CN115314275A - Data encryption processing method and device, storage medium and electronic equipment - Google Patents

Abstract

The invention discloses a data encryption processing method, a data encryption processing device, a storage medium and electronic equipment, wherein the method comprises the following steps: the method comprises the steps of constructing an edge proxy and an edge calculation model of data to be processed, preprocessing the data to be processed based on the edge proxy and the edge calculation model, and encrypting the preprocessed data to be processed in a preset encryption mode to obtain encrypted data, wherein the preset encryption mode comprises the following steps: data encryption is performed through the SM2 algorithm, and data security can be improved.

Description

Data encryption processing method, device, storage medium and electronic equipment

technical field

The invention belongs to the field of data encryption, in particular to a data encryption processing method, device, storage medium and electronic equipment.

Background technique

At present, the protocol data is sent without data encryption processing, and the data is easily cracked when intercepted, without any security.

The collection of data by existing equipment is only the direct physical quantity collected, and there is no other way of judgment and processing. For technicians, data reverse conversion can be performed to crack the data content of the protocol, thereby stealing data and causing potential information security risks. At the same time, the directly collected data is sent without judgment and processing, which will cause a large amount of data burden and resource consumption, which is an urgent problem to be solved.

Contents of the invention

The object of the present invention is to provide a data encryption processing method, device, storage medium and electronic equipment to solve the deficiencies in the prior art, and it can improve data security.

An embodiment of the present application provides a data encryption processing method, the method comprising:

Build an edge proxy and an edge computing model for the data to be processed, the edge proxy and the edge computing model include: an edge computing framework module and a business module, wherein the edge computing framework module includes: an edge service layer, a basic function layer, an operating system Layer and hardware layer, the edge service layer is used for cloud-side collaboration of resources, data, intelligence and application management; the basic function layer is used to realize the functions of localized management, sub-device access, object model management and message queue The operating system layer is used to realize the functions of system monitoring, real-time scheduling, security authentication, application authority and authority isolation; the hardware layer is used to create a data execution and computing environment for data to be processed;

Preprocessing the data to be processed based on the edge agent and the edge computing model;

The preprocessed data to be processed is encrypted by a preset encryption method to obtain encrypted data, wherein the preset encryption method includes: data encryption by SM2 algorithm.

Optionally, the method also includes:

The encrypted data is forwarded to the background server through the communication module, and the background server enters a low power consumption operation mode after the forwarding of the encrypted data is completed.

Optionally, the edge computing framework module also includes:

The IoT management center, wherein the IoT management center is used to realize the functions of sub-device life cycle management, data analysis, centralized training, business arrangement, and application development, debugging, and release.

Optionally, the edge computing framework module interacts with the service module through the MQTT protocol, and the edge computing framework module and the service module run in the same device and communicate by connecting to a local MQTT server.

Optionally, the service module is used to realize functions of terminal device access, deletion, status update, data and event reporting, and service control command response.

Optionally, the preprocessing of the data to be processed based on the edge agent and the edge computing model includes:

The data to be processed is received, the direct physical quantity of the data to be processed is preprocessed through the preset judgment processing method in the edge computing framework module, and the preprocessed data is output.

Another embodiment of the present application provides a data encryption processing device, the device comprising:

The building module is used to build an edge proxy and an edge computing model of the data to be processed. The edge proxy and the edge computing model include: an edge computing framework module and a business module, wherein the edge computing framework module includes: an edge service layer, a basic Functional layer, operating system layer and hardware layer, the edge service layer is used for cloud-side collaboration of resources, data, intelligence and application management; the basic functional layer is used to realize localized management, sub-device access, and object model management and message queue functions; the operating system layer is used to realize the functions of system monitoring, real-time scheduling, security authentication, application authority and authority isolation; the hardware layer is used to create a data execution and computing environment for data to be processed;

A processing module, configured to preprocess the data to be processed based on the edge agent and the edge computing model;

The encryption module is configured to encrypt the preprocessed data to be processed by a preset encryption method to obtain encrypted data, wherein the preset encryption method includes: encrypting data by SM2 algorithm.

