Information security big data management system based on trusted cloud computing

Abstract

The information security big data management system based on trusted cloud computing of the present invention comprises a first server, a second server, a first mobile terminal, and a second mobile terminal connected to each other; the processor uploads the first data to the second server through an encryption algorithm, and deletes the first data in the data storage module. When the user obtains the first data in the second server, the processor determines whether the user name and password input by the user match through the first decryption algorithm, and then determines whether the first mobile terminal and the second mobile terminal are in the same area through the first GPS module, the second GPS module, and the second decryption algorithm, thereby uploading the first data or risk level to the data display module. The present invention can prevent lawbreakers from violently obtaining data and causing unnecessary losses.

Description

Technical Field

[0001] The present invention relates to the field of information security, and in particular to an information security big data management system based on trusted cloud computing. Background Art

[0002] The concept of trusted computing is defined in the ISO / IEC 15408 standard as follows: The behavior of a trusted component, operation or process is predictable under any operating conditions and can resist damage caused by application software, viruses and certain physical interference. The basic idea of ​​trusted computing is to introduce a security chip (trusted platform module) on the hardware platform to improve the security of the terminal system, that is, to implant a trust root on each terminal platform, so that the computer can build a trust relationship from BIOS to the operating system kernel layer and then to the application layer; based on this, it is expanded to the network and a corresponding trust chain is established, thus entering the era of computer immunity. When the terminal is attacked, it can achieve self-protection, self-management and self-recovery. Trusted computing is the widespread use of trusted computing platforms supported by hardware security modules in computing and communication systems to improve the overall security of the system. Trusted computing is born for behavioral security, which should include the confidentiality of behavior, integrity of behavior, and authenticity of behavior. Trusted computing includes five core concepts, namely: key, secure input and output, storage shielding, etc. Among them, the use of keys is the top priority of the trusted system, and data storage and transmission based on key algorithms is the basic guarantee of the entire trusted security protection system. Different key algorithms lead to different credibility security systems.

[0003] Currently, most companies use keys to encrypt confidential files when storing them. When the keys fall into the hands of criminals, these confidential files will also be lost, causing unpredictable losses to the company.

[0004] Therefore, there is an urgent need for an information security big data management system based on trusted cloud computing that guarantees user information security, is highly credible, and cannot be successfully cracked even if criminals obtain the key. Summary of the invention

[0005] The technical problem to be solved by the present invention is to provide an information security big data management system based on trusted cloud computing that ensures user information security, has high credibility, and cannot be successfully cracked even if criminals obtain the key.

[0006] The information security big data management system based on trusted cloud computing of the present invention comprises a first server, a second server, a first mobile terminal, and a second mobile terminal connected to each other;

[0007] The first mobile terminal includes a data input module, a data storage module, a data display module, and a first GPS module;

[0008] The second mobile terminal includes a second GPS module;

[0009] The data input module is capable of acquiring first data;

[0010] The data storage module can store first data;

[0011] The data display module is capable of displaying the first data and risk level;

[0012] The first server includes a processor and a database;

[0013] The database stores risk levels, which include a first risk level, a second risk level, a third risk level, a fourth risk level, and a fifth risk level;

[0014] The processor uploads the first data to the second server through an encryption algorithm, and deletes the first data in the data storage module. When the user obtains the first data in the second server, the processor determines whether the user name and password entered by the user match through the first decryption algorithm, and then determines whether the first mobile terminal and the second mobile terminal are in the same area through the first GPS module, the second GPS module, and the second decryption algorithm, thereby uploading the first data or risk level to the data display module.

[0015] The present invention is based on a trusted cloud computing information security big data management system, wherein the encryption algorithm includes

[0016] The first mobile terminal also includes a data compression module;

[0017] The database stores a first data type;

[0018] The data storage module includes a first folder corresponding to the first type of data;

[0019] The processor is capable of acquiring a second data type of the first data, and determining whether the second data type is consistent with the first data type;

[0020] If they are consistent, storing the first data in a first folder corresponding to the first data type;

[0021] If they are inconsistent, the processor creates a second folder corresponding to the second data type corresponding to the first data in the data storage module, and stores the first data in the second folder corresponding to the second data type corresponding to the first data;

[0022] The data compression module is capable of merging and compressing the first data in the first folder and the second folder at a first preset time interval, and outputting the first data as the second data;

[0023] The processor divides multiple second data into a first number of segments a and outputs them as third data, randomly arranges the first number a of the third data, records the order of the random arrangement and outputs it as a first order, combines the randomly arranged third data into fourth data, and uploads the fourth data to the second server.

