Computer storage file protection system

Abstract

The invention relates to the technical field of system security, in particular to a computer storage file protection system which comprises a risk analysis module, a dynamic encryption module, an authentication management module and a behavior monitoring module. According to the method, the response speed and the personalized protection level of the file security are improved by automatically collecting location, time and user information parameters and executing context risk logic analysis, the system can provide customized protection schemes for different security requirements by dynamically adjusting an encryption mechanism and the key length, and the security of the file is improved. The system is allowed to strengthen protection measures under the high-risk condition, resource use is optimized under the low-risk condition, unnecessary performance burdens are avoided, through real-time monitoring and behavior analysis, the system can recognize and respond to abnormal behaviors in time, unauthorized access and data leakage are effectively prevented, potential threats to sensitive information are reduced, and the safety of the system is improved. The overall security management capability of the system is improved, and the continuity and effectiveness of data protection are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of system security, and in particular to a computer storage file protection system. Background Art

[0002] System security technology involves a series of measures and technologies designed to protect computer systems and networks from unauthorized access, damage or attack, including physical security measures, encryption technology, network security policies, authentication protocols, access controls and firewalls, with an emphasis on preventing data leakage, ensuring data integrity and availability, and protecting system resources.

[0003] Among them, the computer storage file protection system is used to protect files in computer storage from unauthorized access, modification or deletion. The system usually uses encryption technology, access control mechanism and file integrity verification to prevent the leakage, tampering or loss of sensitive or important data. Its uses include protecting the data security of individuals, enterprises or government departments, and ensuring the confidentiality and integrity of data during storage and transmission. It is extremely important to prevent data leakage and meet compliance requirements.

[0004] Existing technologies use relatively static security measures, such as one-time encryption and fixed access control rules, which are limited in effectiveness when facing ever-changing network threats. Static strategies lack flexibility and are difficult to adapt to new security issues and complex attack scenarios. For example, when encountering customized malicious attacks, fixed key management and access control cannot provide adequate protection, leaving sensitive data at risk of being stolen or destroyed. In addition, traditional systems have delays in real-time monitoring and responding to unauthorized access, which increases the response time after an attack occurs, resulting in untimely handling of security incidents, leading to greater data losses and security accidents. Summary of the invention

[0005] The purpose of the present invention is to solve the shortcomings in the prior art and to propose a computer storage file protection system.

[0006] In order to achieve the above object, the present invention adopts the following technical solution: a computer storage file protection system, the system comprising: The risk analysis module automatically collects location, time, and user information parameters based on file access requests, performs contextual risk logic analysis, including security requirements and risk levels, and dynamically adjusts the encryption mechanism, selects the matching key management process, and generates encryption parameter configurations; The dynamic encryption module performs encryption operations on the target file data based on the encryption parameter configuration, dynamically adjusts the key length according to the device security level and file sensitivity, matches the differentiated security requirements, and obtains a file protection snapshot; The authentication management module collects passwords, biometric information and device status through user access requests based on the file protection snapshot, performs security verification, adjusts authentication steps, and reconfigures the authentication process according to security assessment and user permissions to generate an authentication process structure; Based on the authentication process structure, the behavior monitoring module continuously monitors the usage of encrypted files, analyzes access frequency and download behavior data, identifies unauthorized access behavior through behavior pattern comparison, and activates the security response mechanism to obtain a security response result.

[0007] The present invention is improved in that the steps of the contextual risk logic analysis are specifically as follows: Based on the file access request, the location, time and user information parameters are automatically collected, the location is determined by parsing the IP address of the request source, the timestamp is extracted from the request metadata, and the user information of the request is identified to obtain the access information set; Using the access information set, evaluate the security requirements and the risk level of the current access using the formula:

[0008] Calculate risk assessment value , and obtain the risk logic analysis results, where represents the risk adjustment factor, is the location risk weight, Score the user's safety. is the time risk factor.

