A computer network security protection method

Abstract

The invention discloses a computer network security protection method, which relates to the field of computer security technology and comprises the following steps: strengthening login control, formulating security strategies, key generation, generating a key K1 and a key K2 in a data transmission process through a key management service, extracting a user code D, a timestamp T and a hash value H in the key K1 through system operation, combining the key K1 and generating a key K3 according to the timestamp T and the user code D, data encryption, updating and maintaining the key encryption system, daily monitoring and recording, and having multiple means such as using a multi-key encryption method, introducing a timestamp, using a random salt value, adding a random initialization vector, combining an encryption block and a data block, and combining multi-layer encryption and verification information, thereby effectively improving the security and unpredictability of data transmission, thereby enhancing the effect of the quality of computer network security protection.

Description

Technical Field

[0001] The present invention relates to the technical field of computer security, and in particular to a computer network security protection method. Background Art

[0002] With the continuous advancement of technology, China's Internet has grown in scale and Internet applications have become diversified. Network security refers to the protection of the hardware, software and data in the network system, which will not be damaged, changed or leaked due to accidental or malicious reasons, and the continuous and reliable operation of the system and uninterrupted network services. Network security refers to the use of various technologies and management measures to ensure the normal operation of the network system, thereby ensuring the availability, integrity and confidentiality of network data. With the rapid development of the Internet, computer network protection has received more and more attention.

[0003] Traditional network security protection methods often rely on a single protection measure, such as simple password verification or firewall settings, but they are difficult to prevent in the face of escalating network attacks, and the protection measures often lack dynamism and flexibility, and cannot adjust the protection strategy in time according to changes in the network environment and security threats. Summary of the invention

[0004] The purpose of the present invention is to provide a computer network security protection method to solve the problems raised in the above background technology.

[0005] To achieve the above object, the present invention provides the following technical solution: a computer network security protection method, comprising the following steps:

[0006] Strengthen login controls, ensure that all user accounts use complex and unique passwords, add additional verification steps, improve account security, and configure network devices to limit access to systems, allowing only authorized users to access critical systems;

[0007] Develop security policies, set up firewalls to filter network traffic and block malicious network requests, shut down unnecessary network services, and deploy intrusion detection systems and intrusion prevention systems to detect and respond to network attacks;

[0008] Key generation: Generate key 1 K1 and key 2 K2 in the data transmission process through key management service, extract user code D, timestamp T and hash value H in key 1 K1 through system operation, combine key 1 K1 and generate key 3 K3 according to timestamp T and user code D;

[0009] Data encryption: encrypt key 1 K1 and key 2 K2 through the key encryption algorithm to obtain ciphertext 1 C1 and ciphertext 2 C2. Combine the hash value H with ciphertext 1 C1 to obtain the encrypted block HC. Combine ciphertext 2 C2 with timestamp T and user code D to obtain data block TC. Use key 3 K3 and the symmetric encryption algorithm to finally encrypt data block TC to obtain the final ciphertext 3 CS.

[0010] System update and maintenance: regularly update computer operating systems and applications, fix known security holes and weaknesses, and perform regular maintenance on system hardware to ensure stable operation of computer systems;

[0011] Daily monitoring and recording, configure monitoring tools to monitor network activities and security events in real time, and record important log information, including login attempts, abnormal traffic, and security events, for subsequent security audits and investigations.

[0012] Optionally, in the enhanced login control step, the complexity of the password is ensured, including a combination of uppercase and lowercase letters, numbers and special characters, and a scoring system is used to score user passwords. At the same time, users are forced to change their passwords regularly, the number of failed password attempts is limited, and a locking mechanism is implemented after multiple consecutive failures. Appropriate access permissions are set for files and directories, including read, write and execute permissions, and additional verification steps are added, such as mobile phone verification codes, fingerprint recognition or facial recognition.

[0013] Optionally, in the key generation step, the hash value H, the timestamp T, and the user code D are combined into a string S, and the specific calculation formula is:

[0014]

[0015] in Extract the average value of timestamp T for the period;

[0016] H is the hash value, D is the user code;

[0017] The calculation formula of key three K3 is:

[0018]

[0019] Where S is the string S, (Y1+Y2) is the sum of two sets of random salt values;

[0020] By introducing the timestamp T, the timeliness and unpredictability of the encrypted data can be increased to prevent replay attacks. The use of a random salt value Y can ensure that even if two input strings are similar, the key three K3 will be different, increasing the security of the system.

