A secure access method and system for teaching data

Abstract

The present invention relates to the field of communication control technology, and particularly relates to a method and system for secure access to teaching data. The method includes: establishing a communication connection between a client device and at least one data server, receiving a storage address pushed by the data server, and generating a storage address list from the received storage address; the client device reporting access authentication information to an authentication server in response to an access request message for accessing teaching data; the authentication server determining a permission index of the client device according to the access authentication information in response to the access authentication information sent by the client device; the authentication server screening out storage addresses with a security level lower than the permission index from the storage address list, forming an authorized address list from the screened-out storage addresses, and sending them to the client device respectively; the client device obtaining teaching data according to the authorized address list; the present invention can improve the security of teaching data access control.

Description

Technical Field

[0001] The present invention relates to the field of communication control technology, and particularly relates to a method and system for secure access to teaching data. Background Art

[0002] In the prior art, intelligent teaching is an educational method that uses artificial intelligence technology to provide personalized, intelligent, and interactive learning. In intelligent teaching, risks such as privacy and security in the storage, analysis, sharing, etc. of teaching data cannot be ignored. As private data of schools, the security of teaching data is particularly important. In the prior art, the secure access to teaching data mainly relies on user identity authentication and access permission control, but when facing problems such as identity information leakage and abuse of access permissions, the security is difficult to be guaranteed. Therefore, it is necessary to propose a new method for secure access to teaching data to improve the security of teaching data. Summary of the Invention

[0003] To solve the above problems, the present invention provides a method and system for secure access to teaching data to improve the security of teaching data access control.

[0004] To achieve the above object, the present invention provides the following technical solutions:

[0005] On the one hand, an embodiment of the present invention provides a method for secure access to teaching data, and the method includes the following steps:

[0006] S100, the client device establishes a communication connection with at least one data server, receives the storage addresses pushed by the data server, and generates a storage address list from the received storage addresses; wherein, the data server has multiple storage addresses, and each of the storage addresses is used to store teaching data corresponding to a security level;

[0007] S200, the client device reports access authentication information to the authentication server in response to an access request message for accessing teaching data; wherein, the access request message includes user identity information, and the access authentication information includes the user identity information, the storage address list, and the device identification code of the client device;

[0008] S300, the authentication server determines the permission index of the client device according to the access authentication information in response to the access authentication information sent by the client device; wherein, the permission index represents the security level that allows the user identity information to access teaching data through the client device;

[0009] S400, the authentication server filters out the storage addresses with security levels lower than the permission index from the storage address list, forms an authorized address list from the filtered storage addresses, and sends them to the client device respectively;

[0010] In S500, the client device obtains teaching data according to the authorized address list.

[0011] Optionally, before S100, the method further includes:

[0012] In S101, the authentication server obtains the registration request information sent by the client device, and the registration request information includes a device identification code;

[0013] In S102, the authentication server queries the access permission corresponding to the device identification code according to a pre-set permission correspondence table, and the permission correspondence table includes multiple access permissions, and each access permission corresponds to at least one device identification code and at least one security level;

[0014] In S103, determine the security level corresponding to the access permission, and use the storage address corresponding to the security level as the storage address corresponding to the device identification code;

[0015] In S104, the authentication server forms an address access table with the device identification code and the corresponding storage address and sends it to the data server.

[0016] >Optionally, in S100, the client device establishes a communication connection with at least one data server, receives the storage address pushed by the data server, and generates a storage address list, including:

[0017] In S110, the client device establishes a communication connection with the data server and receives the first public key generated by the data server using an asymmetric encryption algorithm;

[0018] In S130, the client device encrypts the device identification code of the client device using the first public key and sends it to the data server;

[0019] In S130, the data server decrypts the encrypted device identification code using the first private key that generates the first public key. If the device identification code is matched in the address access table, set the attribute value of each storage address in the address access table to true and then push it to the client device; if the device identification code is not matched in the address access table, set the attribute value of all storage addresses in the data server to false and then push it to the client device;

[0020] In S140, the client device divides the received storage addresses according to the security level and generates a storage address list.

