A network isolation method for copying and pasting across terminals

Abstract

The present invention relates to the field of communication technology, and in particular to a network isolation method for cross-terminal copy and paste. The user identity is verified through a multi-level authentication mechanism to ensure that only authorized users can perform copy and paste operations; the copied and pasted content is encrypted and divided into multiple independent data packets for transmission, and each data packet uses a different encryption key to enhance data security; a role-based access control strategy is adopted to limit the operation authority for specific data according to user roles and permissions; a temporary access token is assigned for each copy and paste operation to increase the security of the operation; the server implements a content review and filtering mechanism before content transmission to effectively filter sensitive information; and a detailed operation log is recorded and audited. The present invention improves the flexibility and efficiency of operations while protecting data security by improving the security and privacy protection of cross-terminal copy and paste operations, improving access control and temporary access mechanisms.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a network isolation method for cross-terminal copy and paste. Background Art

[0002] With the rapid development of information technology, various devices (such as personal computers, smartphones, and tablets) play an increasingly important role in people's daily lives and work. These devices are interconnected through different operating systems and platforms, providing great convenience for users. Although data sharing and information transmission between devices have become a norm, cross-terminal copy and paste operations, especially in a network-isolated environment, still face major technical challenges. At present, there are still the following problems: the existing cross-terminal copy and paste technology lacks sufficient security measures and cannot effectively prevent unauthorized access and data leakage. This is mainly manifested in two aspects: first, the identity authentication mechanism is not strict enough, which is prone to identity impersonation and unauthorized access; second, the data is not encrypted during transmission or the encryption measures are weak, which is easy to be intercepted and cracked; in addition, the existing technology lacks an effective content review and filtering mechanism, and cannot automatically detect and filter sensitive information before copy and paste operations, which increases the risk of sensitive information being accidentally leaked or maliciously spread. Summary of the invention

[0003] In order to solve the above problems, the present invention provides a network isolation method for cross-terminal copy and paste.

[0004] To achieve the above object, the technical solution adopted by the present invention is:

[0005] A network isolation method for cross-terminal copy and paste includes the following steps:

[0006] Before the client and the server interact, the user's identity is verified through a multi-level authentication mechanism, and the client includes a source terminal and a target terminal;

[0007] Encrypting the copied and pasted content to be transmitted and dividing it into a number of independently encrypted data packets for transmission, wherein the data packets use different encryption keys;

[0008] Implement role-based access control policies to restrict copy and paste permissions to specific data based on the user's role and permissions;

[0009] A temporary access token is allocated for each copy and paste operation, and the temporary access token automatically becomes invalid after the operation is completed or the time expires;

[0010] Before content transmission, the server detects and filters sensitive information through content review and filtering mechanisms;

[0011] Detailed operation logs are recorded and audited, including the operation time, operator, source terminal and target terminal information, and a summary of the transmission content.

[0012] Furthermore, the multi-level authentication mechanism includes two-factor authentication and biometric technology, and the two-factor authentication includes a text message verification code, an email verification code and / or a dynamic password generated by an application.

[0013] Furthermore, the operation process of copying and pasting the content includes the following steps:

[0014] When the source terminal performs data replication, it implements tagging and classification strategies on the data, encrypts the data based on its sensitivity, and transmits it securely to the server.

[0015] The data is encrypted and hashed by the server and a temporary, unique identification code is assigned to it;

[0016] The target terminal performs a secondary verification before the paste operation. After passing the verification, the target terminal uses the unique identification code to initiate a data request to the server;

[0017] The server responds to the request and sends the encrypted data to the target terminal. The target terminal dynamically decrypts the data according to the key and completes the paste operation after performing a security check.

[0018] Furthermore, the method of encrypting the copied and pasted content to be transmitted and dividing it into a plurality of independently encrypted data packets for transmission includes the following steps:

[0019] Initialize the data packet processing environment, select an encryption algorithm and dynamically generate an encryption key set according to a preset security policy; the encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm;

[0020] The copied and pasted content is divided into data block sizes, each data block is encrypted independently, and several encrypted data packets are generated. Each data packet is accompanied by a key index for subsequent decryption;

[0021] Digitally sign each encrypted data packet and send the encrypted data packet to the server.

[0022] Furthermore, the data packet specifically includes a reverse tracking and self-destruction mechanism, which can be immediately activated when the data is illegally tampered with or accessed without authorization, quickly locate the source of the problem, and self-destruct the sensitive data.

