Network data storage management method based on network information security

Abstract

The application relates to the field of data storage, in particular to a network data storage management method based on network information security, which comprises the following steps: receiving terminal to-be-stored data; judging whether the terminal to-be-stored data meets the storage standard according to terminal information; storing the terminal to-be-stored data meeting the storage standard according to the data name of the to-be-stored data to obtain a target storage position; storing the to-be-stored data according to the target storage position; associating the data name of the stored data with the corresponding target storage position and generating storage information of the stored data into a storage list; checking the stored data in the storage list according to the storage list within a preset time to determine whether the stored data is modified. Through the security check on the terminal to-be-stored data and the stored data, malicious program attacks are prevented, the change of the stored data is detected, and timely warning is realized, so that the data storage safety is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of data storage, and in particular to a network data storage management method based on network information security. BACKGROUND

[0002] With the continuous development of the Internet, network traffic is getting larger and larger, and the types of applications are getting more and more diverse. When facing large traffic, a large amount of data needs to be stored, and network security must be ensured when storing network data.

[0003] Chinese patent application publication No. CN106648445B discloses a data storage method for a web crawler, which comprises: comparing the file size of the crawling result of the crawler with a pre-set threshold; when the file size of the crawling result is greater than or equal to the threshold, storing the crawling result in a first storage location; generating unique identification information corresponding to the crawling result, wherein the unique identification information is used to uniquely index the crawling result stored in the first storage location; sending the unique identification information to a storage queue; when the file size of the crawling result is less than the threshold, storing the crawling result in the storage queue; storing the unique identification information in the storage queue comprises: obtaining the crawling time of the crawled crawling result; and according to the time sequence of the crawling time, the crawling result or the unique identification information is sent to the storage queue in turn; after sending the unique identification information to the storage queue, the method further comprises: reading the data content to be stored from the storage queue in turn by a storage program; when the storage program reads the unique identification information in the storage queue, the storage program obtains the crawling result corresponding to the unique identification information from the first storage location; and the storage program sends the crawling result corresponding to the unique identification information to a second storage location.

[0004] The prior art stores the crawling result according to the file size to different locations, stores the crawling result with a file size less than the threshold directly in the storage queue, otherwise stores the crawling result in the first storage location, and only stores the unique identification information corresponding to the stored crawling result in the storage queue, but cannot determine the security of the data to be stored, resulting in low data storage security. SUMMARY

[0005] Therefore, the present application provides a network data storage management method based on network information security, which can solve the problem of low data storage security.

[0006] To achieve the above purpose, the present application provides a network data storage management method based on network information security, which comprises:

[0007] a plurality of to-be-stored data of a receiving terminal, the to-be-stored data comprising terminal information;

[0008] determining whether the to-be-stored data of the terminal meets a storage criterion according to the terminal information, extracting keywords from the to-be-stored data meeting the storage criterion according to a preset keyword table, taking the extracted keywords as data names of the to-be-stored data, and analyzing storage positions of the to-be-stored data meeting the storage criterion according to the data names to obtain target storage positions, authenticating the terminal corresponding to the to-be-stored data not meeting the storage criterion, and determining again whether the terminal meets the storage criterion according to an authentication result;

[0009] storing the plurality of to-be-stored data according to the target storage positions, and setting the stored to-be-stored data as stored data;

[0010] associating data names of the stored data with corresponding target storage positions, and generating storage information of the stored data into a storage list, and checking the stored data in the storage list according to the storage list within a preset time to determine whether the stored data is modified.

[0011] Further, determining whether the to-be-stored data terminal meets the storage criterion according to the terminal information of the to-be-stored data comprises:

[0012] determining whether the to-be-stored data of the terminal meets the storage criterion according to a terminal name and a terminal IP address in the terminal information;

[0013] if it is determined that the to-be-stored data of the terminal meets the storage criterion, analyzing storage positions of the to-be-stored data of the terminal to obtain target storage positions, and if it is determined that the to-be-stored data of the terminal does not meet the storage criterion, authenticating the terminal corresponding to the to-be-stored data not meeting the storage criterion and sending authentication information to the terminal for authentication.