[0021] Optionally, in S300, determining the permission index of the client device according to the access authentication information includes:

[0022] S310, obtain the IP address of the client device;

[0023] S320, determine the family devices of the device identification code based on the IP address, where the family devices include the remaining client devices in the communication network where the client device is located;

[0024] S330, obtain the first total duration, the second total duration, and the access permission of the user identity information; where the first total duration is the total duration of maintaining a communication connection with the data server after logging in to the family devices using the user identity information; the second total duration is the total duration of maintaining a communication connection between the client device and the data server;

[0025] S340, determine the permission index of the client device based on the first total duration, the second total duration, and the access permission corresponding to the user identity information; where the permission index is positively correlated with the first total duration and the second total duration, and the permission index does not exceed the access permission of the user identity information.

[0026] Optionally, in S500, the client device obtains teaching data according to the authorized address list, including:

[0027] S510, the client device determines the data server corresponding to the stored address in the authorized address list;

[0028] S520, the client device sends an access request to the data server, and the access request includes the permission index;

[0029] S530, after receiving the access request, the data server matches the authorized address list with the address access table to determine the storage address accessible by the client device;

[0030] S540, the data server sends the accessible storage address to the client device;

[0031] S550, the client device accesses the teaching data in the data server according to the accessible storage address.

[0032] Optionally, in S550, the client device accesses the teaching data in the data server according to the accessible storage address, including:

[0033] S551, after receiving the accessible storage address, the client device displays it, and uses the storage address selected by the user from the accessible storage addresses as the designated address;

[0034] S552. The client device encrypts the specified address and the second public key using the first public key and sends them to the data server to request access to the teaching data stored at the specified address. Here, the specified address is selected from the accessible storage addresses, and the second public key is generated by the client device using an asymmetric encryption algorithm.

[0035] S553. After the data server decrypts using the first private key to obtain the specified address and the second public key, it reads the teaching data stored at the specified address and generates corresponding digest information for the teaching data.

[0036] S554. After the data server generates a teaching data list from the digest information, it encrypts the teaching data list using the second public key and sends it to the client device.

[0037] S555. The client device decrypts using the second private key to obtain the teaching data list and then displays it, and sends the digest information selected by the user from the teaching data list to the data server.

[0038] S556. After the data server receives the digest information sent by the client device, it determines the teaching data corresponding to the digest information and sends the teaching data to the client device.

[0039] On the other hand, an embodiment of the present invention provides a secure access system for teaching data, including:

[0040] At least one processor;

[0041] At least one memory for storing at least one program;

[0042] When the at least one program is executed by the at least one processor, the at least one processor implements the above method.

[0043] The beneficial effects of the present invention are as follows: The present invention discloses a secure access method and system for teaching data. The present invention authenticates the client device through an authentication server, allocates different storage addresses according to the permissions of the client device, thereby realizing access control of teaching data, which can effectively prevent unauthorized devices from accessing teaching data, and at the same time simplifies the operation process of the client device. By dynamically allocating the access permissions of the client device through the authentication server, the security of teaching data access control is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can be obtained based on these drawings.

[0045] Figure 1 is a schematic flowchart of a method for secure access to teaching data according to an embodiment of the present invention;

[0046] Figure 2 is a communication topology diagram of a method for secure access to teaching data according to an embodiment of the present invention;

[0047] Figure 3 is a schematic structural diagram of a system for secure access to teaching data according to an embodiment of the present invention. Detailed Embodiments

[0048] The following will clearly and completely describe the concept, specific structure, and technical effects generated by the present invention in combination with the embodiments and the drawings, so as to fully understand the purpose, solution, and effects of the present invention. It should be noted that, without conflict, the embodiments in the present application and the features in the embodiments can be combined with each other.

