Engineering data leakage prevention system based on cloud computing

Abstract

The invention discloses an engineering data leakage prevention system based on cloud computing, relates to the technical field of engineering data leakage prevention, and solves the technical problems that data encryption measures are relatively single and need to be frequently updated to guarantee data privacy, the data encryption measures are not convenient enough, and data leakage is easily caused. The method comprises the following steps: comparing extracted data features of to-be-stored data with a plurality of privacy data feature sequences with different privacy levels, and evaluating the privacy level of the to-be-stored data; evaluating the security level of the data encryption algorithm; selecting a plurality of data encryption algorithms according to the privacy level of the to-be-stored data and the security levels of the data encryption algorithms, and combining the data encryption algorithms to obtain a plurality of data encryption algorithm combinations; the data encryption algorithm combination with the lowest comprehensive cost is selected to encrypt the data of the to-be-stored data; according to the method, the data privacy is effectively protected, and meanwhile, the safety and the economic benefits are considered.

Description

Technical Field

[0001] The present invention belongs to the field of engineering data leakage prevention, and in particular is an engineering data leakage prevention system based on cloud computing. Background Art

[0002] Engineering data is an indispensable foundation for engineering project management. It covers all types of information generated during the entire life cycle of an engineering project. Due to the lack of effective data protection measures, sensitive engineering information may be illegally obtained or leaked, or improper behavior or negligence of employees may also lead to data leakage, such as taking data out of the company through email or USB devices.

[0003] At present, in order to prevent engineering data leakage, the following methods are mainly adopted: strengthening network protection to prevent intrusion, but the means of network attacks are constantly developing and changing, and it is necessary to continuously update and improve network protection technology to cope with new threats; setting access rights to prevent irrelevant personnel from entering, but with the expansion of enterprise scale and development of business, the management of access rights has become more and more complicated; using a single data encryption algorithm for encryption, the encryption method is relatively simple and easy to be cracked, etc. In summary, the existing data encryption methods are relatively single and need to be updated frequently to ensure the privacy of data, which is not convenient and easy to cause data leakage. Therefore, the present invention provides an engineering data leakage prevention system based on cloud computing. Summary of the invention

[0004] The present invention aims to solve at least one of the technical problems existing in the prior art; to this end, the present invention proposes an engineering data leakage prevention system based on cloud computing, which is used to solve the technical problems that the existing data encryption measures are relatively simple and need to be updated frequently to ensure the privacy of data, which is not convenient enough and easily causes data leakage.

[0005] To achieve the above-mentioned object, a first aspect of the present invention provides an engineering data leakage prevention system based on cloud computing, comprising a data classification module and an encryption module;

[0006] Data classification module: used to extract data features of the data to be stored, obtain several data features, compare the data features with several privacy data feature sequences of different privacy levels, and evaluate the privacy level of the data to be stored; wherein the privacy data feature sequence includes several data features corresponding to the privacy level;

[0007] Encryption module: used to evaluate the security level of the data encryption algorithm; select several data encryption algorithms according to the privacy level of the data to be stored and the security level of the data encryption algorithm, and combine them to obtain several data encryption algorithm combinations; wherein the privacy level and the security level have the same level number; and,

[0008] Select the data encryption algorithm combination with the lowest comprehensive cost to encrypt the data to be stored.

[0009] Preferably, comparing the data feature with privacy data feature sequences of different privacy levels to evaluate the privacy level of the data to be stored includes:

[0010] Through semantic similarity analysis, several data features of the data to be stored are marked in several privacy data feature sequences, and the privacy levels corresponding to the several data features in the several privacy data feature sequences are extracted. The highest privacy level is the privacy level of the data to be stored.

[0011] The present invention ensures that the data is most strictly protected by comparing the similarity between the data features of the data to be stored and the feature sequence of the privacy data, and selects the highest privacy level as the privacy level of the data to be stored. This follows the principle of "higher rather than lower", and even when the data contains features of multiple different privacy levels, the security of the overall data can be guaranteed not to be affected.

[0012] Preferably, the security level of the evaluation data encryption algorithm includes:

[0013] The security levels of several encryption algorithms are evaluated through expert and market research. The average of the security levels evaluated by experts and market research is the security level of the data encryption algorithm. Data encryption algorithms with the same security level are classified into one category to obtain a set of data encryption algorithms with different security levels.

[0014] The experts of the present invention use their profound professional knowledge and rich practical experience to conduct in-depth analysis of various encryption algorithms, so as to give a preliminary judgment on their security level, and collect and analyze data such as the actual application of encryption algorithms in the market, user feedback, and security incidents through market research to evaluate the performance of encryption algorithms in actual environments; these data can provide a powerful supplement and verification for expert evaluation, making the evaluation results more comprehensive and accurate.

