Digital platform data access management method and device, equipment, storage medium and product

Abstract

The invention discloses a digital platform data access management method and device, equipment, a storage medium and a product, and relates to the technical field of data management.The method comprises the steps that when a data query request sent by a current visitor is received, the current identity label of the current visitor is obtained, the current identity identifier comprises a distributed digital identity identifier and a verifiable certificate; performing identity authentication on the current visitor according to the current identity label and a forbidden visitor list, wherein the forbidden visitor list comprises identity labels of a plurality of malicious visitors; if the identity authentication is not passed, refusing the data query request, marking the current visitor as a malicious visitor, and updating the current identity label to a forbidden visitor list; and if the identity authentication is passed, allowing the current visitor to query the digital platform data, and continuously performing security monitoring on the digital platform data. According to the method, the situation that the data of the digital platform is stolen or tampered is avoided, and the data security of the digital platform is improved.

Description

Technical Field

[0001] The present application relates to the field of data management technology, and in particular to a digital platform data access management method, device, equipment, storage medium and product. Background Art

[0002] With the development of digital industry, many factories have now used digital platforms to digitally manage and optimize automatic control equipment, thereby realizing real-time monitoring and management of automatic control equipment.

[0003] However, the actual operation of digital platforms often raises data security issues. Malicious individuals can steal or even tamper with data on the digital platforms, causing losses to the factory. Therefore, the industry urgently needs a method to securely manage digital platform data. Summary of the Invention

[0004] The main purpose of this application is to provide a digital platform data access management method, device, equipment, storage medium and product, aiming to solve the technical problem that the existing technology cannot securely manage digital platform data.

[0005] To achieve the above objectives, the present application provides a method for managing data access on a digital platform, the method comprising the following steps: When receiving a data query request from a current visitor, obtaining a current identity identifier of the current visitor, the current identity identifier including a distributed digital identity identifier and a verifiable credential; authenticating the current visitor based on the current identity and a banned visitor list, wherein the banned visitor list includes the identities of several malicious visitors; If the identity authentication fails, the data query request is rejected and the current visitor is marked as a malicious visitor, and the current identity is updated to the banned visitor list; If the identity authentication is passed, the current visitor is allowed to query the digital platform data, and the digital platform data is continuously monitored for security.

[0006] In one embodiment, when receiving a data query request from a current visitor, the step of obtaining the current identity of the current visitor includes: When receiving a data query request from a current visitor, obtaining first visitor information of the current visitor from the data query request, where the first visitor information includes visitor registration information and visitor behavior information; Data preprocessing is performed on the first visitor information to obtain second visitor information, and distributed identity mapping is performed on the second visitor information to obtain a distributed digital identity identifier and a verifiable credential corresponding to the current visitor.

[0007] In one embodiment, the step of performing data preprocessing on the first visitor information to obtain the second visitor information includes: performing data cleaning and data filtering on the first visitor information based on a mapping rule to obtain filtered visitor information, wherein the mapping rule is a rule corresponding to mapping the visitor information into a distributed digital identity identifier and a verifiable credential; The screened visitor information is subjected to data desensitization and data anonymization processing to obtain second visitor information.

[0008] In one embodiment, the step of authenticating the current visitor based on the current identity identifier and the banned visitor list includes: Searching a banned visitor list using the current identity as a keyword, the banned visitor list being stored in a blockchain connected to a digital platform; If it is determined based on the search results that the current identity identifier is included in the banned visitor list, then it is determined that the current visitor has failed identity authentication; If it is determined based on the search results that the current identity identifier is not included in the banned visitor list, it is determined that the current visitor has passed the identity authentication.

[0009] In one embodiment, after the step of rejecting the data query request and marking the current visitor as a malicious visitor if the identity authentication fails, and updating the current identity identifier to the banned visitor list, the method further includes: Broadcasting the digital certificate to each node in the digital platform so that the digital platform can verify the digital certificate; If the digital certificate passes the verification of the digital platform, the updated banned visitor list will be shared with each node in the digital platform.

