An information automatic deletion method and system based on time synchronization and trusted counting

Abstract

The application relates to an information automatic deletion method and system based on time synchronization and trusted counting, which comprises the following steps: standardizing and defining various data structures, wherein the various data structures at least comprise configuration information; setting a trigger condition for information automatic deletion, wherein the trigger condition comprises an automatic deletion condition based on time synchronization and / or an automatic deletion condition based on trusted counting; keeping the configuration information synchronized between domains; and performing an information automatic deletion operation by an information source domain and / or an information propagation domain when an information flow transfer data triggers the trigger condition. In view of the problem that a data deletion mechanism cannot delete information according to a retention period, the application realizes automatic deletion of authorized information that has been transferred out after a certain period of time through a cross-system clock synchronization technology; and the application also limits the number of information transfer times to ensure that information is transferred within a specified number of times, and the information and its copies are completely deleted after the maximum number of transfer times.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to a method and system for automatic information deletion based on time synchronization and trusted counting. Background Technology

[0002] The arrival of the big data era has profoundly changed people's lifestyles, bringing both benefits and risks. One of the most significant risks is that the astonishing volume and speed of data transmission may expose individuals to the risk of their information being retained beyond its authorized lifespan. This over-authorization seriously threatens citizens' information security, making it vulnerable to misuse by others, thus creating a need for automatic information deletion. However, current systems lack restrictions on automatic information deletion, easily leading to the problem of information, especially personal information, being retained beyond its authorized lifespan.

[0003] For example, Chinese Patent Publication No. CN102227116B discloses a secure local area network (LAN) management method and a LAN. In this method: a secure terminal sends a user-inputted file deletion request to a security control server; the file deletion request information includes: file path and deletion reason; the security control server obtains the file's security level information based on the file path and fills in a file deletion list; the security control server displays the file deletion list to the administrator and receives the administrator's approval result information, writing it into the file deletion list; the secure terminal sends a request to the security control server to view the deletion approval result; the security control server searches the file deletion list for an entry whose identifier matches the secure terminal's, returns the information from that entry to the secure terminal, and the secure terminal displays the entry's information to the user. This invention's technical solution can securely implement file deletion within a local area network.

[0004] For example, Chinese Patent Publication No. CN101945247A discloses an information transmission method and its terminal device. The method includes: reading authorization management information to be sent from the transmission queue. This authorization management information is generated based on the user's authorization or deauthorization instructions and includes a security device identifier, a product identifier, and a security time for the authorization management information; if it is determined that the security time of the authorization management information to be sent is greater than the current time, then the authorization management information is sent to the terminal device; if it is determined that the security time of the authorization management information to be sent is not greater than the current time, then the read authorization management information is deleted. Through this embodiment of the invention, the front-end can automatically delete expired authorization information when sending EMM data packets, reducing redundant data. Furthermore, while ensuring that all terminal devices can receive EMM data packets, it stops sending expired EMM data packets. Therefore, it reduces the processing load on the front-end, saves network resources, and increases the speed of sending data packets.

[0005] In the examples above, there is no limit on the number of times information can be transferred based on its credibility, making it easy for information to be obtained or leaked during the transfer process.

[0006] This invention aims to provide a method and system for automatic information deletion based on time synchronization and reliable counting, in order to overcome the aforementioned shortcomings.

[0007] Furthermore, on the one hand, there are differences in understanding among those skilled in the art; on the other hand, the applicant studied a large number of documents and patents when making this invention, but due to space limitations, not all details and contents were listed in detail. However, this does not mean that the present invention does not possess the features of these prior art. On the contrary, the present invention already possesses all the features of the prior art, and the applicant reserves the right to add relevant prior art to the background art. Summary of the Invention

[0008] To address the shortcomings of existing technologies, this invention provides an automatic information deletion method based on time synchronization and trusted counting. The method includes at least: standardizing and defining various data structures, each including configuration information; setting trigger conditions for automatic information deletion, including automatic deletion conditions based on time synchronization and / or automatic deletion conditions based on trusted counting; maintaining the configuration information synchronized; and, when the information flow data triggers the trigger conditions, the information source domain and / or information propagation domain perform the automatic information deletion operation.

[0009] To address the problem that existing data deletion mechanisms cannot delete information according to its retention period, this invention utilizes cross-system clock synchronization technology to ensure that authorized information that has been transferred can be automatically deleted after a certain period. Furthermore, it limits the number of information transfers to ensure that information is transferred within a specified number of times; after the set number of transfers is reached, the information and its copies will be completely deleted.

[0010] Preferably, the method further includes: establishing a log record to document the automatic deletion process information.

[0011] Preferably, the steps for standardizing and defining various data structures include at least: the information source domain generates corresponding configuration information based on the acquired information, and when the information is sent to at least one information propagation domain, the information propagation domain generates a new copy of the information.

[0012] Preferably, in the case of time synchronization, the configuration information includes at least the set deletion time; in the case of trusted counting, the configuration information includes at least the number of times the information can be circulated and the circulation domain of the information.