Optionally, the device also includes:

The forwarding module is used to forward the encrypted data to the background server through the communication module. After the forwarding of the encrypted data is completed, the background server enters a low power consumption operation mode.

Yet another embodiment of the present application provides a storage medium, in which a computer program is stored, wherein the computer program is configured to execute the method described in any one of the above when running.

Another embodiment of the present application provides an electronic device, including a memory and a processor, the memory stores a computer program, and the processor is configured to run the computer program to perform any of the above-mentioned Methods.

Compared with the prior art, the present invention first constructs an edge proxy and an edge computing model of the data to be processed, preprocesses the data to be processed based on the edge proxy and the edge computing model, and performs preprocessing on the preprocessed data to be processed by a preset encryption method. Encryption processing to obtain encrypted data, wherein the preset encryption method includes: data encryption through the SM2 algorithm, which can improve data security.

Description of drawings

Fig. 1 is a block diagram of the hardware structure of a computer terminal of a data encryption processing method provided by an embodiment of the present invention;

FIG. 2 is a schematic flowchart of a data encryption processing method provided by an embodiment of the present invention;

FIG. 3 is a schematic diagram of a functional framework of an edge computing framework module provided by an embodiment of the present invention;

FIG. 4 is a schematic diagram of a basic framework of an edge computing framework module provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a data encryption processing device provided by an embodiment of the present invention.

Detailed ways

The embodiments described below by referring to the figures are exemplary only for explaining the present invention and should not be construed as limiting the present invention.

Embodiments of the present invention firstly provide a data encryption processing method, which can be applied to electronic devices, such as computer terminals, specifically, ordinary computers, quantum computers, and the like.

The following will describe it in detail by taking it running on a computer terminal as an example. FIG. 1 is a block diagram of a hardware structure of a computer terminal for a data encryption processing method provided by an embodiment of the present invention. As shown in Figure 1, the computer terminal may include one or more (only one is shown in Figure 1) processors 102 (processors 102 may include but not limited to processing devices such as microprocessor MCU or programmable logic device FPGA, etc.) and a memory 104 for storing data. Optionally, the above-mentioned computer terminal may further include a transmission device 106 and an input and output device 108 for communication functions. Those skilled in the art can understand that the structure shown in FIG. 1 is only for illustration, and it does not limit the structure of the above computer terminal. For example, the computer terminal may also include more or fewer components than shown in FIG. 1 , or have a different configuration than that shown in FIG. 1 .

The memory 104 can be used to store software programs and modules of application software, such as the program instructions/modules corresponding to the data encryption processing method in the embodiment of the present application, and the processor 102 executes the software programs and modules stored in the memory 104 by running Various functional applications and data processing are to realize the above-mentioned method. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory that is remotely located relative to the processor 102, and these remote memories may be connected to a computer terminal through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The transmission device 106 is used to receive or transmit data via a network. The specific example of the above-mentioned network may include a wireless network provided by the communication provider of the computer terminal. In one example, the transmission device 106 includes a network interface controller (NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (Radio Frequency, RF) module, which is used to communicate with the Internet in a wireless manner.

As financial security has risen to the level of national security, in recent years, relevant state agencies and regulatory agencies have put forward requirements to promote the application and implementation of national secret algorithms and strengthen the security and controllability of the industry from the perspective of national security and long-term strategy. It is particularly necessary and urgent to get rid of excessive dependence on foreign technology and products, build an industry network security environment, and enhance the "safety and controllability" of my country's industry information systems.

Cryptographic algorithms are the core technology to ensure information security, especially in the most critical core areas of the banking industry, which have long been using internationally accepted cryptographic algorithm systems and related standards such as 3DES, SHA-1, and RSA. National secret refers to the domestic encryption algorithm recognized by the State Cryptography Administration. There are mainly SM1, SM2, SM3, SM4. Both the key length and block length are 128 bits, among which SM2 is asymmetric encryption, based on ECC, and the algorithm has been made public. Since the algorithm is based on ECC, its signature speed and secret key generation speed are faster than RSA. ECC 256-bit (SM2 adopts a kind of ECC 256-bit) security strength is higher than RSA 2048-bit, but the operation speed is faster than RSA. SM2 elliptic curve public key cryptography algorithm is a public key cryptography algorithm independently designed by my country, including SM2-1 elliptic curve digital signature algorithm, SM2-2 elliptic curve key exchange protocol, SM2-3 elliptic curve public key encryption algorithm, respectively used for Realize functions such as digital signature key negotiation and data encryption. The difference between the SM2 algorithm and the RSA algorithm is that the SM2 algorithm is based on the point group discrete logarithm problem on the elliptic curve. Compared with the RSA algorithm, the 256-bit SM2 cipher strength is already higher than the 2048-bit RSA cipher strength.