[0009] The present invention is improved in that the step of obtaining the encryption parameter configuration is specifically as follows: According to the risk logic analysis result, the encryption mechanism is automatically adjusted, including symmetric encryption or asymmetric encryption, to match the determined security requirements, and encryption adjustment information is obtained; Based on the encryption adjustment information, a matching key management process is selected, using the formula:

[0010] Calculating key update frequency , get the encryption parameter configuration, where is the current risk factor, A stability index representing security requirements.

[0011] The present invention is improved in that the step of performing encryption operation on target file data is specifically as follows: Based on the encryption parameter configuration, retrieve the current configuration of the encryption algorithm and key length, determine the encryption algorithm type and the corresponding key length, and obtain encryption parameter details; Based on the encryption parameter details, the target file is encrypted, and the integrity and security of the file data during storage or transmission are verified to generate an encryption operation result.

[0012] The present invention is improved in that the steps of obtaining the file protection snapshot are specifically as follows: The key length is dynamically adjusted according to the sensitivity of the file and the current security level, using the formula:

[0013] Calculate key length ,in, is the file sensitivity score, The complexity of the current security environment; Based on the key length, it is determined whether the differentiated security requirements of the file are met, and a file protection snapshot is created.

[0014] The present invention is improved in that the adjustment step of the authentication step is specifically as follows: Based on the file protection snapshot, automatically collect authentication data including passwords, biometric information and device status through user access requests to generate a user authentication data set; Based on the user authentication data set, security assessment is performed using the formula:

[0015] Calculating Safety Score , and obtain the security verification result, where is the password safety score, is the biometric match, is the device status security level, , and is the corresponding weight parameter; Based on the security verification results, evaluate whether additional authentication measures need to be added, including secondary password entry, reconfirmation of biometric information and checking of the device security status, and obtain an adjusted list of authentication steps.

[0016] The present invention is improved in that the steps of obtaining the authentication process structure are specifically as follows: Based on the security assessment and user permissions, reconfigure the authentication process to use the formula:

[0017] Prioritize security processes to arrive at a new certification process, where: represents the priority score of reconfiguration, is the risk score obtained in the security assessment, is the user permission sensitivity score, and is the corresponding weight coefficient; The new authentication process is tested to verify the security and effectiveness of the process, and the user's acceptance of the new process is evaluated to obtain the authentication process structure.

[0018] The present invention is improved in that the steps of obtaining the security response result are specifically as follows: Based on the authentication process structure, the access frequency and download behavior data of the encrypted files are analyzed to identify abnormal or potential unauthorized access behaviors and obtain preliminary risk identification records; Based on the preliminary risk identification record, activate the security response mechanism using the formula:

[0019] Get the security response result, where: is the emergency level of the security response, is the severity score of the identified risk activity, is an estimate of the impact of a potential threat on the system, and is the weight coefficient.

[0020] Compared with the prior art, the advantages and positive effects of the present invention are: In the present invention, by automatically collecting location, time and user information parameters and performing contextual risk logic analysis, the response speed and personalized protection level of file security are improved. The system can provide customized protection solutions for different security needs by dynamically adjusting the encryption mechanism and key length, allowing the system to strengthen protection measures in high-risk situations and optimize resource usage in low-risk situations to avoid unnecessary performance burdens. Through real-time monitoring and behavioral analysis, the system can promptly identify and respond to abnormal behaviors, effectively prevent unauthorized access and data leakage, reduce potential threats to sensitive information, improve the overall security management capabilities of the system, and ensure the continuity and effectiveness of data protection. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 is a system flow chart of the present invention; Figure 2 It is a flowchart of the contextual risk logic analysis in the present invention; Figure 3 A flowchart for obtaining encryption parameter configuration in the present invention; Figure 4 A flowchart of performing encryption operation on target file data in the present invention; Figure 5 A flowchart of obtaining a file protection snapshot in the present invention; Figure 6 It is an adjustment flow chart of the authentication step in the present invention; Figure 7 A flowchart for obtaining the authentication process structure in the present invention; Figure 8 This is a flow chart for obtaining the security response results in the present invention. DETAILED DESCRIPTION

[0022] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0023] In the description of the present invention, it should be understood that the terms "length", "width", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating positions or positional relationships, are based on the positions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, in the description of the present invention, the meaning of "multiple" is two or more, unless otherwise clearly and specifically defined.