[0013] Preferably, the automatic deletion condition based on time synchronization includes at least the following: when the preset expiration time is the same as the global system time determined by the time synchronization of the information through each domain, each domain performs an automatic deletion operation on the information; the automatic deletion condition based on trusted count includes at least the following: when the number of times the information has been transferred is equal to the preset number of transferable times, each domain performs an automatic deletion operation on the information.

[0014] Preferably, when the information flow data triggers the triggering condition, the steps of the information source domain and / or information propagation domain performing configuration information synchronization and automatic information deletion operations include at least: in the case of automatic information deletion based on time synchronization, when the information is sent from the information source domain... When a transfer occurs, the information source domain From the transmission chain Query the current replica location and configuration information. Synchronize to this information propagation domain. During timing, only from the source domain... Only the information that has been propagated needs to have its propagation chain P checked. If it's from N-1 to N, the configuration information is directly from... Send to No source domain query In the event that the copy is circulated again, the information propagation domain... Generate new copies And generate the corresponding configuration information simultaneously. ; in global system time Reaching the preset expiration time If the automatic deletion condition is triggered under certain circumstances, the information and all its copies will be automatically deleted.

[0015] Preferably, when the information flow data triggers the triggering condition, the steps of the information source domain and / or information propagation domain performing configuration information synchronization and automatic information deletion operations include at least: in the case of automatic information deletion based on trusted counting, when a copy of one of the domains... The flow to the information dissemination domain occurs again. At that time, the information dissemination domain Generate new copies And at the same time generate the corresponding configuration information. Configuration information Update the number of times Information flow domain New Information Dissemination Domain in China Information dissemination domain New configuration information Send to the source domain In the information source domain Through the transmission chain Query all copies Location And synchronize the configuration information, so that the number of transfers in the configuration information corresponding to the non-domain replica is updated to... Information flow domain New information dissemination domain When the number of transfers in the configuration information reaches zero, the automatic deletion condition is triggered, and the corresponding information and its copies are automatically deleted. Preferably, regardless of which domain generates a new copy, the copy information will be sent back to the source domain first. This is because the propagation chain P is only accessible to the source domain, and the configuration information is then updated and synchronized through the source domain.

[0016] Preferably, the step of establishing log storage to record automatic deletion process information includes at least: generating process data structure information during the information flow process; generating trigger data structure information after the information triggers the automatic deletion trigger condition; and saving the corresponding process data structure information and / or trigger data structure information as an operation log after the information is automatically deleted.

[0017] This invention also provides an automatic information deletion system based on time synchronization and trusted counting, which includes at least a first processor and a second processor. The first processor standardizes and defines various data structures, each of which includes at least configuration information. The first processor sets trigger conditions for automatic information deletion, including automatic deletion conditions based on time synchronization and / or automatic deletion conditions based on trusted counting. The first processor and the second processor maintain synchronization of the configuration information. When the information flow data triggers the trigger conditions, the information source domain in the first processor and / or the information propagation domain in the second processor perform the automatic information deletion operation.

[0018] Preferably, the first processor or the second processor establishes a log to record information about the automatic deletion process.

[0019] The automatic information deletion system based on time synchronization and trusted counting of the present invention can unify the configuration information of various domains and monitor the flow of information and automatically delete information based on time synchronization or trusted counting verification, thereby avoiding the abuse of information and realizing the secure use of information. Attached Figure Description

[0020] Figure 1 This is a schematic diagram illustrating the steps of a preferred embodiment of the present invention;

[0021] Figure 2 This is a schematic diagram of an automatic deletion process of expired information based on time synchronization, according to a preferred embodiment of the present invention.

[0022] Figure 3This is a schematic diagram of the i-th flow state process based on trusted counting, according to a preferred embodiment of the present invention.

[0023] Figure 4 This is a schematic diagram of the (i+1)th flow state process of a preferred embodiment of the present invention.

[0024] List of reference numerals

[0025] 10: First processor; 20: Second processor; 30: User terminal. Detailed Implementation

[0026] The following is a detailed explanation with reference to the accompanying drawings.

[0027] This invention provides a method and system for automatic information deletion based on time synchronization and trusted counting. This invention can also provide an information security management method and system.

[0028] This invention provides an explanation of the following terms.

[0029] Signature Algorithm: A signature algorithm refers to the algorithm used to create digital signatures. A digital signature is a string of alphanumeric characters that only the sender of the information can generate and that cannot be forged by others. This string also serves as valid proof of the authenticity of the information sent by the sender. A digital signature is obtained by processing the information to be transmitted using a one-way function, resulting in a string of alphanumeric characters used to authenticate the source of the information and verify whether the information has been altered during transmission.

[0030] Source domain: The domain in which the information subject first retains information.

[0031] Information dissemination domain: The information domain that stores the target information.

[0032] Information flow domain: The information domain that the target information has reached during its flow.

[0033] Timestamp: A complete and verifiable record of data that indicates that a piece of data existed at a specific point in time.

[0034] Information source domain flow list: A list of domains through which the information flows, recorded in the domain where the information subject first retains the information.

[0035] This invention uses information as an example to illustrate various categories of information.

