METHOD, APPARATUS, AND SYSTEM OF DETECTING DATA SECURITY

• US 20150033334A1
• Filed: 08/04/2014
• Published: 01/29/2015
• Est. Priority Date: 07/29/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Inventors: TANG, WEN, WANG, XUXIN, YAO, JIANHUI, LIU, LE, CAI, CHENG, ZHANG, JIN
• Granted Patent: US 9,633,227 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2109 Game systems

Abstract

Methods, apparatus and system of detecting data security are provided herein. Data for detection are acquired. Whether the data for detection are to be updated for a first time is determined. When the data for detection are to be updated for the first time, the data for detection can be updated, encrypted, and stored as first encrypted data. When the data for detection are not to be updated for the first time, the data for detection can be acquired and encrypted to provide second encrypted data. The second encrypted data are compared with the stored first encrypted data to determine whether the second encrypted data having been unauthorizedly modified. The present disclosure is simple to be implemented without relying on specific logical of a certain application. Development costs, maintenance costs and occupancy of server resources can be reduced. System performance and user experience can be improved.

Claims

1. A method of detecting data security, comprising:

acquiring data for detection, wherein the data for detection include data that need a security detection and that need to be updated;

determining whether the data for detection are to be updated for a first time; and

when the data for detection are to be updated for the first time,

updating the data for detection,

obtaining the updated data for detection,

encrypting the updated data for detection to provide first encrypted data, and

storing the first encrypted data;

or

when the data for detection are not to be updated for the first time,

acquiring an original value of the data for detection,

encrypting the original value to provide second encrypted data,

acquiring the stored first encrypted data, and

determining that the data for detection have been unauthorizedly modified, after

determining that the second encrypted data do not equal to the first encrypted data.

2. The method according to claim 1, wherein the acquiring of data for detection includes:

acquiring data that need to be updated, and determining that the data that need to be updated are the data for detection;

or

acquiring data that need to be updated, and after determining that the data that need to be updated are key data, determining that the data that need to be updated are the data for detection.

3. The method according to claim 1, further including:

receiving address configuration information of data that need to be monitored sent from a server; and

determining whether the security detection is needed for the data, according to the address configuration information of the data;

wherein the acquiring of data for detection includes;

after determining that the security detection is needed for the data, acquiring the data as the data for detection.

4. The method according to claim 1, wherein, after determining that the data for detection have been unauthorizedly modified, the method further includes:

sending a notification message to the server, wherein the notification message indicates that the data have been unauthorizedly modified.

5. The method according to claim 1, further including:

storing the second encrypted data, when that the second encrypted data do not equal to the first encrypted data is determined.

6. An apparatus of detecting data security, comprising:

an acquiring unit configured to acquire data for detection, wherein the data for detection include data that need a security detection and that need to be updated;

a determining unit configured to determine whether the data for detection are to be updated for a first time;

a first processing unit configured, after determining that the data for detection are to be updated for the first time, to update the data for detection, to obtain the updated data for detection, to encrypt the updated data for detection to provide first encrypted data, and to save the first encrypted data; and

a second processing unit configured, after determining that the data for detection are not to be updated for the first time, to acquire an original value of the data for detection, to encrypt the original value to provide second encrypted data, to acquire the stored first encrypted data, and to determine that the data for detection have been unauthorizedly modified, after determining that the second encrypted data do not equal to the first encrypted data.

7. The apparatus according to claim 6, wherein:

the acquiring unit is configured to acquire data that need to be updated, and determine that the data that need to be updated are the data for detection.

8. The apparatus according to claim 6, wherein:

the acquiring unit is configured to acquire data that need to be updated, and, after determining that the data that need to be updated are key data, determine that the data that need to be updated are the data for detection.

9. The apparatus according to claim 6, further including a receiving unit and a determining unit, wherein

the receiving unit is configured to receive address configuration information of data that need to be monitored sent from a server;

the determining unit is configured to determine whether the security detection is needed for the data, according to the address configuration information of the data; and

the acquiring unit is configured, after determining that the security detection is needed for the data, to acquire the data as the data for detection.

10. The apparatus according to claim 6, wherein:

the second processing unit is further configured to send a notification message to the server after determining that the data for detection have been unauthorizedly modified, wherein the notification message indicates that the data have been unauthorizedly modified.

11. The apparatus according to claim 6, wherein:

the second processing unit is further configured to store the second encrypted data, when that the second encrypted data do not equal to the first encrypted data is determined.

12. A non-transitory computer-readable medium having computer program for, when being executed by a processor, performing a method of detecting data security, the method comprising:

acquiring data for detection, wherein the data for detection include data that need a security detection and that need to be updated;

determining whether the data for detection are to be updated for a first time; and

when the data for detection are to be updated for the first time,

updating the data for detection,

obtaining the updated data for detection,

encrypting the updated data for detection to provide first encrypted data, and

storing the first encrypted data;

or

when the data for detection are not to be updated for the first time,

acquiring an original value of the data for detection,

encrypting the original value to provide second encrypted data,

acquiring the stored first encrypted data, and

determining that the data for detection have been unauthorizedly modified, after

determining that the second encrypted data do not equal to the first encrypted data.

13. The non-transitory computer-readable medium according to claim 12, wherein the acquiring of data for detection includes:

acquiring data that need to be updated, and determining that the data that need to be updated are the data for detection;

or

acquiring data that need to be updated, and after determining that the data that need to be updated are key data, determining that the data that need to be updated are the data for detection.

14. The non-transitory computer-readable medium according to claim 12, the method further including:

receiving address configuration information of data that need to be monitored sent from a server; and

determining whether the security detection is needed for the data, according to the address configuration information of the data;

wherein the acquiring of data for detection includes;

after determining that the security detection is needed for the data, acquiring the data as the data for detection.

15. The non-transitory computer-readable medium according to claim 12, wherein, after determining that the data for detection have been unauthorizedly modified, the method further includes:

sending a notification message to the server, wherein the notification message indicates that the data have been unauthorizedly modified.

16. The non-transitory computer-readable medium according to claim 12, the method further including:

storing the second encrypted data, when that the second encrypted data do not equal to the first encrypted data is determined.