[0014] Further, when determining whether the to-be-stored data of the terminal meets the storage criterion according to the terminal name and the terminal IP address in the terminal information, matching the terminal name with a terminal name white list, if the matching is successful, determining that the terminal name is safe, and if the matching fails, determining that the terminal name is suspicious;

[0015] matching the terminal IP address with a terminal IP address white list, if the matching is successful, determining that the terminal IP address is safe, and if the matching fails, determining that the terminal IP address is suspicious;

[0016] If the terminal name is safe and the terminal IP address is safe, it is determined that the data to be stored of the terminal meets the storage standard; if the terminal name is safe and the terminal IP address is suspicious, it is determined that the data to be stored of the terminal does not meet the storage standard; if the terminal name is suspicious and the terminal IP address is safe, it is determined that the data to be stored of the terminal does not meet the storage standard; and if the terminal name is suspicious and the terminal IP address is suspicious, it is determined that the data to be stored of the terminal is prohibited to be stored.

[0017] Further, when it is determined that the data to be stored of the terminal does not meet the storage standard, the terminal is authenticated according to different authentication information generated based on the terminal name or the terminal IP address of the terminal corresponding to the data to be stored which does not meet the storage standard, and the authentication information is sent to the terminal; if it is determined that the terminal name is suspicious, corresponding target terminal name authentication information is generated according to preset terminal name authentication template information; and if it is determined that the terminal IP address is suspicious, corresponding target terminal IP address authentication information is generated according to preset terminal IP address authentication template information.

[0018] Further, after the authentication information is sent to the terminal, authentication response information of the terminal is received, and the authentication response information is audited to determine whether the terminal is authenticated successfully; if the authentication is successful, it is determined that the data to be stored of the terminal meets the storage standard; if the authentication fails, it is determined that the data to be stored of the terminal is prohibited to be stored, and the terminal name or the terminal IP address of the terminal which is authenticated successfully is added to the terminal name whitelist or the terminal IP address whitelist.

[0019] Further, the storage position analysis of the data to be stored which meets the storage standard according to the data name includes:

[0020] The data names of the data to be stored are matched with classification keywords according to a preset classification keyword table, and the data to be stored of the data names of the same classification keywords which are matched successfully are divided into a group;

[0021] The data names of the data to be stored in the group are matched with a preset key keyword table, the number W of the matched data is counted, and whether the data to be stored in the group is encrypted is determined according to the number W.

[0022] Further, when the data names of the data to be stored in the group are matched with the preset key keyword table, whether the data to be stored in the group is important is determined according to the number W, the number W of the names of the key keywords which are matched successfully is counted, and the number W is compared with a preset number W0; if W>W0, it is determined that the data to be stored in the group is important; and if W≤W0, it is determined that the data to be stored in the group is not important.

[0023] Further, after determining whether the data to be stored in the group is important, it is determined whether the data to be stored in the group is encrypted according to the determination result, if the data to be stored in the group is important, the data to be stored is encrypted, if the data to be stored in the group is not important, the data to be stored is not encrypted;

[0024] In the encryption of the data to be stored, the public key is randomly generated to encrypt the data to be stored and the private key is sent to the corresponding terminal;

[0025] The encrypted or unencrypted data to be stored is stored.

[0026] Further, after the important data to be stored is encrypted, the group where the matching successful classification keyword is located is taken as a first target storage location, the storage location of the encrypted or unencrypted data to be stored is taken as a second target storage location, and the first target storage location and the second target storage location are taken as a target storage location.

[0027] Further, when the storage information of the stored data is generated into a storage list, the data name, data size and corresponding target storage location of the stored data are generated into a storage list;

[0028] When the stored data in the storage list is checked according to the storage list within a preset time, the stored data is checked according to the data name, data size and corresponding target storage location in the storage list, if the data name, data size or corresponding target storage location changes, an alarm is given.

[0029] Compared with the prior art, the beneficial effects of the present application are that, by first judging the terminal of the data to be stored to determine whether it meets the storage standard, the data to be stored is stored by detecting the security of the terminal, the security of the data source is ensured, then the data name of the data to be stored that meets the storage standard is obtained by keyword extraction according to the preset keyword table, and the target storage location is obtained by classified storage according to the data name, the classified storage of the data is realized, the data storage is more orderly, then the data name of the stored data is associated with the corresponding target storage location, and the storage information of the stored data is generated into a storage list, the stored data is easy to find, and the stored data is easy to check for security, preventing malicious program attacks, by detecting the changes of the stored data and giving timely alarm, the security of data storage is improved.