[0036] During the automatic deletion process, information will first be automatically deleted when certain conditions are met, and then the specific automatic deletion operation will complete the clearing of the data. The triggering and execution of automatic deletion together constitute the complete process of automatic deletion.

[0037] Regarding the automatic deletion triggering method, since information copies circulate between multiple domains and are difficult to delete according to user intent or legal regulations, two methods are used to trigger automatic deletion: a time-synchronized expiration automatic deletion mechanism and a trusted count-based automatic deletion mechanism. When the retention time of information exceeds the specified limit or the number of circulations exceeds the specified limit, the deletion operation will be automatically triggered to ensure that the retention time of user information in each domain is within the specified time limit or the circulation scope of information is within the specified range.

[0038] This invention discloses an automatic information deletion system based on time synchronization and reliable counting, comprising at least several first processors 10, several second processors 20, and several user terminals 30. For example... Figure 2 As shown, a plurality of first processors 10 establish communication connections with a plurality of user terminals 30 via wired and / or wireless means. A plurality of first processors 10 also establish communication connections with a plurality of second processors 20 via wired and / or wireless means. The plurality of first processors 10, the plurality of second processors 20, and the plurality of user terminals 30 in this invention are provided with at least one communication component for information transmission, including wired communication components and / or wireless communication components. Wired communication components are, for example, fiber optic communication components, network communication cables, etc. Wireless communication components are, for example, Wi-Fi communication components, Bluetooth communication components, ZigBee communication components, etc.

[0039] In this invention, the first processor 10 refers to a processor capable of establishing a connection with the user terminal 30 and receiving information, and the second processor 20 refers to a processor used for information flow.

[0040] The processor in this invention refers to a dedicated integrated chip, CPU, server, etc., capable of implementing at least one step of the automatic information deletion method based on time synchronization and trusted counting of this invention.

[0041] In this invention, the user terminal 30 refers to a terminal that allows a user to input information. This terminal may be, for example, a smart terminal, such as a mobile phone, computer, tablet computer, smartwatch, smart glasses, or a display device with interactive functions.

[0042] The present invention provides an automatic information deletion system based on time synchronization and trusted counting, used to execute the automatic information deletion method based on time synchronization and trusted counting of the present invention.

[0043] like Figure 1 As shown, the automatic information deletion system based on time synchronization and trusted counting of the present invention, which executes an automatic information deletion method based on time synchronization and trusted counting of the present invention, includes at least the following:

[0044] S1: Configure settings.

[0045] When information Reaching the information source domain The configuration information will be set later. Assume the maximum retention time required by relevant regulations is... The expiration time of the information subject configuration information is Then the information source domain contrast and The smaller value is used as the maximum retention time in the actual configuration information, and an expiration time is set. .in This is the global system time at the time of configuration. Also, the information source domain... Also add timestamps to the configuration information Configuration information includes expiration time. and timestamp .

[0046] S2. Sending messages and signature verification:

[0047] In information Configuration information is sent to the first information propagation domain. Previously, the information source domain It will be signed, generating a final signing certificate pair. .information Configuration information and signature certificate pair It will be sent to the first information dissemination domain simultaneously. First information dissemination domain The signature is verified using a signature verification algorithm. Valid, meaning the received information is indeed from the sender's source domain. The authenticity of the signature result can be highly trusted, and the information... Since the configuration information has not been tampered with, it is valid information and can be stored immediately.

[0048] When the trigger condition is trusted count, the information From the information source domain Send to the information dissemination domain After that, the number of times is counted by Become The information flow domain set is composed of Add new information flow domain Become To ensure the consistency of configuration information, the flow domain in the second processor 20 Propagation domains of personal information to several first processors 10 and second processors 20 Send new configuration information and synchronize the configuration information back to all streaming domains.

[0049] S3: Trigger the deletion operation.

[0050] Based on time synchronization information, the expiration time t and the global system time Once an agreement is reached, each domain will execute the deletion operation synchronously to ensure that the data of the information subject can only be used within the specified time.

[0051] In the case of reliable count information, after the count information is zeroed out, each domain will simultaneously perform deletion operations to ensure that the total number of times information flows in each domain does not exceed the preset value of the information subject or the value agreed upon by regulations.

[0052] S4. Log storage.

[0053] In addition to all the information that is transferred, the first processor 10 and / or the second processor 20 will also log the signature of each domain when transferring information to the next domain and the signature of the receiving domain for verification.

[0054] Example 1

[0055] This embodiment is a schematic diagram of the steps of an automatic deletion process based on time synchronization.

[0056] S101: At least one user terminal 30 sends information to the first processor 10. The information includes at least: information subject identifier, name, ID number, telephone number, address, etc.

[0057] S102: Configure automatic deletion of timers.

[0058] While the user terminal 30 sends information to the first processor 10, it displays configuration information such as the deletion target and deletion time to the user, so that the user can set the deletion target and deletion time through the user terminal 30 to realize automatic deletion with timed configuration.

[0059] In response to the information receiving behavior, the first processor 10 is configured to set configuration information and trigger conditions related to automatic deletion.

[0060] When information Reaching the information source domain The configuration information will be set later. This includes the expiration time. and timestamp .