[0021] Optionally, in the data encryption step, an encryption function is used to encrypt key 1 K1 and key 2 K2. The specific calculation formula is as follows:

[0022] C1=E K1 (P, V, D), C2 = E K2 (P, V, D)

[0023] Where C1 is ciphertext 1, C2 is ciphertext 2;

[0024] E K1 is the encryption function 1, E K2 is encryption function 2;

[0025] P is plaintext, V is a random initialization vector;

[0026] By adding a random initialization vector V to the encryption function, a new random initialization vector V is used for each encryption, which increases the randomness of the data transmission process and improves the security protection effect;

[0027] The calculation formula for encryption block HC and data block TC is:

[0028] HC=C1+H,TC=C2+T+D

[0029] Where C1 is ciphertext 1, C2 is ciphertext 2;

[0030] H is the hash value, D is the user code;

[0031] The introduction of encryption block HC combines ciphertext C1 and hash value H of key K1, increasing the complexity and unpredictability of data, thereby improving security. Data block TC combines ciphertext C2, timestamp T and user code D, providing additional authentication and timeliness checks, further enhancing security during network data transmission.

[0032] Optionally, in the data encryption step, the ciphertext three CS calculation formula is:

[0033]

[0034] Where (1+W1) is the weight of key 2 K2;

[0035] W2 is the weight of key three K3; (R1, R2) are two independent pseudo-random number factors;

[0036] M is the modulus, a fixed integer;

[0037] The final ciphertext CS contains multiple layers of encryption and verification information. For example, the encryption block HC itself is an encrypted data block, which is then combined with additional metadata such as timestamp T and user code D for secondary encryption, making it difficult for attackers to directly crack or tamper with the data. In addition, the key K3 is dynamically generated based on the key K1, timestamp T and user code D, which further increases the complexity and unpredictability of the key and improves the security of the computer network.

[0038] Optionally, in the step of formulating a security policy, when deploying an intrusion detection system, it is necessary to analyze the network topology and determine the best deployment location, which includes border gateways, internal subnet boundaries, and important servers. Based on the selected IDS type, deploy sensor devices, configure the IDS to detect potential intrusion behaviors, define rules and policies, configure the IDS to generate alerts and notify the security team or administrator. When deploying an intrusion prevention system, deploy IPS devices at appropriate locations in the network, configure IPS to detect and block malicious traffic and attacks, and regularly update the IPS rule and signature database to ensure that it can identify and block the latest threats.

[0039] Optionally, during the daily monitoring and recording steps, a SIEM security information and event management system is used to monitor network activities and security events in real time. SIEM can centrally collect log and event information from various security devices, such as intrusion detection systems and intrusion prevention systems, to quickly identify potential security incidents and threats, while providing detailed security reports and compliance support. It can formulate customized monitoring rules and alert mechanisms based on user needs and environment, thereby improving the accuracy and effectiveness of monitoring.

[0040] Optionally, in the step of formulating a security policy, it is necessary to regularly back up important data, preferably by means of CD burning, and test the important data recovery process to ensure that it can be quickly restored in the event of data loss or damage.

[0041] Compared with the prior art, the present invention has the following beneficial effects:

[0042] 1. The present invention generates key 1 K1 and key 2 K2 through a key management service, and uses dynamic factors such as a hash value H, a timestamp T and a user code D to generate key 3 K3, thereby improving the dynamics and flexibility of the key and greatly enhancing the security during data transmission. By using a multi-key encryption method, even if a key is cracked during data transmission, the data remains secure, which increases the complexity of cracking the key.

