CN118551419A - Data read/write method, data read/write device, and computer-readable storage medium - Google Patents

Abstract

The present invention discloses a data reading and writing method, a data reading and writing device, and a computer-readable storage medium. The data reading and writing method obtains the initial address of the data to be written in response to a user's write request to a target memory. Based on the initial address and a preset encryption algorithm, the encrypted physical address of the data to be written is determined. The data to be written written at the initial address is stored in the encrypted physical address corresponding to the initial address to obtain the target storage data. Therefore, in the process of data reading and writing, the encrypted physical address corresponding to each data block in the data to be written is determined according to the initial address of the data to be written and the preset encryption algorithm, and the data is stored based on the encrypted physical address, thereby effectively improving the security of data storage.

Description

Data reading and writing method, data reading and writing device, and computer readable storage medium

Technical Field

The present invention relates to the field of data processing, and in particular to a data reading and writing method, a data reading and writing device, and a computer-readable storage medium.

Background Art

With the continuous development of chip technology, the demand for chip security has gradually increased. Therefore, how to improve chip security has become an important technical issue. In related technologies, the storage content in the chip is often encrypted as a whole. However, this encryption method cannot effectively improve the security of data storage in the chip. Chip security is still a difficult technical problem to solve.

Summary of the invention

The main purpose of the present invention is to provide a data reading and writing method, aiming to improve the security of data storage.

To achieve the above object, the present invention provides a data reading and writing method, which comprises:

In response to a user's write request to a target memory, obtaining an initial address of data to be written;

Based on the initial address and a preset encryption algorithm, determining the encrypted physical address of the data to be written;

The data to be written written at the initial address is stored in the encrypted physical address corresponding to the initial address to obtain target storage data.

Preferably, after responding to the user's write request to the target memory and before determining the encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm, the data reading and writing method further includes:

Outputting encryption prompt information indicating whether to encrypt the writing of the data to be written;

In response to a confirmation operation of the user on the encryption prompt information, verifying the key information of the user;

The obtaining of the initial address of the data to be written comprises:

When the key information satisfies a preset condition, an initial address of the data to be written is obtained.

Preferably, determining the encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm includes:

Based on a preset random encryption algorithm, the storage order of the data to be written corresponding to the initial address is randomly processed to obtain a first address order corresponding to the data to be written;

Determine a first encrypted mapping relationship according to the first address sorting;

The encrypted physical address of the data to be written is determined according to the initial address and the first encrypted mapping relationship.

Preferably, determining the encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm includes:

The odd-numbered bits of the storage sequence of the data to be written corresponding to the initial address are written first to obtain a second address sequence corresponding to the data to be written; or

The even-numbered bits of the storage sequence of the data to be written corresponding to the initial address are written first, so as to obtain a third address sequence corresponding to the data to be written;

Determine a corresponding second encrypted mapping relationship according to the second address sorting or the third address sorting;

The encrypted physical address of the data to be written is determined according to the initial address and the second encrypted mapping relationship.

Preferably, after the step of storing the data to be written at the initial address in the encrypted physical address corresponding to the initial address to obtain the target stored data, the data reading and writing method further comprises:

In response to a user's request to read the target storage data, verifying the user's access rights to the target storage data;

In the case where the user has access rights, determining an encrypted physical address corresponding to the target storage data according to the encryption algorithm;

The target storage data is read from the encrypted physical address.

Preferably, after verifying the user's access rights to the target storage data, the data reading and writing method further includes:

In the case where the user does not have access rights, converting the encrypted physical address corresponding to the target storage data into an initial address;

The corresponding storage data is read from the initial address.

Preferably, the verifying the user's access rights to the target storage data includes:

receiving key information from the user;

Verify, based on the key information, whether the user has access rights to read the target storage data based on an encryption algorithm.

As an implementation manner, the target memory is a Nand-flash memory.

The present invention further proposes a data reading and writing device, which includes a target memory, a computer-readable storage medium and a processor. The target memory is used to read and write data, and the target memory is a Nand-flash memory; the computer-readable storage medium is used to store a computer program; and the processor is used to implement the steps of the data reading and writing method as described above when executing the computer program.

The present invention further proposes a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the data reading and writing method as described above are implemented.