[0023] Furthermore, the role-based access control strategy specifically adopts a dynamic permission allocation mechanism to dynamically adjust the user's permission settings according to the current operating environment and security assessment results, and implements fine-grained access control by configuring the access control strategy.

[0024] Furthermore, the temporary access token is dynamically generated on the server side through a hash encryption algorithm, and the hash encryption algorithm is based on the current timestamp, the user session identifier and a random number. Before the token is used for copy and paste operations, the server side verifies the token, and the verification includes verifying the validity of the token and checking the matching of the token with the requester's identity and the requesting terminal.

[0025] Furthermore, the server detects and filters sensitive information through a content review and filtering mechanism, including the following steps:

[0026] After receiving the copy request initiated by the source terminal, the server starts the content review and filtering mechanism. The content review and filtering mechanism is based on natural language processing technology and machine learning algorithms to conduct in-depth analysis of the copied content and identify data containing sensitive words, illegal information and potential security threats;

[0027] Once sensitive information is detected, the server implements different levels of processing strategies, including blocking of content, modification suggestions, or complete refusal of transmission;

[0028] After filtering, the server feeds back the processing results and related security suggestions to the source terminal;

[0029] The server records the detailed process and results of each content review.

[0030] Furthermore, the data transmission between the client and the server adopts a distributed network architecture, which processes and forwards data through multiple geographically dispersed server nodes. The server adopts a cloud-based backup and recovery strategy to regularly back up all transmitted copy and paste content and operation logs.

[0031] The beneficial effects of the present invention are:

[0032] The present invention verifies the user identity through a multi-level authentication mechanism to ensure that only authorized users can perform copy and paste operations and prevent unauthorized access. In addition, the copy and paste content is encrypted and divided into several independent data packets, using different encryption keys, which greatly improves the security of data during transmission and reduces the risk of data being intercepted and cracked.

[0033] The role-based access control strategy in the present invention can accurately control the copy and paste permissions of different users to specific data, ensuring that only authorized users can access sensitive information. Such fine-grained access control improves the compliance of data use and helps avoid internal data abuse. The content review and filtering mechanism on the server side can effectively detect and filter sensitive information, protect user privacy, and prevent the inadvertent leakage or malicious spread of sensitive information. Despite the addition of multiple security measures, the user experience has not been significantly affected. Users can copy and paste content between different terminals safely and conveniently without worrying about data security issues. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 It is a flow chart of a network isolation method for cross-terminal copy and paste of the present invention.

[0035] Figure 2 It is a flow chart of the process of copying and pasting content in the present invention.

[0036] Figure 3 It is a flowchart of step S5 provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0037] See also Figure 1-3 As shown, the present invention relates to a network isolation method for cross-terminal copy and paste.

[0038] Example

[0039] A network isolation method for cross-terminal copy and paste includes the following steps:

[0040] S1: Before the client and the server interact, the user identity is verified through a multi-level authentication mechanism, and the client includes a source terminal and a target terminal; the multi-level authentication mechanism includes two-factor authentication and biometric technology, and the two-factor authentication includes a text message verification code, an email verification code and / or a dynamic password generated by an application; the data transmission between the client and the server adopts a distributed network architecture, and the distributed network architecture processes and forwards data through multiple geographically dispersed server nodes. The server adopts a cloud-based backup and recovery strategy to regularly back up all transmitted copy-paste content and operation logs.

[0041] Specifically, the user starts the source terminal device, and the system prompts the user to authenticate through two-factor authentication. This includes entering the username and password (first factor) and receiving and entering a text message verification code, email verification code, or dynamic password generated by the application (second factor). After completing the two-factor authentication, the system will prompt the user to perform biometric authentication, such as fingerprint scanning, facial recognition, or voiceprint recognition, to further enhance security. After successful authentication, the system establishes a connection with the server through a secure channel. This connection utilizes a distributed network architecture to process and forward data through multiple geographically dispersed server nodes, enhancing the stability and security of data transmission. The server regularly backs up all copy-and-paste content and operation logs transmitted through this channel according to the cloud backup and recovery strategy to ensure the recoverability of the data.

[0042] It should be noted that the server supports multi-threading and can realize multi-client connection. Each connection is an independent session with an independent session ID. The same user can run the client program on multiple devices and receive information at the same time, realizing one-to-many information sending and receiving. The number of connections can be limited by configuration. The client uses mutex technology to limit a device to run only one client program to avoid conflicts. The system can use VPN technology to exchange information with the intranet remotely to achieve copy and paste, which is convenient for remote office needs.