Referring to FIG. 2, FIG. 2 is a schematic flowchart of a data encryption processing method provided by an embodiment of the present invention, which may include the following steps:

S201: Construct an edge proxy and an edge computing model for the data to be processed. The edge proxy and the edge computing model include: an edge computing framework module and a business module, wherein the edge computing framework module includes: an edge service layer, a basic function layer, Operating system layer and hardware layer, the edge service layer is used for cloud-side collaboration of resources, data, intelligence and application management; the basic function layer is used to realize localized management, sub-device access, object model management and message queue functions; the operating system layer is used to realize the functions of system monitoring, real-time scheduling, security authentication, application authority and authority isolation; the hardware layer is used to create a data execution and computing environment for data to be processed.

Specifically, the service module is used to implement functions of terminal device access, deletion, status update, data and event reporting, and service control command response.

Exemplarily, the edge computing framework module may further include:

The IoT management center, wherein the IoT management center is used to realize the functions of sub-device life cycle management, data analysis, centralized training, business arrangement, and application development, debugging, and release.

It should be noted that the edge computing framework module interacts with the service module through the MQTT protocol, and the edge computing framework module and the service module run in the same device and communicate by connecting to a local MQTT server.

Among them, the IoT management center platform and the edge computing framework module perform device access and receive and send various messages through the remote MQTT service, and the edge computing framework module and the business A module connect through the local MQTT service in a publish-subscribe manner Establish and data communication. After the IoT management center platform is started, the edge computing framework module performs the device access action. After the device access is completed, the business module must first add the end device through the local MQTT service, and then proceed after receiving the response message that the end device is successfully added. Update, delete, data reporting and other actions.

S202: Preprocess the data to be processed based on the edge agent and the edge computing model.

Specifically, the preprocessing of the data to be processed based on the edge agent and the edge computing model may include:

The data to be processed is received, the direct physical quantity of the data to be processed is preprocessed through the preset judgment processing method in the edge computing framework module, and the preprocessed data is output.

Exemplarily, the hardware layer starts data screening after receiving the data to be processed, and judges whether there is missing data in the data to be processed, and ends the judging process if there is no missing data in the data to be processed; if there is missing data in the original data , then ask the user whether to choose to ignore the missing data: if the user confirms to ignore, the judgment process will end; if the user cancels the ignore, then continue to prompt the user to choose the way to fill in the data. Padding and possible value padding.

In an optional implementation, the preprocessing method can also be: judging whether there is abnormality or noise data in the data to be processed, if there is no abnormality or noise data in the data to be processed, then end the judgment process; if the data to be processed If there are abnormal or noisy data in the data, the user will be asked whether to ignore the abnormal or noisy data: if the user confirms to ignore, the judgment process will end; if the user cancels the ignore, continue to correct the abnormal or noisy data, and end the process after the correction Judgment link.

It should be noted that the edge computing framework module and core algorithms such as edge computing are used to process and process the data to be processed. The purpose of processing is to better encrypt the preprocessed data to be processed through the preset encryption method. All methods that are conducive to preprocessing the data to be processed should be included in this application, and will not be repeated here.

S203: Encrypt the preprocessed data to be processed by using a preset encryption method to obtain encrypted data, wherein the preset encryption method includes: encrypting data by using an SM2 algorithm.

Exemplarily, the data can be encrypted by using the commercial SM2 algorithm in the TF encryption card to realize the data encryption mode relying on the encryption card.

It should be noted that the encrypted data can be forwarded to the background server through the communication module, and the background server enters a low-power operation mode after the forwarding of the encrypted data is completed.