[0061] S11: Standardize the definition of various data structures. For example, automatically delete configuration information, communication methods, and flow lists of information source domains. Each data structure should at least include an information subject identifier. Information expiration time Number of information transfers Configure the automatic deletion time. Configure the information retention field during automatic deletion. The time to trigger automatic deletion Information retention field when automatic deletion is triggered Automatic deletion of the expiration time setting Automatically delete the set number of information flow cycles , Process information and log generation time .

[0062] S111: When the information subject is in the information source domain Submit Information After that, the information source domain Will this information Tracking is performed. This means that configuration information is synchronized during information flow, and simultaneously recorded in the information source domain. This generates a flow list of information source domains. When information flows to the information propagation domain... At that time, a new copy will be generated. .

[0063] S112: Information subject in information source domain Information After setting automatic deletion, the information source domain The corresponding configuration information will be generated. Configuration information for automatic deletion of expired data based on time synchronization. Includes a pre-set expiration time The trusted count-based automatic deletion includes the number of times the information can be circulated. and the domain of information flow .

[0064] S12: Set the trigger conditions for automatic deletion.

[0065] After the trigger conditions for automatic deletion are set, the trigger condition information is stored in the configuration information. When the trigger conditions are met, the first processor 10 and several connected second processors 20 will automatically trigger the deletion operation.

[0066] Assuming the relevant regulations require a maximum retention period of... The expiration time of the information subject configuration information is Then the information source domain contrast and The smaller value is used as the maximum retention time in the actual configuration information, and an expiration time is set. .in This is the global system time at the time of configuration. Configuration information must include at least the expiration time. and timestamp .

[0067] S121: Set the initial trigger condition, i.e., set the expiration time. .

[0068] S122: Configuration information for automatic deletion of expired items based on time synchronization. This includes the set expiration time. , The global system time is determined through synchronization of time across all domains. When the time is right, automatic deletion is triggered and the deletion operation is performed;

[0069] Without setting configuration information, automatic deletion cannot be achieved; setting configuration information not only enables each domain to achieve automatic deletion, but also ensures the immediacy of automatic deletion.

[0070] S13: Configure automatic deletion of configuration information via global synchronization. During the flow of information between domains, a synchronization is performed each time the information flows, ensuring consistency in the automatic deletion of configuration information across all domains.

[0071] S103: First transfer and / or synchronization configuration information and signature verification information.

[0072] In information Configuration information is sent to the first information propagation domain. Previously, the first processor 10 would sign it to generate the final signature certificate pair. .

[0073] The first processor 10 will send information Configuration information and signature certificate pair All information propagation domains are simultaneously sent to the second processor 20.

[0074] For example, the first processor 10 will send information Configuration information and signature certificate pair The first information propagation domain is simultaneously sent to the second processor 20. First information dissemination domain The signature is verified using a signature verification algorithm. Valid, meaning the received information is indeed from the sender's source domain. The authenticity of the signature result can be highly trusted, and the information... The configuration information has not been tampered with. Once the configuration information is deemed valid, it can be stored.

[0075] Specifically, the DSA signature algorithm is used as an example of a signature scheme here, and the steps are as follows:

[0076] Signature algorithm parameter definition: exists , , , , Five parameters, among which , , It is an integer. For key pairs. It is a prime modulus whose value satisfies: ,in It is a multiple of 64 and satisfies ; yes( The prime factors whose values ​​satisfy ... ,Right now The length is 160 bits; The value is ,in To meet Any integer, thus having ; The private key is a randomly or pseudo-randomly generated integer whose value satisfies... ; For public key, The value is Integers , , It can be made public or shared only by a specific group of users. Private key and public key Called a key pair The private key can only be held by the signer, while the public key can be publicly released, and the key pair can be used continuously for a period of time.

[0077] Signature process: Generate a random number Its value satisfies Calculate two signatures and , The signature needs to be regenerated each time to avoid using the same signature. Used for other signature operations. Among them... ), whose value satisfies ; Its value satisfies ,in Represents integers The inverse of a given modulus does not refer to... The reciprocal of the result. This ultimately generates a signature certificate pair. They and Send them together to the verifier.

[0078] Signature verification process: In order to verify To verify whether the signature was indeed signed by the sender, the verifier needs to have... Verification passed: Signature Effective, that is The signature is indeed from the sender, and its authenticity can be highly trusted. Unaltered, this is valid information. Verification failure explanation: Signature Invalid, that is Unreliable, or It has been altered, or the signature is forged, or The signature is incorrect. Invalid information.

[0079] Specifically, the signature verification process includes the following sub-steps:

[0080] calculate .

[0081] calculate .

[0082] calculate .

[0083] calculate .

[0084] like equal If the signature is verified, the verification will pass; otherwise, it will fail. If the signature verification fails, you can choose to directly refuse to receive the data to prevent tampered or corrupted data from entering the system.

[0085] Without signature verification, data integrity, trustworthiness, security, and auditability may be reduced, and data anomalies may be difficult to detect and handle, thereby increasing the security risks and data reliability risks faced by the system.