[0043] 2. The present invention uses its key encryption algorithm to encrypt key 1 K1 and key 2 K2 to obtain ciphertext 1 C1 and ciphertext 2 C2, combines hash value H with ciphertext 1 C1 to obtain encryption block HC, thereby increasing the complexity and unpredictability of data, combines ciphertext 2 C2 with timestamp T and user code D to obtain data block TC, provides additional identity authentication and timeliness check, uses key 3 K3 and symmetric encryption algorithm to perform final encryption calculation on data block TC to obtain ciphertext 3 CS, the above calculation formulas are interconnected and influence each other, and through multiple means such as introducing timestamp T, using random salt value Y, adding random initialization vector V, combining encryption block HC and data block TC, and combining multi-layer encryption and verification information, the security and unpredictability of data transmission are effectively improved, thereby enhancing the computer network security protection effect. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 It is a flow chart of the present invention. DETAILED DESCRIPTION

[0045] Regarding the computer network security protection method, it is different from the existing network security protection methods. The existing network security protection methods often rely on a single protection measure, such as password verification. However, since people often use simple and easy-to-remember passwords, or reuse passwords between different accounts, passwords are easily guessed or cracked by brute force, thereby reducing security. In addition, with the improvement of computing power, some traditional encryption algorithms can no longer meet the needs of modern network security. The method can significantly improve the security of accounts and avoid brute force cracking by using complex and unique passwords. By using multiple keys and using dynamic factors such as hash value H, timestamp T and user code D to generate key three K3, the security of data transmission can be greatly enhanced.

[0046] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0047] For example, see Figure 1 , this implementation provides a computer network security protection method, as follows:

[0048] Ensure all user accounts use complex and unique passwords, add additional verification steps to improve account security, and configure network devices to limit access to systems, allowing only authorized users to access critical systems;

[0049] Set up firewalls to filter network traffic and block malicious network requests, shut down unnecessary network services, and deploy intrusion detection systems and intrusion prevention systems to detect and respond to network attacks;

[0050] Generate key 1 K1 and key 2 K2 in the data transmission process through key management service, extract user code D, timestamp T and hash value H in key 1 K1 through system operation, combine key 1 K1 and generate key 3 K3 according to timestamp T and user code D, use multiple keys to encrypt data, and enhance the security of computer network;

[0051] Encrypt key 1 K1 and key 2 K2 through the key encryption algorithm to obtain ciphertext 1 C1 and ciphertext 2 C2, combine the hash value H with ciphertext 1 C1 to obtain the encrypted block HC, combine ciphertext 2 C2 with the timestamp T and user code D to obtain the data block TC, and finally encrypt the data block TC using key 3 K3 and the symmetric encryption algorithm to obtain the final ciphertext 3 CS;

[0052] Regularly update computer operating systems and applications, fix known security holes and weaknesses, and perform regular maintenance on system hardware to ensure stable operation of computer systems;

[0053] Configure monitoring tools to monitor network activities and security events in real time, and record important log information, including login attempts, abnormal traffic, and security events, for subsequent security audits and investigations.

[0054] More specifically, in this embodiment: by adding additional verification steps, the risk of illegal access to accounts is reduced, and configuring network devices to limit access can ensure that only authorized users can access key systems, effectively preventing unauthorized access and data leakage; by setting up a firewall, network traffic can be effectively filtered and malicious network requests can be blocked, reducing the risk of system attacks; and deploying an intrusion detection system and an intrusion prevention system can detect and respond to network attacks in real time, protecting the system from damage.

[0055] Generate key K1 through key management service, and use dynamic factors such as hash value H, timestamp T and user code D to generate key K3, improve the dynamic and flexibility of key, can greatly enhance the security of data transmission, by using multi-key encryption, even if a key is cracked during data transmission, the data remains safe, increasing the complexity of cracking the key, and using the key encryption algorithm to encrypt the key itself to ensure the security of the key during transmission and storage, while combining hash value H with ciphertext C1, and ciphertext C2 with timestamp T and user code D for final encryption, increasing the complexity and unpredictability of the key, can further improve the confidentiality and integrity of data, so that it can adapt to changes in network environment and security threats, timely adjust protection strategies, and form a multi-level, comprehensive computer network security protection system through strengthening login control, formulating security strategies, key generation, data encryption, and multiple steps to improve the security of computer networks.