[0030] Especially, by judging the terminal of the data to be stored through the terminal name and terminal IP address to determine whether it meets the storage standard, the data to be stored is stored by detecting the security of the terminal, the security of the data source is ensured, and timely prevention is performed from the source, improving the security of data storage.

[0031] Especially, by judging the terminal according to the terminal name whitelist and the terminal IP address whitelist, whether the terminal meets the storage standard is determined, and then the to-be-stored data is stored by detecting the security of the terminal, so that the security of the data source is ensured, the data storage security is improved.

[0032] Especially, by judging the terminal according to the terminal name whitelist and the terminal IP address whitelist, whether the terminal meets the storage standard is determined, and then the to-be-stored data is stored by detecting the security of the terminal, so that the security of the data source is ensured, the data storage security is improved.

[0033] Especially, by judging the terminal according to the terminal name whitelist and the terminal IP address whitelist, whether the terminal meets the storage standard is determined, and then the to-be-stored data is stored by detecting the security of the terminal, so that the security of the data source is ensured, the data storage security is improved.

[0034] Especially, by judging the terminal according to the terminal name whitelist and the terminal IP address whitelist, whether the terminal meets the storage standard is determined, and then the to-be-stored data is stored by detecting the security of the terminal, so that the security of the data source is ensured, the data storage security is improved.

[0035] Especially, by judging the terminal according to the terminal name whitelist and the terminal IP address whitelist, whether the terminal meets the storage standard is determined, and then the to-be-stored data is stored by detecting the security of the terminal, so that the security of the data source is ensured, the data storage security is improved.

[0036] Especially, after determining whether the data to be stored in the group is important, the data to be stored determined to be important is encrypted to make the data to be stored determined to be important more secure, and the corresponding private key is sent to the corresponding terminal, so that the private key is used for decryption when the stored data is extracted in the terminal, malicious programs are prevented from being extracted, and the security of data storage is improved.

[0037] Especially, by taking the group where the matched classification keyword is located as a first target storage location, taking the storage location of the encrypted or unencrypted data to be stored as a second target storage location, generating a target storage location from the first target storage location and the second target storage location, and then storing the target storage location of the data to be stored, the stored data is facilitated to be found, and the stored data is facilitated to be checked for security, malicious programs are prevented from attacking, changes in the stored data are detected and timely warning is given, and the security of data storage is improved.

[0038] Especially, by generating a storage list from the data name, data size, and corresponding target storage location of the stored data when generating the storage information of the stored data, and checking the stored data in the storage list according to the storage list within a preset time, it is determined whether the data name, data size, and corresponding target storage location of the actual stored data have changed, whether they are the same as the data name, data size, and corresponding target storage location when the data is stored, and if they are different, it is determined that they have changed, and it is determined that malicious attacks have been suffered, changes in the stored data are detected and timely warning is given, and the security of data storage is improved. BRIEF DESCRIPTION OF DRAWINGS

[0039] Figure 1 A flowchart of a network data storage management method based on network information security provided by an embodiment of the present application is provided.

[0040] Figure 2 A flowchart of determining whether the terminal of the data to be stored meets the storage standard in an embodiment of the present application is provided.

[0041] Figure 3 A flowchart of analyzing the storage location of the data to be stored that meets the storage standard to obtain a target storage location in an embodiment of the present application is provided.

[0042] Figure 4 A structural diagram of a network data storage management device based on network information security provided by an embodiment of the present application is provided. DETAILED DESCRIPTION

[0043] In order to make the objects, technical schemes and advantages of the present application clearer, the following further describes the present application with reference to the embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not to limit the present application.

[0044] The preferred embodiments of the present application are described below with reference to the accompanying drawings. Those skilled in the art should understand that the embodiments are only used to explain the technical principles of the present application and not to limit the protection scope of the present application.

[0045] It should be noted that, in the description of the present application, the terms indicating the direction or positional relationship such as "upper", "lower", "left", "right", "inner", "outer" and the like are based on the direction or positional relationship shown in the drawings, which is only for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application.

