A user data intelligent collection and protection processing method based on the Internet of Things

Abstract

The present invention relates to the technical field of data collection and protection, and discloses a user data intelligent collection and protection processing method based on the Internet of Things, comprising: acquiring target transmission data, sending user data, and receiving user data, forming judgment data, judging whether there is a risk of leaking important files in the sent target transmission data, forming collection data for integrating and collecting the target transmission data, and transmitting the integrated and collected target transmission data to a receiving user device. The user data intelligent collection and protection processing method based on the Internet of Things judges whether it is a personal operation corresponding to the sending user account or the receiving user account according to the sending user's login account, the device used, and the operation habits before sending data, and according to the receiving user's login account and the device used, so as to ensure the security of the target transmission data sending process and the receiving process, and prevent the target transmission data from being leaked.

Description

Technical Field

[0001] The present invention relates to the technical field of data collection and protection, and in particular to a method for intelligent collection and protection of user data based on the Internet of Things. Background Art

[0002] The user data intelligent collection and protection processing method based on the Internet of Things is a method for security protection and collection of data generated by IoT devices. It can realize security protection and intelligent processing of data of IoT devices, so as to better meet the needs of users. It usually includes: device authentication, data collection, data security, data analysis, and access control, which can ensure the security and reliability of data, and can help users quickly and accurately obtain various information and improve the value of data utilization;

[0003] The existing method for intelligent collection and protection of user data based on the Internet of Things cannot determine whether the operation is performed by the sending user account according to the sending user's login account, the device used, and the operation process before sending the data, thereby determining whether there is a risk of file leakage in the target transmission data. It cannot determine whether the operation is performed by the receiving user account according to the receiving user's login account and the device used, thereby determining whether there is a risk of file leakage in the target transmission data. Summary of the invention

[0004] The present invention provides a user data intelligent collection and protection processing method based on the Internet of Things, which is used to promote the solution of the problems raised in the background technology.

[0005] The present invention provides the following technical solution: a method for intelligent collection and protection of user data based on the Internet of Things, comprising:

[0006] Acquire target transmission data, send user data, and receive user data;

[0007] According to the sending user data and the receiving user data, the judgment data is formed through the data judgment strategy to judge whether the sending target transmission data has the risk of leaking important files;

[0008] According to the target transmission data and the judgment data, the data collection strategy is used to form the collection data, so as to integrate and collect the target transmission data;

[0009] According to the collected data, the integrated and collected target transmission data is transmitted to the receiving user equipment.

[0010] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things described in the present invention, the data determination strategy specifically includes:

[0011] Acquire sending user data, wherein the sending user data includes a sending user account name;

[0012] Acquire receiving user data, wherein the receiving user data includes a receiving user account name;

[0013] Get system permission data;

[0014] Extract employee permissions dataset;

[0015] Extract the values ​​of the authority levels corresponding to the sending user account name and the receiving user account name in the employee authority data set respectively, and define them as the sending authority level value and the receiving authority level value, which are recorded as A1 and A2 respectively;

[0016] If the sending permission level value A1> the receiving permission level value A2, it is determined that the target transmission data leakage risk is low, and the system connects the transmission link between the sending user and the receiving user, the sending user sends the target transmission data, and the receiving user receives the target transmission data;

[0017] If the sending permission level value A1 ≤ the receiving permission level value A2, then the target transmission data leakage risk is determined to be high;

[0018] Execute the sending user data verification strategy;

[0019] Execute the target transmission data determination strategy.

[0020] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things of the present invention, the method of obtaining system authority data is specifically:

[0021] Obtaining all employee information within the system, the employee information includes employee name and employee number, the employee number is a unique number assigned by the system according to the order in which each employee joins the company;

[0022] According to the employee information of each employee, a corresponding employee account is established, wherein the employee account includes an employee account name and an employee account password;

[0023] Get the value of the position level corresponding to each employee in the system, denoted as B;

[0024] For all employees in the system, in the order of employee ID values ​​from small to large, extract the values ​​of the job levels of two employees and compare them, and record them as B1 and B2 respectively;

[0025] Set the judgment value;

[0026] If position level B1 - position level B2 < judgment value, then position level B1 is judged to have a high authority level and position level B2 has a low authority level;

[0027] Extract the employee information and employee account corresponding to position level B1, and set the employee account to the first authority level;

[0028] Extract the employee information and employee account corresponding to position level B2, and set the employee account to the second authority level;

[0029] If position level B1 - position level B2 > judgment value, then position level B2 is judged to have a high authority level and position level B1 has a low authority level;

[0030] Extract the employee information and employee account corresponding to position level B2, and set the employee account to the first authority level;

[0031] Extract the employee information and employee account corresponding to position level B1, and set the employee account to the second authority level;

[0032] Integrate all employee accounts corresponding to employee information and the permission levels corresponding to employee accounts into an employee permission data set.

[0033] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things of the present invention, the execution of the user data verification strategy specifically includes:

[0034] Obtain sending user equipment;

[0035] When the sending user sends the target transmission data, the system sends a first verification pop-up window to the sending user device, wherein the first verification pop-up window is a sending user verification pop-up window, including an interface for inputting an employee account name and an employee account password;

[0036] The sending user enters his employee account name and employee account password through the first verification pop-up window, which are defined as the sending verification account name and the sending verification account password, recorded as C11 and C12 respectively;

[0037] Extract the employee account and password of the employee account corresponding to the sending user account name in the employee authority data set, and define them as the sending user account and password. The sending user account name and the sending user account and password are recorded as C21 and C22 respectively.

[0038] If the sending verification account name C11 ≠ the sending user account name C21, and the sending verification account password C12 = the sending user account password C22, then it is determined that the sending user verification is wrong;

[0039] If the sending verification account name C11 = the sending user account name C21, and the sending verification account password C12 ≠ the sending user account password C22, then it is determined that the sending user verification is wrong;

[0040] If the sending verification account name C11 = the sending user account name C21, and the sending verification account password C12 = the sending user account password C22, then the sending user data is obtained, and the sending user data includes the sending user device IP address, which is defined as the sending user verification address, recorded as Z1;

[0041] Acquire sending user data, wherein the sending user data includes sending user account history data;

[0042] Obtaining historical data of a sending user account, wherein the historical data of a sending user account includes a historical sending IP address, which is defined as a historical sending address and is recorded as Z2;

[0043] If the sending user verification address Z1≠the historical sending address Z2, it is determined that the sending user verification is wrong;

[0044] If the sending user verification address Z1 = the historical sending address Z2, then the sending user operation verification strategy is executed;

[0045] If it is determined that the sending user verification is wrong, the system disconnects the transmission link between the sending user and the receiving user, and the sending user cannot send the target transmission data.