[0024] The present invention is based on a trusted cloud computing information security big data management system, wherein the first decryption algorithm includes

[0025] S1, the database stores the first user name data and the first password data;

[0026] S2. The first mobile terminal is able to obtain the second user name data and the second password data input by the user, and the processor determines whether the second user name data is consistent with the first user name data;

[0027] If they are inconsistent, a fifth risk level is output, and the processor outputs a second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b, and randomly disrupts the order;

[0028] If they are consistent, the processor obtains the second password data input by the user and determines whether the first password data and the second password data match;

[0029] If there is no match, a fourth risk level is output, and the processor outputs the second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b, and randomly disrupts the order;

[0030] If they match, the processor outputs the fourth data as fifth data according to the second decryption algorithm, and determines whether the fifth data is the same as the first data;

[0031] If they are the same, outputting the fifth data to the data display module;

[0032] If they are different, the first data is output to the data display module.

[0033] The present invention is an information security big data management system based on trusted cloud computing, wherein the step of "if there is inconsistency, the processor establishes a second folder corresponding to the second data type corresponding to the first data in the data storage module, and stores the first data in the second folder corresponding to the second data type corresponding to it" also includes converting the second folder into a first folder, thereby continuously generating more new first folders according to the new second data type.

[0034] The present invention is an information security big data management system based on trusted cloud computing, wherein the step of "the data compression module can merge and compress multiple first data in the first folder and the second folder at every first preset time interval and output them as second data" also includes that if there is no second folder, the processor directly merges and compresses multiple first data in the first folder.

[0035] The present invention is an information security big data management system based on trusted cloud computing, wherein the step of determining whether the fifth data is the same as the first data also includes: before deleting the first data, generating a hash value of the first data for storage, the processor being able to obtain the hash value of the fifth data, and then comparing the hash value of the fifth data with the hash value of the first data to see if they are the same; if they are the same, the fifth data is output to a data display module; if they are not the same, the first data is output to a data display module.

[0036] The present invention provides an information security big data management system based on trusted cloud computing, wherein the first mobile terminal is a computer, a smart phone, or a tablet computer.

[0037] The present invention is an information security big data management system based on trusted cloud computing, wherein the second mobile terminal is a computer, a smart phone, a tablet computer, or a U shield.

[0038] The present invention is an information security big data management system based on trusted cloud computing, wherein the first server, the second server, the first mobile terminal, and the second mobile terminal are connected to each other by wireless connection.

[0039] The present invention is an information security big data management system based on trusted cloud computing, wherein the step of outputting the fourth data as the fifth data includes adjusting the fourth data according to the first sequence and then decompressing the fourth data, and outputting the decompressed data as the fifth data.

[0040] The information security big data management system based on trusted cloud computing of the present invention is different from the prior art in that the information security big data management system based on trusted cloud computing of the present invention stores the generated big data first on the first mobile terminal, and deletes it after uploading it to the second server through an encryption algorithm, and deletes it from the first mobile terminal after uploading it to the second server, thereby reducing memory usage, reducing computing time, and increasing system operation speed so that more big data can be stored. When a user wants to obtain big data, it is obtained through the first decryption algorithm and the second decryption algorithm, thereby preventing criminals from violently obtaining data and avoiding losses.

[0041] The information security big data management system based on trusted cloud computing of the present invention is further described below with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 It is a wireless connection diagram of the information security big data management system based on trusted cloud computing;

[0043] Figure 2 It is a flowchart of the encryption algorithm of the information security big data management system based on trusted cloud computing;

[0044] Figure 3 It is a flow chart of the first decryption algorithm and the second decryption algorithm of an information security big data management system based on trusted cloud computing. DETAILED DESCRIPTION

[0045] like Figures 1 to 3 As shown, see Figure 1 , inventing an information security big data management system based on trusted cloud computing, comprising: a first server, a second server, a first mobile terminal, and a second mobile terminal connected to each other;

[0046] The first mobile terminal includes a data input module, a data storage module, a data display module, and a first GPS module;

[0047] The second mobile terminal includes a second GPS module;

[0048] The data input module is capable of acquiring first data;

[0049] The data storage module can store first data;

[0050] The data display module is capable of displaying the first data and risk level;

[0051] The first server includes a processor and a database;

[0052] The database stores risk levels, which include a first risk level, a second risk level, a third risk level, a fourth risk level, and a fifth risk level;

[0053] The processor uploads the first data to the second server through an encryption algorithm, and deletes the first data in the data storage module. When the user obtains the first data in the second server, the processor determines whether the user name and password entered by the user match through the first decryption algorithm, and then determines whether the first mobile terminal and the second mobile terminal are in the same area through the first GPS module, the second GPS module, and the second decryption algorithm, thereby uploading the first data or risk level to the data display module.