[0024] Example

[0025] See also Figure 1 The present invention provides a technical solution: a computer storage file protection system comprising: Based on file access requests, the risk analysis module automatically collects location, time and user information parameters, performs contextual risk logic analysis, including security requirements and risk levels, and dynamically adjusts the encryption mechanism, selects a matching key management process, and generates encryption parameter configurations; the encryption mechanism is specifically symmetric encryption or asymmetric encryption, such as using the same key to encrypt and decrypt data, or using a pair of public and private keys for encryption and decryption. The public key can be made public and used to encrypt data; the private key is kept confidential and used to decrypt data; the key management process specifically includes key generation, storage, rotation, revocation and destruction.

[0026] The dynamic encryption module performs encryption operations on the target file data based on the encryption parameter configuration, dynamically adjusts the key length according to the device security level and file sensitivity, matches differentiated security requirements, and obtains a file protection snapshot; among which, the security requirements specifically include using stronger encryption algorithms and more complex identity authentication measures for files containing highly sensitive information (such as financial records or personal identity information), and using lower levels of encryption for less sensitive data (such as public information releases) to optimize system performance and resource utilization.

[0027] The authentication management module collects passwords, biometric information and device status through user access requests based on file protection snapshots, performs security checks, adjusts authentication steps, and reconfigures the authentication process and generates an authentication process structure based on security assessments and user permissions; Based on the authentication process structure, the behavior monitoring module continuously monitors the use of encrypted files, analyzes access frequency and download behavior data, identifies unauthorized access behavior through behavior pattern comparison, and activates the security response mechanism to obtain security response results. Among them, the security response mechanism may include that if too many abnormal login attempts are detected, the system automatically locks the account to prevent unauthorized access; when the system detects unusual file download behavior (such as a large amount of data suddenly being downloaded from the server), the system will send an alert to the administrator; when the behavior is obviously abnormal and indicates data leakage (such as a large number of sensitive files accessed during non-working hours), the system automatically terminates the session of the relevant user.

[0028] Encryption parameter configuration includes key type and update frequency. File protection snapshot includes encryption status, protection level, and security audit mark. The authentication process structure includes process mode, user identification indicators, and security verification points. The security response results include response type, monitoring feedback information, and security notification settings.

[0029] See also Figure 2 ,The specific steps of contextual risk logic analysis are: Based on the file access request, the location, time and user information parameters are automatically collected, the location is determined by parsing the IP address of the request source, the timestamp is extracted from the request metadata, and the user information of the request is identified to obtain the access information set; Based on the file access request, the IP address of the request source is parsed through the geolocation service to determine the location, and the IP address is mapped to a specific geographic location, including city, country, etc. The time information is extracted from the metadata of the request. The timestamp is usually recorded in UTC format, and the conversion of the timestamp involves converting it to local time in order to better understand and analyze the access pattern. The identification of user information is completed by parsing the authentication token or cookie in the HTTP request header. The token usually contains the user's unique identifier, allowing the system to confirm the identity and access level of the requester, forming an access information set. The information set includes detailed information such as location, time and user identity, providing the necessary input data for subsequent security analysis and response. Through comprehensive data, the security system can assess the potential risks of each request and take corresponding security measures to ensure information security and data protection.