[0049] Refer to Figure 1 and Figure 2 As shown in Figure 1 a method for secure access to teaching data provided by an embodiment of the present invention, the method includes the following steps:

[0050] S100. The client device establishes a communication connection with at least one data server, receives the storage addresses pushed by the data server, and generates a storage address list from the received storage addresses; wherein, the data server has multiple storage addresses, and each of the storage addresses is used to store teaching data corresponding to a security level;

[0051] It should be noted that the client device refers to an intelligent electronic device whose assets belong to the school, and its functions are applied to information-based teaching, such as projectors, computers, teaching all-in-one machines, etc. In this embodiment, the data server pushes the storage addresses to the client device, indicating that a secure connection has been established between the client device and the data server in advance. Only the client device with a storage address list can access the teaching data stored in the storage address in the subsequent process; thus, the access permission of the client device is preliminarily verified.

[0052] S200, the client device reports access authentication information to the authentication server in response to an access request message for accessing teaching data; wherein, the access request message includes user identity information, and the access authentication information includes the user identity information, the storage address list, and the device identification code of this client device;

[0053] It should be noted that the device identification code includes at least one of the MAC address of the client device, the device ID, etc., and is used to uniquely identify the device. In this step, the client device receives the access request message for accessing teaching data, resolves the user identity information according to the access request message, generates access authentication information with the user identity information and the device identification code of this client device, and then sends it to the authentication server.

[0054] S300, the authentication server determines the permission index of the client device according to the access authentication information in response to the access authentication information sent by the client device; wherein, the permission index represents the security level that allows the user identity information to access teaching data through the client device;

[0055] In this step, the authentication server combines the user identity information and the device identification code to obtain the permission index corresponding to the client device, so as to be able to allocate different access permissions to the client device according to different user identities and device identification codes.

[0056] S400, the authentication server filters out the storage addresses whose security levels are lower than the permission index from the storage address list, forms an authorized address list with the filtered storage addresses, and sends them to the client device respectively;

[0057] It should be noted that the authentication server filters out the corresponding storage addresses from the storage address list according to the permission index. For example, if the permission index of the client device is S3, then the authentication server will find the storage addresses with security levels from A1 to A3 from the storage address list and send them to the client device, so as to initially select the storage addresses that the client device can access. In this step, the authentication server sends the filtered storage addresses to the client device, and the client device obtains teaching data according to these storage addresses. In this way, both the security of the data is ensured and the purpose of dynamically allocating access permissions according to the user identity and device permissions is achieved.

[0058] In this step, by determining the permission index of the client device according to the user identity information and the device identification code, the permission control of the client device to access teaching data can be realized. The higher the permission index, the higher the access permission of the client device, and it can access more teaching data with different security levels.

[0059] S500, the client device obtains teaching data according to the authorized address list.

[0060] In this step, after the client device receives the authorization address list sent by the authentication server, it obtains the corresponding teaching data from the data server according to the storage addresses in the list. At this time, the client device can only access the authorized storage addresses, thus ensuring the security of the teaching data.

[0061] According to the method provided by the embodiment of the present invention, after the client device obtains the teaching data, it can perform local storage or real-time display according to requirements. For example, a teacher can use an interactive whiteboard in the classroom to display the teaching data, or store it in a computer for subsequent use. In addition, the teaching data can also be stored and displayed on other intelligent devices to meet the requirements of different scenarios.

[0062] Through the above embodiments, the present invention authenticates the client device through the authentication server, and assigns different storage addresses according to the permissions of the client device, so as to achieve access control of the teaching data. This method has high security, can effectively prevent unauthorized devices from accessing the teaching data, simplifies the operation process of the client device, and improves the user experience. In addition, the present invention can also adjust the permission correspondence table according to actual needs to flexibly control different client devices to access teaching data of different security levels.

[0063] In summary, the embodiment of the present invention dynamically allocates the access permissions of the client device through the authentication server, and achieves the purpose of securely controlling the access to the teaching data according to the user identity and device permissions.