In the embodiment of the present application, the target memory can obtain the initial address of the data to be written by responding to the user's write request to the target memory. Based on the initial address and a preset encryption algorithm, the encrypted physical address of the data to be written is determined. The data to be written written at the initial address is stored in the encrypted physical address corresponding to the initial address to obtain the target storage data.

Compared with the prior art, in the embodiment of the present application, in response to a user's write request to write data in the target memory, the initial address of the data to be written can be obtained first, and after obtaining the initial address of the data to be written, the encrypted physical address for encrypting the address to be written is determined according to the initial address and a preset encryption algorithm. After determining the encrypted physical address, the data to be written can be stored in the encrypted physical address to obtain the target storage data.

The beneficial effect of the technical solution of the present invention is that: during the process of data reading and writing, the encrypted physical address corresponding to each data block in the data to be written is determined according to the initial address of the data to be written and a preset encryption algorithm, and data storage is realized based on the encrypted physical address, thereby effectively improving the security of data storage.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

FIG1 is a schematic flow chart of an embodiment of a data reading and writing method of the present invention;

FIG. 2 is a flow chart of another embodiment of the data reading and writing method of the present invention.

The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings.

DETAILED DESCRIPTION

The scheme in the embodiment of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiment of the present invention. Obviously, the described embodiment is only a part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

It should be noted that all directional indications in the embodiments of the present invention (such as up, down, left, right, front, back, etc.) are only used to explain the relative position relationship, movement status, etc. between the components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication will also change accordingly.

It should also be noted that when an element is referred to as being "fixed on" or "disposed on" another element, it may be directly on the other element or there may be an intermediate element at the same time. When an element is referred to as being "connected to" another element, it may be directly connected to the other element or there may be an intermediate element at the same time.

In addition, the descriptions of "first", "second", etc. in the present invention are only used for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the ability of ordinary technicians in the field to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

The present invention proposes a data reading and writing method, referring to FIG1, which is a flow chart of a data reading and writing method disclosed in an embodiment of the present application. The data reading and writing method can be applied to a target memory. As shown in FIG1, the data reading and writing method can include the following steps.

Step 101: In response to a user's write request to a target memory, an initial address of data to be written is obtained.

The target memory may be a Nand-flash memory, in which a data block Block is the smallest erasing unit, a Block may include multiple read-write pages Page, and a Page may include multiple bytes Byte.

Specifically, the target memory may also be a small-capacity SPI nand flash for loading the master control and a large-capacity nand flash such as emmc, ssd, etc.

The write request may be a data write request determined according to a write operation performed by a user through a client, and the write request may be used to start writing the to-be-written data into the target storage.

The data to be written may include multiple data blocks, and the multiple data blocks in the data to be written may be arranged in a preset order. The process of writing the data to be written into the memory may be a process of mapping the multiple data blocks to different data block positions in the memory one by one.

The initial address may be a preset write address of a data block determined in a one-to-one mapping order with respect to the multiple data blocks of the data to be written, and the initial address may be a data arrangement order of the data to be written before data encryption. The initial address may be used to represent the data address stored corresponding to the multiple data blocks and the original arrangement order of the multiple data blocks.

It should be noted that when the user needs to write data into the target storage, the user can send a write request to the target storage through the client. After receiving the write request from the user, the target storage can directly obtain the initial address corresponding to the order of the data to be written.

Step 102: Determine the encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm.

The encryption algorithm can be used to encrypt the writing order of multiple data blocks of data to be written, and then obtain the encrypted physical addresses corresponding to the multiple data blocks after encryption. The encryption algorithm can include but is not limited to a random algorithm for randomly processing the writing order of multiple data blocks of data to be written, an adjustment algorithm for adjusting the writing order according to the partition principle of the target memory, and an arrangement algorithm for rearranging the writing order according to the parity of the arrangement order of the data to be written.

The encrypted physical address can be the write address where the multiple data blocks of the data to be written are actually written into the target memory according to the encrypted mapping relationship. The encrypted physical address can be used to represent the data addresses corresponding to the multiple data blocks written into the target memory determined after the write order of the partition corresponding to the data to be written is encrypted.