[0054] The present invention stores the generated big data on the first mobile terminal first, and deletes it after uploading it to the second server through an encryption algorithm. After uploading it to the second server, it deletes it from the first mobile terminal, thereby reducing memory usage, reducing computing time, and improving the system operation speed so that more big data can be stored. When the user wants to obtain the big data, it is obtained through the first decryption algorithm and the second decryption algorithm, thereby preventing lawbreakers from violently obtaining data and avoiding losses.

[0055] Wherein, the first preset time is 1 min-100 min, preferably 10 min.

[0056] The connection mode among the first server, the second server, the first mobile terminal and the second mobile terminal is wireless connection.

[0057] The present invention can facilitate users to use the first server, the second server, the first mobile terminal and the second mobile terminal through wireless connection, and can obtain data at any time at any location.

[0058] Among them, the first mobile terminal is a computer, a smart phone, or a tablet computer, and the second mobile terminal is a computer, a smart phone, or a U shield.

[0059] The present invention can facilitate user operation and enable the user to obtain data anytime and anywhere.

[0060] Preferably, see Figure 2 , the encryption algorithm includes

[0061] The first mobile terminal also includes a data compression module;

[0062] The database stores a first data type;

[0063] The data storage module includes a first folder corresponding to the first type of data;

[0064] The processor is capable of acquiring a second data type of the first data, and determining whether the second data type is consistent with the first data type;

[0065] If they are consistent, storing the first data in a first folder corresponding to the first data type;

[0066] If they are inconsistent, the processor creates a second folder corresponding to the second data type corresponding to the first data in the data storage module, and stores the first data in the second folder corresponding to the second data type corresponding to the first data;

[0067] The data compression module is capable of merging and compressing the first data in the first folder and the second folder at a first preset time interval, and outputting the first data as the second data;

[0068] The processor divides multiple second data into a first number of segments a and outputs them as third data, randomly arranges the first number a of the third data, records the order of the random arrangement and outputs it as a first order, combines the randomly arranged third data into fourth data, and uploads the fourth data to the second server.

[0069] The present invention detects the file type of big data through a processor to classify and store it, and packages and compresses the classified and stored big data every 10 minutes. This method can reduce the number of encryption times, and there is no need to encrypt each data. While achieving the same encryption effect, it can reduce the system response time, thereby improving the computing speed. The processor divides the compressed data into 10 segments, and stores the 10 segments in a disordered order, and records the arrangement order. In this way, even if the data is obtained by criminals through violent means, it is disordered data and cannot be used, thereby effectively ensuring the data security of users.

[0070] Wherein, the first preset time is 1-100 minutes, preferably 10 minutes.

[0071] Among them, the first segment number a is 1-1000 segments, preferably 10 segments.

[0072] Among them, the step of "if there is inconsistency, the processor establishes a second folder corresponding to the second data type corresponding to the first data in the data storage module, and stores the first data in the second folder corresponding to the second data type corresponding to it" also includes converting the second folder into a first folder, thereby continuously generating more new first folders according to the new second data type.

[0073] The present invention can facilitate unified management of the system by converting the second folder into the first folder, and will not cause the second folder to be unencrypted.

[0074] Among them, the step of "the data compression module can merge and compress multiple first data in the first folder and the second folder at every first preset time interval and output them as second data" also includes that if there is no second folder, the processor directly merges and compresses multiple first data in the first folder.

[0075] In the present invention, when there is no second folder, the processor directly merges and compresses the plurality of first data in the first folder, thereby reducing the steps of system operation and improving the operation speed of the system.

[0076] Among them, if the first data is a picture, it can be segmented according to the pixel size of the picture. For example, if the pixel of a picture is 1920*1080, then the picture is segmented into 10 1920*108 pictures from top to bottom. If the first data is characters, it can be segmented according to the number of characters, and the characters include text, numbers, and letters. If the first data is a video, it can be segmented according to the length of the video. If the first data is a recording, it can be segmented according to the length of the recording. If the first data is other files, such as CAD drawings, it can be split into multiple compressed packages according to the file splitting software. This is a prior art and will not be repeated here.