[0086] Signature verification offers technical advantages such as data integrity protection, data authenticity verification, data traceability and auditing, prevention of man-in-the-middle attacks, and anomaly detection and processing, thereby enhancing the security, reliability, and compliance of the system.

[0087] S31: After receiving the information, the first information propagation domain Generate new copies .

[0088] S32: Time-synchronized automatic deletion method for expired information, when information expires in the source domain. When a transfer occurs, the information source domain From the transmission chain Query the current replica location and configuration information. Synchronize to this information propagation domain. All configuration information synchronized with the replica. They are all the same, meaning that the expiration dates they contain are all the same. When the copy is circulated again, except in the information propagation domain... New copies will be generated. In addition, corresponding configuration information will also be generated synchronously. .

[0089] When information flows through various domains and is retained, if the retention time reaches the set time, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0090] That is, when information is in the first information propagation domain When a transfer occurs and data is retained, if the retention time reaches the set time, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0091] S104: Secondary transfer and / or synchronization configuration information and signature verification information.

[0092] S41: After receiving the information, the second information propagation domain Generate new copies .

[0093] Information dissemination domain Configuration information Synchronize to the second information dissemination domain In the middle. All configuration information synchronized with the replica. They are all the same, meaning that the expiration dates they contain are all the same. .

[0094] S42: When information is in the second information propagation domain When a transfer occurs and data is retained, if the retention time reaches the set time, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0095] S105: Nth transfer and / or synchronization configuration information and signature verification information.

[0096] S51: After receiving the information, the Nth information propagation domain Generate new copies .

[0097] Information dissemination domain N-1 Configuration information Synchronize to the Nth information propagation domain In the middle. All configuration information synchronized with the replica. They are all the same, meaning that the expiration dates they contain are all the same. .

[0098] S52: When information is in the Nth propagation domain When a transfer occurs and data is retained, if the retention time reaches the set time, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0099] Preferably, the steps to trigger automatic deletion and perform deletion operation after the retention time reaches the set time or the number of cycles reaches the set maximum number of cycles include:

[0100] When the global system time T reaches the agreed deletion time t, an automatic deletion operation will be triggered, and the information and all its copies will be automatically deleted.

[0101] S106: Preferably, after each propagation domain in the second processor 20 deletes the information copy and configuration information, each propagation domain in the second processor 20 also needs to log the entire automatic deletion process.

[0102] The methods for establishing evidence related to the automatic deletion process include at least the following:

[0103] S61: Triggering data structure information will be generated after the information triggers the automatic deletion condition. The triggering data structure information includes at least the information subject identifier. Current time Current information retention domain .

[0104] S62: During the information flow process, process data structure information will be generated. This process data structure information includes at least the information subject identifier. and Information on each process, including This refers to the number of times information flows through the system. Each time information flows through a system, a process information record is generated, and each record contains the deletion trigger time. Deletion trigger information retention field .

[0105] S63: After a message completes the entire automatic deletion process, the first processor 10 will save the corresponding data structure information as an operation log.

[0106] S64: In the automatic deletion operation log, the data structure must include at least the information subject identifier. Information expiration time Number of information transfers Configure the automatic deletion time. Configure the information retention field during automatic deletion. The time to trigger automatic deletion Information retention field when automatic deletion is triggered Automatic deletion of the expiration time setting Automatically delete the set number of information flow cycles , Process information and log generation time .

[0107] In this invention, failure to establish logs may lead to difficulties in troubleshooting and debugging, insufficient security auditing and monitoring, limited performance analysis and optimization, difficulties in business analysis and decision-making, and compliance and legal compliance risks.

[0108] Establishing logs will mitigate the aforementioned deficiencies and have a positive impact on the system's reliability, security, performance, and compliance.

[0109] Example 2

[0110] This embodiment is a further improvement on embodiment 1, and repeated content will not be described again.

[0111] Figure 3 This is a schematic diagram of the i-th transition state process based on trusted counting. The specific transition steps are shown below.

[0112] S201: At least one user terminal 30 sends information to the first processor 10.

[0113] S102: Configure automatic deletion of timers.

[0114] While sending information to the first processor 10, the user terminal 30 will select configuration information such as the deletion target and the maximum number of transfers to achieve automatic deletion of configuration counts.

[0115] S202: Configure automatic deletion based on the number of uses.

[0116] In response to the information receiving behavior, the first processor 10 is configured to set configuration information and trigger conditions related to automatic deletion.

[0117] When information Reaching the information source domain The configuration information will then be set. This configuration information includes the maximum number of transfers (r) and the information transfer domain. .

[0118] S11: Standardize the definition of various data structures.

[0119] S12: Set the trigger conditions for automatic deletion.

[0120] S121: Set initial trigger conditions, set valid number of cycles. ;

[0121] S122: Configuration information for automatic deletion based on trusted counting. This information can be circulated a maximum of [number] times. and the domain of information flow When the number of circulations reaches When the time is right, automatic deletion is triggered and the deletion operation is performed.

[0122] S13: Configure automatic deletion of configuration information via global synchronization. During the flow of information between domains, a synchronization is performed each time the information flows, ensuring consistency in the automatic deletion of configuration information across all domains.