After obtaining the initial address of the data to be written, the encrypted physical address of the data to be written can be determined based on the initial address and a preset encryption algorithm. Specifically, the writing order corresponding to the multiple data blocks can be determined according to the initial addresses corresponding to the multiple data blocks of the data to be written. The writing order can be a preset writing order in which the multiple data blocks are written to the target memory in a preset order. After determining the preset writing order corresponding to the initial address, the preset writing order can be encrypted based on a preset encryption algorithm to determine the target writing order corresponding to the multiple data blocks after the writing order is encrypted. After determining the target writing order corresponding to the multiple data blocks being written to the target memory, the initial addresses corresponding to the multiple data blocks of the data to be written can be determined.

Step 103: The data to be written at the initial address is stored in the encrypted physical address corresponding to the initial address to obtain the target storage data.

The target storage data may be a target data block stored at the encrypted physical address, and the target data block may be any data block among a plurality of data blocks. The target storage data is stored in the corresponding encrypted physical address to facilitate subsequent query and use.

After determining the encrypted physical addresses corresponding to the multiple data blocks to be written, the multiple data blocks can be written to the corresponding encrypted physical addresses, and after the data is written, the data block corresponding to each encrypted physical address is stored to obtain the target storage data.

In another embodiment, after the target storage data is obtained by writing the data to be written at the initial address and storing the encrypted physical address corresponding to the initial address, the user's access right to the target storage data is verified in response to the user's request to read the target storage data. If the user has access rights, the encrypted physical address corresponding to the target storage data is determined according to the encryption algorithm. The target storage data is read from the encrypted physical address.

In another embodiment, when the user does not have access rights, the encrypted address corresponding to the target storage data is converted into an initial address, and the corresponding storage data is read from the initial address.

It should be noted that after multiple data blocks are written to the corresponding encrypted physical addresses and stored, the user can send a read request for the target storage data to the target storage through the client. The target storage can receive the read request sent by the user, and respond to the read request to verify the user's access rights to the target storage data. If the user has access rights, the encrypted physical address corresponding to the target storage data can be determined according to the corresponding encryption algorithm. After determining the encrypted physical address corresponding to the target storage data, the target storage data can be read from the encrypted physical address. If the user has access rights to the target storage data, the target storage data can be read from the encrypted physical address of the target storage.

In the case where the user does not have access rights, the initial address corresponding to the target storage data can be determined, and the storage data at the initial address can be read. The storage data at the initial address is not the target storage data, that is, when the user reads the target storage data, if the user does not have access rights to the target storage data, the encrypted physical address corresponding to the target storage data is directly used as the initial address to read the storage data at the initial address.

In the method embodiment described in FIG. 1 , the initial address of the data to be written can be obtained by responding to a user's write request to the target memory. Based on the initial address and a preset encryption algorithm, the encrypted physical address of the data to be written is determined. The data to be written at the initial address is stored in the encrypted physical address corresponding to the initial address to obtain the target storage data. Therefore, during the process of reading and writing data, the encrypted physical address corresponding to each data block in the data to be written is determined according to the initial address of the data to be written and the preset encryption algorithm, and the data is stored based on the encrypted physical address, thereby effectively improving the security of data storage.

Referring to Figure 2, Figure 2 is a flow chart of another data reading and writing method disclosed in an embodiment of the present application. The data reading and writing method can be applied to a target memory, which can be a Nand-flash memory. As shown in Figure 1, the data reading and writing method can include the following steps.

Step 201 : In response to a user's write request to a target storage device, output encryption prompt information indicating whether to encrypt the writing of the data to be written.

The encryption prompt information can be used to prompt the user whether to perform encryption processing during this writing.

It should be noted that if the user confirms to perform encryption processing on this write, the encryption processing of this write can be implemented, and the data to be written can be written into the target memory according to the encrypted mapping relationship after the encryption processing. And after the data to be written is written into the target memory according to the encrypted mapping relationship after the encryption processing, the mapping relationship between the encrypted mapping relationship and the encrypted physical address can be recorded. If the user cancels the encryption prompt information this time, the data to be written can be written into the target memory according to the preset writing order. And after the user cancels the encryption operation, it can be written according to the encryption logic, but the corresponding mapping relationship is not recorded.

Step 202: In response to the user's confirmation operation on the encryption prompt information, verify the user's key information.

The key information may be verification information input by the user through the client, and the key information may include user fingerprint information, user password information, etc.

After receiving the user's confirmation operation on the encryption prompt information, the target storage can respond to the user's confirmation operation on the encryption prompt information and verify the user's key information to determine whether the user has the permission to write encryption to the target storage.