[0056] Furthermore, strengthen the login control steps, ensure the complexity of the password, including a combination of uppercase and lowercase letters, numbers and special characters, and use a scoring system to score user passwords. At the same time, force users to change their passwords regularly, limit the number of failed password attempts, and implement a locking mechanism after multiple consecutive failures. Set appropriate access permissions for files and directories, including read, write and execute permissions, and add additional verification steps, such as mobile phone verification codes, fingerprint recognition or facial recognition.

[0057] Specifically, by using a scoring system to score user passwords, users can be more interested in setting higher-scoring passwords, thereby increasing the complexity of the initial password. By adding steps such as mobile phone verification codes, fingerprint recognition or facial recognition, it can ensure that it is the person logging into the account, and by forcing users to change passwords regularly, the passwords change regularly to ensure the security of long-term account use.

[0058] Furthermore, in the key generation step, the hash value H, the timestamp T, and the user code D are combined into a string S. The specific calculation formula is:

[0059]

[0060] in Extract the average value of timestamp T for the period;

[0061] H is the hash value, D is the user code;

[0062] The calculation formula of key three K3 is:

[0063]

[0064] Where S is the string S, (Y1+Y2) is the sum of two sets of random salt values;

[0065] By introducing the timestamp T, the timeliness and unpredictability of the encrypted data can be increased to prevent replay attacks. The use of a random salt value can ensure that even if two input strings are similar, the key three K3 will be very different, increasing the security of the system.

[0066] Specifically, the generation of key three K3 not only combines key one K1 and key two K2, but also incorporates timestamp T and user code D. This design increases the complexity and dynamics of the key, making it more difficult to guess or copy the key, and provides an additional security layer for data encryption through the introduction of hash value H. Hash value H has an irreversible characteristic, that is, the original data cannot be restored through hash value H, which further enhances the security of the data and improves the security protection effect of computer network.

[0067] Furthermore, in the data encryption step, an encryption function is used to encrypt key 1 K1 and key 2 K2. The specific calculation formula is as follows:

[0068] C1=E K1 (P, V, D), C2 = E K2 (P, V, D)

[0069] Where C1 is ciphertext 1, C2 is ciphertext 2;

[0070] E K1 is the encryption function 1, E K2 is encryption function 2, both use affine encryption method;

[0071] P is plaintext, V is a random initialization vector;

[0072] By adding a random initialization vector V to the encryption function, a new random initialization vector V is used for each encryption, which increases the randomness of the data transmission process and improves the security protection effect;

[0073] Encryption function E K1 With encryption function E K2 Affine encryption can be used, in which the letters of the alphabet are assigned a number, for example a=1, b=2, c=3...z=26, and the function expression is F(x)=(ax+b)*(modm), where a and b are relatively prime and m is the number of letters.

[0074] The calculation formula for encryption block HC and data block TC is:

[0075] HC=C1+H;TC=C2+T+D

[0076] The introduction of encryption block HC combines ciphertext C1 and hash value H of key K1, increasing the complexity and unpredictability of data, thereby improving security. Data block TC combines ciphertext C2, timestamp T and user code D, providing additional authentication and timeliness checks, further enhancing security during transmission.

[0077] Specifically, by encrypting key 1 K1 and key 2 K2 themselves, ciphertext 1 C1 and ciphertext 2 C2 are obtained. This double encryption method further improves the security of the data. Even if one ciphertext is cracked, the other ciphertext can still protect the confidentiality of the data.

[0078] Furthermore, according to the encryption step, the ciphertext three CS calculation formula is:

[0079]

[0080] Where 1+W1 is the weight of key 2 K2;

[0081] W2 is the weight of key three K3; (R1, R2) are two independent pseudo-random number factors;

[0082] M is the modulus, a fixed integer;

[0083] The final ciphertext CS contains multiple layers of encryption and verification information. For example, the encryption block HC itself is an encrypted data block, and is combined with additional metadata such as timestamp T and user code D for secondary encryption, making it difficult for attackers to directly crack or tamper with the data. The key K3 is dynamically generated based on key K1, key K2, timestamp T and user code D, which further increases the complexity and unpredictability of the key and improves the security of the computer network. By adding additional random numbers (R1, R2), the randomness of the ciphertext CS is increased, further improving the encryption effect, so that the same original data produces different encryption results in different transmission processes, thereby reducing the risk of tampering.

[0084] Embodiment 2, based on the above embodiment:

[0085] See also Figure 1In the step of formulating security policies, when deploying an intrusion detection system, it is necessary to analyze the network topology and determine the best deployment location, which includes border gateways, internal subnet boundaries, and important servers. According to the selected IDS type, deploy sensor devices, configure IDS to detect potential intrusion behaviors, define rules and policies, and configure IDS to generate alerts and notify security teams or administrators. When deploying an intrusion prevention system, deploy IPS devices at appropriate locations in the network, configure IPS to detect and block malicious traffic and attacks, and regularly update the IPS rule and signature database to ensure that it can identify and block the latest threats.

[0086] Specifically, by analyzing the network topology and determining the optimal deployment location, it can ensure that IDS and IPS can effectively monitor and protect key areas and achieve precise positioning, which can greatly reduce the risk of vulnerabilities and attacks. By configuring IDS and IPS to detect and block malicious traffic and attacks, real-time response capabilities can be achieved, and alarms can be issued in time to notify security teams or administrators to help them quickly respond to security incidents and take necessary measures. By regularly updating the rules, signature databases and software patches of IDS and IPS, it can be ensured that they can identify and block the latest threats and attack vectors. This timely update and optimization can greatly enhance the security and resilience of the system, enabling it to adapt to the ever-evolving network threats.

[0087] Furthermore, in the daily monitoring and recording steps, the SIEM security information and event management system is used to monitor network activities and security events in real time. SIEM can centrally collect log and event information from various security devices, such as intrusion detection systems and intrusion prevention systems, to quickly identify potential security incidents and threats, while providing detailed security reports and compliance support. It can formulate customized monitoring rules and alarm mechanisms based on user needs and environment, thereby improving the accuracy and effectiveness of monitoring.

[0088] Specifically,

[0089] Furthermore, in the step of formulating security strategies, it is necessary to regularly back up important data, give priority to using optical disc burning for data storage, and test the important data recovery process to ensure that it can be quickly restored in the event of data loss or damage.

[0090] Specifically, by regularly backing up important data, you can act as an insurance policy in the event of unexpected situations, such as power outages, hardware damage, or other reasons that lead to data loss. In addition, as a physical storage medium, optical discs are not limited by the life of electronic storage devices, and data can be stored for a long time. Optical discs are non-rewritable media, so there is no need to worry about data being modified during the transmission process after the disc is burned, which ensures data security. Optical disc burning only has copy permissions for manually selected files, which makes the automatic replication ability of Trojan viruses invalid, thereby reducing the risk of virus invasion.

[0091] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A computer network security protection method, characterized in that: The following steps are involved: Step S1: Strengthen login controls, ensure that all user accounts use complex and unique passwords, add additional verification steps, improve account security, and configure network devices to limit access to systems, allowing only authorized users to access critical systems; Step S2: Develop security policies, set up firewalls to filter network traffic and block malicious network requests, shut down unnecessary network services, and deploy intrusion detection systems and intrusion prevention systems to detect and respond to network attacks; Step S3: key generation, generating key 1 K1 and key 2 K2 in the data transmission process through the key management service, extracting the user code D, timestamp T and hash value H in key 1 K1 through system operation, combining key 1 K1 and generating key 3 K3 according to timestamp T and user code D; Step S4: Data encryption: encrypt key 1 K1 and key 2 K2 by using a key encryption algorithm to obtain ciphertext 1 C1 and ciphertext 2 C2; combine hash value H with ciphertext 1 C1 to obtain encrypted block HC; combine ciphertext 2 C2 with timestamp T and user code D to obtain data block TC; use key 3 K3 and a symmetric encryption algorithm to finally encrypt data block TC to obtain final ciphertext 3 CS; Step S5: System update and maintenance: regularly update computer operating systems and applications, fix known security holes and vulnerabilities, and perform regular maintenance on system hardware to ensure stable operation of the computer system; Step S6: Daily monitoring and recording, configure monitoring tools to monitor network activities and security events in real time, and record important log information, including login attempts, abnormal traffic, and security events, for subsequent security audits and investigations.

2. The computer network security protection method according to claim 1, characterized in that: In the enhanced login control step, the complexity of the password is ensured, including a combination of uppercase and lowercase letters, numbers and special characters, and a scoring system is used to score user passwords. At the same time, users are forced to change their passwords regularly, the number of failed password attempts is limited, and a locking mechanism is implemented after multiple consecutive failures. Access rights including read, write and execute are set for files and directories, and additional verification steps are added, including mobile phone verification codes, fingerprint recognition and facial recognition.

3. The computer network security protection method according to claim 2, characterized in that: In the key generation step, the hash value H, the timestamp T, and the user code D are combined into a string S. The specific calculation formula is: in Extract the average of timestamps T for a specific time period, T1, T2, ..., T n n timestamps extracted for the specific time period, where the specific time period refers to the time required for the data transmission process generated by the key management service; H is the hash value, D is the user code; The calculation formula of key three K3 is: Where S is the string S, (Y1+Y2) is the sum of two sets of random salt values; By introducing the timestamp T, the timeliness and unpredictability of the encrypted data are increased to prevent replay attacks. The use of a random salt value Y can ensure that even if two input strings are similar, the key three K3 will be different, increasing the security of the system.

4. The computer network security protection method according to claim 3 is characterized in that: In the data encryption step, encryption is performed using an encryption function based on key 1 K1 and key 2 K2. The specific calculation formula is as follows: C1=E K1 (P,V,D),C2=E K2 (P,V,D) Where C1 is ciphertext 1, C2 is ciphertext 2; E K1 is the encryption function using key K1, E K2 The encryption function 2 using the key 2 K2 adopts the affine encryption method; P is plaintext, V is a random initialization vector; By adding a random initialization vector V to the encryption function, a new random initialization vector V is used for each encryption, increasing the randomness of the data transmission process; The calculation formula for encryption block HC and data block TC is: HC=C1+H,TC=C2+T+D Where C1 is ciphertext 1, C2 is ciphertext 2; H is the hash value, D is the user code; The encryption block HC combines the ciphertext C1 and the hash value H of the key K1; The data block TC combines the ciphertext C2, the timestamp T and the user code D, providing additional identity authentication and timeliness checks, further enhancing the security of network data transmission.

5. The computer network security protection method according to claim 4, characterized in that: In the data encryption step, the ciphertext three CS calculation formula is: Where 1+W1 is the weight of key 2 K2; W2 is the weight of key three K3; (R1, R2) are two independent pseudo-random number factors; M is the modulus, a fixed integer; TC is a data block; The final ciphertext CS contains multiple layers of encryption and verification information. The encryption block HC itself is an encrypted data block, which is then combined with an additional timestamp T and user code D for secondary encryption, making it difficult for attackers to directly crack or tamper with the data. The key K3 is dynamically generated based on the key K1, timestamp T and user code D, increasing the complexity and unpredictability of the key.

6. The computer network security protection method according to claim 1, characterized in that: In the step of formulating security policies, when deploying an intrusion detection system, the network topology is analyzed to determine the best deployment location, which includes border gateways, internal subnet boundaries, and important servers. Based on the selected IDS type, sensor devices are deployed, and the IDS is configured to detect potential intrusion behaviors. Rules and policies are defined, and the IDS is configured to generate alerts and notify the security team or administrator. When deploying an intrusion prevention system, IPS devices are deployed at appropriate locations in the network, and the IPS is configured to detect and block malicious traffic and attacks. The IPS rule and signature database is updated regularly to ensure that it can identify and block the latest threats.

7. The computer network security protection method according to claim 1, characterized in that: In the daily monitoring and recording steps, the SIEM security information and event management system is used to monitor network activities and security events in real time. SIEM centrally collects logs and event information from various security devices, including intrusion detection systems and intrusion prevention systems, to quickly identify potential security events and threats, while providing detailed security reports and compliance support, and formulating customized monitoring rules and alert mechanisms based on user needs and environment.

8. The computer network security protection method according to claim 1, characterized in that: In the step of formulating the security strategy, it is necessary to regularly back up important data by burning it to a disc, and test the important data recovery process to ensure rapid recovery in the event of data loss or damage.

Images