[0123] S203: First transfer and / or synchronization configuration information and signature verification information.

[0124] In information Configuration information is sent to the first information propagation domain. Previously, the first processor 10 would sign it to generate the final signature certificate pair. .

[0125] The first processor 10 will send information Configuration information and signature certificate pair All information propagation domains are simultaneously sent to the second processor 20. The first processor 10 will send the information... Configuration information and signature certificate pair The first information propagation domain is simultaneously sent to the second processor 20. First information dissemination domain The signature is verified using a signature verification algorithm. Valid, meaning the received information is indeed from the sender's source domain. The authenticity of the signature result can be highly trusted, and the information... The configuration information has not been tampered with. Once the configuration information is deemed valid, it can be stored.

[0126] S31: After receiving the information, the first information propagation domain Generate new copies .

[0127] S32: Automatic deletion method based on trusted counting:

[0128] Information source domain From the transmission chain Query the location of all current replicas and display the configuration information. Synchronize to the corresponding domain. For example, the information source domain. From the transmission chain Query the location of all current replicas and display the configuration information. Synchronize to the first information propagation domain .

[0129] When information flows through and is stored in various domains, if the number of flows reaches the set maximum number of flows, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0130] That is, when information is in the first information propagation domain When a transfer occurs and the data is retained, if the number of transfers reaches the set maximum number of transfers, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0131] S204: Secondary transfer and / or synchronization configuration information and signature verification information.

[0132] S41: After receiving the information, the second information propagation domain Generate new copies .

[0133] Information source domain From the transmission chain Query the location of all current replicas and display the configuration information. Synchronize to the second information dissemination domain When a new replica is generated, the number of iterations will change, and all domains must synchronize and update their configuration information. All configuration information includes the number of iterations. Information flow domain All .

[0134] S42: When information is in the second information propagation domain When a transfer occurs and data is retained, if the retention time reaches the set time or the number of transfers reaches the set maximum number of transfers, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0135] S205: Nth transfer and / or synchronization configuration information and signature verification information.

[0136] S51: After receiving the information, the Nth information propagation domain Generate new copies .

[0137] Nth Information Dissemination Domain Generate new copies And at the same time generate the corresponding configuration information. . The number of transfers included is Information flow domain China will also add This element. When a new copy is generated, the number of iterations will change, and all domains must synchronize and update their configuration information. The number of iterations included in all configuration information is... Information flow domain All new .

[0138] S206: Information Dissemination Domain New configuration information Send to the source domain In the information source domain Through the transmission chain Query all copies Location And synchronize the configuration information, so that the number of transfers in the configuration information corresponding to the non-domain replica is updated to... Information flow domain New information dissemination domain ; thereby enabling other copies Corresponding configuration information All the number of transfers contained therein becomes Information flow domain All new additions .

[0139] S52: When information is in the Nth information propagation domain When a transfer occurs and the data is retained, if the number of transfers reaches the set maximum number of transfers, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0140] Preferably, the steps to trigger automatic deletion and perform deletion operation after the number of circulations reaches the set maximum number of circulations include:

[0141] When a copy of one of the domains The flow then transfers to the Nth information propagation domain. At that time, the Nth information propagation domain New copies will be generated. And at the same time generate the corresponding configuration information. . The number of transfers included is Information flow domain China will also add This element. Simultaneously, the information dissemination domain. New configuration information Send to the source domain In the information source domain Through the transmission chain Query all copies Location And synchronize the configuration information, so that the number of transfers in the configuration information corresponding to the non-domain replica is updated to... Information flow domain New information dissemination domain Regardless of which domain generates a new replica, the configuration information will first be sent back to the source domain, because only the source domain can access the propagation chain P. Then, the source domain is used to update and synchronize the configuration information, thereby enabling other replicas to access the same information. Corresponding configuration information All the number of transfers contained therein becomes Information flow domain All new additions .

[0142] Whenever a copy is transferred, the transfer count configuration information will be synchronized in this way. When the transfer count in the transfer count configuration information reaches zero, an automatic deletion operation will be triggered, and the corresponding information and all its copies will be automatically deleted.

[0143] Example 3

[0144] This embodiment is a further improvement on embodiment 1 or embodiment 2, and repeated content will not be described again.

[0145] Figure 4 This is a schematic diagram of the (i+1)th flow state process based on trusted counting in this invention.

[0146] S301: At least one user terminal 30 sends information to the first processor 10.

[0147] S302: Configure automatic deletion based on usage count.

[0148] In response to the information receiving behavior, the first processor 10 is configured to set configuration information and trigger conditions related to automatic deletion.

[0149] When information Reaching the information source domain The configuration information will be set later. This includes the maximum number of transfers allowed. and the domain of information flow .

[0150] S11: Standardize the definition of various data structures.

[0151] S12: Set the trigger conditions for automatic deletion.

[0152] S121: Set initial trigger conditions, set valid number of cycles. ;

[0153] S122: Configuration information for automatic deletion based on trusted counting. This information can be circulated a maximum of [number] times. and the domain of information flow When the number of circulations reaches When the time is right, automatic deletion is triggered and the deletion operation is performed.