Step 203: When the key information meets the preset conditions, the initial address of the data to be written is obtained.

When the key information satisfies the preset conditions, that is, when it is determined that the user has the permission to write encryption to the target storage, the writing order of the multiple data blocks of the data to be written can be converted from a one-to-one mapping with the partition position of the target storage to an encrypted mapping with the partition position of the target storage. Therefore, when the user's key information satisfies the preset conditions, the initial addresses corresponding to the multiple data blocks of the data to be written can be obtained.

In other embodiments, when the key information does not meet the preset conditions, that is, when it is determined that the user does not have the permission to write encrypted data to the target storage, the client can prompt the user that encrypted writing cannot be performed, and write multiple data blocks of the data to be written based on the original initial address, and store the written multiple data blocks to the corresponding initial address.

Step 204: Based on a preset random encryption algorithm, the sequence of the initial addresses is randomly processed to obtain a first address sequence corresponding to the data to be written.

The first address sequence may be a write order in which data of a plurality of data blocks to be written are randomly processed.

When it is determined that the encryption operation is performed during this writing, the order of the initial addresses can be randomly processed based on a preset random encryption algorithm to disrupt the writing order of the initial addresses and obtain a first address sequence corresponding to the data to be written.

Step 205: Determine a first encrypted mapping relationship according to the first address sorting.

The first encryption mapping relationship may be a correspondence between a writing order (a disrupted writing order) determined based on a random encryption algorithm and an order of data blocks actually written.

After determining the first address sequence, the first encryption mapping relationship can be determined according to the first address sequence. Specifically, the first encryption mapping relationship can be determined according to the first address sequence and the order in which the multiple data blocks to be written are written into the corresponding initial addresses.

Step 206: Determine the encrypted physical address of the data to be written according to the initial address and the first encrypted mapping relationship.

After the first encryption mapping relationship is determined, the encrypted physical address corresponding to each data block in the data to be written may be determined according to the first encryption mapping relationship and initial addresses corresponding to multiple data blocks in the data to be written.

Exemplarily, before encrypting the writing order of the data to be written, the multiple data blocks of the data to be written and their corresponding initial addresses may be as shown in Table (1):

The data block written Block location 1 1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 9 9 10 10 … … … … … … 1024 1024

Table (1)

Exemplarily, after determining the initial addresses corresponding to the multiple data blocks to be written, the order in which the data blocks to be written are written into their corresponding data block positions can be randomly encrypted to obtain the corresponding encrypted physical addresses after random encryption. The physical encrypted addresses can be shown in Table (2):

The data block written Add mapping table Block location 1 1-X1 1 2 2-X2 2 3 3-X3 3 4 4-X4 4 5 5-X5 5 6 6-X6 6 7 7-X7 7 8 8-X8 8 9 9-X9 9 10 10-X10 10 … … … … … … 1024 1024

Table (2)

For example, the method of encrypting the order in which the data blocks to be written are written into their corresponding data block positions may be based on a random encryption algorithm. The order of the addresses to be written before and after the random encryption may be as shown in Table (3):

Table (3)

Step 207 : The odd-numbered bits of the storage sequence of the data to be written corresponding to the initial address are written first, so as to obtain a second address sequence corresponding to the data to be written.

The second address sorting may be a writing order in which the order of writing multiple data blocks of data to be written is adjusted according to the odd-bit-first writing adjustment order, and the order of writing different partitions of the data blocks is adjusted.

Exemplarily, when the target memory is divided into 1-11 partitions, the odd-numbered storage areas may be arranged and placed first, and then the even-numbered storage areas may be arranged and placed, to obtain a second address sorting determined by the arrangement order.

Specifically, reference may be made to Table (4), which is a schematic diagram of a sorting address determined by arranging and placing the storage areas of odd bits according to the parity bits of the sequence numbers of the storage areas of the target memory:

Table (4)

Step 208 , the even-numbered bits of the storage sequence of the data to be written corresponding to the initial address are written first, so as to obtain a third address sequence corresponding to the data to be written.

The third address sorting may be a writing order in which the order of writing multiple data blocks of data to be written is adjusted according to the adjustment order of writing even bits first, and the order of writing different partitions of the data blocks is adjusted.

It should be noted that step 208 and step 207 are parallel technical solutions, and are respectively address sorting adjusted in the order of odd and even priority writing.