[0046] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things of the present invention, the execution of the user operation verification strategy specifically includes:

[0047] Get the time when the sending user sends the target transmission data, which is defined as the sending time point, recorded as T1;

[0048] Set the judgment time period, recorded as T2;

[0049] Calculate the starting judgment time point, recorded as T3, starting judgment time point T3 = sending time point T1 - judgment time period T2;

[0050] Taking the starting determination time point T3 as the starting time point and the sending time point T1 as the ending time point, a determination time interval is established, which is recorded as T4 (T3, T1);

[0051] Get the historical habit data of the sending user;

[0052] Extract historical time allocation data;

[0053] Extract historical time allocation ratios;

[0054] The operation time of the sending user in the determination time interval is obtained and is defined as the second operation time, which is recorded as T5;

[0055] Obtain the inactivity time of the sending user in the determination time interval, which is defined as the second rest time, recorded as T6;

[0056] Obtain the time distribution of the second operation time and the second rest time of the sending user in the determination time interval, which is defined as determination time distribution data and recorded as M2;

[0057] The determination time allocation data M2 also includes a determination time allocation ratio, recorded as Q2, where the determination time allocation ratio Q2 = the second operation time T5 ÷ the second rest time T6;

[0058] If the determination time allocation ratio Q2 is less than the historical time allocation ratio Q1×(1+5%), and the time allocation between the second operation time and the second rest time is the same as the time allocation between the first operation time and the first rest time, then it is determined that the determination time allocation data M2 has a high similarity with the historical time allocation data M1;

[0059] If the judgment time allocation ratio Q2> the historical time allocation ratio Q1×(1-5%), and the time allocation between the second operation time and the second rest time is the same as the time allocation between the first operation time and the first rest time, then it is determined that the judgment time allocation data M2 and the historical time allocation data M1 have a high similarity;

[0060] If the judgment time allocation ratio Q2> the historical time allocation ratio Q1×(1+5%), it is determined that the judgment time allocation data M2 has a low similarity with the historical time allocation data M1;

[0061] If the judgment time allocation ratio Q2 is less than the historical time allocation ratio Q1×(1-5%), it is determined that the judgment time allocation data M2 has a low similarity with the historical time allocation data M1;

[0062] If it is determined that the similarity between the determination time allocation data M2 and the historical time allocation data M1 is low, it is determined that the operation of the sending user during the determination time is inconsistent with the historical operation habits;

[0063] If it is determined that the time distribution data M2 is highly similar to the historical time distribution data M1, the time comparison strategy is executed.

[0064] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things of the present invention, the execution time comparison strategy specifically includes:

[0065] Obtain a second operation time T5 and a second rest time T6;

[0066] Set the time judgment value;

[0067] If the second operation time T5 - the second rest time T6 > the time determination value, then any file opened by the sending user within the determination time interval is extracted and determined as the target file;

[0068] Obtain the name, suffix, and department of the target file, and define them as the target name, target suffix, and target department respectively;

[0069] Extract all the departments that belong to the historical data of user operations sent and define them as historical departments;

[0070] Extract the attribution department in the historical departments that is the same as the target attribution department and define it as the historical attribution department;

[0071] Extract all file suffixes in the historically affiliated departments and define them as historical suffixes;

[0072] Extract the file suffix that is the same as the target suffix from the historical suffixes and set it as the historical file suffix;

[0073] Extract all file names under the suffix of historical files and define them as historical names;

[0074] Obtaining character encoding data corresponding to each historical name in computer character encoding data, and defining the data as historical character data;

[0075] Get the number of each historical character data respectively, recorded as I (I1, ..., In);

[0076] Sort all historical character data from large to small according to quantity I, and set the historical character data with the largest quantity I as the target judgment character data, denoted as J1;

[0077] Obtain the character encoding data corresponding to the target name in the computer character encoding data, and define it as the target character data, denoted as J2;

[0078] If the target character data J2 = the target determination character data J1, then all historical names containing the target determination character data J1 are extracted and defined as historical name data;

[0079] Extract all historical files corresponding to historical name data and set them as target historical files;

[0080] Extract the opening time of each target history file and set it as the first history opening time point, recorded as H1;

[0081] Extract the storage path of each target history file and set it as the history storage path;

[0082] Extracting the first storage location in each historical storage path;

[0083] Extract the opening time of the first storage location corresponding to each target history file, and set it as the second history opening time point, recorded as H2;

[0084] Calculate the opening time of each target historical file and set it as the historical file opening time, recorded as H3, the historical file opening time H3 = the first historical opening time point H1 - the second historical opening time point H2;

[0085] Get the number of target history files, denoted as K;

[0086] Calculate the average time to open the target history file, recorded as H4, average time H4 = the sum of the history file opening time H3 ÷ the number K;

[0087] Get the opening time of the target file, set it as the first opening time point, and record it as L1;

[0088] Extract the storage path of the target file and set it as the target storage path;

[0089] Retrieving a first storage location in the target storage path;

[0090] The opening time of the first storage location corresponding to the extracted target file is defined as the second opening time point, denoted as L2;

[0091] Calculate the opening time of the target file, set it as the target file opening time length, recorded as L3, the target file opening time length L3 = the first opening time point L1 - the second opening time point L2;

[0092] If the target file opening time L3 is less than the average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0093] If the target file opening time L3>average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0094] If the target file opening time L3>average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0095] If the target file opening time L3 is less than the average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0096] If the second operation time T5 - the second rest time T6 < the time determination value, then compare the target file opening time L3 with the average time H4;

[0097] If the target file opening time L3 is less than the average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0098] If the target file opening time L3>average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0099] If the target file opening time L3>average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0100] If the target file opening time L3 is less than the average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0101] If the sending user's operation does not match the historical operation habits within the determination time, the sending user's operation is determined to be risky;

[0102] If the sending user's operation is consistent with the historical operation habits within the determination time, the sending user's operation is determined to be risk-free;

[0103] If the sending user's operation is judged to be risky, the system disconnects the transmission link between the sending user and the receiving user, and the sending user cannot send the target transmission data;

[0104] If it is determined that the sending user's operation is risk-free, the system connects the transmission link between the sending user and the receiving user, and the sending user sends the target transmission data.