For example, importing the written software into the Linux system can be set to run automatically at startup. The software can carry out processing and preprocessing based on edge agent and edge computing for the data to be processed after collection, and then encrypt the processed data with the SM2 key in the TF encryption card. After the software controls the encrypted data, it forwards the data to the background server through the Huawei communication module. After confirming that the data is sent successfully, it can enter the low-power standby mode.

In this application, the edge agent and the edge computing model can be located in the perception layer of the Internet of Things, use the local communication interface to access various sensors, terminals and other devices, and manage them in a unified way through the edge computing framework module. Business data extraction, accumulation, aggregation and storage, standardized modeling according to certain physical model requirements, data processing of model data by using edge computing, and real and effective data can be obtained by using the processed data. These real and effective data are in The edge computing framework module uses the SM2 algorithm to encrypt these data, and sends the encrypted data to the data gateway of the server through 4G or GPRS, and decrypts the data through the data gateway of the server to obtain the decrypted real and effective data for service terminal use.

Among them, edge computing is a distributed open platform (architecture) that integrates network, computing, storage, and application core capabilities on the edge of the network close to the source of objects or data, and provides edge intelligent services nearby. As an open platform software supporting edge computing, the edge computing framework module meets the key needs of industry digitalization in terms of agile connection, real-time business, data optimization, application intelligence, security and privacy protection.

Wherein, referring to FIG. 3 , FIG. 3 is a schematic diagram of a functional framework of an edge computing framework module provided by an embodiment of the present invention, which can be divided into a hardware layer, an operating system layer, a basic function layer, and an edge service layer. Among them, the hardware layer includes functions such as unique device identification and trusted computing modules; the operating system layer includes functions such as system monitoring, secure access, application isolation, and trusted measurement; the basic function layer includes sub-device access, object model management, message Queue and other functions; the edge service layer includes functions such as flow computing and rule engine, and supports cloud-side collaboration of resources, data, intelligence, and application management.

Referring to Fig. 4, Fig. 4 is a schematic diagram of a basic framework of an edge computing framework module provided by an embodiment of the present invention. The edge computing framework module can be used as a proxy gateway to transmit data to the IoT management center. For one side of the field and regional autonomy, All sub-devices can be managed uniformly by the edge computing framework module. The edge computing framework module provides multiple communication device interfaces, such as serial port, 485, network port, carrier PLC, 4G, LoRa, etc., which can be encrypted through the built-in state network core chip. The edge computing capability opening framework shown in the figure is mainly divided into the core service layer, device management layer, and application container layer, and also provides a unified management agent. The application container layer can provide a lightweight virtualized operating environment for business modules. The device management layer provides object model definition, device registration, etc. for the device. The core service layer provides rule engine-based data processing, edge computing, task scheduling, etc., and the edge The collected information of the computing framework module is uploaded to the IoT management center platform through the unified management agent.

It can be seen that the present invention first constructs an edge proxy and an edge computing model of the data to be processed, preprocesses the data to be processed based on the edge proxy and the edge computing model, and encrypts the preprocessed data to be processed by a preset encryption method to obtain Encrypted data, wherein, the preset encryption method includes: encrypting data through the SM2 algorithm, which can improve data security.

Another embodiment of the present application provides a data encryption processing device, as shown in FIG. 5, a schematic structural diagram of a data encryption processing device, the device includes:

The construction module 501 is used to construct an edge proxy and an edge computing model of the data to be processed. The edge proxy and the edge computing model include: an edge computing framework module and a business module, wherein the edge computing framework module includes: an edge service layer, Basic function layer, operating system layer and hardware layer, the edge service layer is used for cloud-side collaboration of resources, data, intelligence and application management; the basic function layer is used to realize localized management, sub-device access, object model The function of management and message queue; the operating system layer is used to realize the functions of system monitoring, real-time scheduling, security authentication, application authority and authority isolation; the hardware layer is used to create a data execution and computing environment for data to be processed;

A processing module 502, configured to preprocess the data to be processed based on the edge agent and the edge computing model;

The encryption module 503 is configured to encrypt the preprocessed data to be processed by a preset encryption method to obtain encrypted data, wherein the preset encryption method includes: encrypting data by SM2 algorithm.