[0043] S2: Encrypt the copied and pasted content to be transmitted and divide it into several independently encrypted data packets for transmission, wherein the data packets use different encryption keys;

[0044] The copy and paste process includes the following steps:

[0045] When the source terminal performs data replication, it implements tagging and classification strategies on the data, encrypts the data based on its sensitivity, and transmits it securely to the server.

[0046] The data is encrypted and hashed by the server and a temporary, unique identification code is assigned to it;

[0047] The target terminal performs a secondary verification before the paste operation. After passing the verification, the target terminal uses the unique identification code to initiate a data request to the server;

[0048] The server responds to the request and sends the encrypted data to the target terminal. The target terminal dynamically decrypts the data according to the key and completes the paste operation after performing a security check.

[0049] Specifically, when the user performs a copy operation, the source terminal first marks the selected data content. This step involves a quick analysis of the data to identify the data category (such as text, pictures, tables, etc.) and sensitivity (such as public, internal use, confidential, etc.). Based on the identification of sensitivity, the encryption level to be adopted is determined. According to the sensitivity of the data, the source terminal selects the appropriate encryption algorithm and key strength for encryption processing. For example, for confidential data, a stronger encryption algorithm (such as 256-bit AES) and a complex key generation strategy may be used. The source terminal divides the data into small blocks and encrypts each data block independently. This split encryption strategy not only helps to improve the efficiency of data transmission, but also increases data security, because even if a single data packet is intercepted, the complete data content cannot be restored.

[0050] The server receives encrypted data packets from the source terminal and performs cryptographic hashing on each data packet to ensure data integrity and tamper-proofing. For each received data block or entire data set, the server generates a temporary, unique identification code. This identification code is used for authentication and data retrieval when the target terminal requests data. The server securely stores the encrypted data packets and associates them with the corresponding unique identification code. The server also needs to manage the life cycle of this data to ensure that the data is not stored indefinitely in compliance with data protection regulations.

[0051] When the target terminal user attempts to paste the data, the system first performs a secondary verification to ensure that the requester has permission to access and paste the data. This may involve a password, biometric verification, or other forms of identity verification. After passing the verification, the target terminal uses the previously assigned unique identification code to initiate a data request to the server. This request includes the identification code and evidence of the verification, such as a digital signature or token.

[0052] After receiving the data request, the server first verifies the legitimacy of the request, including checking the validity of the unique identification code and the authority of the requester. After the verification is passed, the server sends the encrypted data packet to the target terminal. After the target terminal receives the encrypted data packet, it uses the corresponding key index to find the corresponding decryption key and decrypts the data packet. The decrypted data is security-checked before pasting, including verifying the integrity of the data and anti-tampering checks. After the security check is passed, the data is pasted into the target application. This process ensures that the data transmission from the source terminal to the target terminal is secure and encrypted, and only authorized users can access and paste the data.

[0053] Furthermore, step S2 specifically includes the following steps:

[0054] S21: Initialize the data packet processing environment, select an encryption algorithm and dynamically generate an encryption key set according to a preset security policy; the encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm;

[0055] It should be noted that the security policy includes encryption standard selection, key management policy, access control and user identity authentication, data segmentation and transmission security, etc.;

[0056] The system selects the appropriate encryption algorithm based on the preset security policy. For scenarios that require high-speed transmission, a symmetric encryption algorithm such as AES (Advanced Encryption Standard) may be selected; for scenarios that need to ensure data transmission security, an asymmetric encryption algorithm such as RSA or ECC (Elliptic Curve Cryptography) may be used.

[0057] The system dynamically generates a set of encryption keys for each session or each transmission. This is achieved through a key generation algorithm to ensure the uniqueness and security of each data transmission. For symmetric encryption, the same key is generated for encryption and decryption; for asymmetric encryption, a pair of public and private keys is generated.

[0058] S22: dividing the copied and pasted content according to the size of the data blocks, encrypting each data block independently, and generating a number of encrypted data packets, each of which is accompanied by a key index for subsequent decryption;

[0059] It should be noted that the copied and pasted content is first divided into data blocks of predefined size. This step is to optimize the efficiency of encryption processing and enhance data security. The size of the data block can be adjusted according to the characteristics of the encryption algorithm and the needs of network transmission. Each data block is encrypted independently to generate a corresponding encrypted data packet. This process is performed using a key from a dynamically generated encryption key set. Each data packet is accompanied by a key index when encrypted so that the corresponding key can be quickly found when decrypted.

