仅是示意性的,例如,单元的划分,仅仅为一种逻辑功能划分,实际实现时可以有另外的划分方式,例如多个单元或组件可以结合或者可以集成到另一个系统,或一些特征可以忽略,或不执行。另一点,所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口,装置或单元的间接耦合或通信连接,可以是电性,机械或其它的形式。In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated. to another system, or some features can be ignored, or not implemented. On the other hand, the coupling or direct coupling or communication connection between each other shown or discussed may be through some interfaces, and the indirect coupling or communication connection of the devices or units may be in electrical, mechanical or other forms.

另外,在本申请各个实施例中的各功能单元可以集成在一个处理单元中,也可以是各个单元单独物理存在,也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现,也可以采用软件功能单元的形式实现。In addition, each functional unit in each embodiment of the present application can be integrated into one processing unit, each unit can exist physically alone, or two or more units can be integrated into one unit. The above integrated units can be implemented in the form of hardware or software functional units.

本领域技术人员在考虑说明书及实践这里公开的申请后,将容易想到本公开的其它实施方案。本申请旨在涵盖本公开的任何变型、用途或者适应性变化,这些变型、用途或者适应性变化遵循本公开的一般性原理并包括本公开未公开的本技术领域中的公知常识或惯用技术手段。说明书和实施例仅被视为示例性的,本公开的真正范围和精神由下面的权利要求书指出。Other embodiments of the present disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. This application is intended to cover any variations, uses, or adaptations of the disclosure that follow the general principles of the disclosure and include common knowledge or customary technical means in the technical field that are not disclosed in the disclosure. . It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

应当理解的是,本公开并不局限于上面已经描述并在附图中示出的精确结构,并且可以在不脱离其范围进行各种修改和改变。本公开的范围仅由所附的权利要求书来限制。It is to be understood that the present disclosure is not limited to the precise structures described above and illustrated in the accompanying drawings, and various modifications and changes may be made without departing from the scope thereof. The scope of the disclosure is limited only by the appended claims.

Claims (10)

1. A public cloud storage access method, characterized in that it is applied to a home cloud storage box, the method comprising:
after receiving a storage file sent by a user terminal, generating a random key;
according to a preset encryption algorithm, encrypting the storage file through the random key to obtain an encrypted file;
uploading the encrypted file to a public cloud;
receiving receipt data sent by the public cloud, wherein the receipt data is generated by the public cloud after receiving the encrypted file, and the receipt data comprises a storage address of the encrypted file;
generating a mapping relation among the receipt data, the random key and the public cloud access password, and generating and storing file storage data, wherein the file storage data comprises a file name, the receipt data, the random key and the public cloud access password.
2. The method of claim 1, further comprising, after the generating the mapping relationship of the receipt data, the random key, and the public cloud access password, generating and saving file storage data:
generating a stored file icon according to the file storage data;
and displaying the stored file icon on a preset display interface.
3. The method of claim 2, further comprising, after the displaying the stored file icon on the preset display interface:
responding to clicking operation of a user on the stored file icon on the preset display interface, and acquiring file storage data corresponding to the stored file icon;
acquiring the encrypted file from the public cloud according to the file storage data;
decrypting the encrypted file according to the random key to obtain the storage file;
and sending the storage file to a user terminal.
4. The method of claim 2, further comprising, after the displaying the stored file icon on the preset display interface:
responding to clicking operation of a user on the stored file icon on the preset display interface, and acquiring file storage data corresponding to the stored file icon;
and sending the file storage data to a user terminal, so that the user terminal obtains the encrypted file from the public cloud according to the file storage data and decrypts the encrypted file to obtain the storage file.
5. The method according to any one of claims 1 to 4, further comprising, before said encrypting the stored file by the random key according to a predetermined encryption algorithm,:
compressing the storage file to obtain a compressed file;
correspondingly, the encrypting the storage file by the random key according to a preset encrypting algorithm to obtain an encrypted file comprises the following steps:
and according to a preset encryption algorithm, encrypting the compressed file through the random key to obtain the compressed file.
6. The method according to any one of claims 1 to 4, further comprising, after said generating the mapping relation of the receipt data, the random key, and the public cloud access password, generating and saving file storage data:
and deleting the storage file.
7. The method according to any one of claims 1 to 4, further comprising, after said generating the mapping relation of the receipt data, the random key, and the public cloud access password, generating and saving file storage data:
displaying a selection interface, wherein the selection interface comprises a stored file deleting button and a stored file not deleting button;
and responding to the selection operation of the user on the selection interface, and determining whether to delete the storage file.
8. A public cloud storage access device for use with a home cloud storage box, the device comprising:
the key generation module is used for generating a random key after receiving a storage file sent by the user terminal;
the encryption module is used for carrying out encryption processing on the storage file through the random key according to a preset encryption algorithm to obtain an encrypted file;
the uploading module is used for uploading the encrypted file to public cloud;
the receipt data are generated after the public cloud receives the encrypted file, and the receipt data comprise the storage address of the encrypted file;
and the processing module is used for generating a mapping relation among the receipt data, the random key and the public cloud access password, and generating and storing file storage data, wherein the file storage data comprises a file name, the receipt data, the random key and the public cloud access password.
9. A public cloud storage access device, comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the public cloud storage access method of any of claims 1 to 7.
10. A computer readable storage medium having stored therein computer executable instructions which when executed by a processor are for implementing the public cloud storage access method of any of claims 1 to 7.
CN202311504549.XA 2023-11-13 2023-11-13 Public cloud storage access method, public cloud storage access device, public cloud storage access equipment and storage medium Active CN117240617B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202311504549.XA CN117240617B (en) 2023-11-13 2023-11-13 Public cloud storage access method, public cloud storage access device, public cloud storage access equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202311504549.XA CN117240617B (en) 2023-11-13 2023-11-13 Public cloud storage access method, public cloud storage access device, public cloud storage access equipment and storage medium