[0105] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things of the present invention, the method of obtaining and sending the historical habit data of the user is specifically:

[0106] Acquire sending user data, wherein the sending user data includes sending user operation history data;

[0107] Acquire sending user operation history data, wherein the sending user operation history data includes a history determination time interval;

[0108] Acquire sending user operation history data, wherein the sending user operation history data includes history file data;

[0109] The historical file data includes the name, suffix, and department to which the historical file belongs;

[0110] Obtain the operation time of the sending user in each historical determination time interval, which is defined as the first operation time and recorded as T7;

[0111] Obtain the inactivity time of the sending user in each historical determination time interval, which is defined as the first rest time and recorded as T8;

[0112] Obtain the time distribution of the first operation time and the first rest time of the sending user in each historical determination time interval, which is defined as historical time distribution data and recorded as M1;

[0113] The historical time allocation data M1 also includes a historical time allocation ratio, denoted as Q1, where the historical time allocation ratio Q1 = the first operation time T7 ÷ the first rest time T8.

[0114] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things of the present invention, the execution target transmission data determination strategy specifically includes:

[0115] Acquiring target transmission data, wherein the target transmission data includes an encrypted signal;

[0116] Acquire an encrypted signal of target transmission data, wherein the encrypted signal includes a first signal and a second signal;

[0117] If the encrypted signal of the target transmission data is the first signal, the receiving user receives the target transmission data;

[0118] If the encryption signal of the target transmission data is the second signal, executing the receiving user data verification strategy;

[0119] Obtain the verification result of the received user data;

[0120] If it is determined that the receiving user's authentication is wrong, the system disconnects the transmission link between the sending user and the receiving user, and the receiving user cannot receive the target transmission data;

[0121] If it is determined that the receiving user's authentication is correct, the system connects the transmission link between the sending user and the receiving user, and the receiving user receives the target transmission data.

[0122] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things of the present invention, the execution of the received user data verification strategy specifically includes:

[0123] Acquire receiving user equipment;

[0124] When the receiving user receives the target transmission data, the system sends a second verification pop-up window to the receiving user device, where the second verification pop-up window is a receiving user verification pop-up window, including an interface for inputting an employee account name and an employee account password;

[0125] The receiving user enters his employee account name and employee account password through the second verification pop-up window, and they are defined as the receiving verification account name and receiving verification account password, recorded as D11 and D12 respectively;

[0126] Extract the employee account and password of the employee account corresponding to the receiving user account name in the employee authority data set, and define them as the receiving user account and password. The receiving user account name and the receiving user account and password are recorded as D21 and D22 respectively.

[0127] If the receiving verification account name D11 ≠ the receiving user account name D21, and the receiving verification account password D12 = the receiving user account password D22, then it is determined that the receiving user verification is wrong;

[0128] If the receiving verification account name D11 = receiving user account name D21, and the receiving verification account password D12 ≠ receiving user account password D22, then it is determined that the receiving user verification is wrong;

[0129] If the receiving verification account name D11 = the receiving user account name D21, and the receiving verification account password D12 = the receiving user account password D22, then the receiving user data is obtained, and the receiving user data includes the receiving user device IP address, which is defined as the receiving user verification address, recorded as Y1;

[0130] Acquire receiving user data, wherein the receiving user data includes receiving user account history data;

[0131] Obtaining historical data of a receiving user account, wherein the historical data of the receiving user account includes a historical receiving IP address, which is defined as a historical receiving address and is recorded as Y2;

[0132] If the receiving user verification address Y1≠the historical receiving address Y2, it is determined that the receiving user verification is wrong;

[0133] If the receiving user verification address Y1 = the historical receiving address Y2, it is determined that the receiving user verification is correct.

[0134] As an optional solution of the method for intelligent collection and protection of user data based on the Internet of Things described in the present invention, the data collection strategy specifically includes:

[0135] Acquire target transmission data, wherein the target transmission data includes a target data path;

[0136] Get the device corresponding to each employee account in the system and set it as the target device;

[0137] Get the IP address of each target device and set it as the target address;

[0138] Integrate the target device corresponding to each employee account and the target address corresponding to the target device into a system address set;

[0139] Extracting a target data path, the target data path including a sending user verification address and a receiving user verification address;

[0140] Extract the target address corresponding to the sending user verification address in the system address set and set it as the target sending address;

[0141] Extract the target address corresponding to the receiving user verification address in the system address set and set it as the target receiving address;

[0142] A data transmission channel is established for the target sending address and the target receiving address to transmit data from the sending user equipment to the receiving user equipment.

[0143] The present invention has the following beneficial effects:

[0144] 1. The method for intelligent collection and protection of user data based on the Internet of Things obtains the login account of the sending user to determine the authority level of the sending user and whether the target transmission data sent by the sending user needs to be verified. If the sending user's authority level is high, the sending user is verified. By obtaining the used device and historically used device corresponding to the sending user's login account, it is determined whether the device used by the sending user to send the target transmission data is a secure device, so as to ensure the security of the sending user's sending process of the target transmission data and prevent the leakage of the target transmission data.

[0145] 2. The method for intelligent collection and protection of user data based on the Internet of Things obtains the operation process of the sending user before sending the data, and analyzes the operation habits of the sending user before sending the data and the historical operation habits through the historical data corresponding to the sending user's account. By comparing the operation habits and the historical operation habits, it is determined whether the person using the sending user account and the device is the same person as the person corresponding to the sending user account, thereby determining whether the person sending the target transmission data is the person corresponding to the sending user account himself, so as to ensure the security of the sending user's sending process of the target transmission data and prevent the leakage of the target transmission data.

[0146] 3. The method for intelligent collection and protection of user data based on the Internet of Things determines whether the target transmission data is encrypted and the importance of the target transmission data is obtained, thereby determining whether it is necessary to verify the receiving user. If the target transmission data is important data, it verifies whether the receiving user is the person corresponding to the receiving user account, so as to ensure the security of the receiving user's receiving process of the target transmission data and prevent the leakage of the target transmission data. BRIEF DESCRIPTION OF THE DRAWINGS

[0147] Figure 1 This is a block diagram of the user data intelligent collection, protection and processing method based on the Internet of Things of the present invention. DETAILED DESCRIPTION

[0148] Embodiment 1, a method for intelligent collection and protection of user data based on the Internet of Things, see Figure 1 ,include:

[0149] Acquire target transmission data, send user data, and receive user data;

[0150] According to the sending user data and the receiving user data, the judgment data is formed through the data judgment strategy to judge whether the sending target transmission data has the risk of leaking important files;

[0151] According to the target transmission data and the judgment data, the data collection strategy is used to form the collection data, so as to integrate and collect the target transmission data;

[0152] According to the collected data, the integrated and collected target transmission data is transmitted to the receiving user equipment.