[0046] In addition, it should be further noted that, in the description of the present application, unless otherwise explicitly specified and limited, the terms "mounting", "connecting", "connection" should be understood in a broad sense, for example, can be fixedly connected, can be detachably connected, or integrally connected; can be mechanically connected, can be electrically connected; can be directly connected, can be indirectly connected through an intermediate medium, or can be the communication inside two elements. Those skilled in the art can understand the specific meaning of the above terms in the present application according to the specific circumstances.

[0047] Please refer to Figure 1 The network data storage management method based on network information security provided by the embodiments of the present application includes:

[0048] In step S110, a plurality of to-be-stored data of a terminal is received, and the to-be-stored data contains terminal information.

[0049] In step S120, it is judged whether the to-be-stored data of the terminal meets the storage standard according to the terminal information, the to-be-stored data meeting the storage standard is subjected to keyword extraction according to a preset keyword table, the extracted keywords are taken as data names of the to-be-stored data, and the to-be-stored data meeting the storage standard is subjected to storage location analysis according to the data names to obtain a target storage location, the terminal corresponding to the to-be-stored data not meeting the storage standard is subjected to authentication, and it is judged again whether the terminal meets the storage standard according to the authentication result.

[0050] In step S130, the plurality of to-be-stored data is stored according to the target storage location, and the stored to-be-stored data is set as stored data.

[0051] Step S140, associating the data name of the stored data with the corresponding target storage location and generating a storage list of the storage information of the stored data, checking the stored data in the storage list according to the storage list within a preset time to determine whether the stored data is modified.

[0052] Specifically, the embodiment of the present application first judges the terminal of the to-be-stored data to determine whether it meets the storage standard, then stores the to-be-stored data by detecting the security of the terminal, ensures the security of the data source, then extracts the keywords of the to-be-stored data meeting the storage standard according to the preset keyword table to obtain the corresponding data name, and then classifies and stores the to-be-stored data to obtain the target storage location, realizes the classified storage of the data, makes the data storage more orderly, then associates the data name of the stored data with the corresponding target storage location and generates a storage list of the storage information of the stored data, facilitates the search for the stored data, and facilitates the security check of the stored data, prevents malicious program attacks, detects the changes of the stored data and timely alerts, and improves the security of data storage.

[0053] Please refer to Figure 2 As shown in the figure, judging whether the terminal of the to-be-stored data meets the storage standard according to the terminal information corresponding to the to-be-stored data includes:

[0054] Step S121, judging whether the to-be-stored data of the terminal meets the storage standard according to the terminal name and terminal IP address in the terminal information;

[0055] Step S122, if it is determined that the to-be-stored data of the terminal meets the storage standard, analyzing the storage location of the to-be-stored data of the terminal to obtain the target storage location; if it is determined that the to-be-stored data of the terminal does not meet the storage standard, authenticating the terminal corresponding to the to-be-stored data that does not meet the storage standard and sending the authentication information to the terminal for authentication.

[0056] Specifically, the embodiment of the present application first judges the terminal of the to-be-stored data by the terminal name and terminal IP address to determine whether it meets the storage standard, then stores the to-be-stored data by detecting the security of the terminal, ensures the security of the data source, and timely prevents from the source, thereby improving the security of data storage.

[0057] Specifically, when judging whether the to-be-stored data of the terminal meets the storage standard according to the terminal name and terminal IP address of the terminal information, the terminal name is matched with the terminal name white list, if the matching is successful, it is determined that the terminal name is safe, if the matching fails, it is determined that the terminal name is suspicious;

[0058] The terminal IP address is matched with the terminal IP address whitelist. If the match is successful, the terminal IP address is determined to be safe. If the match fails, the terminal IP address is determined to be suspicious.

[0059] If the terminal name is secure and the terminal IP address is secure, then the data to be stored on the terminal is determined to meet the storage standards. If the terminal name is secure and the terminal IP address is suspicious, then the data to be stored on the terminal is determined to not meet the storage standards. If the terminal name is suspicious and the terminal IP address is secure, then the data to be stored on the terminal is determined to not meet the storage standards. If the terminal name is suspicious and the terminal IP address is suspicious, then storing the data to be stored on the terminal is prohibited.