[0030] Using the access information set, evaluate the security requirements and the risk level of the current access using the formula:

[0031] Calculate risk assessment value , and obtain the risk logic analysis results, among which, Represents the risk adjustment factor, which is used to adjust the sensitivity of risk assessment to adapt to different security needs and environments. The risk weight of the location is determined based on the safety history and geographical location of the location. Provides a security score for users based on their past behavior, access patterns, and security records. is the time risk factor, which considers the risk sensitivity in different time periods; Location Risk Weight , calculated based on the historical security incident data of the location; user security score , obtained by analyzing the user's historical access behavior and permission level; time risk factor , set for nighttime visit period; risk adjustment factor , in order to enhance the sensitivity of the model, it is set higher. The calculation process is as follows:

[0032] The result shows that under the given security parameter settings, the risk assessment value of this file access is 1.2, indicating that there is a medium level of security risk and appropriate security measures need to be taken to prevent potential security threats.

[0033] See also Figure 3 , the specific steps for obtaining encryption parameter configuration are: According to the results of risk logic analysis, the encryption mechanism is automatically adjusted, including symmetric encryption or asymmetric encryption, to match the determined security requirements and obtain encryption adjustment information; According to the results of risk logic analysis, the encryption mechanism is automatically adjusted to match the determined security requirements. The security analysis results of file access requests are parsed. By extracting and analyzing the current encryption requirements, the encryption method suitable for the risk level is determined, including symmetric encryption and asymmetric encryption strategies. The symmetric encryption scheme adjusts the key length and encryption strength according to the encryption efficiency and the sensitivity of the application scenario, while the asymmetric encryption scheme optimizes key tasks based on the key pair generation time and encryption and decryption speed. In order to match the requirements of the encryption mechanism, the historical access mode is called for parameterized settings. The integrated encryption adjustment information includes the encryption type selection results, key length recommendations, and specific algorithm preferences, providing encryption adjustment information as input for subsequent steps.

[0034] Based on the encryption adjustment information, select the matching key management process using the formula:

[0035] Calculating key update frequency , get the encryption parameter configuration, where is the current risk factor, a value derived from the most recent security assessment, reflecting the risk level of the current security environment. The stability index represents security requirements and reflects the frequency and stability of changes in encryption requirements. A lower stability index indicates that security requirements change more quickly and require more frequent key updates. Assume the current risk factor , obtained through recent security assessment data, reflects a medium level of security risk, and the stability index of security requirements , indicating that the security requirements are relatively stable and do not change much. The calculation process is as follows:

[0036] This result shows that the current key update frequency is 0.5. Under the current security environment and required stability, the system needs to update keys at a lower frequency to maintain security without excessively consuming resources.

[0037] See also Figure 4 , the specific steps of performing encryption operation on target file data are: Based on the encryption parameter configuration, retrieve the current configuration of the encryption algorithm and key length, determine the encryption algorithm type and the corresponding key length, and obtain the encryption parameter details; Based on the encryption parameter configuration, we first extract the current encryption algorithm configuration and key length data, match the applicable encryption algorithm type according to the security level of the device and the sensitivity of the file, and confirm the optimal key length and algorithm scheme by analyzing and comparing various encryption parameters, including verifying the compatibility of the key and algorithm, and analyzing its use in scenarios with different security levels. The generated encryption parameters record the key type, length, and specific configuration of the algorithm.

[0038] Based on the encryption parameter details, the target file is encrypted, and the integrity and security of the file data during storage or transmission are verified to generate the encryption operation result; Based on the encryption parameter details, the target file is encrypted step by step using the key and the specified encryption algorithm. By calling the segmentation operation of the file block, each segment of the file data is encrypted according to the set key length, and the encrypted data is reassembled into a complete file. Subsequently, an integrity check is performed on the encrypted file, including comparing the hash values ​​of the files before and after encryption to confirm that the file content has not been damaged or lost during the encryption process, and the encryption operation result is obtained.

[0039] See also Figure 5 , the specific steps for obtaining a file protection snapshot are: According to the sensitivity of the file and the current security level, the key length is dynamically adjusted using the formula:

[0040] Calculate key length ,in, is the file sensitivity score, The complexity of the current security environment; The following data was collected, file sensitivity score The current security environment complexity is 80. The base is 50, and the value is 50. Substitute the value into the formula for calculation:

[0041] The results show that, under a given sensitivity score and security complexity, the key length should be set to 256 bits to protect the security of highly sensitive files in a more complex security environment.