[0153] Through the above method, the authority level of the sending user and whether the device used by the sending user to send the target transmission data is a secure device are judged, and by comparing the operating habits and historical operating habits of the sending user, it is judged whether the person sending the target transmission data is the person corresponding to the sending user account. By obtaining whether the target transmission data is encrypted, the importance of the target transmission data is judged, thereby determining whether it is necessary to verify the receiving user, and verifying whether the receiving user is the person corresponding to the receiving user account, so as to ensure the security of the sending user's sending process of the target transmission data and prevent the leakage of the target transmission data.

[0154] Embodiment 2: This embodiment is an improvement made on the basis of embodiment 1. The method for intelligent collection and protection of user data based on the Internet of Things, the data determination strategy specifically includes:

[0155] Acquire sending user data, wherein the sending user data includes a sending user account name;

[0156] Acquire receiving user data, wherein the receiving user data includes a receiving user account name;

[0157] Get system permission data;

[0158] Extract employee permissions dataset;

[0159] Extract the values ​​of the authority levels corresponding to the sending user account name and the receiving user account name in the employee authority data set respectively, and define them as the sending authority level value and the receiving authority level value, which are recorded as A1 and A2 respectively;

[0160] If the sending permission level value A1> the receiving permission level value A2, it is determined that the target transmission data leakage risk is low, and the system connects the transmission link between the sending user and the receiving user, the sending user sends the target transmission data, and the receiving user receives the target transmission data;

[0161] If the sending permission level value A1 ≤ the receiving permission level value A2, then the target transmission data leakage risk is determined to be high;

[0162] Execute the sending user data verification strategy;

[0163] Execute the target transmission data determination strategy.

[0164] The obtaining of system authority data is specifically as follows:

[0165] Obtaining all employee information within the system, the employee information includes employee name and employee number, the employee number is a unique number assigned by the system according to the order in which each employee joins the company;

[0166] According to the employee information of each employee, a corresponding employee account is established, wherein the employee account includes an employee account name and an employee account password;

[0167] Get the value of the position level corresponding to each employee in the system, denoted as B;

[0168] For all employees in the system, in the order of employee ID values ​​from small to large, extract the values ​​of the job levels of two employees and compare them, and record them as B1 and B2 respectively;

[0169] A determination value is set, the determination value being 0, for determining whether the job grades of two employees are the same;

[0170] If position level B1 - position level B2 < judgment value, then position level B1 is judged to have a high authority level and position level B2 has a low authority level;

[0171] Extract the employee information and employee account corresponding to position level B1, and set the employee account to the first authority level;

[0172] Extract the employee information and employee account corresponding to position level B2, and set the employee account to the second authority level;

[0173] If position level B1 - position level B2 > judgment value, then position level B2 is judged to have a high authority level and position level B1 has a low authority level;

[0174] Extract the employee information and employee account corresponding to position level B2, and set the employee account to the first authority level;

[0175] Extract the employee information and employee account corresponding to position level B1, and set the employee account to the second authority level;

[0176] Integrate all employee accounts corresponding to employee information and the permission levels corresponding to employee accounts into an employee permission data set.

[0177] This embodiment also provides that the executing the sending user data verification strategy specifically includes:

[0178] Obtain sending user equipment;

[0179] When the sending user sends the target transmission data, the system sends a first verification pop-up window to the sending user device, wherein the first verification pop-up window is a sending user verification pop-up window, including an interface for inputting an employee account name and an employee account password;

[0180] The sending user enters his employee account name and employee account password through the first verification pop-up window, which are defined as the sending verification account name and the sending verification account password, recorded as C11 and C12 respectively;

[0181] Extract the employee account and password of the employee account corresponding to the sending user account name in the employee authority data set, and define them as the sending user account and password. The sending user account name and the sending user account and password are recorded as C21 and C22 respectively.

[0182] If the sending verification account name C11 ≠ the sending user account name C21, and the sending verification account password C12 = the sending user account password C22, then it is determined that the sending user verification is wrong;

[0183] If the sending verification account name C11 = the sending user account name C21, and the sending verification account password C12 ≠ the sending user account password C22, then it is determined that the sending user verification is wrong;

[0184] If the sending verification account name C11 = the sending user account name C21, and the sending verification account password C12 = the sending user account password C22, then the sending user data is obtained, and the sending user data includes the sending user device IP address, which is defined as the sending user verification address, recorded as Z1;

[0185] Acquire sending user data, wherein the sending user data includes sending user account history data;

[0186] Obtaining historical data of a sending user account, wherein the historical data of a sending user account includes a historical sending IP address, which is defined as a historical sending address and is recorded as Z2;

[0187] If the sending user verification address Z1≠the historical sending address Z2, it is determined that the sending user verification is wrong;

[0188] If the sending user verification address Z1 = the historical sending address Z2, then the sending user operation verification strategy is executed;

[0189] If it is determined that the sending user verification is wrong, the system disconnects the transmission link between the sending user and the receiving user, and the sending user cannot send the target transmission data.

[0190] The executing and sending of the user operation verification strategy specifically includes:

[0191] Get the time when the sending user sends the target transmission data, which is defined as the sending time point, recorded as T1;

[0192] A determination time period is set, denoted as T2, and the determination time period is 30 minutes, to determine whether the operation habits of the sending user in the time period are consistent with the historical operation habits of the sending user. If they are consistent, it means that the sending user of the target transmission data is the user himself, and the risk of data leakage is small. If they are not consistent, it means that the sending user of the target transmission data is not the user himself, and the risk of data leakage is high.

[0193] Calculate the starting judgment time point, recorded as T3, starting judgment time point T3 = sending time point T1 - judgment time period T2;

[0194] Taking the starting determination time point T3 as the starting time point and the sending time point T1 as the ending time point, a determination time interval is established, which is recorded as T4 (T3, T1);

[0195] Get the historical habit data of the sending user;

[0196] Extract historical time allocation data;

[0197] Extract historical time allocation ratios;

[0198] The operation time of the sending user in the determination time interval is obtained and is defined as the second operation time, which is recorded as T5;

[0199] Obtain the inactivity time of the sending user in the determination time interval, which is defined as the second rest time, recorded as T6;

[0200] Obtain the time allocation of the second operation time and the second rest time of the sending user in the determination time interval, which is defined as determination time allocation data, recorded as M2, such as the time allocation of the second operation time and the second rest time is to rest for 25 minutes first and then operate for 5 minutes;

[0201] The determination time allocation data M2 also includes a determination time allocation ratio, recorded as Q2, where the determination time allocation ratio Q2 = the second operation time T5 ÷ the second rest time T6;