[0015] Preferably, the method selects several data encryption algorithms according to the privacy level of the data to be stored and the security level of the data encryption algorithm, and combines them to obtain several data encryption algorithm combinations, including:

[0016] According to the privacy level of the data to be stored, extract encryption algorithms with the same security level as the privacy level, count the number of extracted encryption algorithms, and mark them as N;

[0017] The data to be stored is unevenly divided into N sub-parts of data to be stored, and the sub-parts of data to be stored are numbered sequentially from left to right, marked as j, and j=1, 2, ..., N, where j is a positive integer;

[0018] Extract the sub-parts whose numbers are integer multiples from the sub-parts of the data to be stored, encrypt the sub-parts of the data to be stored that are integer multiples of each other using the same encryption algorithm, encrypt different integer multiples using different encryption algorithms, and encrypt the sub-parts of the data to be stored that have no integer multiples between their numbers using any of the remaining encryption algorithms; wherein, if j=1, no integer multiple analysis is performed.

[0019] The present invention selects an encryption algorithm of a corresponding security level according to the privacy level of the data to be stored, ensuring that the privacy protection strength of the data matches the sensitivity of the data, thereby achieving precise protection. This targeted encryption method can not only effectively prevent data leakage, but also minimize the impact on system performance while ensuring data security; secondly, by unevenly dividing the data to be stored into N data sub-parts, the flexibility of data processing is improved; furthermore, the same encryption algorithm is used for sub-parts whose numbers are integer multiples, and different encryption algorithms are used for sub-parts with different integer multiples. At the same time, since the selection of the encryption algorithm has a certain degree of randomness, it increases the difficulty of illegal cracking of the data, effectively ensuring the privacy of the data and preventing leakage.

[0020] Preferably, when the number of the same data sub-portion to be stored is an integer multiple of the different numbers, different encryption algorithms will be assigned, and only one of them will be selected as the data encryption algorithm for the data sub-portion.

[0021] Preferably, the method of selecting a data encryption algorithm combination with the lowest comprehensive cost to encrypt the data to be stored includes:

[0022] Extract the purchase cost of each encryption algorithm, marked as GRk;

[0023] Establish comprehensive cost function Min(Q)=Σ k (GRk), solving k with the goal of minimizing the combined cost of the data encryption algorithms; where k is the serial number of the data encryption algorithm, k = 0, 1, ..., M, where M is a positive integer.

[0024] The present invention extracts the purchase cost of the encryption algorithm and establishes a comprehensive cost function. With the minimum investment cost as the goal, the encryption scheme with the best cost is selected from a combination of several data encryption algorithms. This achieves cost-effectiveness while achieving the best security effect, helps to improve the efficiency and benefits of data security management, and provides a strong guarantee for the sustainable development of enterprises.

[0025] Compared with the prior art, the present invention has the following beneficial effects:

[0026] 1. The present invention selects encryption algorithms of corresponding security levels according to the privacy level of the data, ensuring that the encryption strength of the data matches the sensitivity of the data, which can not only effectively prevent data leakage, but also optimize the allocation of encryption resources under the premise of data security, thereby improving the overall data protection efficiency; and by unevenly dividing the data to be stored into several sub-parts and setting numbers for each sub-part, the problem of data redundancy or insufficiency that may be caused by a fixed division method is avoided; the selection of encryption algorithms based on the integer multiple relationship of the numbers and the randomness of the selection of encryption algorithms increase the difficulty of data being illegally cracked, effectively protect the privacy of the data, and prevent leakage;

[0027] 2. The present invention obtains several data features by extracting data features of the data to be stored, compares the data features with several privacy data feature sequences of different privacy levels, and evaluates the privacy level of the data to be stored; evaluates the security level of the data encryption algorithm; selects several data encryption algorithms according to the privacy level of the data to be stored and the security level of the data encryption algorithm, and combines them to obtain several data encryption algorithm combinations; selects the data encryption algorithm combination with the lowest comprehensive cost to encrypt the data to be stored; the present invention ensures that the data to be stored is fully protected while reducing the additional cost brought by the encryption process as much as possible. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0029] Figure 1 It is a schematic diagram of the process of the present invention;

[0030] Figure 2 The figure is a flow chart of the data encryption method of the present invention. DETAILED DESCRIPTION

[0031] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0032] See also Figure 1 , the first aspect of the present invention provides an engineering data leakage prevention system based on cloud computing, including a data classification module and an encryption module;

[0033] The data classification module extracts data features of the data to be stored, obtains a number of data features, compares the data features with a number of privacy data feature sequences of different privacy levels, and evaluates the privacy level of the data to be stored; wherein the privacy data feature sequence includes a number of data features corresponding to the privacy level;

[0034] Specifically, through semantic similarity analysis, several data features of the data to be stored are marked in several privacy data feature sequences, and the privacy levels corresponding to the several data features in the several privacy data feature sequences are extracted, and the highest privacy level is the privacy level of the data to be stored.