[0060] S23: digitally sign each encrypted data packet and send the encrypted data packet to the server; the data packet specifically includes a reverse tracking and self-destruction mechanism, which can be immediately activated when the data is illegally tampered with or unauthorizedly accessed, quickly locate the source of the problem, and self-destruct sensitive data;

[0061] Specifically, a digital signature is implemented for each encrypted data packet to ensure the integrity of the data packet and the verification of the source. The digital signature is completed using the sender's private key, and the receiver can use the sender's public key to verify the validity of the signature. After encryption and signing, the encrypted data packet is sent to the server through a secure communication channel. During the transmission process, each data packet also includes reverse tracking information and related codes or identifiers of the self-destruction mechanism. When the data packet is illegally tampered with or unauthorized access is encountered, the system can quickly locate the source of the problem and help prevent further data leakage or damage in time. When an illegal access or tampering attempt is detected, the sensitive data packet can automatically execute the data destruction procedure to protect the data content from being illegally obtained.

[0062] S3: Implement a role-based access control strategy to limit the copy and paste permissions for specific data based on the user's role and permissions; the role-based access control strategy specifically adopts a dynamic permission allocation mechanism to dynamically adjust the user's permission settings based on the current operating environment and security assessment results, and implements fine-grained access control by configuring the access control strategy.

[0063] Specifically, the system monitors the operating environment in real time, such as device security status, network connection security level, and time information. Based on these environmental factors, the system may adjust the user's permissions. For example, when an insecure network connection is identified, the system may restrict access to sensitive data. Through regular security assessments and risk analysis, the system can identify new threats and vulnerabilities. Based on these assessment results, the system dynamically adjusts the role's permission settings to ensure that data security is not threatened. By implementing fine-grained access control, the system can more accurately control user operations on data. This includes control over operations such as copying, pasting, editing, and deleting, ensuring that only authorized users can perform specific operations. By configuring access control policies, the administrator will check whether the user's role has the permission to perform the operation when the user attempts to copy and paste. This check takes into account the user's current role, operating environment, and security assessment results. All permission check decisions and user operations are recorded. This provides a complete audit trail for the system, facilitating subsequent audits and analysis to ensure the effectiveness and compliance of access control policies.

[0064] S4: a temporary access token is allocated for each copy and paste operation, and the temporary access token automatically becomes invalid after the operation is completed or the time expires;

[0065] The temporary access token is dynamically generated by a hash encryption algorithm on the server side. The hash encryption algorithm is based on the current timestamp, the user session identifier, and a random number. Before the token is used for copy and paste operations, the server side verifies the token. The verification includes verifying the validity of the token and checking the matching of the token with the requester's identity and the requesting terminal.

[0066] Specifically, when the user passes the aforementioned multi-level authentication and meets the permission requirements for copy and paste operations, the system enters the token generation phase. The system automatically collects the current timestamp, user session identifier, and a randomly generated number. These data together serve as the basic input for token generation to ensure the uniqueness and unpredictability of each token. The system uses a secure hash algorithm (such as SHA-256) to encrypt the above collected data and generate a unique temporary access token. The choice of hash algorithm is intended to ensure the security of the token and prevent the original data from being deduced through reverse engineering. The generated token is equipped with a clear validity period, such as 5 minutes or adjusted according to the complexity of the operation. Once the validity period expires, the token automatically becomes invalid and can no longer be used for any operation.

[0067] When users perform copy and paste operations, they need to submit the previously obtained temporary access token to the server. The server first checks whether the token is within the validity period. Expired tokens will be rejected directly. The server further verifies whether the submitted token matches the current user's session identifier to ensure that the token is held by the operation requester himself. The server also verifies whether the token matches the terminal device that initiated the request to prevent the token from being intercepted and abused on other devices. Only when all verification steps are passed will the user's copy and paste operation be executed. Any verification failure will result in the operation being rejected, and the system may also record a security incident for subsequent security analysis and auditing.