[0202] If the determination time allocation ratio Q2 is less than the historical time allocation ratio Q1×(1+5%), and the time allocation between the second operation time and the second rest time is the same as the time allocation between the first operation time and the first rest time, then it is determined that the determination time allocation data M2 has a high similarity with the historical time allocation data M1;

[0203] If the judgment time allocation ratio Q2> the historical time allocation ratio Q1×(1-5%), and the time allocation between the second operation time and the second rest time is the same as the time allocation between the first operation time and the first rest time, then it is determined that the judgment time allocation data M2 and the historical time allocation data M1 have a high similarity;

[0204] If the judgment time allocation ratio Q2> the historical time allocation ratio Q1×(1+5%), it is determined that the judgment time allocation data M2 has a low similarity with the historical time allocation data M1;

[0205] If the judgment time allocation ratio Q2 is less than the historical time allocation ratio Q1×(1-5%), it is determined that the judgment time allocation data M2 has a low similarity with the historical time allocation data M1;

[0206] If it is determined that the similarity between the determination time allocation data M2 and the historical time allocation data M1 is low, it is determined that the operation of the sending user within the determination time does not match the historical operation habits. For example, if the historical time allocation data M1 is to rest for 25 minutes and then operate for 5 minutes, and the determination time allocation data M2 is to operate for 10 minutes, rest for 5 minutes, and operate for 15 minutes, then the user's operation does not match the historical operation habits, indicating that the sending user of the target transmission data may not be the user himself, and the risk of data leakage is high;

[0207] If it is determined that the time distribution data M2 is highly similar to the historical time distribution data M1, the time comparison strategy is executed.

[0208] The execution time comparison strategy specifically includes:

[0209] Obtain the second operation time T5 and the second rest time T6. If the historical time allocation data M1 and the determination time allocation data M2 both indicate a 25-minute rest followed by a 5-minute operation, the rest time may be the computer's sleep or shutdown time. It is necessary to further determine whether the sending user is the user himself.

[0210] Setting a time determination value, wherein the time determination value is 0, for determining the length of the operation time and the rest time;

[0211] If the second operation time T5 - the second rest time T6 > the time determination value, then any file opened by the sending user within the determination time interval is extracted and determined as the target file. For example, if the second operation time T5 is 30 minutes and the second rest time T6 is 0, that is, the sending user is accustomed to sending data to the receiving user after work, then the operation of the sending user on the device at work is judged to determine whether the sending user's device is used by the sending user himself;

[0212] Obtain the name, suffix, and department of the target file, and define them as the target name, target suffix, and target department respectively;

[0213] Extract all the departments that belong to the historical data of user operations sent and define them as historical departments;

[0214] Extract the attribution department in the historical departments that is the same as the target attribution department and define it as the historical attribution department;

[0215] Extract all file suffixes in the historically affiliated departments and define them as historical suffixes;

[0216] Extract the file suffix that is the same as the target suffix from the historical suffixes and set it as the historical file suffix;

[0217] Extract all file names under the suffix of historical files and define them as historical names;

[0218] Obtaining character encoding data corresponding to each historical name in computer character encoding data, and defining the data as historical character data;

[0219] Get the number of each historical character data respectively, recorded as I (I1, ..., In);

[0220] Sort all historical character data from large to small according to quantity I, and set the historical character data with the largest quantity I as the target judgment character data, denoted as J1;

[0221] Obtain the character encoding data corresponding to the target name in the computer character encoding data, and define it as the target character data, denoted as J2;

[0222] If the target character data J2 = the target determination character data J1, then all historical names containing the target determination character data J1 are extracted and defined as historical name data;

[0223] Extract all historical files corresponding to historical name data and set them as target historical files;

[0224] Extract the opening time of each target history file and set it as the first history opening time point, recorded as H1;

[0225] Extract the storage path of each target history file and set it as the history storage path;

[0226] Extracting a first storage location in each historical storage path, where the first storage location is a local disk storing files, such as local disk C;

[0227] Extract the opening time of the first storage location corresponding to each target history file, and set it as the second history opening time point, recorded as H2;

[0228] Calculate the opening time of each target historical file and set it as the historical file opening time, recorded as H3, the historical file opening time H3 = the first historical opening time point H1 - the second historical opening time point H2;

[0229] Get the number of target history files, denoted as K;

[0230] Calculate the average time to open the target history file, recorded as H4, average time H4 = the sum of the history file opening time H3 ÷ the number K;

[0231] Get the opening time of the target file, set it as the first opening time point, and record it as L1;

[0232] Extract the storage path of the target file and set it as the target storage path;

[0233] Extracting a first storage location in the target storage path, where the first storage location is a local disk storing files, such as local disk C;

[0234] The opening time of the first storage location corresponding to the extracted target file is defined as the second opening time point, denoted as L2;

[0235] Calculate the opening time of the target file, set it as the target file opening time length, recorded as L3, the target file opening time length L3 = the first opening time point L1 - the second opening time point L2;

[0236] If the target file opening time L3 is less than the average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0237] If the target file opening time L3>average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0238] If the target file opening time L3>average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0239] If the target file opening time L3 is less than the average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0240] If the second operation time T5 - the second rest time T6 < the time determination value, then compare the target file opening time L3 and the average time H4. If the second operation time T5 is 5 minutes and the second rest time T6 is 25 minutes, that is, the sending user is accustomed to sending data to the receiving user at the first time of work, then calculate the time for the sending user to search for the target transmission data to determine whether the sending user device is used by the sending user himself;

[0241] If the target file opening time L3 is less than the average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0242] If the target file opening time L3>average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits;

[0243] If the target file opening time L3>average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0244] If the target file opening time L3 is less than the average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits;

[0245] If the sending user's operation does not match the historical operation habits within the determination time, the sending user's operation is determined to be risky;

[0246] If the sending user's operation is consistent with the historical operation habits within the determination time, the sending user's operation is determined to be risk-free;

[0247] If the sending user's operation is judged to be risky, the system disconnects the transmission link between the sending user and the receiving user, and the sending user cannot send the target transmission data;

[0248] If it is determined that the sending user's operation is risk-free, the system connects the transmission link between the sending user and the receiving user, and the sending user sends the target transmission data.