[0035] It should be noted that the higher the privacy level, the more important it is.

[0036] For example, suppose a project divides the privacy level of data into three levels, where privacy level 3 > privacy level 2 > privacy level 1, and each privacy level contains several data features;

[0037] If there is a piece of data to be stored, extract its data features, such as "customer name", "customer phone number" and "quotation"; through semantic similarity analysis, such as word vector model, it is analyzed that "customer name" and "phone number" belong to the data features of level 2 privacy level, and "quotation" belongs to the data features of level 3 privacy level. Then the privacy level of the data to be stored is level 3, that is, the highest privacy level corresponding to the data features represents the privacy of the data.

[0038] The encryption module evaluates the security level of the data encryption algorithm;

[0039] Specifically, the security levels of several encryption algorithms are evaluated through expert and market research, and the average of the security levels evaluated by experts and market research is the security level of the data encryption algorithm; data encryption algorithms with the same security level are classified into one category to obtain a set of data encryption algorithms with different security levels; among them, the privacy level and the security level have the same level number.

[0040] It should be noted that the security level should be set at an appropriate level so that there are at least two encryption algorithms under each security level.

[0041] It should be noted that expert evaluations often focus on the theoretical basis, design principles, and potential vulnerabilities of the algorithm; market research evaluates the performance of encryption algorithms in actual environments by collecting and analyzing data on the actual application of encryption algorithms in the market, user feedback, and security incidents.

[0042] The security performance of a data encryption algorithm is evaluated by several different technical experts to obtain several security levels; and user feedback is collected through market research to obtain several security levels. The several security levels obtained from the two channels are averaged to obtain the security level of the data encryption algorithm.

[0043] Selecting several data encryption algorithms according to the privacy level of the data to be stored and the security level of the data encryption algorithm, and combining them to obtain several data encryption algorithm combinations;

[0044] See also Figure 2 Specifically, according to the privacy level of the data to be stored, a data encryption algorithm set with the same security level as the privacy level is extracted, and the number of elements contained in the statistical encryption algorithm set is counted and marked as N; each element is a data encryption algorithm;

[0045] The data to be stored is unevenly divided into N data sub-parts to be stored, and the data sub-parts to be stored are sequentially numbered, marked as j, and j=1, 2, ..., N, j is a positive integer;

[0046] Extract the sub-parts whose numbers are integer multiples from the sub-parts of the data to be stored, encrypt the sub-parts of the data to be stored that are integer multiples of each other using the same encryption algorithm, encrypt different integer multiples using different encryption algorithms, and encrypt the sub-parts of the data to be stored that have no integer multiples between their numbers using any of the remaining encryption algorithms; wherein, if j=1, no integer multiple analysis is performed.

[0047] It should be noted that when the number of the same data sub-portion to be stored is an integer multiple of the different numbers, different encryption algorithms will be assigned, and only one of them will be selected as the data encryption algorithm for the data sub-portion.

[0048] For example: Assuming that the privacy level of a certain piece of data to be stored is level 2, a data encryption algorithm set with the same security level is selected, and the number of elements in the set is counted, assuming it is 7, that is, it contains 7 different data encryption algorithms, and they are marked as encryption algorithms 0, 1, 2, ..., 6 respectively; based on the number of elements in the data encryption algorithm, the data to be stored is unevenly divided into 7 sub-parts, and each sub-part is numbered and marked as 1, 2, 3, 4, 5, 6, 7 respectively;

[0049] Extract the parts whose numbers are in integer multiple relationship among the sub-parts: sub-parts 2 and 4, sub-parts 2 and 6, sub-parts 3 and 6; sub-parts 2 and 4 select an encryption algorithm from data encryption algorithms 0-6 for encryption, assuming that data encryption algorithm 1 is selected; sub-parts 2 and 6 select an encryption algorithm from data encryption algorithms 0, 2-6 for encryption, assuming that data encryption algorithm 3 is selected; sub-parts 3 and 6 select an encryption algorithm from data encryption algorithms 0, 2, 4-6 for encryption, assuming that data encryption algorithm 4 is selected; among them, sub-part 6 has two data encryption algorithms, data encryption algorithms 3 and 4, and one of them is selected as the data encryption algorithm of sub-part 6; the remaining sub-parts 1, 5, 7 are encrypted using any one of the remaining data encryption algorithms 0, 2, 5, 6.

[0050] It should be noted that the data encryption algorithms selected in the above sub-sections are not in any particular order.

[0051] And, a data encryption algorithm combination with the lowest comprehensive cost is selected to encrypt the data to be stored.