[0154] S13: Configure automatic deletion of configuration information via global synchronization. During the flow of information between domains, a synchronization is performed each time the information flows, ensuring consistency in the automatic deletion of configuration information across all domains.

[0155] S303: Configuration information for the (i+1)th transfer and / or synchronization, as well as signature verification information.

[0156] In information Configuration information in the information propagation domain Send to a new information dissemination domain Previously, the information dissemination domain It will be signed, generating a final signing certificate pair. Information dissemination domain The signature is verified using a signature verification algorithm. Valid, meaning the received information is indeed within the sender's information propagation domain. The authenticity of the signature result can be highly trusted, and the information... The configuration information has not been tampered with. Once the configuration information is deemed valid, it can be stored.

[0157] The (i+1)th information propagation domain Send configuration information to the domain where other replicas reside. .

[0158] S51: After receiving the information, the (i+1)th information propagation domain Generate new copies .

[0159] S52: Automatic deletion method based on trusted counting:

[0160] Information source domain From the transmission chain Query the location of all current replicas and display the configuration information. Synchronize to all domains. All configuration information needs to be updated. For example, the source domain. From the transmission chain Query the location of all current replicas and display the configuration information. Synchronize to the (i+1)th information propagation domain At this time, the configuration information for information in other domains is... All configuration information contains the number of times. Information flow domain All .

[0161] That is, when information is in the (i+1)th information propagation domain When a transfer occurs and the data is retained, if the number of transfers reaches the set maximum number of transfers, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0162] S304: Secondary flow and / or synchronization configuration information and signature verification information. For example, the (i+1)th information propagation domain. Transfer and / or synchronize configuration information and signature verification information to the i-th information propagation domain ...First Information Dissemination Domain .

[0163] Information source domain From the transmission chain Query the location of all current replicas and display the configuration information. Synchronize to all propagation domains. The number of times is included in all configuration information. Information flow domain .

[0164] Preferably, the steps to trigger automatic deletion and perform deletion operation after the number of circulations reaches the set maximum number of circulations include:

[0165] When the information dissemination domain copy The flow then transfers to the (i+1)th information propagation domain. At that time, the (i+1)th information propagation domain New copies will be generated. And at the same time generate the corresponding configuration information. . The number of transfers included is Information flow domain China will also add This element. Whenever a replica is transferred, the transfer count configuration information will be synchronized in this way. All domains must update their configuration information synchronously. When the transfer count in the transfer count configuration information reaches zero, an automatic deletion operation will be triggered, and the corresponding information and all its replicas will be automatically deleted.

[0166] S306: Simultaneous Information Transmission Domain New configuration information Send to the source domain In the information source domain Through the transmission chain Query all copies Location And synchronize the configuration information, so that the number of transfers in the configuration information corresponding to the non-domain replica is updated to... Information flow domain New information dissemination domain ; thereby enabling other copies Corresponding configuration information All the number of transfers contained therein becomes Information flow domain All new additions .

[0167] S42: When information is in the i-th information propagation domain When a transfer occurs and the data is retained, if the number of transfers reaches the set maximum number of transfers, the automatic deletion condition will be triggered and the deletion operation will be performed.

[0168] S305: The second processor 20 feeds back the configuration information and signature verification information to the information source domain in the first processor 10. This makes the information source domain Update the number of transfers and the transfer domain.

[0169] Compared to automatic deletion methods based on time synchronization, automatic deletion methods based on trusted counting have the following advantages:

[0170] First, fine-grained control: The trusted-time-based automatic deletion method can apply different deletion strategies to different types of data. For example, the deletion cycle can be set differently based on factors such as data sensitivity, importance, or legal compliance requirements, thereby achieving fine-grained control over the data.

[0171] Second, data security: Trusted deletion-based automatic deletion methods can help ensure data security. Timely deletion of no longer needed data reduces the risk of unnecessary data exposure and leakage, thereby mitigating data security risks.

[0172] Third, automated management: The trusted counting-based automatic deletion method automates data management. By monitoring and statistically analyzing the number of data accesses and uses, data deletion is automatically triggered, reducing manual workload and improving data management efficiency.

[0173] Compared to time-synchronization-based automatic deletion methods, the trusted counting-based automatic deletion method offers greater fine-grained control, improves data security, and enables automated management, making it suitable for more complex and diverse data management needs.

[0174] Furthermore, the automatic deletion method based on time synchronization and the automatic deletion method based on trusted counting in this invention can run simultaneously. If they run simultaneously, the one that is triggered first will be executed first.

[0175] It should be noted that the specific embodiments described above are exemplary. Those skilled in the art can devise various solutions inspired by the disclosure of this invention, and these solutions all fall within the scope of this invention and its protection. Those skilled in the art should understand that this specification and its accompanying drawings are illustrative and not intended to limit the scope of the claims. The scope of protection of this invention is defined by the claims and their equivalents. This specification contains multiple inventive concepts; terms such as "preferredly," "according to a preferred embodiment," or "optionally" indicate that the corresponding paragraph discloses an independent concept. The applicant reserves the right to file divisional applications based on each inventive concept.