[0010] In one embodiment, if the identity authentication is successful, the step of allowing the current visitor to query the digital platform data and continuously performing security monitoring on the digital platform data includes: If the identity authentication is passed, the current visitor is allowed to query the digital platform data, and during the query process of the current visitor, it is detected whether there is any changed data on the digital platform, and the digital platform includes a number of distributed nodes; If so, obtaining the target distributed node corresponding to the changed data and performing a security check on the target distributed node to determine whether there is a security problem with the digital platform; If not, the digital platform is continuously checked for changed data until the query process is completed.

[0011] In addition, to achieve the above-mentioned purpose, the present application also proposes a digital platform data access management device, which includes: A data acquisition module, configured to acquire the current identity of the current visitor upon receiving a data query request from the current visitor, wherein the current identity includes a distributed digital identity identifier and a verifiable credential; An identity authentication module, configured to authenticate the current visitor based on the current identity identifier and a banned visitor list, wherein the banned visitor list includes the identities of several malicious visitors; A first processing module is configured to reject the data query request and mark the current visitor as a malicious visitor if the identity authentication fails, and update the current identity identifier to the banned visitor list; The second processing module is used to allow the current visitor to query the digital platform data if the identity authentication is passed, and to continuously monitor the security of the digital platform data.

[0012] In addition, to achieve the above-mentioned purpose, the present application also proposes a digital platform data access management device, which includes: a memory, a processor, and a digital platform data access management program stored on the memory and runnable on the processor, and the digital platform data access management program is configured to implement the steps of the digital platform data access management method described above.

[0013] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a digital platform data access management program is stored on the storage medium. When the digital platform data access management program is executed by the processor, the steps of the digital platform data access management method described above are implemented.

[0014] In addition, to achieve the above-mentioned purpose, the present invention also provides a computer program product, which includes a digital platform data access management program, and when the digital platform data access management program is executed by a processor, it implements the steps of the digital platform data access management method described above.

[0015] This application obtains the current identity of the current visitor when receiving a data query request from the current visitor, and the current identity includes a distributed digital identity identifier and a verifiable credential; authenticates the current visitor based on the current identity and the banned visitor list, and the banned visitor list includes the identities of several malicious visitors; if the identity authentication fails, rejects the data query request and marks the current visitor as a malicious visitor, and updates the current identity to the banned visitor list; if the identity authentication passes, allows the current visitor to query the digital platform data, and continuously monitors the security of the digital platform data. Since the above method of this application first authenticates the current visitor based on the distributed digital identity identifier and verifiable credential of the current visitor, and then determines whether the current visitor is allowed to query the digital platform data based on the identity authentication result, and continuously monitors the security of the digital platform data during the query process, it avoids the digital platform data from being stolen or tampered with, thereby improving the data security of the digital platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 This is a structural diagram of a digital platform data access management device for a hardware operating environment involved in an embodiment of the present application; Figure 2 This is a flowchart of the first embodiment of the digital platform data access management method of this application; Figure 3 This is a flowchart of the second embodiment of the digital platform data access management method of this application; Figure 4 This is a flowchart of the third embodiment of the digital platform data access management method of this application; Figure 5 This is a structural block diagram of the first embodiment of the digital platform data access management device of this application.

[0017] The realization of the objectives, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0018] It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0019] Reference Figure 1 , Figure 1 This is a structural diagram of a digital platform data access management device in the hardware operating environment involved in the embodiment of the present application.

[0020] like Figure 1As shown, the digital platform data access management device may include: a processor 1001, such as a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. The communication bus 1002 is used to enable communication between these components. The user interface 1003 may include a display and an input unit, such as a keyboard. Optionally, the user interface 1003 may also include a standard wired interface or a wireless interface. The network interface 1004 may optionally include a standard wired interface or a wireless interface (such as a wireless fidelity (Wi-Fi) interface). The memory 1005 may be a high-speed random access memory (RAM) or a stable non-volatile memory (NVM), such as a disk drive. The memory 1005 may also be a storage device independent of the processor 1001.