[0060] Specifically, the terminal name whitelist and terminal IP address whitelist can be previously stored terminal information, or they can be whitelists formed by safe terminal names and IP addresses collected from the Internet; the terminal name whitelist and terminal IP address whitelist can also be terminal name blacklist and terminal IP address blacklist, which can be blacklists formed by dangerous terminal names and IP addresses collected from the Internet.

[0061] Specifically, this embodiment of the invention first determines the terminal whose name and IP address are to be stored based on the terminal name whitelist and the terminal IP address whitelist to determine whether they meet the storage standards. Then, the data to be stored is stored only after the security of the terminal is detected, which ensures the security of the data source, prevents it from being blocked at the source in a timely manner, and improves the security of data storage.

[0062] Specifically, when it is determined that the data to be stored on the terminal does not meet the storage standard, different authentication information is generated based on the terminal name or the terminal IP address of the terminal corresponding to the data to be stored that does not meet the storage standard. The authentication information is then sent to the terminal. If the terminal name is determined to be suspicious, the corresponding target terminal name authentication information is generated based on the preset terminal name authentication template information. If the terminal IP address is determined to be suspicious, the corresponding target terminal IP address authentication information is generated based on the preset terminal IP address authentication template information.

[0063] Specifically, the authentication information is preset template information, which is divided into preset terminal name authentication template information and preset terminal IP address authentication template information. It mainly obtains some supplementary information of the terminal to complete the security authentication of the terminal.

[0064] Specifically, this embodiment of the invention first determines the terminal whose name and IP address are to be stored based on a terminal name whitelist and a terminal IP address whitelist. It determines whether the terminal meets the storage standards and does not store the data to be stored for terminals that do not meet the storage standards. At the same time, it adds the terminal name and IP address corresponding to the data to be stored that meet the storage standards to the corresponding whitelist. This makes the subsequent data storage detection more accurate. In this way, the data to be stored is stored only after the security of the terminal is detected, which ensures the security of the data source and prevents it from being blocked at the source, thereby improving the security of data storage.

[0065] Specifically, after sending the authentication information to the terminal, the system receives the authentication response information from the terminal and reviews the authentication response information to determine whether the terminal has been successfully authenticated. If the authentication is successful, the system determines that the data to be stored by the terminal meets the storage standards. If the authentication fails, the system determines that the data to be stored by the terminal is prohibited from being stored, and adds the successfully authenticated terminal name or terminal IP address to the terminal name whitelist or terminal IP address whitelist.

[0066] Specifically, on the one hand, the successfully authenticated terminal name or terminal IP address can be added to the terminal name whitelist or terminal IP address whitelist. On the other hand, the terminal name or terminal IP address that fails to authenticate can be added to the terminal name blacklist or terminal IP address blacklist. Correspondingly, when analyzing the data to be stored, the data can be matched according to the terminal name blacklist or terminal IP address blacklist to determine whether the data to be stored can be stored or the data to be stored is prohibited from being stored.

[0067] Specifically, this embodiment of the invention, after sending authentication information to the terminal, receives the authentication response information from the terminal and analyzes the authentication response information to determine whether the terminal has been successfully authenticated. At the same time, it adds the terminal name and terminal IP address corresponding to the data to be stored that meets the storage standards to the corresponding whitelist, making the subsequent data storage detection more accurate. In this way, the data to be stored is stored only after the security of the terminal is detected, ensuring the security of the data source, blocking it from the source in a timely manner, and improving the security of data storage.

[0068] Please see Figure 3 As shown, the target storage location is obtained by analyzing the storage location of the data to be stored that meets the storage criteria based on the data name, including:

[0069] Step S1221: According to the preset classification keyword table, the data names of the data to be stored are matched with classification keywords, and the data to be stored with the same classification keywords that are successfully matched are grouped together.

[0070] Step S1222: Match the data names of the data to be stored in the group with the preset key keyword table, count the number of matches W, and determine whether to encrypt the data to be stored in the group based on the number W.