Claims

1. A method for automatic deletion of information based on time synchronization and trusted counting, characterized in that, The method comprises at least: standardizing the definition of various data structures, including at least configuration information; setting a trigger condition for automatic deletion of information, including an automatic deletion condition based on time synchronization and / or an automatic deletion condition based on trusted counting; keeping the configuration information synchronized between domains; in the case where information transfer data triggers the trigger condition, the information source domain and / or the information propagation domain perform automatic deletion of information; wherein, in the case where information transfer data triggers the trigger condition, the information source domain and / or the information propagation domain perform the steps of configuration information synchronization and automatic deletion of information, comprising at least: In the case of automatic deletion of information based on trusted counts, when a copy of one of the domains is deleted... The flow to the information dissemination domain occurs again. At that time, the information dissemination domain Generate new copies And at the same time generate the corresponding configuration information. Configuration information Update the number of times Information flow domain New Information Dissemination Domain in China ; Information dissemination domain New configuration information Send to the source domain In the information source domain Through the transmission chain Query all copies Location And synchronize the configuration information, so that the number of transfers in the configuration information corresponding to the non-domain replica is updated to... Information flow domain New information dissemination domain ; triggering the automatic deletion condition when the transfer count in the configuration information is zero, and the corresponding information and its copies will be automatically deleted.

2. The method for automatic deletion of information based on time synchronization and trusted counting according to claim 1, characterized in that, The method further comprises: establishing a log record to record the automatic deletion process information.

3. The method for automatic deletion of information based on time synchronization and trusted counting according to claim 1 or 2, characterized in that, The step of standardizing the definition of various data structures comprises at least: the information source domain generates corresponding configuration information based on the obtained information, when the information is sent to at least one information propagation domain, the information propagation domain generates a new information copy.

4. The method for automatic deletion of information based on time synchronization and trusted counting according to claim 3, wherein, in the case of time synchronization, the configuration information at least includes a set deletion time; in the case of trusted counting, the configuration information at least includes the number of times the information can be transferred and the transfer domain of the information.

5. The method for automatic deletion of information based on time synchronization and trusted counting according to claim 1, characterized in that, The automatic deletion condition based on time synchronization comprises at least: when the preset expiration time is the same as the global system time determined by the time synchronization of the information through each domain, each domain performs automatic deletion of information; The automatic deletion condition based on trusted counting comprises at least: when the transfer count of the information is equal to the preset transferable count, each domain performs automatic deletion of information.

6. The method for automatic deletion of information based on time synchronization and trusted counting according to claim 5, characterized in that, In the case where information transfer data triggers the trigger condition, the information source domain and / or the information propagation domain perform the steps of configuration information synchronization and automatic deletion of information, comprising at least: In case of automatic deletion of information based on time synchronization, when information is deleted by the information source domain The information source domain will query the current copy location from the propagation chain and synchronize the configuration information into the information propagation domain; In case the copy is again routed, the information propagation domain is generated anew and the corresponding configuration information is generated synchronously ; At global system time The automatic deletion condition is triggered in case the pre-set expiration time is reached, the information and all its copies will be automatically deleted.

7. The method for automatic deletion of information based on time synchronization and trusted counting according to claim 2, characterized in that, The step of establishing a log record to record the automatic deletion process information comprises at least: generating process data structure information during information transfer; generating trigger data structure information after the information triggers the automatic deletion trigger condition, after the information is automatically deleted, saving the corresponding process data structure information and / or trigger data structure information as operation logs.

8. A time synchronization and trusted counting-based automatic information deletion system, characterized in that, comprising at least a first processor (10) and a second processor (20), The first processor (10) standardizes the definition of various data structures, including at least configuration information; The first processor (10) sets a trigger condition for automatic deletion of information, including an automatic deletion condition based on time synchronization and / or an automatic deletion condition based on trusted counting; the configuration information is kept synchronized between the first processor (10) and the second processor (20); in the case where information transfer data triggers the trigger condition, the information source domain in the first processor (10) and / or the information propagation domain in the second processor (20) perform automatic deletion of information; In the case that the information flow transfer data triggers the trigger condition, the information source domain and / or the information propagation domain perform the steps of configuring information synchronization and automatic deletion of information, at least including: In the case of automatic deletion of information based on trusted counts, when a copy of one of the domains is deleted... The flow to the information dissemination domain occurs again. At that time, the information dissemination domain Generate new copies And at the same time generate the corresponding configuration information. Configuration information Update the number of times Information flow domain New Information Dissemination Domain in China ; Information dissemination domain New configuration information Send to the source domain In the information source domain Through the transmission chain Query all copies Location And synchronize the configuration information, so that the number of transfers in the configuration information corresponding to the non-domain replica is updated to... Information flow domain New information dissemination domain ; When the transfer times in the configuration information are zero, the automatic deletion condition is triggered, and the corresponding information and its copies are automatically deleted.

9. The system of claim 8, wherein, The first processor (10) or the second processor (20) establishes a log record to record the automatic deletion process information.

Images