[0021] Those skilled in the art will understand that Figure 1 The structure shown in does not constitute a limitation on the digital platform data access management device, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0022] like Figure 1 As shown, the memory 1005 as a storage medium may include an operating system, a network communication module, a user interface module, and a digital platform data access management program.

[0023] exist Figure 1 In the digital platform data access management device shown, the network interface 1004 is mainly used for data communication with the network server; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in the digital platform data access management device of the present application can be set in the digital platform data access management device, and the digital platform data access management device calls the digital platform data access management program stored in the memory 1005 through the processor 1001, and executes the digital platform data access management method provided in the embodiment of the present application.

[0024] The present application embodiment provides a digital platform data access management method, referring to Figure 2 , Figure 2 This is a flow chart of the first embodiment of the digital platform data access management method of this application.

[0025] In this embodiment, the digital platform data access management method includes the following steps: Step S10: When a data query request from a current visitor is received, the current identity of the current visitor is obtained, where the current identity includes a distributed digital identity identifier and a verifiable credential.

[0026] It should be noted that the execution entity of the method of this embodiment can be a terminal device with identity authentication, data processing, and program execution functions, such as a smart terminal or computer, or an electronic device with the same or similar functions, such as the aforementioned digital platform data access management device. This embodiment and the following embodiments will be described below using the digital platform data access management device (hereinafter referred to as the management device) as an example.

[0027] It is understandable that the above-mentioned data query request may include data query method, data query content, data query conditions, etc. The above-mentioned distributed digital identity identifier is a decentralized digital identity identifier, and its expression may be a string containing several letters and / or numbers; the above-mentioned verifiable certificate is a verifiable digital certificate with tamper-proof capabilities, which contains all the information that a physical certificate can represent, and its expression may be issuing agency information, certificate type information, etc.

[0028] Step S20: authenticating the current visitor according to the current identity and a banned visitor list, wherein the banned visitor list includes the identities of several malicious visitors.

[0029] It should be understood that since the banned visitor list contains the identities of several malicious visitors, the current visitor can be authenticated by placing the current identity in the banned visitor list for matching. More specifically, if the current identity matches the banned visitor list, it can be determined that the current visitor is a malicious visitor; if the current identity does not match the banned visitor list, it can be determined that the current visitor was not a malicious visitor before the current time.

[0030] In particular, the above-mentioned banned visitor list can be stored in the blockchain.

[0031] Step S30: If the identity authentication fails, the data query request is rejected and the current visitor is marked as a malicious visitor, and the current identity identifier is updated to the banned visitor list.

[0032] It is understandable that if the current visitor's identity authentication fails, it may indicate that the current visitor is a malicious visitor, that is, the current visitor has engaged in malicious behavior before the current time (such as stealing or tampering with digital platform data, etc.), so the current visitor's data query request can be rejected. In addition, in actual authentication scenarios, the following situations may exist: assuming that visitor A is a malicious visitor, visitor A's digital identity identifier is A1, and the verifiable credential is B1, then visitor A can continue to access with another identity identifier A2 and verifiable credential B1. Therefore, after marking the current visitor as a malicious visitor, its identity identifier can be updated (for example, both A1 and A2 in the above case are added as identity identifiers to the banned visitor list), so that subsequent visitors can be authenticated more quickly and accurately.

[0033] Step S40: If the identity authentication is passed, the current visitor is allowed to query the digital platform data, and the digital platform data is continuously monitored for security.

[0034] It is understandable that if the current visitor's identity authentication is passed, it only means that the current visitor has not been found to have any malicious behavior, that is, they are not currently classified as malicious visitors. Therefore, the current visitor can be allowed to query the digital platform data, but the digital platform data needs to be continuously monitored for security during the query process.