[0071] Specifically, this embodiment of the invention achieves categorized storage of data by matching the data names of the data to be stored with categorized keywords according to a preset categorized keyword table, and matching the data names of the data to be stored within a group with a preset key keyword table. The target storage location is determined by the number of matched key keywords, thus realizing categorized storage of data. Data of the same category to be stored is stored in the same location, making data storage more orderly, which facilitates finding stored data and allows for security checks on stored data to prevent malicious program attacks. By detecting changes in stored data and issuing timely warnings, the security of data storage is improved.

[0072] Specifically, when matching the data names of the data to be stored in the group with the preset key keyword table, the importance of the data to be stored in the group is determined according to the quantity W. The number W of the key keyword names that are successfully matched is counted and compared with the preset quantity W0. If W > W0, the data to be stored in the group is determined to be important. If W ≤ W0, the data to be stored in the group is determined to be unimportant.

[0073] Specifically, the data name of the data to be stored is in text format.

[0074] Specifically, this embodiment of the invention matches the data names of the data to be stored in a group with a preset list of key keywords. The importance of the data to be stored in the group is determined by the number of matched key keywords, thereby confirming the target storage location of important or unimportant data to be stored. This makes data storage more orderly, facilitates finding stored data, and makes it easier to perform security checks on stored data to prevent malicious program attacks. By detecting changes in stored data and issuing timely warnings, the security of data storage is improved.

[0075] Specifically, after determining whether the data to be stored in the group is important, the system determines whether to encrypt the data based on the determination result. If the data to be stored in the group is determined to be important, then the data to be stored is encrypted. If the data to be stored in the group is determined to be unimportant, then the data to be stored is not encrypted.

[0076] When encrypting the data to be stored, a public key is randomly generated to encrypt the data and the private key is sent to the corresponding terminal.

[0077] Store encrypted or unencrypted data to be stored.

[0078] Specifically, after the private key is sent to the corresponding terminal, when the terminal sends a data retrieval request, it is first confirmed whether the stored data to be retrieved by the terminal is important stored data. If it is important, the corresponding private key of the terminal is obtained, and the stored data requested by the terminal is decrypted according to the private key. If the private key is incorrect, the terminal will be prohibited from retrieving the stored data, thus ensuring the security of the stored data.

[0079] Specifically, in this embodiment of the invention, after determining whether the data to be stored in the group is important, the data to be stored that is determined to be important is encrypted to make the data to be processed more secure, and the corresponding private key is sent to the corresponding terminal. When the terminal retrieves the stored data, it decrypts it using the private key to prevent malicious programs from retrieving it and improve the security of data storage.

[0080] Specifically, after encrypting the important data to be stored, the group containing the successfully matched category keywords is taken as the primary target storage location, and the storage location of the encrypted or unencrypted data to be stored is taken as the secondary target storage location. The primary target storage location and the secondary target storage location are then used to generate the target storage location.

[0081] Specifically, if the matched category keyword is agriculture, then the important data to be stored belongs to the agriculture group, and the corresponding primary target storage location is the storage area of ​​the agriculture group. The secondary target storage location for encrypted or unencrypted data to be stored is the secondary storage area under the agriculture group storage area.

[0082] Specifically, in this embodiment of the invention, the group containing the successfully matched category keywords is used as the primary target storage location, and the storage location of the encrypted or unencrypted data to be stored is used as the secondary target storage location. The primary target storage location and the secondary target storage location are combined to generate a target storage location, and then the target storage location of the data to be stored is stored. This facilitates the retrieval of the stored data and the security checks on the stored data to prevent malicious program attacks. By detecting changes in the stored data and issuing timely warnings, the security of data storage is improved.

[0083] Specifically, when generating a storage list from the storage information of the stored data, the storage list is generated by taking the data name, data size and corresponding target storage location of the stored data;

[0084] When checking the stored data in the storage list according to the storage list within a preset time, the stored data is checked according to the data name, data size and corresponding target storage location in the storage list. If the data name, data size or corresponding target storage location changes, an alert is issued.

[0085] Specifically, the data size is the size of the stored data corresponding to each data name, which can be obtained by calculating the hash value; the preset time can be n days, n weeks, n months, etc., and the number of checks within the preset time can also be set by the user; the stored data in the storage list can be arranged according to the storage time; if the data name, data size, or corresponding target storage location changes, the various warning methods will be different, thereby quickly confirming the specific content of the warning and reducing the risk of data.