[0042] Based on the key length, determine whether the differentiated security requirements of the file are met and create a file protection snapshot; Based on the key length, the judgment is made by comparing the differentiated security requirements of the file and the current encryption settings. First, the protection level parameters of the file and the associated differentiated requirement parameters are extracted, and compared with the current key length and encryption algorithm. According to the matching results, it is determined whether the key needs to be adjusted or the encryption algorithm needs to be replaced. Secondly, if the key length does not meet the differentiated security requirements of the file, the system dynamically adjusts the key length and recalculates the security configuration parameters. At the same time, other information required for the file protection snapshot, including the encryption algorithm type, key usage period and device security level, is recorded and verified to ensure the integrity and consistency of the snapshot information. Finally, a file protection snapshot is created, which contains the key length, encryption algorithm and verification information of the current file encryption as an important basis for future traceability and verification.

[0043] See also Figure 6 , the adjustment steps of the authentication steps are as follows: Based on the file protection snapshot, authentication data including passwords, biometric information and device status are automatically collected through user access requests to generate a user authentication data set; Based on the file protection snapshot, the authentication data collection mechanism is automatically triggered. In response to the user's access request, the password information is obtained one by one. The complexity and composition of the password are analyzed according to the predefined security policy, including the type of characters, length and special symbols used. The biometric information on the user's device, such as fingerprint images or facial feature point coordinates, is further extracted, and the biometric data is preprocessed to remove redundant data or interference features. Finally, the device's operating status is checked, and the device's security level is determined by detecting the device's operating system version, security patch update status and the list of running applications. The above steps generate a user authentication data set that includes passwords, biometric information and device status.

[0044] Based on the user authentication data set, security assessment is performed using the formula:

[0045] Calculating Safety Score , and obtain the security verification result, where It is a password security score that reflects the complexity and security of the user's password, such as password length and character complexity. is the biometric match, which indicates how well the biometric information (such as fingerprint or facial recognition) matches the system records. It is the device status security level, which evaluates the current security status of the device, such as whether the device has been jailbroken, whether it is running unauthorized applications, etc. , and is the corresponding weight parameter, which is dynamically adjusted according to previous data and security requirements; Current Password Safety Score , according to recent security assessment data, reflecting high levels of password complexity, biometric matching , indicating an almost perfect match, the device status security level , indicating that the device has certain security risks but is within an acceptable range, and the weight is set to , , , the calculation process is as follows:

[0046] The result shows that the current comprehensive security score is 82.5, which means that under the current security environment and strategy, the system authentication security is relatively high, but attention should still be paid to the potential risks brought by the device status.

[0047] Based on the security verification results, evaluate whether additional authentication measures need to be added, including secondary password input, reconfirmation of biometric information, and checking of device security status, and obtain an adjusted list of authentication steps; Based on the security verification results, the system analyzes the specific composition of the score in turn, first screening out the lowest security score, and combining the verification method corresponding to the score, such as password, device status or biometric information, to determine whether there are obvious security weaknesses. If so, the system decides on new authentication measures based on the preset strategy, such as enabling the requirement for secondary password input, re-acquiring and verifying biometric data, or performing an in-depth check of the device status. The system parameterizes and stores the adjusted authentication strategy to facilitate subsequent dynamic updates and adjustments to the authentication process, forming an adjusted list of authentication steps.