Specifically, the device also includes:

The forwarding module is used to forward the encrypted data to the background server through the communication module. After the forwarding of the encrypted data is completed, the background server enters a low power consumption operation mode.

Compared with the prior art, the present invention first constructs an edge proxy and an edge computing model of the data to be processed, preprocesses the data to be processed based on the edge proxy and the edge computing model, and performs preprocessing on the preprocessed data to be processed by a preset encryption method. Encryption processing to obtain encrypted data, wherein the preset encryption method includes: data encryption through the SM2 algorithm, which can improve data security.

An embodiment of the present invention also provides a storage medium, wherein a computer program is stored in the storage medium, wherein the computer program is set to execute the steps in any one of the above method embodiments when running.

Specifically, in this embodiment, the above-mentioned storage medium may be configured to store a computer program for performing the following steps:

S201: Construct an edge proxy and an edge computing model for the data to be processed. The edge proxy and the edge computing model include: an edge computing framework module and a business module, wherein the edge computing framework module includes: an edge service layer, a basic function layer, Operating system layer and hardware layer, the edge service layer is used for cloud-side collaboration of resources, data, intelligence and application management; the basic function layer is used to realize localized management, sub-device access, object model management and message queue functions; the operating system layer is used to realize the functions of system monitoring, real-time scheduling, security authentication, application authority and authority isolation; the hardware layer is used to create a data execution and computing environment for data to be processed;

S202: Preprocess the data to be processed based on the edge agent and the edge computing model;

S203: Encrypt the preprocessed data to be processed by using a preset encryption method to obtain encrypted data, wherein the preset encryption method includes: encrypting data by using an SM2 algorithm.

Specifically, in this embodiment, the above-mentioned storage medium may include but not limited to: U disk, read-only memory (Read-Only Memory, ROM for short), random access memory (Random Access Memory, RAM for short), mobile Various media that can store computer programs, such as hard disks, magnetic disks, or optical disks.

Compared with the prior art, the present invention first constructs an edge proxy and an edge computing model of the data to be processed, preprocesses the data to be processed based on the edge proxy and the edge computing model, and performs preprocessing on the preprocessed data to be processed by a preset encryption method. Encryption processing to obtain encrypted data, wherein the preset encryption method includes: data encryption through the SM2 algorithm, which can improve data security.

An embodiment of the present invention also provides an electronic device, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to run the computer program to perform any of the above method embodiments. step.

Specifically, the electronic device may further include a transmission device and an input and output device, wherein the transmission device is connected to the processor, and the input and output device is connected to the processor.

Specifically, in this embodiment, the above-mentioned processor may be configured to execute the following steps through a computer program:

S201: Construct an edge proxy and an edge computing model for the data to be processed. The edge proxy and the edge computing model include: an edge computing framework module and a business module, wherein the edge computing framework module includes: an edge service layer, a basic function layer, Operating system layer and hardware layer, the edge service layer is used for cloud-side collaboration of resources, data, intelligence and application management; the basic function layer is used to realize localized management, sub-device access, object model management and message queue functions; the operating system layer is used to realize the functions of system monitoring, real-time scheduling, security authentication, application authority and authority isolation; the hardware layer is used to create a data execution and computing environment for data to be processed;

S202: Preprocess the data to be processed based on the edge agent and the edge computing model;

S203: Encrypt the preprocessed data to be processed by using a preset encryption method to obtain encrypted data, wherein the preset encryption method includes: encrypting data by using an SM2 algorithm.

Compared with the prior art, the present invention first constructs an edge proxy and an edge computing model of the data to be processed, preprocesses the data to be processed based on the edge proxy and the edge computing model, and performs preprocessing on the preprocessed data to be processed by a preset encryption method. Encryption processing to obtain encrypted data, wherein the preset encryption method includes: data encryption through the SM2 algorithm, which can improve data security.

It should be noted that for the foregoing method embodiments, for the sake of simple description, they are expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence. Because of the present invention, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

In the foregoing embodiments, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

In the several embodiments provided by the present invention, it should be understood that the disclosed device can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the above units is only a logical function division. In actual implementation, there may be other division methods, for example, multiple units or components can be combined or integrated. to another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical or other forms.