[0077] For example, if the user's computer generates two recordings within 10 minutes, and these two recordings are the first data, the processor stores the two recordings in the corresponding audio folder, merges and compresses the two audios, and this is the second data. If the two recordings are 100 seconds in total, the 100-second recordings are evenly divided into 10 parts, each of which is 10 seconds. The 10 parts of 10 seconds are randomly shuffled and combined, and uploaded to the second server to complete encryption.

[0078] Preferably, see Figure 3 , the first decryption algorithm includes

[0079] S1, the database stores the first user name data and the first password data;

[0080] S2. The first mobile terminal is able to obtain the second user name data and the second password data input by the user, and the processor determines whether the second user name data is consistent with the first user name data;

[0081] If they are inconsistent, a fifth risk level is output, and the processor outputs a second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b, and randomly disrupts the order;

[0082] If they are consistent, the processor obtains the second password data input by the user and determines whether the first password data and the second password data match;

[0083] If there is no match, a fourth risk level is output, and the processor outputs the second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b, and randomly disrupts the order;

[0084] If they match, the processor outputs the fourth data as fifth data according to the second decryption algorithm, and determines whether the fifth data is the same as the first data;

[0085] If they are the same, outputting the fifth data to the data display module;

[0086] If they are different, the first data is output to the data display module.

[0087] The present invention is that when a user wants to obtain big data, the processor obtains the user name and user password from the user. Only when all of them match can the login be successful, and then the desired data is obtained through the second decryption method. If the user name and password are not entered correctly, different risk levels will be output. The first algorithm will re-divide the second data into more segments according to different risk levels, and re-shuffle them again. That is to say, when the system detects a risk, it will re-divide the data into more segments than the first number a according to different risk levels. When molecular brute force cracking is not carried out, the obtained data is also garbled data and will not have any reference value.

[0088] Among them, the step of determining whether the fifth data is the same as the first data also includes: before deleting the first data, generating a hash value of the first data for storage, the processor being able to obtain the hash value of the fifth data, and then comparing the hash value of the fifth data with the hash value of the first data to see whether they are the same.

[0089] By comparing the hash value of the fifth data with the hash value of the first data, the present invention can more accurately compare whether the fifth data is consistent with the first data, so that the data presented to the user is accurate data, thereby improving the user's experience.

[0090] The first mobile terminal may include the second mobile terminal, and the second mobile terminal may include the first mobile terminal.

[0091] For example, when a user wants to obtain encrypted data, the user login username and user password are first required. If the username is entered incorrectly, the fifth risk level is directly output, and the second segment number b is output as 92 segments according to the first algorithm. The above-mentioned 100-second recording is changed from being divided into 10 segments to being divided into 92 segments and re-shuffled, and uploaded to the second server. Even if the criminals obtain the data, it is the voice divided into 92 segments and re-shuffled, which has no reference value. If the username is entered correctly, it is determined whether the password is correct. If the password is incorrect, the fourth risk level is directly output, and the second segment number b is output as 68 segments according to the first algorithm. The above-mentioned 100-second recording is changed from being divided into 10 segments to being divided into 68 segments and re-shuffled, and uploaded to the second server. If the password is entered correctly, the fifth data is output through the second decryption algorithm, and it is determined whether the fifth data is the same as the first data; if they are the same, the fifth data is output to the data display module; if they are different, the first data is output to the data display module. The fifth data is the data after the shuffled order is restored, and the first data is the user-encrypted data.

[0092] The step of outputting the fourth data as the fifth data includes adjusting the fourth data according to the first sequence and then decompressing the fourth data, and outputting the decompressed data as the fifth data.

[0093] The present invention adjusts the order of the fourth data and then decompresses it, which makes it convenient for users to directly view it without manual decompression. At the same time, the first data is the data before compression. Since the fifth data is compared with the first data, it is only possible to determine whether the fourth data is consistent with the first data after decompression.