[0086] Specifically, in this embodiment of the invention, when generating a storage list from the storage information of stored data, the data name, data size, and corresponding target storage location of the stored data are generated. Within a preset time period, the stored data in the storage list is checked to determine whether the actual stored data's data name, data size, and corresponding target storage location have changed, and whether they are the same as the data name, data size, and corresponding target storage location at the time of storage. If they are different, it is determined that a change has occurred, thus confirming a malicious attack. By detecting changes in the stored data and issuing timely warnings, the security of data storage is improved.

[0087] Please see Figure 4 As shown, the network data storage management device based on network information security provided in this embodiment of the invention includes:

[0088] The receiving module 210 is used to receive a number of data to be stored from the terminal, wherein the data to be stored includes terminal information;

[0089] The analysis module 220, connected to the receiving module, is used to determine whether the data to be stored on the terminal conforms to the storage standard based on the terminal information. It extracts keywords from the data to be stored that conforms to the storage standard according to a preset keyword table, uses the extracted keywords as the data name of the data to be stored, and analyzes the storage location of the data to be stored that conforms to the storage standard based on the data name to obtain the target storage location. It also authenticates the terminal corresponding to the data to be stored that does not conform to the storage standard, and determines whether the terminal conforms to the storage standard again based on the authentication result.

[0090] Storage module 230, which is connected to the analysis module, is used to store the plurality of data to be stored according to the target storage location, and the stored data to be stored is set as stored data;

[0091] The inspection module 240, which is connected to the storage module, is used to associate the data name of the stored data with the corresponding target storage location and generate a storage list of the stored data. Within a preset time, the stored data in the storage list is inspected to determine whether the stored data has been modified.

[0092] Specifically, in this embodiment of the invention, the analysis module first judges the terminal receiving the data to be stored from the receiving module to determine whether it meets the storage standards. By checking the security of the terminal, the data to be stored is stored, ensuring the security of the data source. Then, according to a preset keyword table, keywords are extracted from the data to be stored that meet the storage standards to obtain the corresponding data names. Then, the data names are classified and stored to obtain the target storage location, realizing the classification and storage of data by the storage module, making data storage more orderly. Then, the inspection module associates the data names of the stored data with the corresponding target storage locations and generates a storage list of the stored data, which facilitates the retrieval of stored data and allows the inspection module to perform security checks on the stored data to prevent malicious program attacks. By detecting changes in the stored data and issuing timely warnings, the security of data storage is improved.

[0093] The technical solution of the present invention has been described above with reference to the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will all fall within the scope of protection of the present invention.

[0094] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A method for storing and managing network data based on network information security, characterized in that, include: The receiving terminal receives a number of data to be stored, wherein the data to be stored includes terminal information; Based on the terminal information, determine whether the data to be stored on the terminal meets the storage standards. Extract keywords from the data to be stored that meets the storage standards according to a preset keyword table. Use the extracted keywords as the data name of the data to be stored. Analyze the storage location of the data to be stored that meets the storage standards according to the data name to obtain the target storage location. Authenticate the terminal corresponding to the data to be stored that does not meet the storage standards. Determine whether the terminal meets the storage standards again based on the authentication result. The plurality of data to be stored are stored according to the target storage location, and the stored data to be stored is set as stored data. The data name of the stored data is associated with the corresponding target storage location, and the storage information of the stored data is generated into a storage list. Within a preset time, the stored data in the storage list is checked to determine whether the stored data has been modified.

2. The method for storing and managing network data based on network information security according to claim 1, characterized in that, Determining whether the terminal of the data to be stored conforms to the storage standard based on the terminal information corresponding to the data to be stored includes: Based on the terminal name and terminal IP address in the terminal information, determine whether the data to be stored on the terminal meets the storage standards; If it is determined that the data to be stored on the terminal conforms to the storage standard, the storage location of the data to be stored on the terminal is analyzed to obtain the target storage location; if it is determined that the data to be stored on the terminal does not conform to the storage standard, the terminal corresponding to the data to be stored that does not conform to the storage standard is authenticated and the authentication information is sent to the terminal for authentication.