[0249] The acquiring and sending of historical habit data of the user is specifically as follows:

[0250] Acquire sending user data, wherein the sending user data includes sending user operation history data;

[0251] Acquire sending user operation history data, wherein the sending user operation history data includes a history determination time interval;

[0252] Acquire sending user operation history data, wherein the sending user operation history data includes history file data;

[0253] The historical file data includes the name, suffix, and department to which the historical file belongs;

[0254] Obtain the operation time of the sending user in each historical determination time interval, which is defined as the first operation time and recorded as T7;

[0255] Obtain the inactivity time of the sending user in each historical determination time interval, which is defined as the first rest time and recorded as T8;

[0256] Get the time distribution of the first operation time and the first rest time of the sending user in each historical determination time interval, which is defined as the historical time distribution data, recorded as M1. If the rest time is 25 minutes first and the operation time is 5 minutes later, the sending user is accustomed to sending data to the receiving user at the first time of work. If the rest time is 0 and the operation time is 30, the sending user is accustomed to sending data to the receiving user after work.

[0257] The historical time allocation data M1 also includes a historical time allocation ratio, denoted as Q1, where the historical time allocation ratio Q1 = the first operation time T7 ÷ the first rest time T8.

[0258] This embodiment also provides that the execution target transmission data determination strategy specifically includes:

[0259] Acquire target transmission data, wherein the target transmission data includes an encrypted signal, so as to determine the importance of the target transmission data, thereby determining whether it is necessary to verify the operation of the receiving user to determine whether the receiving user has performed an operation to leak the target transmission data;

[0260] Obtain an encryption signal of target transmission data, the encryption signal comprising a first signal and a second signal, the first signal being 0 and the second signal being 1. If the target transmission data encryption signal is detected as 0, it is the first signal, indicating that the target transmission data is not encrypted, is ordinary transmission data, and has a low importance level. If the target transmission data encryption signal is detected as 1, it is the second signal, indicating that the target transmission data is encrypted, is important transmission data, has a high importance level, and requires enhanced data protection.

[0261] If the encrypted signal of the target transmission data is the first signal, the receiving user receives the target transmission data;

[0262] If the encryption signal of the target transmission data is the second signal, executing the receiving user data verification strategy;

[0263] Obtain the verification result of the received user data;

[0264] If it is determined that the receiving user's authentication is wrong, the system disconnects the transmission link between the sending user and the receiving user, and the receiving user cannot receive the target transmission data;

[0265] If it is determined that the receiving user's authentication is correct, the system connects the transmission link between the sending user and the receiving user, and the receiving user receives the target transmission data.

[0266] The executing of the received user data verification strategy specifically includes:

[0267] Acquire receiving user equipment;

[0268] When the receiving user receives the target transmission data, the system sends a second verification pop-up window to the receiving user device, where the second verification pop-up window is a receiving user verification pop-up window, including an interface for inputting an employee account name and an employee account password;

[0269] The receiving user enters his employee account name and employee account password through the second verification pop-up window, and they are defined as the receiving verification account name and receiving verification account password, recorded as D11 and D12 respectively;

[0270] Extract the employee account and password of the employee account corresponding to the receiving user account name in the employee authority data set, and define them as the receiving user account and password. The receiving user account name and the receiving user account and password are recorded as D21 and D22 respectively.

[0271] If the receiving verification account name D11 ≠ the receiving user account name D21, and the receiving verification account password D12 = the receiving user account password D22, then it is determined that the receiving user verification is wrong;

[0272] If the receiving verification account name D11 = receiving user account name D21, and the receiving verification account password D12 ≠ receiving user account password D22, then it is determined that the receiving user verification is wrong;

[0273] If the receiving verification account name D11 = the receiving user account name D21, and the receiving verification account password D12 = the receiving user account password D22, then the receiving user data is obtained, and the receiving user data includes the receiving user device IP address, which is defined as the receiving user verification address, recorded as Y1;

[0274] Acquire receiving user data, wherein the receiving user data includes receiving user account history data;

[0275] Obtaining historical data of a receiving user account, wherein the historical data of the receiving user account includes a historical receiving IP address, which is defined as a historical receiving address and is recorded as Y2;

[0276] If the receiving user verification address Y1≠the historical receiving address Y2, it is determined that the receiving user verification is wrong;

[0277] If the receiving user verification address Y1 = the historical receiving address Y2, it is determined that the receiving user verification is correct.

[0278] Embodiment 3: This embodiment is an improvement made on the basis of Embodiment 2. In this embodiment, the data collection strategy specifically includes:

[0279] Acquire target transmission data, wherein the target transmission data includes a target data path;

[0280] Get the device corresponding to each employee account in the system and set it as the target device;

[0281] Get the IP address of each target device and set it as the target address;

[0282] Integrate the target device corresponding to each employee account and the target address corresponding to the target device into a system address set;

[0283] Extracting a target data path, the target data path including a sending user verification address and a receiving user verification address;

[0284] Extract the target address corresponding to the sending user verification address in the system address set and set it as the target sending address;

[0285] Extract the target address corresponding to the receiving user verification address in the system address set and set it as the target receiving address;

[0286] A data transmission channel is established for the target sending address and the target receiving address to transmit data from the sending user equipment to the receiving user equipment.

[0287] This embodiment determines the authority level of the sending user and whether the device through which the sending user sends the target transmission data is a secure device, and determines whether the person sending the target transmission data is the person corresponding to the sending user account by comparing the sending user's operating habits and historical operating habits. By obtaining whether the target transmission data is encrypted, the importance of the target transmission data is determined, thereby determining whether it is necessary to verify the receiving user, and verifying whether the receiving user is the person corresponding to the receiving user account, so as to ensure the security of the sending user's sending process of the target transmission data and prevent the target transmission data from being leaked.