[0052] Specifically, the purchase cost of each encryption algorithm is extracted and marked as GRk;

[0053] Establish comprehensive cost function Min(Q)=Σ k (GRk), solving k with the goal of minimizing the combined cost of the data encryption algorithms; where k is the serial number of the data encryption algorithm, k = 0, 1, ..., M, where M is a positive integer.

[0054] For example: Assuming that based on the above embodiment, through the above analysis, it can be known that there are 7 data encryption algorithms that can be selected from sub-parts 2 and 4, 6 data encryption algorithms that can be selected from sub-parts 2 and 6, and 5 data encryption algorithms that can be selected from sub-parts 3 and 6; there are 4 data encryption algorithms that can be selected from the remaining sub-parts, among which there are two data encryption algorithms that can be selected from sub-part 6; therefore, several data encryption algorithm combinations for the data to be stored can be obtained;

[0055] Extract the purchase cost of each data encryption algorithm from the market, including direct costs, such as software license fees, hardware fees, dedicated encryption equipment, etc., and indirect costs, such as development and integration costs, maintenance costs, test environment costs, etc.; calculate the comprehensive cost of each data encryption algorithm combination, and select the one with the lowest comprehensive cost as the data encryption algorithm combination for the data to be stored.

[0056] Part of the data in the above formula is calculated by removing the dimension and taking its numerical value. The formula is a formula closest to the actual situation obtained by software simulation of a large amount of collected data; the preset parameters and preset thresholds in the formula are set by technical personnel in this field according to actual conditions or obtained through simulation of a large amount of data.

[0057] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A cloud computing-based engineering data leakage prevention system, characterized in that: Including data classification module and encryption module; Data classification module: used to extract data features of the data to be stored, obtain several data features, compare the data features with several privacy data feature sequences of different privacy levels, and evaluate the privacy level of the data to be stored; wherein the privacy data feature sequence includes several data features corresponding to the privacy level; Encryption module: used to evaluate the security level of the data encryption algorithm; select several data encryption algorithms according to the privacy level of the data to be stored and the security level of the data encryption algorithm, and combine them to obtain several data encryption algorithm combinations; wherein the privacy level and the security level have the same level number; and, Select the data encryption algorithm combination with the lowest comprehensive cost to encrypt the data to be stored.

2. The cloud computing-based engineering data leakage prevention system according to claim 1, characterized in that: The step of comparing the data features with privacy data feature sequences of different privacy levels to evaluate the privacy level of the data to be stored includes: Through semantic similarity analysis, several data features of the data to be stored are marked in several privacy data feature sequences, and the privacy levels corresponding to the several data features in the several privacy data feature sequences are extracted. The highest privacy level is the privacy level of the data to be stored.

3. The cloud computing-based engineering data leakage prevention system according to claim 1, characterized in that: The security level of the evaluation data encryption algorithm includes: The security levels of several encryption algorithms are evaluated through expert and market research. The average of the security levels evaluated by experts and market research is the security level of the data encryption algorithm. Data encryption algorithms with the same security level are classified into one category to obtain a set of data encryption algorithms with different security levels.

4. The cloud computing-based engineering data leakage prevention system according to claim 1, characterized in that: The method selects several data encryption algorithms according to the privacy level of the data to be stored and the security level of the data encryption algorithm, and combines them to obtain several data encryption algorithm combinations, including: According to the privacy level of the data to be stored, extract encryption algorithms with the same security level as the privacy level, count the number of extracted encryption algorithms, and mark them as N; The data to be stored is unevenly divided into N sub-parts of data to be stored, and the sub-parts of data to be stored are numbered sequentially from left to right, marked as j, and j=1, 2, ..., N, where j is a positive integer; Extract the sub-parts whose numbers are integer multiples from the sub-parts of the data to be stored, encrypt the sub-parts of the data to be stored that are integer multiples of each other using the same encryption algorithm, encrypt different integer multiples using different encryption algorithms, and encrypt the sub-parts of the data to be stored that have no integer multiples between their numbers using any of the remaining encryption algorithms; wherein, if j=1, no integer multiple analysis is performed.

5. The cloud computing-based engineering data leakage prevention system according to claim 4, characterized in that: When the number of the same data sub-portion to be stored is an integer multiple of the different numbers, different encryption algorithms will be assigned, and only one of them will be selected as the data encryption algorithm for the data sub-portion.

6. The cloud computing-based engineering data leakage prevention system according to claim 1, characterized in that: The method of selecting a data encryption algorithm combination with the lowest comprehensive cost to encrypt the data to be stored includes: Extract the purchase cost of each encryption algorithm, marked as GRk; Establish comprehensive cost function Min(Q)=Σ k (GRk), solving k with the goal of minimizing the combined cost of the data encryption algorithms; where k is the serial number of the data encryption algorithm, k = 0, 1, ..., M, where M is a positive integer.

Images