[0035] This embodiment obtains the current identity of the current visitor when receiving a data query request from the current visitor, the current identity including a distributed digital identity identifier and a verifiable credential; authenticates the current visitor based on the current identity and a banned visitor list, the banned visitor list including the identities of several malicious visitors; if the identity authentication fails, rejects the data query request and marks the current visitor as a malicious visitor, while updating the current identity to the banned visitor list; if the identity authentication passes, allows the current visitor to query the digital platform data, and continuously monitors the digital platform data for security. Since the above method of this embodiment first authenticates the current visitor based on the distributed digital identity and verifiable credential of the current visitor, and then determines whether the current visitor is allowed to query the digital platform data based on the identity authentication result, and continuously monitors the digital platform data for security during the query process, it prevents the digital platform data from being stolen or tampered with, thereby improving the data security of the digital platform.

[0036] refer to Figure 3 , Figure 3 This is a flow chart of the second embodiment of the digital platform data access management method of this application.

[0037] In a feasible implementation manner, the step S10 may include: Step S101: when a data query request from a current visitor is received, first visitor information of the current visitor is obtained from the data query request, where the first visitor information includes visitor registration information and visitor behavior information.

[0038] Step S102: performing data preprocessing on the first visitor information to obtain second visitor information, and performing distributed identity mapping on the second visitor information to obtain a distributed digital identity identifier and a verifiable credential corresponding to the current visitor.

[0039] It should be noted that the above-mentioned visitor registration information may include visitor identity information, visitor IP address information, etc., and the above-mentioned visitor behavior information may include visitor access path information, visitor access time information, etc.

[0040] In a feasible implementation, step S102 may include: Step S1021: performing data cleaning and data screening on the first visitor information based on a mapping rule to obtain screened visitor information, wherein the mapping rule is a rule corresponding to mapping the visitor information into a distributed digital identity identifier and a verifiable credential.

[0041] Step S1022: performing data desensitization and data anonymization processing on the screened visitor information to obtain second visitor information.

[0042] In specific implementations, the above-screened visitor information can be desensitized based on character replacement (replacing part of the information with specific characters, such as * or X), data randomization (randomly generating replacement data without changing the overall characteristics of the data), data encryption (encrypting sensitive data using AES or RSA algorithms so that only authorized users can access it), and hashing (hashing sensitive information using SHA-256 algorithm to make it irreversible). The above-screened visitor information can be anonymized based on data replacement (randomly replacing personal identity features in the data set), data generalization (replacing specific data with broader data), noise addition (adding random noise to the data), and aggregation (aggregating individual data items into group data).

[0043] In a feasible implementation, step S20 may include: Step S201: Searching a banned visitor list using the current identity as a keyword, wherein the banned visitor list is stored in a blockchain, and the blockchain is connected to a digital platform.

[0044] Step S202: If it is determined based on the search results that the current identity identifier is included in the banned visitor list, it is determined that the current visitor has failed identity authentication.

[0045] Step S303: If it is determined based on the search results that the current identity identifier is not included in the banned visitor list, it is determined that the current visitor has passed the identity authentication.

[0046] This embodiment obtains first visitor information of the current visitor from the data query request when receiving a data query request from the current visitor, where the first visitor information includes visitor registration information and visitor behavior information; performs data cleaning and data filtering on the first visitor information based on a mapping rule to obtain filtered visitor information, where the mapping rule is a rule corresponding to mapping visitor information into a distributed digital identity identifier and a verifiable credential; performs data desensitization and data anonymization on the filtered visitor information to obtain second visitor information, and performs distributed identity mapping on the second visitor information to obtain a distributed digital identity identifier and a verifiable credential corresponding to the current visitor; searches a banned visitor list using the current identity identifier as a keyword, where the banned visitor list is stored in a blockchain, and the blockchain is connected to a digital platform; if it is determined based on the search results that the banned visitor list contains the current identity identifier, it is determined that the current visitor has failed identity authentication; if it is determined based on the search results that the banned visitor list does not contain the current identity identifier, it is determined that the current visitor has passed identity authentication. The above method of this embodiment performs data cleaning, data screening, data desensitization, data anonymization and distributed identity mapping on the visitor information of the current visitor, thereby obtaining a distributed digital identity identifier and verifiable credentials corresponding to the current visitor, to ensure that the current visitor can be authenticated quickly and accurately in the future.