[0094] Preferably, see Figure 3 , the second decryption algorithm includes

[0095] S3, the database stores a first number corresponding to the first sequence and a second number corresponding to the first number;

[0096] S4, the processor sends a second number to the second mobile terminal, the first GPS module obtains the first location data, the second GPS module obtains the second location data, and outputs a first area with the first location data as the center and a radius of a first preset distance, and determines whether the first area includes the second location data;

[0097] If the first area includes the second position data, the processor sends an instruction to input a third number to the data display module, and the processor can obtain the third number input by the user and determine whether the third number matches the first number;

[0098] S5. If they match, the processor adjusts the fourth data to fifth data according to the first sequence corresponding to the first number;

[0099] If there is no match, the processor obtains a third number within a first preset number of times, and determines whether the third number input by the user that the processor can obtain within the first preset number of times is consistent with the first number;

[0100] If the third number is consistent with the first number within a first preset number, the processor adjusts the fourth data to the fifth data according to the first sequence corresponding to the first number;

[0101] If the third number is inconsistent with the second number within a first preset number of times, the first risk level is output to the first mobile terminal, the processor outputs a second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b and randomly shuffles the order;

[0102] S6. If the first area does not include the second location data, the processor is configured to determine whether the third number input by the user can be obtained within a second preset time;

[0103] If yes, determine whether the third number matches the first number, jump to S5, and output the first risk level as the second risk level;

[0104] If not, the third risk level is output to the first mobile terminal, the processor outputs the second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b and randomly shuffles the order.

[0105] The present invention determines whether the user's second mobile terminal is together with the first mobile terminal when the user wants to obtain data and the user name and password are all entered correctly, so as to know whether the user is obtaining the data. If the first mobile terminal is together with the second mobile terminal, the processor sends the second number data to the second mobile terminal. For example, the first number corresponding to the first sequence is 5 and the second number is 15, then the user needs to enter 5 to obtain the correct sequence. This method can increase the confidentiality level. Only users who know this rule can successfully decrypt, which greatly increases the security of the system. If the user fails to successfully enter the third number within a first preset number of times or the user fails to successfully enter the password corresponding to the user name or the first mobile terminal and the second mobile terminal are not together, the system will increase the risk level according to different situations, and increase the value of the first segment number a through different risk levels and the first algorithm. That is to say, when there is a risk, the higher the risk level, the more segments the data will be re-divided into, and the order will be re-disrupted again, thereby increasing the confidentiality level. Even if the criminals use brute force to crack, they can only get disordered data. If the arrangement order is unknown, the data obtained has no reference value.

[0106] Wherein, the first preset number of times is 1-10 times, preferably 3 times.

[0107] Wherein, the first preset distance is 1-5m, preferably 2m.

[0108] The second preset time is 1-60s, preferably 30s.

[0109] The second number is the first number plus the first segment number a, and the algorithm of the second number can also be set by the user.

[0110] When the user turns off the system, the processor re-divides the second data according to the second segment number b, and replaces the data after randomly disrupting the order with the fourth data.

[0111] When the present invention shuts down the system, the data scrambled by the second segment number b is restored to the fourth data. The purpose is that the system does not obtain the order scrambled by the second segment number b. Restoring the data to the fourth data can prevent the real user from obtaining the first data when the real user wants to obtain the first data. At the same time, it can reduce the system operation steps and reduce the system response time.

[0112] For example, when the user inputs the correct username and password, the processor determines whether the second mobile terminal is within a radius of 2 meters of the first mobile terminal. If so, the processor sends the second number to the second mobile terminal. If the second number is 15, since the second number is composed of the first number and the first segment number a, only the real user knows that the third number to be input is the second number minus the first segment number a, and the third number is 15-10=5. Only by inputting 5 can the fourth data be restored to the second data and then decompressed into the first data. If the third number input by the user is not 5, the system will give the user the first preset number of chances, that is, 3 chances. If the user inputs correctly within 3 chances, the processor restores the fourth data to the second data, decompresses it into the first data, and uploads it to the data display module. If the user does not input correctly within 3 chances, the first risk level is output, and the second segment number b is output as 21 through the first algorithm. The above-mentioned 100-second recording is changed from being divided into 10 segments to being divided into 21 segments and re-shuffled.

[0113] If the second mobile terminal is not within a 2-meter radius of the first mobile terminal, the processor sends a second number to the second mobile terminal and determines whether the user can enter the second number correctly within 30 seconds. If so, the processor restores the fourth data to the second data, decompresses it into the first data, and uploads it to the data display module. If not, it still determines whether it can be entered correctly within 3 opportunities. If the user enters correctly within 3 opportunities, the processor restores the fourth data to the second data, decompresses it into the first data, and uploads it to the data display module. If the user does not enter correctly within 3 opportunities, the second risk level is output, and the second number of segments b is output as 34 through the first algorithm, and the above 100-second recording is changed from being divided into 10 segments to being divided into 34 segments and re-shuffled.