Publications (2)

Publication Number Publication Date
CN117240617A true CN117240617A (en) 2023-12-15
CN117240617B CN117240617B (en) 2024-02-23

Family

ID=89084532

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202311504549.XA Active CN117240617B (en) 2023-11-13 2023-11-13 Public cloud storage access method, public cloud storage access device, public cloud storage access equipment and storage medium

Country Status (1)

Country Link
CN (1) CN117240617B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN120675816A (en) * 2025-08-20 2025-09-19 深圳市德兰明海新能源股份有限公司 Device access control method and device, electronic device and storage medium

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140122866A1 (en) * 2012-10-31 2014-05-01 Vmware, Inc. Crypto Proxy for Cloud Storage Services
CN108696565A (en) * 2017-04-06 2018-10-23 北京算云联科科技有限公司 Integrated digital home control system based on hybrid cloud and heterogeneous Internet of Things
CN111147430A (en) * 2018-11-06 2020-05-12 中移(杭州)信息技术有限公司 Encryption method and device applied to intelligent home gateway
CN111314385A (en) * 2020-03-23 2020-06-19 郑州悉知信息科技股份有限公司 Data access method and device
WO2020252611A1 (en) * 2019-06-17 2020-12-24 华为技术有限公司 Data interaction method and related equipments
WO2022094936A1 (en) * 2020-11-06 2022-05-12 Oppo广东移动通信有限公司 Access method, device, and cloud platform device
CN115766173A (en) * 2022-11-09 2023-03-07 支付宝(杭州)信息技术有限公司 Data processing method, system and device
CN116668402A (en) * 2023-06-29 2023-08-29 中国联合网络通信集团有限公司 Intelligent cloud box access method, device, equipment and storage medium
CN116841466A (en) * 2023-06-30 2023-10-03 中国联合网络通信集团有限公司 Multi-cloud storage method, device, equipment and computer readable storage medium

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140122866A1 (en) * 2012-10-31 2014-05-01 Vmware, Inc. Crypto Proxy for Cloud Storage Services
CN108696565A (en) * 2017-04-06 2018-10-23 北京算云联科科技有限公司 Integrated digital home control system based on hybrid cloud and heterogeneous Internet of Things
CN111147430A (en) * 2018-11-06 2020-05-12 中移(杭州)信息技术有限公司 Encryption method and device applied to intelligent home gateway
WO2020252611A1 (en) * 2019-06-17 2020-12-24 华为技术有限公司 Data interaction method and related equipments
CN111314385A (en) * 2020-03-23 2020-06-19 郑州悉知信息科技股份有限公司 Data access method and device
WO2022094936A1 (en) * 2020-11-06 2022-05-12 Oppo广东移动通信有限公司 Access method, device, and cloud platform device
CN115766173A (en) * 2022-11-09 2023-03-07 支付宝(杭州)信息技术有限公司 Data processing method, system and device
CN116668402A (en) * 2023-06-29 2023-08-29 中国联合网络通信集团有限公司 Intelligent cloud box access method, device, equipment and storage medium
CN116841466A (en) * 2023-06-30 2023-10-03 中国联合网络通信集团有限公司 Multi-cloud storage method, device, equipment and computer readable storage medium

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
胡冰松等: "城市光网环境下的家庭网络云存储应用系统的设计与实现", 电信科学 *
郝斐等: "基于CIFS协议的云存储安全网关的设计与实现", 计算机应用与软件 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN120675816A (en) * 2025-08-20 2025-09-19 深圳市德兰明海新能源股份有限公司 Device access control method and device, electronic device and storage medium
CN120675816B (en) * 2025-08-20 2025-11-14 深圳市德兰明海新能源股份有限公司 Device access control methods, apparatus, electronic devices and storage media

Also Published As

Publication number Publication date
CN117240617B (en) 2024-02-23

Similar Documents

Publication Publication Date Title
CN113259301B (en) Account data sharing method and electronic device
CN112788012B (en) Log file encryption method, device, storage medium and electronic equipment
US12067136B2 (en) Display method, display device, and electronic device
EP3618447A1 (en) Method and terminal for playbacking video file
WO2019072214A1 (en) Method and device for sharing wifi hotspot and storage medium
CN112149168B (en) File data encryption method and device and electronic equipment
CN113301431A (en) Video data encryption and decryption method and device, electronic equipment and system
CN111245811A (en) Information encryption method, device and electronic device
WO2020216204A1 (en) Information acquisition method and apparatus
CN107528830A (en) account login method, system and storage medium
US20250039488A1 (en) Screen projection method, screen projection device, screen projection display device, screen projection system and medium
CN111030827A (en) Information interaction method and device, electronic equipment and storage medium
CN111611606B (en) File encryption and decryption method and device
WO2021197161A1 (en) Icon updating method and apparatus, and electronic device
CN117240617B (en) Public cloud storage access method, public cloud storage access device, public cloud storage access equipment and storage medium
CN111767550A (en) Data storage method and device
CN115412347A (en) Device registration method, device, device and storage medium
WO2020186927A1 (en) Data sharing method, apparatus and device, and medium
CN105721604A (en) Data sending method and device based on downloading request of user
CN117240618B (en) Home cloud box access methods, devices, equipment and storage media
CN113709023A (en) Iris electronic mail safety transmission method, system and storage medium
CN115174106B (en) Cloud service authentication method, device, equipment and storage medium
CN116132125B (en) Cloud service data storage method, device, equipment and storage medium
EP2706479A2 (en) Method for content use, device for content use, mobile terminal, and recording medium
KR20140124189A (en) Method and apparatus for transmitting file in an electronic device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant