Safety verification device for electronic archive data management

By combining data integrity verification, encryption and access control technologies in the electronic archive data management device, data tampering and key management problems are solved, efficient and secure management of data is achieved, data integrity and confidentiality are ensured, and data integrity is improved. Emergency response capabilities and management efficiency.

CN119091934AInactive Publication Date: 2024-12-06LAIWU VOCATIONAL & TECHNICAL COLLEGE
View PDF 0 Cites 1 Cited by

Patent Information

Application Number
CN202411271354.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-09-11
Publication Date
2024-12-06
Estimated Expiration
Not applicable · inactive patent

AI Technical Summary

Technical Problem

The existing electronic file data management devices lack effective data integrity verification mechanisms, cannot detect data tampering in time, and the key management in encryption technology is not strict enough, and there is a risk of being cracked.

Method used

A security verification device including a data integrity verification unit, a data encryption unit, an access control unit and an alarm unit was designed. The data verification was performed using the SHA-256 hash algorithm, and the data encryption was encrypted using the AES encryption algorithm, and the data was encrypted by the Multi-factor authentication and key management system ensures data security, combines data consistency check and digital signature verification, supports multiple hashing and encryption algorithms to achieve fine-grained access control and emergency response.

Benefits of technology

Effectively prevent electronic archive data from being tampered with and leaked, ensure data integrity and confidentiality, enhance access control, improve emergency response capabilities, optimize storage structure and management efficiency, and ensure the legality and authenticity of data.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119091934A_ABST
    Figure CN119091934A_ABST
Patent Text Reader

Abstract

The invention relates to the technical field of archive management, and provides a safety verification device for electronic archive data management, which comprises a storage box, a storage device, a safety verification module, an access control unit, a display module and an alarm unit, a plurality of groups of connecting rotating shafts are mounted on the outer side wall of the storage box, and the outer side walls of the plurality of groups of connecting rotating shafts are rotatably connected with a sealing door plate; the outer side wall of the sealing door plate is fixedly connected with a connecting handle, and the sealing door plate is used for sealing the storage box; the storage device is installed in the storage area of the storage box and used for storing electronic archive data, and a connecting socket is installed on the outer side wall of the storage device; through the combination of data integrity verification and a data encryption technology, electronic archive data are effectively prevented from being tampered and leaked, the integrity and confidentiality of the data are ensured, the flexibility and reliability of data integrity verification are improved by supporting multiple Hash algorithms and regular automatic verification, and the security of the electronic archive data is improved. And the electronic archive data can be kept complete and correct at any time.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of archive management, in particular to a safety verification device for electronic archive data management. Background Art

[0002] With the rapid development of information technology, electronic archives have become an indispensable information carrier in scientific research, enterprises, government agencies and other fields. However, the security issues of electronic archive data are becoming increasingly prominent. Risks such as data tampering, illegal access, and data leakage seriously threaten the security and integrity of information. The traditional paper archive management method can no longer meet the needs of modern information management. Therefore, it is particularly important to develop an efficient and secure security verification device for electronic archive data management.

[0003] Most existing electronic archive data management devices focus on the convenience of data storage and access, but are insufficient in data security verification and protection. For example, some devices lack an effective data integrity verification mechanism and cannot detect data tampering in a timely manner; although other devices use encryption technology, the key management is not strict enough and there is a risk of being cracked.

[0004] To this end, those skilled in the art have proposed a security verification device for electronic archive data management to solve the problems raised by the background technology. Summary of the invention

[0005] In order to solve the above technical problems, the present invention provides a security verification device for electronic archive data management to solve the problems in the prior art such as lack of an effective data integrity verification mechanism and inability to detect data tampering in a timely manner; although other devices use encryption technology, the key management is not strict enough and there is a risk of being cracked.

[0006] A safety verification device for electronic archive data management, comprising a storage box, a storage device, a safety verification module, an access control unit, a display module, and an alarm unit, wherein the outer side wall of the storage box is provided with a plurality of sets of connecting shafts, the outer side walls of the plurality of sets of connecting shafts are rotatably connected with closed door panels, the outer side walls of the closed door panels are fixedly connected with connecting handles, and the closed door panels are used to block the storage box;

[0007] The storage device is installed in the storage area of ​​the storage box and is used to store electronic file data. The outer side wall of the storage device is installed with a connection socket;

[0008] The security verification module is installed together with the storage device, and includes a data integrity verification unit, a data encryption unit, a data consistency verification unit, and a data signature verification unit. The data integrity verification unit is used to perform a hash check on the electronic file data, and the data encryption unit is used to perform encryption processing on the electronic file data;

[0009] The access control unit is used to perform identity authentication and authority management on users who access electronic archive data;

[0010] The display module is arranged outside the cabinet and is used to display the security verification result and access status;

[0011] When the alarm unit detects illegal access or data anomaly, it sends out an alarm signal.

[0012] Preferably, the data integrity verification unit uses the SHA-256 hash algorithm to verify the electronic file data, generate and store verification codes to meet the requirements of different security levels; the data encryption unit uses the AES encryption algorithm to encrypt the electronic file data, and supports keys of different lengths to meet encryption requirements of different strengths; in addition, the encryption key is generated, stored and regularly replaced by the security key management system inside the security verification device to ensure the security of the key.

[0013] Preferably, the data consistency check unit is used to compare the consistency of the original data and the stored data when writing and reading data to prevent the data from being tampered with or damaged during transmission. The data signature verification unit performs digital signature processing on the electronic file data to ensure the reliability and non-repudiation of the data source. The unit supports multiple digital signature algorithms and can switch algorithms according to actual needs.

[0014] Preferably, the access control unit includes a multi-factor authentication module, a role and authority management module, an access audit and log recording module, an abnormal behavior detection module, and an emergency access control module. The multi-factor authentication module combines multiple authentication methods such as biometrics, dynamic passwords, and physical tokens to ensure the authenticity and uniqueness of the user's identity;

[0015] The role and authority management module assigns different roles and authorities to users according to their positions and responsibilities, implements fine-grained access control, and supports dynamic adjustment of authorities to adapt to changes in organizational structure and business needs.

[0016] Preferably, the access audit and log recording module records the access behavior of all users, including access time, access object, and operation type, providing a reliable basis for security audit and event tracking;

[0017] The abnormal behavior detection module monitors the user's access behavior, analyzes and identifies abnormal access patterns, such as frequent access to sensitive data and illegal attempts to crack passwords, and promptly issues alarms and takes corresponding security measures;

[0018] In an emergency, the emergency access control module can quickly cut off access rights of all or specific users to prevent the situation from getting worse.

[0019] Preferably, the alarm unit includes a multi-level alarm mechanism module, an alarm signal transmission module, an alarm linkage control module, and an alarm recording and query module. The multi-level alarm mechanism module sets three levels of alarms according to the severity of the security incident, namely, a minor warning, a serious warning, and an emergency alarm, so as to take different response measures;

[0020] The alarm signal transmission module supports transmitting the alarm signal to the designated receiving end, security monitoring center, administrator's mobile phone via wired or wireless means to ensure the timely delivery of alarm information.

[0021] Preferably, the alarm linkage control module is linked with surveillance cameras and access control system equipment, and when an alarm is triggered, these devices are automatically started to record the on-site situation or prevent illegal intrusion;

[0022] The alarm record and query module records the time, location, cause and processing result of each alarm in detail, which is convenient for subsequent security audit and event tracking.

[0023] Preferably, the storage device comprises a plurality of hard disks, and the hard disks are installed in a storage box via a detachable placement plate, and the placement plate is provided with labels and grooves for identifying the hard disks.

[0024] Preferably, the security verification module also includes a data consistency verification unit and a digital signature verification unit to further enhance the security and integrity of the electronic archive data.

[0025] Preferably, the alarm unit is connected to a surveillance camera, and when illegal access is detected, the surveillance camera is automatically started and records the on-site situation.

[0026] Compared with the prior art, the present invention has the following beneficial effects:

[0027] 1. Through the combination of data integrity verification and data encryption technology, it can effectively prevent electronic archive data from being tampered with and leaked, ensure the integrity and confidentiality of data, and improve the flexibility and reliability of data integrity verification by supporting multiple hash algorithms and regular automatic verification, ensuring that electronic archive data remains intact and correct at all times. It supports the selection of AES encryption keys of different lengths, so that the data encryption strength can be adjusted according to actual needs, enhancing the confidentiality of data. The data consistency verification unit performs strict comparison when writing and reading data, effectively preventing data tampering or damage during transmission, and ensuring the accuracy of data. Through the digital signature verification unit, the source reliability and non-repudiation of electronic archive data are ensured, providing a strong guarantee for the legitimacy and authenticity of the data.

[0028] 2. Enhanced access control: Biometric identification and key dual verification methods are used to strictly limit access rights and prevent illegal users from accessing electronic archive data. The multi-factor authentication module, combined with multiple authentication methods, greatly improves the accuracy and reliability of user authentication, effectively preventing identity impersonation and illegal access. The role and permission management module supports the allocation of different roles and permissions based on factors such as user positions and responsibilities, realizes fine-grained access control, and ensures data access security and compliance. The access audit and logging module can record the access behavior of all users, providing a reliable basis for security audits and event tracking, and helping to promptly discover and deal with security issues. The abnormal behavior detection module can monitor user access behavior in real time, promptly discover and deal with abnormal access patterns, and effectively prevent the occurrence and expansion of security incidents. The emergency access control mechanism can quickly cut off the access rights of all or specific users in an emergency to prevent the situation from further deteriorating, providing a strong guarantee for the safe recovery of the system.

[0029] 3. Improve emergency response capabilities: Set up alarm units and surveillance cameras. When illegal access or data anomalies are detected, they can quickly issue alarms and record on-site conditions to provide strong support for emergency handling. Through real-time monitoring display, alarm information prompts and other functions, the system's security status and alarm information are more intuitive and easy to understand, making it convenient for administrators to understand and deal with security issues in a timely manner. The user operation guidance function can provide intuitive operation guidance information based on the user's access rights and operation requirements, reducing the difficulty of user operation and improving work efficiency. Multi-level alarm mechanism, alarm signal transmission and alarm linkage control and other functions can ensure the timely transmission and processing of alarm information, effectively shortening the alarm response time. The alarm record and query function records the information of each alarm in detail, providing convenience for subsequent security audits and event tracking.

[0030] 4. Optimize storage structure: adopt a detachable placement plate design to facilitate the installation and removal of hard disks, while improving the utilization rate of the space inside the cabinet.

[0031] 5. Improve management efficiency: The display unit displays security verification results and access status in real time, which makes it convenient for managers to monitor the management of electronic file data and improve management efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a schematic diagram of the three-dimensional structure of the present invention;

[0033] Figure 2 For the present invention Figure 1 Schematic diagram of the display structure in ;

[0034] Figure 3 It is a schematic diagram of the module structure in the present invention;

[0035] Figure 4 For the present invention Figure 3 Schematic diagram of the module structure of the safety verification module;

[0036] Figure 5 For the present invention Figure 3 Schematic diagram of the module structure of the access control unit;

[0037] Figure 6 For the present invention Figure 3 Schematic diagram of the module structure of the alarm unit.

[0038] In the figure: 1. Storage box; 11. Connecting shaft; 12. Closing door panel; 13. Connecting handle; 2. Storage device; 21. Connecting socket; 3. Security verification module; 31. Data integrity verification unit; 32. Data encryption unit; 33. Data consistency verification unit; 34. Digital signature verification unit; 4. Access control unit; 41. Multi-factor identity authentication module; 42. Role and authority management module; 43. Access audit and log recording module; 44. Abnormal behavior detection module; 45. Emergency access control module; 5. Display module; 6. Alarm unit; 61. Multi-level alarm mechanism module; 62. Alarm signal transmission module; 63. Alarm linkage control module; 64. Alarm recording and query module. DETAILED DESCRIPTION

[0039] The following is a further detailed description of the embodiments of the present invention in conjunction with the accompanying drawings and examples. The following examples are used to illustrate the present invention but are not intended to limit the scope of the present invention.

[0040] As attached Figure 1 To Attachment Figure 6 As shown:

[0041] Embodiment 1: The present invention provides a security verification device for electronic archive data management, comprising a storage box 1, a storage device 2, a security verification module 3, an access control unit 4, a display module 5, and an alarm unit 6. The outer wall of the storage box 1 is equipped with multiple sets of connecting shafts 11, and the outer walls of the multiple sets of connecting shafts 11 are rotatably connected with closed door panels 12. The outer wall of the closed door panel 12 is fixedly connected with a connecting handle 13. The closed door panel 12 is used to block the storage box 1;

[0042] The storage device 2 is installed in the storage area of ​​the storage box 1 and is used to store electronic file data. The outer wall of the storage device 2 is installed with a connection socket 21;

[0043] The security verification module 3 is installed together with the storage device 2, and includes a data integrity verification unit 31, a data encryption unit 32, a data consistency verification unit 33, and a data signature verification unit 34. The data integrity verification unit 31 is used to perform a hash check on the electronic file data, and the data encryption unit 32 is used to encrypt the electronic file data;

[0044] The access control unit 4 is used to perform identity authentication and authority management on users who access electronic archive data;

[0045] The display module 5 is arranged outside the cabinet and is used to display the security verification result and access status;

[0046] When the alarm unit 6 detects illegal access or data anomalies, it sends out an alarm signal. The data integrity verification unit 31 uses the SHA-256 hash algorithm to verify the electronic file data, generate and store verification codes to meet the needs of different security levels; the data encryption unit 32 uses the AES encryption algorithm to encrypt the electronic file data, and supports keys of different lengths to meet the encryption needs of different strengths; in addition, the encryption key is generated, stored and regularly replaced by the security key management system inside the security verification device to ensure the security of the key. The data consistency verification unit 33 is used to compare the consistency of the original data and the stored data when writing and reading data to prevent the data from being tampered with or damaged during transmission. The data signature verification unit 34 performs digital signature processing on the electronic file data to ensure the reliability and non-repudiation of the source of the data. This unit supports multiple digital signature algorithms and can switch algorithms according to actual needs.

[0047] Specifically, the SHA-256 hash algorithm is used by default to perform integrity verification on the electronic archive data. SHA-256 is widely recognized for its high security and low collision probability. It supports switching of other hash algorithms such as MD5 and SHA-1 to meet the needs of different security levels. For example, for scenarios with low security requirements, MD5 can be selected to save computing resources; for scenarios with high security requirements, SHA-256 or a higher-level hash algorithm is used. For each piece of electronic archive data, the data integrity verification unit 31 will generate a unique verification code and store it in the storage device 2 for subsequent verification.

[0048] Regular automatic calibration:

[0049] By setting a regular check interval (such as daily, weekly, etc.), the data integrity check unit 31 will automatically check the integrity of the electronic file data in the storage device 2. During the check, the unit will recalculate the hash value of the data and compare it with the stored check code. If a mismatch is found, the alarm mechanism will be triggered to notify the management personnel for further processing.

[0050] The access control unit 4 includes a multi-factor authentication module 41, a role and permission management module 42, an access audit and log recording module 43, an abnormal behavior detection module 44, and an emergency access control module 45. The multi-factor authentication module 41 combines multiple authentication methods such as biometrics, dynamic passwords, and physical tokens to ensure the authenticity and uniqueness of the user's identity;

[0051] The role and authority management module 42 assigns different roles and authorities to users according to their positions and responsibilities, implements fine-grained access control, and supports dynamic adjustment of authorities to adapt to changes in organizational structure and business needs. The access audit and log recording module 43 records the access behavior of all users, including access time, access object, and operation type, providing a reliable basis for security audit and event tracking.

[0052] The emergency access control module 45 monitors the user's access behavior, analyzes and identifies abnormal access patterns, such as frequent access to sensitive data and illegal attempts to crack passwords, and promptly issues an alarm and takes corresponding security measures;

[0053] In an emergency, the abnormal behavior detection module 44 can quickly cut off access rights of all or specific users to prevent the situation from further deteriorating.

[0054] Specifically, biometric identification: deploy a fingerprint recognition system, requiring users to enter fingerprint information when accessing electronic archive data, and verify identity by comparing it with pre-stored fingerprint templates. Implement facial recognition technology, use a camera to capture the user's facial image, and match it with the facial data during registration to ensure the authenticity of the user's identity.

[0055] Dynamic password: Introducing a one-time password (OTP) system, each time a user attempts to access, the system will send a unique, short-term password to the user via SMS, email, or a dedicated OTP application. The user needs to enter the received OTP to complete the identity authentication, effectively preventing the risk of static passwords being cracked.

[0056] Physical tokens: Physical tokens such as smart cards are distributed to authorized users. The tokens store the user's authentication information. When the user accesses, he needs to insert the smart card into the card reader and enter the PIN code that matches the token to achieve two-factor authentication.

[0057] The alarm unit 6 includes a multi-level alarm mechanism module 61, an alarm signal transmission module 62, an alarm linkage control module 63, and an alarm recording and query module 64. The multi-level alarm mechanism module 61 sets three levels of alarms according to the severity of the security incident, namely, a minor warning, a serious warning, and an emergency alarm, so as to take different response measures;

[0058] The alarm signal transmission module 62 supports transmitting the alarm signal to the designated receiving end, security monitoring center, administrator's mobile phone by wired or wireless means to ensure the timely delivery of alarm information. The alarm linkage control module 63 is linked with the monitoring camera and access control system equipment. When the alarm is triggered, these devices are automatically started to record the on-site situation or prevent illegal intrusion;

[0059] The alarm record and query module 64 records in detail the time, location, cause and processing results of each alarm, which is convenient for subsequent security audits and event tracking. The storage device 2 includes multiple hard disks, which are installed in the storage box 1 through a detachable placement plate. The placement plate is provided with labels and grooves for identifying the hard disks. The security verification module 3 also includes a data consistency verification unit 33 and a digital signature verification unit 34 to further enhance the security and integrity of the electronic file data. The alarm unit 6 is connected to the surveillance camera. When illegal access is detected, the surveillance camera is automatically started and the on-site situation is recorded.

[0060] Specifically, alarm level setting: according to the severity of the security incident, multiple alarm levels such as minor warning, serious warning, emergency alarm, etc. are preset.

[0061] Minor warning: for general security events, such as a user trying to log in with an incorrect password but not reaching the limit.

[0062] Serious warning: This is for more serious security incidents, such as users repeatedly trying to illegally access sensitive data.

[0063] Emergency alarm: for extremely serious security incidents, such as when the system detects that data has been tampered with, deleted, or illegally copied.

[0064] Countermeasures: For minor warnings, the system can automatically send reminder emails or text messages to users to inform them to pay attention to safe operation. For serious warnings, in addition to sending reminders, the system can also temporarily lock the user account and require the user to contact the administrator to unlock it. For emergency alarms, the system immediately cuts off user access rights, starts alarm linkage control, records the on-site situation, and notifies the security management personnel for emergency processing.

[0065] The standard parts used in the present invention can all be purchased from the market, and the special-shaped parts can be customized according to the description and the drawings. The specific connection methods of each part adopt conventional means such as mature bolts, rivets, welding, etc. in the prior art. The machinery, parts and equipment all adopt conventional models in the prior art, and the circuit connection adopts the conventional connection method in the prior art, which will not be described in detail here. The contents not described in detail in this specification belong to the prior art known to professional and technical personnel in this field.

[0066] In the description of the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. "Multiple" means two or more, unless otherwise clearly and specifically defined.

[0067] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0068] In the present invention, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0069] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example" or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in a suitable manner in any one or more embodiments or examples. In addition, those skilled in the art may combine and combine different embodiments or examples and features of different embodiments or examples described in this specification without contradiction.

[0070] In the drawings of the embodiments disclosed in the present invention, only the structures related to the embodiments disclosed in the present invention are involved, and other structures can refer to the general design. In the absence of conflict, the same embodiment and different embodiments of the present invention can be combined with each other.

[0071] Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments, or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A security verification device for electronic archive data management, characterized in that: The invention comprises a storage box (1), a storage device (2), a security verification module (3), an access control unit (4), a display module (5), and an alarm unit (6); the outer wall of the storage box (1) is provided with a plurality of connecting shafts (11); the outer walls of the plurality of connecting shafts (11) are rotatably connected to closed door panels (12); the outer walls of the closed door panels (12) are fixedly connected to connecting handles (13); and the closed door panels (12) are used to seal the storage box (1); The storage device (2) is installed in the storage area of ​​the storage box (1) and is used to store electronic file data. The outer wall of the storage device (2) is installed with a connection socket (21); The security verification module (3) is installed together with the storage device (2), and comprises a data integrity verification unit (31), a data encryption unit (32), a data consistency verification unit (33), and a data signature verification unit (34); the data integrity verification unit (31) is used to perform a hash verification on the electronic archive data, and the data encryption unit (32) is used to perform encryption processing on the electronic archive data; The access control unit (4) is used to perform identity authentication and authority management on users who access the electronic archive data; The display module (5) is arranged outside the cabinet and is used to display the security verification result and access status; When the alarm unit (6) detects illegal access or data anomaly, it sends out an alarm signal.

2. A security verification device for electronic archive data management as claimed in claim 1, characterized in that: The data integrity verification unit (31) uses the SHA-256 hash algorithm to verify the electronic file data, generate and store the verification code to meet the requirements of different security levels; the data encryption unit (32) uses the AES encryption algorithm to encrypt the electronic file data, and supports keys of different lengths to meet the requirements of encryption of different strengths; in addition, the encryption key is generated, stored and regularly replaced by a security key management system inside the security verification device to ensure the security of the key.

3. A security verification device for electronic archive data management as claimed in claim 1, characterized in that: The data consistency check unit (33) is used to compare the consistency of original data and stored data when writing and reading data, so as to prevent the data from being tampered with or damaged during transmission. The data signature verification unit (34) performs digital signature processing on the electronic archive data to ensure the reliability and non-repudiation of the source of the data. The unit supports multiple digital signature algorithms and can switch algorithms according to actual needs.

4. A security verification device for electronic archive data management as claimed in claim 1, characterized in that: The access control unit (4) comprises a multi-factor identity authentication module (41), a role and authority management module (42), an access audit and log recording module (43), an abnormal behavior detection module (44), and an emergency access control module (45). The multi-factor identity authentication module (41) combines multiple identity authentication methods such as biometric feature recognition, dynamic passwords, and physical tokens to ensure the authenticity and uniqueness of the user's identity. The role and authority management module (42) allocates different roles and authorities to users according to their positions and responsibilities, thereby achieving fine-grained access control and supporting dynamic adjustment of authorities to adapt to changes in organizational structure and business requirements.

5. A security verification device for electronic archive data management as claimed in claim 4, characterized in that: The access audit and log recording module (43) records the access behavior of all users, including access time, access object, and operation type, providing a reliable basis for security audit and event tracking; The abnormal behavior detection module (44) monitors the user's access behavior, analyzes and identifies abnormal access patterns, such as frequent access to sensitive data and illegal attempts to crack passwords, and promptly issues an alarm and takes corresponding security measures; In an emergency, the emergency access control module (45) can quickly cut off access rights of all or specific users to prevent the situation from further deteriorating.

6. A security verification device for electronic archive data management as claimed in claim 1, characterized in that: The alarm unit (6) comprises a multi-level alarm mechanism module (61), an alarm signal transmission module (62), an alarm linkage control module (63), and an alarm recording and query module (64). The multi-level alarm mechanism module (61) sets three levels of alarms according to the severity of the security incident, namely, a minor warning, a serious warning, and an emergency alarm, so as to take different response measures; The alarm signal transmission module (62) supports transmitting the alarm signal to a designated receiving end, a security monitoring center, or an administrator's mobile phone via wired or wireless means, thereby ensuring timely delivery of the alarm information.

7. A security verification device for electronic archive data management as claimed in claim 6, characterized in that: The alarm linkage control module (63) is linked with the surveillance camera and the access control system equipment, and when the alarm is triggered, these devices are automatically started to record the on-site situation or prevent illegal intrusion; The alarm recording and query module (64) records in detail the time, location, cause and processing result of each alarm, which facilitates subsequent security audits and event tracking.

8. The electronic archive data management security verification device as claimed in claim 1, characterized in that: The storage device (2) comprises a plurality of hard disks, which are installed in the storage box (1) via a detachable placement plate, and the placement plate is provided with labels and grooves for identifying the hard disks.

9. A security verification device for electronic archive data management as claimed in claim 1, characterized in that: The security verification module (3) also includes a data consistency verification unit (33) and a digital signature verification unit (34) to further enhance the security and integrity of the electronic archive data.

10. A security verification device for electronic archive data management as claimed in claim 1, characterized in that: The alarm unit (6) is connected to a monitoring camera, and when an illegal access is detected, the monitoring camera is automatically started and records the on-site situation.

Citation Information

Cited By

  • Standard electronic archive management method and system based on artificial intelligence

    CN119377997A