[0114] If the third number is not obtained within 30 seconds, the third risk level is output, and the second segment number b is output as 50 through the first algorithm. The above 100-second recording is changed from being divided into 10 segments to being divided into 50 segments and re-shuffled.

[0115] Preferably, the first algorithm is:

[0116] The processor obtains the second segment number b according to the first segment number a and the risk level index c by the following formula;

[0117] b=a×ln (c+2) +c 2 ;

[0118] The processor takes an integer for the second segment number b according to the back-one method.

[0119] In the present invention, the greater the risk level, the greater the corresponding risk level index c. Therefore, it can be seen that the greater the risk level, the greater the value of the second segment number b. Therefore, the risk level index c is proportional to the second segment number b and has a greater weight. When the login is risky, the re-divided second segment number b must be greater than the first segment number a. Therefore, the second segment number b is increased on the basis of the first segment number a.

[0120] Risk Level Risk Level Index First risk level 2.5 Second risk level 4 Third risk level 5.5 Fourth risk level 6.8 Fifth risk level 8.3

[0121] For example, when the risk level is level three, according to the above formula, b=10*ln7.5+5.52=50.4, and according to the method of taking the integer by the last step, the second segment number b is 50.

[0122] Preferably, see Figure 3 , when the user acquires the first data again, the processor acquires the time when the user last acquired the first data and the time when the user acquires the first data this time, and determines whether the interval between the time when the user acquires the first data this time and the time when the user acquires the first data last time is greater than or equal to a second preset time;

[0123] If yes, jump to S2;

[0124] If not, the processor determines whether there is a risk level when the first data was obtained last time;

[0125] If it exists, the processor obtains the second segment number b divided when the first data was obtained last time, changes the second number to the first number plus the second segment number b, and outputs the quotient of the second segment number b divided by 5 times the first segment number a as the first multiple, and jumps to S2;

[0126] When the first user name data matches the second user name data and the first password data matches the second password data, the processor sends a risk prompt of the last login to the data display module, and changes "the processor sends a second number to the second mobile terminal" in S4 to "the processor sends a first digital combination to the second mobile terminal", the first digital combination is in the form of (second number, second segment number b), and changes the first preset distance to the first preset distance minus the first multiple;

[0127] If it does not exist, jump to S2.

[0128] The present invention detects the interval time between the last data acquisition and the current data acquisition. If the interval time exceeds the second time threshold, it indicates that the user's credibility is high, and the operation is performed according to the last decryption algorithm. If the interval time is less than or equal to the second time threshold, it is determined whether the last login was risky. If there is a risk, the user continues to log in, indicating that the user's credibility is low, and the operation is performed according to a new decryption method, and a first digital combination is sent to the second mobile terminal. The user needs to calculate the first number by himself to successfully decrypt. The present invention changes the decryption method for the user who had a risk in the last acquisition and logged in continuously in a short period of time, so only the real user can successfully decrypt. If the data is obtained by criminals, the decryption method is different each time, which will confuse the criminals and make them unable to successfully obtain the data.

[0129] Wherein, the second preset time is 1-1000 min, preferably 2 min.

[0130] The judgment standard of "when the user obtains the first data again" is: the processor sends an instruction to display the input of the user name and password to the data display module again.

[0131] For example, the last time data was acquired was at 15:57:55 on February 15, 2022, and the time for this data acquisition is at 15:59:20 on February 15, 2022. The interval is less than 2 minutes, and the last time data was acquired, the second risk level was output. Then, when the user enters the username and password correctly, the second segment number b is obtained as 34, and the first multiple is 0.68. The first preset distance is changed to 2-0.68=1.32, and jumps to S2, sending (39, 34) to the second mobile terminal. The user needs to enter the third number 39-34=5 to obtain the desired data.

[0132] The embodiments described above are merely descriptions of preferred implementation modes of the present invention and are not intended to limit the scope of the present invention. Without departing from the design spirit of the present invention, various modifications and improvements made to the technical solutions of the present invention by ordinary technicians in this field should all fall within the protection scope determined by the claims of the present invention.