[0068] S5: Before content transmission, the server detects and filters sensitive information through content review and filtering mechanism;

[0069] Wherein, step S5 specifically includes the following steps:

[0070] S51: After receiving the copy request initiated by the source terminal, the server starts a content review and filtering mechanism, which performs in-depth analysis on the copied content based on natural language processing technology and machine learning algorithms to identify data containing sensitive words, illegal information, and potential security threats;

[0071] Specifically, the server receives a copy request from the source terminal through a secure API endpoint. This request usually includes the user's authentication information, the specific content to be copied, and possible contextual information (such as application identification, timestamp, etc.). The server first verifies the legitimacy of the request and confirms that the source of the request is an authenticated user and its corresponding source terminal. This may involve checking the user's token, session ID, or using SSL / TLS certificates to ensure communication security. The server dynamically selects appropriate content review and filtering policies based on the type and content of the request. For example, if the content is text, the NLP processing process for the text is started; if the content contains pictures, the image recognition process may need to be started. Load the necessary processing models and algorithms. This may include loading pre-trained natural language processing models, sensitive vocabulary databases, and violation information identification rules.

[0072] Natural language processing (NLP) preprocesses text content, including noise removal (such as HTML tags, special characters, etc.), word segmentation, part-of-speech tagging, semantic role tagging, and other steps. This helps improve the accuracy of subsequent analysis. Use contextual information to understand the true meaning of the text. For example, the same word may have different meanings in different contexts. Through deep semantic analysis, the system can more accurately identify truly sensitive information.

[0073] Use machine learning models to identify sensitive words, illegal information, and potential security threats. These models may be rule-based classifiers, decision trees, support vector machines (SVMs), deep learning models, etc. The system uses new data to continuously train and adjust the model to adapt to new expressions and emerging sensitive information types. This self-learning ability enables the content review mechanism to continuously adapt to changing environments and standards.

[0074] Combining the analysis results of NLP and machine learning, the system makes a comprehensive judgment on the text and identifies sensitive information and illegal content. The system takes corresponding measures for the identified content according to the preset policies and rules. This may include directly blocking sensitive words, providing modification suggestions, marking potential legal risks, etc.

[0075] S52: Once sensitive information is detected, the server implements different levels of processing strategies, including blocking of content, modification suggestions, or complete rejection of transmission;

[0076] S53: After filtering, the server feeds back the processing result and related security suggestions to the source terminal;

[0077] S54: The server records the detailed process and results of each content review.

[0078] S6: Record and audit detailed operation logs, including operation time, operator, source terminal and target terminal information, and transmission content summary.

[0079] It should be noted that the operator identification records the identity of the user performing the operation, including the user ID, user name or other information that can uniquely identify the user.

[0080] Source terminal information: records detailed information about the terminal device that initiated the operation, such as device ID, IP address, geographic location, operating system version, etc.

[0081] Target terminal information: If the operation involves data transmission, record the detailed information of the target terminal receiving the data, including device ID, IP address, etc.

[0082] Transmit content summary: The copied and pasted content is hashed and its summary information is recorded instead of the full content to protect sensitive information from being leaked and facilitate future verification of the integrity and consistency of the content.

[0083] Operation result: record the success, failure or ongoing status of the operation, as well as the error code and error message in case of failure.

[0084] In summary, this application ensures that only verified users can perform copy and paste operations through a multi-level authentication mechanism (including two-factor authentication and biometric technology), greatly reducing the risk of unauthorized access. In addition, encrypted data transmission and regular backup of operation logs enhance the security and privacy protection of data during transmission and storage. Encrypted hashing and digital signing of transmitted data packets ensure the integrity of data during transmission and prevent tampering. By generating a temporary, unique identification code, data consistency and traceability are guaranteed.

[0085] This application implements a role-based access control strategy and a dynamic permission allocation mechanism, dynamically adjusting access rights according to the user's role and current operating environment, and achieving fine-grained control over data access. This helps prevent sensitive data from being inappropriately copied or pasted. It supports multi-threading and multi-client connections, allowing the same user to run client programs on multiple devices, achieving one-to-many information sending and receiving, which is very suitable for the needs of remote work.

[0086] This application adopts a distributed network architecture and data segmentation encryption strategy, which not only improves the efficiency of data transmission, but also increases the stability and security of the data transmission process. The content review and filtering mechanism can detect and filter sensitive information and reduce the risk of illegal information transmission. At the same time, the reverse tracking and self-destruction mechanism can quickly locate the source of the problem when the data is illegally tampered with or unauthorized access, and self-destruct sensitive data, thereby improving the system's resistance to high-risk environments. By recording detailed operation logs and conducting audits, the transparency and traceability of operations are ensured.