[0047] refer to Figure 4 , Figure 4 This is a flow chart of the third embodiment of the digital platform data access management method of this application.

[0048] In a feasible implementation, step S30 may include: Step S301: broadcasting a digital certificate to each node in a digital platform, so that the digital platform can verify the digital certificate.

[0049] It should be noted that the above-mentioned digital certificate may include a public key, holder information, certificate authority information, validity period, digital signature, etc., which is not limited in this embodiment.

[0050] Step S302: If the digital certificate passes the verification of the digital platform, the updated banned visitor list is shared with each node in the digital platform.

[0051] In a specific implementation, if the digital certificate passes the verification of the digital platform, it can indicate that the management device has the authority to share the banned visitor list.

[0052] In a feasible implementation, step S40 may include: Step S401: If the identity authentication is passed, the current visitor is allowed to query the digital platform data, and during the query process of the current visitor, it is detected whether there is any changed data on the digital platform, and the digital platform includes several distributed nodes.

[0053] In the specific implementation, triggers can be created in the digital platform, and then the triggers can be used to monitor operations such as adding, modifying, and deleting data tables in the digital platform. Whenever these operations occur, the triggers will execute preset codes or stored procedures to record change information. Therefore, by monitoring the change information, it is possible to determine whether there is changed data on the digital platform.

[0054] Step S402: If yes, obtain the target distributed node corresponding to the changed data, and perform security detection on the target distributed node to determine whether there is a security problem with the digital platform.

[0055] In specific implementation, the above-mentioned target distributed nodes can be subject to review identity management (check the authentication mechanism of each node to ensure the use of strong passwords and two-factor authentication), access permission assessment (assess the access permissions of each node and user to ensure that only necessary permissions are granted), audit log analysis (regularly analyze access logs to confirm that there is no unauthorized access), traffic monitoring (use IDS tools to monitor network traffic and identify abnormal traffic patterns, such as traffic surges, data streams sent from abnormal source IPs, etc.) and other operations to implement security detection, thereby determining whether there are security issues on the digital platform.

[0056] Step S403: If not, continue to check whether there is any changed data on the digital platform until the query process is completed.

[0057] This embodiment broadcasts a digital certificate to each node in the digital platform so that the digital platform verifies the digital certificate; if the digital certificate passes the verification of the digital platform, the updated banned visitor list is shared with each node in the digital platform; if the identity authentication passes, the current visitor is allowed to query the digital platform data, and during the query process of the current visitor, the digital platform is detected to see if there is any changed data, and the digital platform includes several distributed nodes; if so, the target distributed node corresponding to the changed data is obtained, and a security check is performed on the target distributed node to determine whether there is a security problem with the digital platform; if not, the digital platform is continuously detected to see if there is any changed data until the query process ends. The above method of this embodiment further improves the security of the digital platform data when it is queried by sharing the updated banned visitor list with each node in the digital platform and performing security checks on the distributed nodes with data changes in the digital platform.

[0058] In addition, an embodiment of the present application also proposes a storage medium, on which a digital platform data access management program is stored. When the digital platform data access management program is executed by a processor, the steps of the digital platform data access management method described above are implemented.

[0059] Reference Figure 5 , Figure 5 This is a structural block diagram of the first embodiment of the digital platform data access management device of this application.

[0060] like Figure 5 As shown, the digital platform data access management device proposed in the embodiment of the present application includes: The data acquisition module 501 is configured to acquire the current identity of the current visitor upon receiving a data query request from the current visitor, wherein the current identity includes a distributed digital identity identifier and a verifiable credential; An identity authentication module 502 is configured to authenticate the current visitor based on the current identity identifier and a banned visitor list, wherein the banned visitor list includes the identities of several malicious visitors; The first processing module 503 is configured to reject the data query request and mark the current visitor as a malicious visitor if the identity authentication fails, and update the current identity identifier to the banned visitor list; The second processing module 504 is configured to allow the current visitor to query the digital platform data if the identity authentication is passed, and to continuously perform security monitoring on the digital platform data.