Claims

1. A user data intelligent collection and protection processing method based on the Internet of Things, characterized by: include: Acquire target transmission data, send user data, and receive user data; According to the sending user data and the receiving user data, the judgment data is formed through the data judgment strategy to judge whether the sending target transmission data has the risk of leaking important files; According to the target transmission data and the judgment data, the data collection strategy is used to form the collection data, so as to integrate and collect the target transmission data; According to the collected data, the integrated and collected target transmission data is transmitted to the receiving user equipment; The data collection strategy specifically includes: Acquire target transmission data, wherein the target transmission data includes a target data path; Get the device corresponding to each employee account in the system and set it as the target device; Get the IP address of each target device and set it as the target address; Integrate the target device corresponding to each employee account and the target address corresponding to the target device into a system address set; Extracting a target data path, the target data path including a sending user verification address and a receiving user verification address; Extract the target address corresponding to the sending user verification address in the system address set and set it as the target sending address; Extract the target address corresponding to the receiving user verification address in the system address set and set it as the target receiving address; Establishing a data transmission channel for a target sending address and a target receiving address for transmitting data from a sending user device to a receiving user device; The data determination strategy specifically includes: Acquire sending user data, wherein the sending user data includes a sending user account name; Acquire receiving user data, wherein the receiving user data includes a receiving user account name; Get system permission data; Extract employee permissions dataset; Extract the values ​​of the authority levels corresponding to the sending user account name and the receiving user account name in the employee authority data set respectively, and define them as the sending authority level value and the receiving authority level value, which are recorded as A1 and A2 respectively; If the sending permission level value A1> the receiving permission level value A2, it is determined that the target transmission data leakage risk is low, and the system connects the transmission link between the sending user and the receiving user, the sending user sends the target transmission data, and the receiving user receives the target transmission data; If the sending permission level value A1 ≤ the receiving permission level value A2, then the target transmission data leakage risk is determined to be high; Execute the sending user data verification strategy; Execute target transmission data determination strategy; The obtaining of system permission data is specifically as follows: Obtaining all employee information within the system, the employee information includes employee name and employee number, the employee number is a unique number assigned by the system according to the order in which each employee joins the company; According to the employee information of each employee, a corresponding employee account is established, wherein the employee account includes an employee account name and an employee account password; Get the value of the position level corresponding to each employee in the system, denoted as B; For all employees in the system, in the order of employee ID values ​​from small to large, extract the values ​​of the job levels of two employees and compare them, and record them as B1 and B2 respectively; Set the judgment value; If position level B1 - position level B2 < judgment value, then position level B1 is judged to have a high authority level and position level B2 has a low authority level; Extract the employee information and employee account corresponding to position level B1, and set the employee account to the first authority level; Extract the employee information and employee account corresponding to position level B2, and set the employee account to the second authority level; If position level B1 - position level B2 > judgment value, then position level B2 is judged to have a high authority level and position level B1 has a low authority level; Extract the employee information and employee account corresponding to position level B2, and set the employee account to the first authority level; Extract the employee information and employee account corresponding to position level B1, and set the employee account to the second authority level; Integrate all employee accounts corresponding to employee information and the permission levels corresponding to employee accounts into an employee permission data set.

2. According to claim 1, the method for intelligent collection, protection and processing of user data based on the Internet of Things is characterized by: The executing of the sending user data verification strategy specifically includes: Obtain sending user equipment; When the sending user sends the target transmission data, the system sends a first verification pop-up window to the sending user device, wherein the first verification pop-up window is a sending user verification pop-up window, including an interface for inputting an employee account name and an employee account password; The sending user enters his employee account name and employee account password through the first verification pop-up window, which are defined as the sending verification account name and the sending verification account password, recorded as C11 and C12 respectively; Extract the employee account and password of the employee account corresponding to the sending user account name in the employee authority data set, and define them as the sending user account and password. The sending user account name and the sending user account and password are recorded as C21 and C22 respectively. If the sending verification account name C11 ≠ the sending user account name C21, and the sending verification account password C12 = the sending user account password C22, then it is determined that the sending user verification is wrong; If the sending verification account name C11 = the sending user account name C21, and the sending verification account password C12 ≠ the sending user account password C22, then it is determined that the sending user verification is wrong; If the sending verification account name C11 = the sending user account name C21, and the sending verification account password C12 = the sending user account password C22, then the sending user data is obtained, and the sending user data includes the sending user device IP address, which is defined as the sending user verification address, recorded as Z1; Acquire sending user data, wherein the sending user data includes sending user account history data; Obtaining historical data of a sending user account, wherein the historical data of a sending user account includes a historical sending IP address, which is defined as a historical sending address and is recorded as Z2; If the sending user verification address Z1≠the historical sending address Z2, it is determined that the sending user verification is wrong; If the sending user verification address Z1 = the historical sending address Z2, then the sending user operation verification strategy is executed; If it is determined that the sending user verification is wrong, the system disconnects the transmission link between the sending user and the receiving user, and the sending user cannot send the target transmission data.

3. The method for intelligent collection, protection and processing of user data based on the Internet of Things according to claim 2 is characterized in that: The executing and sending user operation verification strategy specifically includes: Get the time when the sending user sends the target transmission data, which is defined as the sending time point, recorded as T1; Set the judgment time period, recorded as T2; Calculate the starting judgment time point, recorded as T3, starting judgment time point T3 = sending time point T1 - judgment time period T2; Taking the starting determination time point T3 as the starting time point and the sending time point T1 as the ending time point, a determination time interval is established, which is recorded as T4 (T3, T1); Get the historical habit data of the sending user; Extract historical time allocation data; Extract historical time allocation ratios; The operation time of the sending user in the determination time interval is obtained and is defined as the second operation time, which is recorded as T5; Obtain the inactivity time of the sending user in the determination time interval, which is defined as the second rest time, recorded as T6; Obtain the time distribution of the second operation time and the second rest time of the sending user in the determination time interval, which is defined as determination time distribution data and recorded as M2; The determination time allocation data M2 also includes a determination time allocation ratio, recorded as Q2, where the determination time allocation ratio Q2 = the second operation time T5 ÷ the second rest time T6; If the determination time allocation ratio Q2 is less than the historical time allocation ratio Q1×(1+5%), and the time allocation between the second operation time and the second rest time is the same as the time allocation between the first operation time and the first rest time, then it is determined that the determination time allocation data M2 and the historical time allocation data M1 have a high similarity; If the determination time allocation ratio Q2> the historical time allocation ratio Q1×(1-5%), and the time allocation between the second operation time and the second rest time is the same as the time allocation between the first operation time and the first rest time, then it is determined that the determination time allocation data M2 and the historical time allocation data M1 have a high similarity; If the judgment time allocation ratio Q2> the historical time allocation ratio Q1×(1+5%), it is determined that the judgment time allocation data M2 has a low similarity with the historical time allocation data M1; If the judgment time allocation ratio Q2 is less than the historical time allocation ratio Q1×(1-5%), it is determined that the judgment time allocation data M2 has a low similarity with the historical time allocation data M1; If it is determined that the similarity between the determination time allocation data M2 and the historical time allocation data M1 is low, it is determined that the operation of the sending user during the determination time is inconsistent with the historical operation habits; If it is determined that the time distribution data M2 is highly similar to the historical time distribution data M1, the time comparison strategy is executed.