The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the above-mentioned integrated units are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable memory. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a memory. Several instructions are included to make a computer device (which may be a personal computer, server or network device, etc.) execute all or part of the steps of the above-mentioned methods in various embodiments of the present invention. The aforementioned memory includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

The embodiments of the present invention have been described in detail above, and specific examples have been used in this paper to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only used to help understand the method and core idea of the present invention; at the same time, for Those skilled in the art will have changes in the specific implementation and scope of application according to the idea of the present invention. In summary, the contents of this specification should not be construed as limiting the present invention.

Claims (10)

1. A method for processing data encryption, the method comprising:

constructing an edge agent and an edge calculation model of data to be processed, wherein the edge agent and the edge calculation model comprise: the system comprises an edge computing framework module and a business module, wherein the edge computing framework module comprises: the cloud edge coordination system comprises an edge service layer, a basic function layer, an operating system layer and a hardware layer, wherein the edge service layer is used for cloud edge coordination of resource, data, intelligence and application management; the basic function layer is used for realizing the functions of localized management, sub-equipment access, object model management and message queue; the operating system layer is used for realizing the functions of system monitoring, real-time scheduling, safety authentication, application authority and authority isolation; the hardware layer is used for creating a data execution and computing environment of data to be processed;

preprocessing the data to be processed based on the edge agent and an edge calculation model;

the method comprises the following steps of carrying out encryption processing on preprocessed data to be processed through a preset encryption mode to obtain encrypted data, wherein the preset encryption mode comprises the following steps: data encryption is performed by the SM2 algorithm.

2. The method of claim 1, further comprising:

and forwarding the encrypted data to a background server through a communication module, and entering a low-power-consumption operation mode by the background server after the encrypted data is forwarded.

3. The method of claim 1, wherein the edge computation framework module further comprises:

the system comprises an Internet of things management center, wherein the Internet of things management center is used for realizing the functions of full-life-cycle management, data analysis, centralized training, business arrangement, application development, debugging and release of the sub-equipment.

4. The method of claim 3, wherein the edge computing framework module interacts with the business module via MQTT protocol, and wherein the edge computing framework module and the business module run in the same device and communicate by connecting to a local MQTT server.

5. The method of claim 4, wherein the service module is configured to implement functions of accessing, deleting, status updating, reporting data and events, and responding to a service control command of the end device.

6. The method of claim 2, wherein preprocessing the data to be processed based on the edge proxy and an edge computation model comprises:

and receiving data to be processed, preprocessing the direct physical quantity of the data to be processed by a preset judgment processing mode in the edge calculation frame module, and outputting the preprocessed data.

7. A processing apparatus for data encryption, the apparatus comprising:

the device comprises a building module and an edge computing module, wherein the building module is used for building an edge agent and an edge computing model of data to be processed, and the edge agent and the edge computing model comprise: the system comprises an edge computing framework module and a business module, wherein the edge computing framework module comprises: the cloud edge coordination system comprises an edge service layer, a basic function layer, an operating system layer and a hardware layer, wherein the edge service layer is used for cloud edge coordination of resource, data, intelligence and application management; the basic function layer is used for realizing the functions of localized management, sub-equipment access, object model management and message queue; the operating system layer is used for realizing the functions of system monitoring, real-time scheduling, safety authentication and application authority and authority isolation; the hardware layer is used for creating a data execution and computing environment of data to be processed;

the processing module is used for preprocessing the data to be processed based on the edge agent and the edge calculation model;

the encryption module is used for encrypting the preprocessed data to be processed in a preset encryption mode to obtain encrypted data, wherein the preset encryption mode comprises the following steps: data encryption is performed by the SM2 algorithm.

8. The apparatus of claim 7, further comprising:

and the forwarding module is used for forwarding the encrypted data to the background server through the communication module, and when the encrypted data is forwarded, the background server enters a low-power-consumption operation mode.

9. A storage medium, in which a computer program is stored, wherein the computer program is arranged to perform the method of any of claims 1 to 6 when executed.

10. An electronic device comprising a memory and a processor, wherein the memory has stored therein a computer program, and wherein the processor is arranged to execute the computer program to perform the method of any of claims 1 to 6.

Images