[0061] This embodiment obtains the current identity of the current visitor when receiving a data query request from the current visitor, the current identity including a distributed digital identity identifier and a verifiable credential; authenticates the current visitor based on the current identity and a banned visitor list, the banned visitor list including the identities of several malicious visitors; if the identity authentication fails, rejects the data query request and marks the current visitor as a malicious visitor, while updating the current identity to the banned visitor list; if the identity authentication passes, allows the current visitor to query the digital platform data, and continuously monitors the digital platform data for security. Since the above method of this embodiment first authenticates the current visitor based on the distributed digital identity and verifiable credential of the current visitor, and then determines whether the current visitor is allowed to query the digital platform data based on the identity authentication result, and continuously monitors the digital platform data for security during the query process, it prevents the digital platform data from being stolen or tampered with, thereby improving the data security of the digital platform.

[0062] Based on the first embodiment of the digital platform data access management device of the present application, a second embodiment of the digital platform data access management device of the present application is proposed.

[0063] In this embodiment, the data acquisition module 501 is also used to obtain the first visitor information of the current visitor from the data query request when receiving a data query request issued by the current visitor, the first visitor information including visitor registration information and visitor behavior information; perform data preprocessing on the first visitor information to obtain the second visitor information, and perform distributed identity mapping on the second visitor information to obtain the distributed digital identity identifier and verifiable credentials corresponding to the current visitor.

[0064] Furthermore, the data acquisition module 501 is also used to perform data cleaning and data filtering on the first visitor information based on mapping rules to obtain filtered visitor information, and the mapping rules are rules corresponding to mapping visitor information into distributed digital identity identifiers and verifiable credentials; and perform data desensitization and data anonymization on the filtered visitor information to obtain second visitor information.

[0065] Furthermore, the identity authentication module 502 is also used to search in a banned visitor list using the current identity identifier as a keyword, where the banned visitor list is stored in a blockchain, and the blockchain is connected to a digital platform; if it is determined based on the search results that the banned visitor list includes the current identity identifier, it is determined that the current visitor has failed identity authentication; if it is determined based on the search results that the banned visitor list does not include the current identity identifier, it is determined that the current visitor has passed identity authentication.

[0066] Furthermore, the first processing module 503 is also used to broadcast the digital certificate to each node in the digital platform so that the digital platform can verify the digital certificate; if the digital certificate passes the verification of the digital platform, the updated banned visitor list will be shared with each node in the digital platform.

[0067] Furthermore, the second processing module 504 is also used to allow the current visitor to query the digital platform data if the identity authentication is passed, and to detect whether there is any changed data on the digital platform during the current visitor's query process, and the digital platform includes several distributed nodes; if so, obtain the target distributed node corresponding to the changed data, and perform security detection on the target distributed node to determine whether there is a security problem on the digital platform; if not, continue to detect whether there is any changed data on the digital platform until the query process ends.

[0068] Other embodiments or specific implementations of the digital platform data access management device of the present application can refer to the above-mentioned method embodiments and will not be repeated here.

[0069] It should be noted that, in this document, the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or system comprising a series of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or system. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or system comprising the element.

[0070] The serial numbers of the above embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0071] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application, or the part that contributes to the existing technology, can be embodied in the form of a software product. The computer software product is stored in a storage medium (such as read-only memory / random access memory, magnetic disk, optical disk), and includes a number of instructions for enabling a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0072] The above are only preferred embodiments of the present application and do not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A digital platform data access management method, characterized in that: The method comprises the following steps: When receiving a data query request from a current visitor, obtaining a current identity of the current visitor, wherein the current identity includes a distributed digital identity identifier and a verifiable credential; Performing identity authentication on the current visitor according to the current identity identifier and a banned visitor list, wherein the banned visitor list includes identity identifiers of several malicious visitors; If the identity authentication fails, the data query request is rejected and the current visitor is marked as a malicious visitor, and the current identity is updated to the banned visitor list; If the identity authentication is passed, the current visitor is allowed to query the digital platform data, and the digital platform data is continuously monitored for security.