4. The method for intelligent collection, protection and processing of user data based on the Internet of Things according to claim 3 is characterized in that: The execution time comparison strategy specifically includes: Obtain a second operation time T5 and a second rest time T6; Set the time judgment value; If the second operation time T5 - the second rest time T6 > the time determination value, then any file opened by the sending user within the determination time interval is extracted and determined as the target file; Obtain the name, suffix, and department of the target file, and define them as the target name, target suffix, and target department respectively; Extract all the departments that belong to the historical data of user operations sent and define them as historical departments; Extract the attribution department in the historical departments that is the same as the target attribution department and define it as the historical attribution department; Extract all file suffixes in the historically affiliated departments and define them as historical suffixes; Extract the file suffix that is the same as the target suffix from the historical suffixes and set it as the historical file suffix; Extract all file names under the suffix of historical files and define them as historical names; Obtaining character encoding data corresponding to each historical name in computer character encoding data, and defining the data as historical character data; Get the number of each historical character data respectively, recorded as I (I1, ..., In); Sort all historical character data from large to small according to quantity I, and set the historical character data with the largest quantity I as the target judgment character data, denoted as J1; Obtain the character encoding data corresponding to the target name in the computer character encoding data, and define it as the target character data, denoted as J2; If the target character data J2 = the target determination character data J1, then all historical names containing the target determination character data J1 are extracted and defined as historical name data; Extract all historical files corresponding to historical name data and set them as target historical files; Extract the opening time of each target history file and set it as the first history opening time point, recorded as H1; Extract the storage path of each target history file and set it as the history storage path; Extracting the first storage location in each historical storage path; Extract the opening time of the first storage location corresponding to each target history file, and set it as the second history opening time point, recorded as H2; Calculate the opening time of each target historical file and set it as the historical file opening time, recorded as H3, the historical file opening time H3 = the first historical opening time point H1 - the second historical opening time point H2; Get the number of target history files, denoted as K; Calculate the average time to open the target history file, recorded as H4, average time H4 = the sum of the history file opening time H3 ÷ the number K; Get the opening time of the target file, set it as the first opening time point, and record it as L1; Extract the storage path of the target file and set it as the target storage path; Retrieving a first storage location in the target storage path; The opening time of the first storage location corresponding to the extracted target file is defined as the second opening time point, denoted as L2; Calculate the opening time of the target file, set it as the target file opening time length, recorded as L3, the target file opening time length L3 = the first opening time point L1 - the second opening time point L2; If the target file opening time L3 is less than the average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits; If the target file opening time L3>average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits; If the target file opening time L3> average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits; If the target file opening time L3 is less than the average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits; If the second operation time T5 - the second rest time T6 < the time determination value, then compare the target file opening time L3 with the average time H4; If the target file opening time L3 is less than the average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits; If the target file opening time L3>average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is consistent with the historical operation habits; If the target file opening time L3> average time H4×(1+5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits; If the target file opening time L3 is less than the average time H4×(1-5%), it is determined that the operation of the sending user within the determination time is inconsistent with the historical operation habits; If the sending user's operation does not match the historical operation habits within the determination time, the sending user's operation is determined to be risky; If the sending user's operation is consistent with the historical operation habits within the determination time, the sending user's operation is determined to be risk-free; If the sending user's operation is judged to be risky, the system disconnects the transmission link between the sending user and the receiving user, and the sending user cannot send the target transmission data; If it is determined that the sending user's operation is risk-free, the system connects the transmission link between the sending user and the receiving user, and the sending user sends the target transmission data.

5. The method for intelligent collection, protection and processing of user data based on the Internet of Things according to claim 4 is characterized in that: The acquisition and sending of user historical habit data is specifically as follows: Acquire sending user data, wherein the sending user data includes sending user operation history data; Acquire sending user operation history data, wherein the sending user operation history data includes a history determination time interval; Acquire sending user operation history data, wherein the sending user operation history data includes history file data; The historical file data includes the name, suffix, and department to which the historical file belongs; Obtain the operation time of the sending user in each historical determination time interval, which is defined as the first operation time and recorded as T7; Obtain the inactivity time of the sending user in each historical determination time interval, which is defined as the first rest time and recorded as T8; Obtain the time distribution of the first operation time and the first rest time of the sending user in each historical determination time interval, which is defined as historical time distribution data and recorded as M1; The historical time allocation data M1 also includes a historical time allocation ratio, denoted as Q1, where the historical time allocation ratio Q1 = the first operation time T7 ÷ the first rest time T8.

6. The method for intelligent collection, protection and processing of user data based on the Internet of Things according to claim 3 is characterized in that: The execution target transmission data determination strategy specifically includes: Acquiring target transmission data, wherein the target transmission data includes an encrypted signal; Acquire an encrypted signal of target transmission data, wherein the encrypted signal includes a first signal and a second signal; If the encrypted signal of the target transmission data is the first signal, the receiving user receives the target transmission data; If the encryption signal of the target transmission data is the second signal, executing the receiving user data verification strategy; Obtain the verification result of the received user data; If it is determined that the receiving user's authentication is wrong, the system disconnects the transmission link between the sending user and the receiving user, and the receiving user cannot receive the target transmission data; If it is determined that the receiving user's authentication is correct, the system connects the transmission link between the sending user and the receiving user, and the receiving user receives the target transmission data.

7. The method for intelligent collection, protection and processing of user data based on the Internet of Things according to claim 6 is characterized by: The execution of the received user data verification strategy specifically includes: Acquire receiving user equipment; When the receiving user receives the target transmission data, the system sends a second verification pop-up window to the receiving user device, where the second verification pop-up window is a receiving user verification pop-up window, including an interface for inputting an employee account name and an employee account password; The receiving user enters his employee account name and employee account password through the second verification pop-up window, and they are defined as the receiving verification account name and receiving verification account password, recorded as D11 and D12 respectively; Extract the employee account and password of the employee account corresponding to the receiving user account name in the employee authority data set, and define them as the receiving user account and password. The receiving user account name and the receiving user account and password are recorded as D21 and D22 respectively. If the receiving verification account name D11 ≠ the receiving user account name D21, and the receiving verification account password D12 = the receiving user account password D22, then it is determined that the receiving user verification is wrong; If the receiving verification account name D11 = receiving user account name D21, and the receiving verification account password D12 ≠ receiving user account password D22, then it is determined that the receiving user verification is wrong; If the receiving verification account name D11 = the receiving user account name D21, and the receiving verification account password D12 = the receiving user account password D22, then the receiving user data is obtained, and the receiving user data includes the receiving user device IP address, which is defined as the receiving user verification address, recorded as Y1; Acquire receiving user data, wherein the receiving user data includes receiving user account history data; Obtaining historical data of a receiving user account, wherein the historical data of the receiving user account includes a historical receiving IP address, which is defined as a historical receiving address and is recorded as Y2; If the receiving user verification address Y1≠the historical receiving address Y2, it is determined that the receiving user verification is wrong; If the receiving user verification address Y1 = the historical receiving address Y2, it is determined that the receiving user verification is correct.

Images