Specifically, according to the partitions of the target memory and then the partition serial numbers, the serial numbers of each required storage area are shuffled according to different rules. When the target memory is divided into 1-11 partitions, the storage areas with even bits can be arranged and placed preferentially, and then the storage areas with odd bits can be arranged and placed, thereby obtaining a new address sort, i.e., the second address sort.

Referring to Table (5), Table (5) is a schematic diagram of a sorting address determined by arranging and placing the storage areas with even bits according to the parity bits of the serial numbers of the storage areas of the target memory.

Table (5)

In other implementations, when it is determined that the write operation is to be encrypted, different partitions may be exchanged for write blocks corresponding to different data blocks according to the partition principle of the target memory, thereby adjusting the second address order corresponding to the multiple data blocks to be written.

Exemplarily, the target memory can be further divided into different areas according to the partitions. For example, when the target memory is divided into 1-10 partitions, the storage areas with partition numbers 1-5 and the storage areas 6-10 can be arranged crosswise in sequence to obtain a new address sort, i.e., the second address sort.

Referring to Table (6), Table (6) is a schematic diagram of re-dividing the storage area of the target memory to determine a new sorting address.

Table (6)

Step 209: Determine a corresponding second encryption mapping relationship according to the second address sorting or the third address sorting.

The second encrypted mapping relationship may be a correspondence between a second address sequence determined after adjusting the write address of the data to be written based on the above adjustment method and a plurality of storage areas in the target memory.

After determining the second address sequence, the second encrypted mapping relationship can be determined according to the second address sequence. Specifically, the corresponding second encrypted mapping relationship can be determined according to the second address sequence and the order in which the multiple data blocks to be written are written into the corresponding initial addresses.

Step 210: Determine the encrypted physical address of the data to be written according to the initial address and the second encrypted mapping relationship.

After the second encrypted mapping relationship is determined, the encrypted physical address corresponding to each data block in the data to be written may be determined according to the second encrypted mapping relationship and initial addresses corresponding to multiple data blocks in the data to be written.

Among them, steps 204 to 206 and steps 207 to 209 are parallel schemes, and one of the two parallel schemes can be executed to implement the encrypted data reading and writing method.

Step 211: In response to a user's request to read target storage data, verify the user's access rights to the target storage data.

The read request may be a request for a user to send a read request to a target storage device through a client to read target storage data, and the access permission may be whether the user has the permission to read the target storage data.

In some specific implementations, verifying the user's access rights to the target storage data may be done by receiving key information from the user. After receiving the key information from the user, the user's access rights to the target storage data may be verified based on the key information.

It should be noted that if the key information from the user is consistent with the key information corresponding to when the target storage data is written, it can be determined that the user has access rights to the target storage data; if the key information from the user is inconsistent with the key information corresponding to when the target storage data is written, it can be determined that the user does not have access rights to the target storage data.

Step 212: If the user has access rights, determine the encrypted physical address corresponding to the target storage data according to the encryption algorithm.

In the case where the user has access rights to the target storage data, the encrypted physical address corresponding to the target storage data can be determined according to the encryption algorithm.

Step 213: Read the target storage data from the encrypted physical address.

After the encrypted physical address corresponding to the target storage data is determined, the target storage data can be read from the encrypted physical address.

It should be noted that, when it is determined that the user has access rights to the target data, it means that the stored data can be read according to the encrypted physical address corresponding to the target stored data to obtain the target stored data.

Step 214: When the user does not have access rights, the encrypted physical address corresponding to the target storage data is converted into an initial address.

When the user does not have access rights to the target storage data, the corresponding initial address can be directly determined according to the encrypted physical address of the target storage data. Specifically, the initial address corresponding to the encrypted physical address of the target storage data can be determined according to the determined first encryption mapping relationship or the second encryption mapping relationship.

Step 215: Read the corresponding storage data from the initial address.

After the initial address corresponding to the encrypted physical address is determined, the corresponding storage data can be read from the initial address.

It should be noted that the correct target storage data cannot be read from the initial address. If the user does not have access rights to the target storage data, the correct target storage data cannot be read. After reading the storage data corresponding to the initial address, an access rights prompt message may be sent to the user. The access rights prompt message may be used to prompt the user that the user does not have access rights to the target storage data.