2. The digital platform data access management method according to claim 1, characterized in that: The step of obtaining the current identity of the current visitor upon receiving a data query request from the current visitor comprises: When receiving a data query request sent by the current visitor, obtaining first visitor information of the current visitor from the data query request, where the first visitor information includes visitor registration information and visitor behavior information; The first visitor information is subjected to data preprocessing to obtain second visitor information, and the second visitor information is subjected to distributed identity mapping to obtain a distributed digital identity identifier and a verifiable credential corresponding to the current visitor.

3. The digital platform data access management method according to claim 2, characterized in that: The step of performing data preprocessing on the first visitor information to obtain the second visitor information includes: Performing data cleaning and data screening on the first visitor information based on a mapping rule to obtain screened visitor information, wherein the mapping rule is a rule corresponding to mapping the visitor information to a distributed digital identity identifier and a verifiable credential; The screened visitor information is subjected to data desensitization processing and data anonymization processing to obtain second visitor information.

4. The digital platform data access management method according to claim 1, characterized in that: The step of authenticating the current visitor according to the current identity identifier and the banned visitor list includes: Searching a banned visitor list using the current identity as a keyword, wherein the banned visitor list is stored in a blockchain, and the blockchain is connected to a digital platform; If it is determined based on the search results that the current identity identifier is included in the banned visitor list, then it is determined that the current visitor has not passed the identity authentication; If it is determined based on the search results that the current identity identifier is not included in the banned visitor list, it is determined that the current visitor has passed the identity authentication.

5. The digital platform data access management method according to claim 1, characterized in that: If the identity authentication fails, the data query request is rejected and the current visitor is marked as a malicious visitor, and the current identity identifier is updated to the banned visitor list, and the following steps are also included: Broadcasting the digital certificate to each node in the digital platform so that the digital platform can verify the digital certificate; If the digital certificate passes the verification of the digital platform, the updated banned visitor list will be shared with each node in the digital platform.

6. The digital platform data access management method according to claim 1, characterized in that: If the identity authentication is passed, the step of allowing the current visitor to query the digital platform data and continuously performing security monitoring on the digital platform data includes: If the identity authentication is passed, the current visitor is allowed to query the digital platform data, and during the query process of the current visitor, it is detected whether there is any changed data on the digital platform, wherein the digital platform includes a plurality of distributed nodes; If so, obtaining the target distributed node corresponding to the changed data, and performing security detection on the target distributed node to determine whether there is a security problem with the digital platform; If not, continue to detect whether there is any changed data on the digital platform until the query process is completed.

7. A digital platform data access management device, characterized in that: The digital platform data access management device comprises: A data acquisition module, configured to acquire a current identity of the current visitor upon receiving a data query request from the current visitor, wherein the current identity includes a distributed digital identity identifier and a verifiable credential; An identity authentication module, used to authenticate the current visitor according to the current identity identifier and a forbidden visitor list, wherein the forbidden visitor list includes identity identifiers of several malicious visitors; A first processing module, configured to reject the data query request and mark the current visitor as a malicious visitor if the identity authentication fails, and update the current identity identifier to the banned visitor list; The second processing module is used to allow the current visitor to query the digital platform data if the identity authentication is passed, and to continuously perform security monitoring on the digital platform data.

8. A digital platform data access management device, characterized in that: The device includes: a memory, a processor, and a digital platform data access management program stored in the memory and executable on the processor, wherein the digital platform data access management program is configured to implement the steps of the digital platform data access management method as described in any one of claims 1 to 6.

9. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, on which a digital platform data access management program is stored. When the digital platform data access management program is executed by a processor, the steps of the digital platform data access management method as described in any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The computer program product includes a digital platform data access management program, and when the digital platform data access management program is executed by a processor, the steps of the digital platform data access management method according to any one of claims 1 to 6 are implemented.

Images