[0048] See also Figure 7 , the specific steps for obtaining the authentication process structure are: According to the security assessment and user permissions, reconfigure the authentication process and use the formula:

[0049] Prioritize security processes to arrive at a new certification process, where: represents the priority score of reconfiguration, is the risk score obtained in the security assessment, is the user permission sensitivity score, and is the corresponding weight coefficient, which determines the relative importance of the risk score and the user permission sensitivity score in the priority score; Risk score obtained from security assessment 75, indicating that the security risk of the current environment or operation is high. is 50, indicating that the user's permission level is moderately sensitive to security measures, and the weight is set to and , reflecting that in the current situation, the impact of risk score on the authentication process is slightly greater than that of user permissions. The calculation process is as follows:

[0050] The result indicates that the reconfiguration priority score is 65, which is based on existing security assessment and user permission data to determine how to appropriately adjust the authentication process to ensure that it reflects both security requirements and user convenience.

[0051] Test the new certification process, verify the security and effectiveness of the process, evaluate the user's acceptance of the new process, and obtain the certification process structure; To test the new authentication process, we first deployed all the reconfigured authentication steps and performed functional verification one by one, including simulating various operations that occur in the actual use environment, such as the trigger mechanism and dynamic response check of multi-factor authentication. The system records the execution results of each step and generates log files for potential abnormal situations (such as verification timeout or device authentication failure) for subsequent analysis. During the test, parameter values ​​are dynamically adjusted to ensure the accuracy of the authentication logic. In addition, the boundary conditions of the process are stress tested in a laboratory environment to evaluate its stability. Finally, the process test is run in an actual user group, user feedback and acceptance data are collected and statistically analyzed to obtain the authentication process structure.

[0052] See also Figure 8 , the specific steps for obtaining the security response result are: Based on the authentication process structure, analyze the access frequency and download behavior data of encrypted files, identify abnormal or potential unauthorized access behaviors, and obtain preliminary risk identification records; Based on the authentication process structure, the access frequency data and download behavior data of encrypted files are extracted from the logs, and the timestamp of each file access, the unique identifier of the access device, the file path and its sensitivity level are recorded. Then, the data is sorted to generate a behavior table grouped by time and user behavior. Next, by analyzing the changing pattern of access frequency, the mean and standard deviation of the number of daily accesses are calculated, and the statistical data is combined with the download behavior records to analyze abnormal patterns in download behavior, such as high-frequency downloads during non-working hours or using multiple devices to access the same sensitive file. Finally, abnormal behavior or potential unauthorized access behavior is identified based on the analysis results, and the information is stored as a preliminary risk identification record, which lists in detail the time, device and file path of suspicious activities, providing a direct reference for subsequent security response mechanisms.

[0053] Based on the initial risk identification records, activate security response mechanisms, including access restrictions, user verification enhancement or blocking of suspicious activities, using the formula:

[0054] Get the security response result, where: is the emergency level of the security response, is the severity score of the identified risk activity, is an estimate of the impact of a potential threat on the system, and is a weighting factor that determines the importance of the severity of risk activities and the impact of potential threats when calculating the security response urgency level; Severity score of identified risk activities =75, the estimated value of the impact of potential threats on the system is 50, the weight coefficient is 0.6, is 0.4, substitute it into the formula for calculation:

[0055] The results show that given the risk activities and potential threats, the security response urgency level score is 65, indicating that medium to high-level security response measures are required, such as strengthening user authentication or blocking suspicious activities.

[0056] The above are only preferred embodiments of the present invention and are not intended to limit the present invention in other forms. Any technician familiar with the profession may use the technical contents disclosed above to change or modify them into equivalent embodiments with equivalent changes and apply them to other fields. However, any simple modification, equivalent change and modification made to the above embodiments based on the technical essence of the present invention without departing from the technical solution of the present invention still falls within the protection scope of the technical solution of the present invention.

Claims

1. A computer storage file protection system, characterized in that: The system comprises: The risk analysis module automatically collects location, time, and user information parameters based on file access requests, performs contextual risk logic analysis, including security requirements and risk levels, and dynamically adjusts the encryption mechanism, selects the matching key management process, and generates encryption parameter configurations; The dynamic encryption module performs encryption operations on the target file data based on the encryption parameter configuration, dynamically adjusts the key length according to the device security level and file sensitivity, matches the differentiated security requirements, and obtains a file protection snapshot; The authentication management module collects passwords, biometric information and device status through user access requests based on the file protection snapshot, performs security verification, adjusts authentication steps, and reconfigures the authentication process according to security assessments and user permissions to generate an authentication process structure; Based on the authentication process structure, the behavior monitoring module continuously monitors the usage of encrypted files, analyzes access frequency and download behavior data, identifies unauthorized access behavior through behavior pattern comparison, and activates the security response mechanism to obtain a security response result.