[0087] The above implementation modes are merely descriptions of the preferred implementation modes of the present invention, and are not intended to limit the scope of the present invention. Without departing from the design spirit of the present invention, various modifications and improvements made to the technical solutions of the present invention by ordinary engineering and technical personnel in the field shall fall within the protection scope determined by the claims of the present invention.

Claims

1. A network isolation method for cross-terminal copy and paste, characterized in that: The following steps are involved: Before the client and the server interact, the user's identity is verified through a multi-level authentication mechanism, and the client includes a source terminal and a target terminal; Encrypting the copied and pasted content to be transmitted and dividing it into a number of independently encrypted data packets for transmission, wherein the data packets use different encryption keys; Implement role-based access control policies to restrict copy and paste permissions to specific data based on the user's role and permissions; A temporary access token is allocated for each copy and paste operation, and the temporary access token automatically becomes invalid after the operation is completed or the time expires; Before content transmission, the server detects and filters sensitive information through content review and filtering mechanisms; Record and audit detailed operation logs, including operation time, operator, source and target terminal information, and a summary of the transmission content; The copy and paste process includes the following steps: When the source terminal performs data replication, it implements tagging and classification strategies on the data, encrypts the data based on its sensitivity, and transmits it securely to the server. The data is encrypted and hashed by the server and a temporary, unique identification code is assigned to it; The target terminal performs a secondary verification before the paste operation. After passing the verification, the target terminal uses the unique identification code to initiate a data request to the server; The server responds to the request and sends the encrypted data to the target terminal. The target terminal dynamically decrypts the data according to the key and completes the paste operation after performing a security check. Encrypt the copied and pasted content to be transmitted and split it into several independently encrypted data packets for transmission, including the following steps: Initialize the data packet processing environment, select an encryption algorithm and dynamically generate an encryption key set according to a preset security policy; the encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm; the security policy includes encryption standard selection, key management policy, access control and user identity authentication, data segmentation and transmission security; The copied and pasted content is divided into data block sizes, each data block is encrypted independently, and several encrypted data packets are generated. Each data packet is accompanied by a key index for subsequent decryption; A digital signature is implemented for each encrypted data packet, and the encrypted data packet is sent to the server; the data packet specifically includes a reverse tracking and self-destruction mechanism, which can be immediately activated when the data is illegally tampered with or unauthorizedly accessed, quickly locate the source of the problem, and self-destruct sensitive data. Specifically, a digital signature is implemented for each encrypted data packet, and the digital signature is completed using the sender's private key. The receiver uses the sender's public key to verify the validity of the signature. After encryption and signing, the encrypted data packet is sent to the server through a secure communication channel. During the transmission process, each data packet also includes reverse tracking information and related codes or logos of the self-destruction mechanism. When an illegal access or tampering attempt is detected, the sensitive data packet automatically executes a data destruction program to protect the data content from being illegally obtained; The server detects and filters sensitive information through content review and filtering mechanisms, including the following steps: After receiving the copy request initiated by the source terminal, the server starts the content review and filtering mechanism. The content review and filtering mechanism is based on natural language processing technology and machine learning algorithms to conduct in-depth analysis of the copied content and identify data containing sensitive words, illegal information and potential security threats; Once sensitive information is detected, the server implements different levels of processing strategies, including blocking of content, modification suggestions, or complete refusal of transmission; After filtering, the server feeds back the processing results and related security suggestions to the source terminal; The server records the detailed process and results of each content review; The multi-level authentication mechanism includes two-factor authentication and biometrics, wherein the two-factor authentication includes a text message verification code, an email verification code and / or a dynamic password generated by an application; The role-based access control strategy specifically adopts a dynamic permission allocation mechanism to dynamically adjust the user's permission settings according to the current operating environment and security assessment results, and implement fine-grained access control by configuring the access control strategy; The temporary access token is specifically dynamically generated by a hash encryption algorithm on the server side. The hash encryption algorithm is based on the current timestamp, the user session identifier, and a random number. Before the token is used for copy and paste operations, the server side verifies the token. The verification includes verifying the validity of the token and checking the matching of the token with the requester's identity and the requesting terminal. The data transmission between the client and the server adopts a distributed network architecture, which processes and forwards data through multiple geographically dispersed server nodes. The server adopts a cloud-based backup and recovery strategy to regularly back up all transmitted copy and paste content and operation logs.

Images