Claims

1. An information security big data management system based on trusted cloud computing, characterized by: comprising a first server, a second server, a first mobile terminal, and a second mobile terminal connected to each other; The first mobile terminal includes a data input module, a data storage module, a data display module, and a first GPS module; The second mobile terminal includes a second GPS module; The data input module is capable of acquiring first data; The data storage module can store first data; The data display module is capable of displaying the first data and risk level; The first server includes a processor and a database; The database stores risk levels, which include a first risk level, a second risk level, a third risk level, a fourth risk level, and a fifth risk level; The processor uploads the first data to the second server through an encryption algorithm, and deletes the first data in the data storage module. When the user obtains the first data in the second server, the processor determines whether the user name and password input by the user match through the first decryption algorithm, and then determines whether the first mobile terminal and the second mobile terminal are in the same area through the first GPS module, the second GPS module, and the second decryption algorithm, thereby uploading the first data or risk level to the data display module; The encryption algorithm includes The first mobile terminal also includes a data compression module; The database stores a first data type; The data storage module includes a first folder corresponding to the first type of data; The processor is capable of acquiring a second data type of the first data, and determining whether the second data type is consistent with the first data type; If they are consistent, storing the first data in a first folder corresponding to the first data type; If they are inconsistent, the processor creates a second folder corresponding to the second data type corresponding to the first data in the data storage module, and stores the first data in the second folder corresponding to the second data type corresponding to the first data; The data compression module is capable of merging and compressing the first data in the first folder and the second folder at a first preset time interval, and outputting the first data as the second data; The processor divides multiple second data into a first number of segments a and outputs them as third data, randomly arranges the first number a of the third data, records the order of the random arrangement and outputs it as a first order, combines the randomly arranged third data into fourth data, and uploads the fourth data to the second server.

2. The information security big data management system based on trusted cloud computing according to claim 1 is characterized by: The first decryption algorithm includes S1, the database stores first user name data and first password data; S2. The first mobile terminal is able to obtain the second user name data and the second password data input by the user, and the processor determines whether the second user name data is consistent with the first user name data; If they are inconsistent, a fifth risk level is output, and the processor outputs a second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b, and randomly disrupts the order; If they are consistent, the processor obtains the second password data input by the user and determines whether the first password data and the second password data match; If there is no match, a fourth risk level is output, and the processor outputs the second segment number b according to the first algorithm, and re-divides the second data according to the second segment number b, and randomly disrupts the order; If they match, the processor outputs the fourth data as fifth data according to the second decryption algorithm, and determines whether the fifth data is the same as the first data; If they are the same, outputting the fifth data to the data display module; If they are different, the first data is output to the data display module.

3. The information security big data management system based on trusted cloud computing according to claim 2 is characterized by: If there is inconsistency, the processor establishes a second folder corresponding to the second data type corresponding to the first data in the data storage module, and stores the first data in the second folder corresponding to the second data type corresponding to it, which also includes the step of converting the second folder into a first folder, thereby continuously generating more new first folders according to the new second data type.

4. The information security big data management system based on trusted cloud computing according to claim 3 is characterized by: The data compression module can merge and compress multiple first data in the first folder and the second folder at intervals of a first preset time, and the step of outputting as second data also includes that if there is no second folder, the processor directly merges and compresses multiple first data in the first folder.

5. The information security big data management system based on trusted cloud computing according to claim 4 is characterized by: The step of determining whether the fifth data is the same as the first data also includes: before deleting the first data, generating a hash value of the first data for storage, the processor being able to obtain the hash value of the fifth data, and then comparing the hash value of the fifth data with the hash value of the first data to see if they are the same; if they are the same, outputting the fifth data to the data display module; if they are not the same, outputting the first data to the data display module.

6. The information security big data management system based on trusted cloud computing according to claim 5 is characterized by: The first mobile terminal is a computer, a smart phone, or a tablet computer.

7. The information security big data management system based on trusted cloud computing according to claim 6 is characterized by: The second mobile terminal is a computer, a smart phone, a tablet computer, or a USB shield.

8. The information security big data management system based on trusted cloud computing according to claim 7 is characterized by: The first server, the second server, the first mobile terminal, and the second mobile terminal are connected to each other by wireless connection.

9. The information security big data management system based on trusted cloud computing according to claim 8 is characterized by: The step of outputting the fourth data as the fifth data includes adjusting the fourth data according to the first sequence and then decompressing the fourth data, and outputting the decompressed data as the fifth data.

Images