In the method embodiment described in FIG. 2 , the initial address of the data to be written can be obtained by responding to a user's write request to the target memory. Based on the initial address and a preset encryption algorithm, the encrypted physical address of the data to be written is determined. The data to be written at the initial address is stored in the encrypted physical address corresponding to the initial address to obtain the target storage data. Therefore, during the process of reading and writing data, the encrypted physical address corresponding to each data block in the data to be written is determined according to the initial address of the data to be written and the preset encryption algorithm, and the data is stored based on the encrypted physical address, thereby effectively improving the security of data storage.

It should be understood that the same or corresponding information in the above different embodiments can be referenced to each other.

It should be understood that, although the various steps in the flowcharts of Figures 1 and 2 are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless there is a clear description in this article, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least a part of the steps in Figures 1 and 2 may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

The above description is only a partial or preferred embodiment of the present invention. Neither the text nor the drawings can limit the scope of protection of the present invention. All equivalent structural changes made by using the contents of the present invention specification and drawings under the overall concept of the present invention, or direct/indirect application in other related technical fields are included in the scope of protection of the present invention.

Claims (10)

1. The data reading and writing method is characterized by comprising the following steps of:

responding to a writing request of a user to a target memory, and acquiring an initial address of data to be written;

Determining an encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm;

and correspondingly storing the data to be written in the initial address in the encrypted physical address corresponding to the initial address to obtain target storage data.

2. The data read-write method according to claim 1, characterized in that after said responding to a user's write request to a target memory and before determining the encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm, the data read-write method further comprises:

outputting encryption prompt information of whether the writing of the data to be written is encrypted or not;

responding to the confirmation operation of the user on the encryption prompt information, and verifying the key information of the user;

The obtaining the initial address of the data to be written includes:

And under the condition that the key information meets the preset condition, acquiring the initial address of the data to be written.

3. The method according to claim 1, wherein the determining the encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm includes: based on a preset random encryption algorithm, carrying out random processing on the storage sequence of the data to be written corresponding to the initial address to obtain a first address ordering corresponding to the data to be written;

Determining a first encryption mapping relation according to the first address ordering;

and determining the encrypted physical address of the data to be written according to the initial address and the first encryption mapping relation.

4. The method according to claim 1, wherein the determining the encrypted physical address of the data to be written based on the initial address and a preset encryption algorithm includes:

Preferentially writing odd bits of the storage sequence of the data to be written corresponding to the initial address to obtain a second address ordering corresponding to the data to be written; or (b)

Preferentially writing even bits of the storage sequence of the data to be written corresponding to the initial address to obtain a third address ordering corresponding to the data to be written;

Determining a corresponding second encryption mapping relation according to the second address ordering or the third address ordering;

And determining the encrypted physical address of the data to be written according to the initial address and the second encryption mapping relation.

5. The data reading and writing method according to any one of claims 1 to 4, wherein after the step of obtaining target storage data, the data to be written at the initial address is correspondingly stored in the encrypted physical address corresponding to the initial address, the data reading and writing method further comprises:

Responding to a read request of a user for the target storage data, and verifying the access authority of the user for the target storage data;

Under the condition that the user has access rights, determining an encrypted physical address corresponding to target storage data according to the encryption algorithm;

and reading the target storage data from the encrypted physical address.

6. The data read-write method according to claim 5, characterized in that after verifying the user's access right to the target storage data, the data read-write method further comprises:

under the condition that the user does not have access rights, converting an encrypted physical address corresponding to the target storage data into an initial address;

And reading corresponding storage data from the initial address.

7. The data read-write method according to claim 5, wherein said verifying the access right of the user to the target storage data includes:

Receiving key information from the user;

And verifying whether the user has access rights for reading the target storage data based on an encryption algorithm according to the key information.

8. The method according to any one of claims 1 to 4, wherein the target memory is a Nand-flash memory.

9. A data reading and writing apparatus, characterized in that the data reading and writing apparatus comprises:

the target memory is used for reading and writing data and is a Nand-flash memory;

a computer readable storage medium storing a computer program;

processor for implementing the steps of the data read-write method according to any one of claims 1-8 when executing said computer program.

10. A computer readable storage medium, characterized in that the computer readable storage medium has stored thereon a computer program which, when executed by a processor, implements the steps of the data read-write method according to any of claims 1-8.