2. The computer storage file protection system according to claim 1, characterized in that: The steps of the contextual risk logic analysis are specifically as follows: Based on the file access request, the location, time and user information parameters are automatically collected, the location is determined by parsing the IP address of the request source, the timestamp is extracted from the request metadata, and the user information of the request is identified to obtain the access information set; Using the access information set, evaluate the security requirements and the risk level of the current access using the formula: Calculate risk assessment value , and obtain the risk logic analysis results, among which, represents the risk adjustment factor, is the location risk weight, Score the user's safety. is the time risk factor.

3. The computer storage file protection system according to claim 1, characterized in that: The steps for obtaining the encryption parameter configuration are specifically as follows: According to the risk logic analysis result, the encryption mechanism is automatically adjusted, including symmetric encryption or asymmetric encryption, to match the determined security requirements, and encryption adjustment information is obtained; Based on the encryption adjustment information, a matching key management process is selected, using the formula: Calculating key update frequency , get the encryption parameter configuration, where is the current risk factor, A stability index representing security requirements.

4. The computer storage file protection system according to claim 1, characterized in that: The steps of performing encryption operation on target file data are specifically as follows: Based on the encryption parameter configuration, retrieve the current configuration of the encryption algorithm and key length, determine the encryption algorithm type and the corresponding key length, and obtain encryption parameter details; Based on the encryption parameter details, the target file is encrypted, and the integrity and security of the file data during storage or transmission are verified to generate an encryption operation result.

5. The computer storage file protection system according to claim 1, characterized in that: The steps for obtaining the file protection snapshot are specifically as follows: The key length is dynamically adjusted according to the sensitivity of the file and the current security level, using the formula: Calculate key length ,in, is the file sensitivity score, The complexity of the current security environment; Based on the key length, it is determined whether the differentiated security requirements of the file are met, and a file protection snapshot is created.

6. The computer storage file protection system according to claim 1, characterized in that: The adjustment steps of the authentication step are specifically as follows: Based on the file protection snapshot, automatically collect authentication data including passwords, biometric information and device status through user access requests to generate a user authentication data set; Based on the user authentication data set, security assessment is performed using the formula: Calculating Safety Score , and obtain the security verification result, where is the password safety score, is the biometric match, is the device status security level, , and is the corresponding weight parameter; Based on the security verification results, evaluate whether additional authentication measures need to be added, including secondary password entry, reconfirmation of biometric information and checking of the device security status, and obtain an adjusted list of authentication steps.

7. The computer storage file protection system according to claim 1, characterized in that: The steps for obtaining the authentication process structure are specifically as follows: Based on the security assessment and user permissions, reconfigure the authentication process to use the formula: Prioritize security processes to arrive at a new certification process, where: represents the priority score of reconfiguration, is the risk score obtained in the security assessment, is the user permission sensitivity score, and is the corresponding weight coefficient; The new authentication process is tested to verify the security and effectiveness of the process, and the user's acceptance of the new process is evaluated to obtain the authentication process structure.

8. The computer storage file protection system according to claim 1, characterized in that: The steps for obtaining the security response result are specifically as follows: Based on the authentication process structure, the access frequency and download behavior data of the encrypted files are analyzed to identify abnormal or potential unauthorized access behaviors and obtain preliminary risk identification records; Based on the preliminary risk identification record, activate the security response mechanism using the formula: Get the security response result, where: is the emergency level of the security response, is the severity score of the identified risk activity, is an estimate of the impact of a potential threat on the system, and is the weight coefficient.

Images