3. The method for storing and managing network data based on network information security according to claim 2, characterized in that, When determining whether the data to be stored on a terminal conforms to the storage standard based on the terminal name and terminal IP address of the terminal information, the terminal name is matched with the terminal name whitelist. If the match is successful, the terminal name is determined to be safe; if the match fails, the terminal name is determined to be suspicious. The terminal IP address is matched with the terminal IP address whitelist. If the match is successful, the terminal IP address is determined to be safe. If the match fails, the terminal IP address is determined to be suspicious. If the terminal name is secure and the terminal IP address is secure, then the data to be stored on the terminal is determined to meet the storage standards. If the terminal name is secure and the terminal IP address is suspicious, then the data to be stored on the terminal is determined to not meet the storage standards. If the terminal name is suspicious and the terminal IP address is secure, then the data to be stored on the terminal is determined to not meet the storage standards. If the terminal name is suspicious and the terminal IP address is suspicious, then storing the data to be stored on the terminal is prohibited.

4. The method for storing and managing network data based on network information security according to claim 3, characterized in that, When it is determined that the data to be stored on the terminal does not meet the storage standard, different authentication information is generated based on the terminal name or the terminal IP address of the terminal corresponding to the data to be stored that does not meet the storage standard. The authentication information is then sent to the terminal. If the terminal name is determined to be suspicious, the corresponding target terminal name authentication information is generated based on the preset terminal name authentication template information. If the terminal IP address is determined to be suspicious, the corresponding target terminal IP address authentication information is generated based on the preset terminal IP address authentication template information.

5. The method for storing and managing network data based on network information security according to claim 4, characterized in that, After sending the authentication information to the terminal, the system receives the authentication response information from the terminal and reviews the authentication response information to determine whether the terminal has been successfully authenticated. If the authentication is successful, the system determines that the data to be stored by the terminal meets the storage standard. If the authentication fails, the system determines that the data to be stored by the terminal is prohibited from being stored, and adds the name of the successfully authenticated terminal or the terminal IP address to the terminal name whitelist or the terminal IP address whitelist.

6. The method for storing and managing network data based on network information security according to claim 5, characterized in that, Based on the data name, the storage location of the data to be stored that meets the storage criteria is analyzed to obtain the target storage location, including: According to the preset category keyword table, the data names of the data to be stored are matched with category keywords, and the data to be stored with the same category keyword names that are successfully matched are divided into a group; The data names of the data to be stored in the group are matched with a preset list of key keywords. The number of matches W is counted, and the number of matches W is used to determine whether to encrypt the data to be stored in the group.

7. The method for storing and managing network data based on network information security according to claim 6, characterized in that, When matching the data names of the data to be stored in the group with the preset key keyword table, the importance of the data to be stored in the group is determined according to the quantity W. The number W of the key keyword names that are successfully matched is counted and compared with the preset quantity W0. If W > W0, the data to be stored in the group is determined to be important. If W ≤ W0, the data to be stored in the group is determined to be unimportant.

8. The method for storing and managing network data based on network information security according to claim 7, characterized in that, After determining whether the data to be stored in the group is important, the system determines whether to encrypt the data based on the determination result. If the data to be stored in the group is determined to be important, the data to be stored is encrypted. If the data to be stored in the group is determined to be unimportant, the data to be stored is not encrypted. When encrypting the data to be stored, a public key is randomly generated to encrypt the data and the private key is sent to the corresponding terminal. Store encrypted or unencrypted data to be stored.

9. The method for storing and managing network data based on network information security according to claim 8, characterized in that, After encrypting the important data to be stored, the group containing the successfully matched category keywords is taken as the primary target storage location, and the storage location of the encrypted or unencrypted data to be stored is taken as the secondary target storage location. The primary target storage location and the secondary target storage location are then combined to generate the target storage location.

10. The method for storing and managing network data based on network information security according to claim 9, characterized in that, When generating a storage list from the storage information of the stored data, the storage list is generated by including the data name, data size, and corresponding target storage location of the stored data. When checking the stored data in the storage list according to the storage list within a preset time, the stored data is checked according to the data name, data size and corresponding target storage location in the storage list. If the data name, data size or corresponding target storage location changes, an alert is issued.

Images