[0064] In some preferred embodiments, before S100, the method further includes:

[0065] S101, the authentication server obtains the registration request information sent by the client device, and the registration request information includes a device identification code;

[0066] S102, the authentication server queries the access permission corresponding to the device identification code according to the pre-set permission correspondence table, and the permission correspondence table includes multiple access permissions, and each access permission corresponds to at least one device identification code and at least one security level;

[0067] It should be noted that the permission correspondence table can be established in advance and entered manually; for example, after a school purchases a batch of client devices, it obtains the device identification codes of the client devices, then assigns the corresponding access permissions, and enters them into the permission correspondence table. Referring to Table 1, if the access permission corresponding to the device identification code is S3, it can access the teaching data with security levels from A1 to A3, and add the device identification code to the device list T3.

[0068] S103. Determine the security level corresponding to the access permission, and use the storage address corresponding to the security level as the storage address corresponding to the device identification code.

[0069] S104. The authentication server forms an address access table with the device identification code and the corresponding storage address, and then sends it to the data server.

[0070] Table 1: Permission Corresponding Table

[0071] Security level Access permission Device identification code A1 S1(A1) Device list T1 A2 S2(A1, A2) Device list T2 A3 S3(A1 to A3) Device list T3 A4 S4(A1 to A5) Device list T4 A5 S5(A1 to A5) Device list T5

[0072] In some preferred embodiments, in S100, the client device establishes a communication connection with at least one data server, receives the storage address pushed by the data server, and generates a storage address list, including:

[0073] S110. The client device establishes a communication connection with the data server and receives the first public key generated by the data server using an asymmetric encryption algorithm.

[0074] S130. The client device encrypts the device identification code of the client device using the first public key, and then sends it to the data server.

[0075] S130. The data server decrypts the encrypted device identification code using the first private key that generates the first public key. If the device identification code is matched in the address access table, after setting the attribute value of each storage address in the address access table to true, it is pushed to the client device; if the device identification code is not matched in the address access table, after setting the attribute value of all storage addresses in the data server to false, it is pushed to the client device.

[0076] S140. The client device divides the received storage addresses according to the security level and generates a storage address list.

[0077] It should be noted that the client device and the authentication server establish a stable communication connection, and a cipher suite is set in advance. If the authentication server can decrypt the access authentication information sent by the client device, it means that the client device is verified by the authentication server. In this embodiment, by decrypting the encrypted device identification code using the private key, it is prevented that the device identification code is stolen by a third-party device, and the private communication between the client device and the data server is initially ensured.

[0078] By matching the device identification code in the address access table received by the data server, it is possible to determine whether the authentication server has completed authentication of the client device, thereby sending the address access table with the corresponding attribute values to the client device, thereby ensuring the legitimacy of the client device's access to the teaching data. If the device identification code is not matched in the address access table, it means that the client device has not been authenticated by the authentication server in advance and is most likely a newly added client device. This embodiment sets the attribute values of all storage addresses in the data server to false and then pushes them to the client device. This allows the client device to obtain the storage address first, but it cannot access the content in the storage address until it is subsequently authenticated. While ensuring security, the risk of information leakage is also reduced by reducing the number of interaction steps.

[0079] In some preferred embodiments, in S300, determining the permission index of the client device according to the access authentication information includes:

[0080] S310, obtaining the IP address of the client device;

[0081] S320, determining the same family of devices of the device identification code based on the IP address, where the same family of devices includes the remaining client devices in the communication network where the client device is located;

[0082] Determining, based on the device identification code, whether the client device is located on the same communication network as the client device;

[0083] Specifically, by querying the IP address of the client device, querying the IP addresses of each client device connected to the authentication server, it is determined based on the IP address whether there are other client devices in the communication network where the client device is located, as the same family devices of the client device.

[0084] S330, obtaining a first total duration, a second total duration, and access rights to the user identity information; wherein the first total duration is the total duration of the communication connection between the client device and the data server after logging in to the same family device using the user identity information; and the second total duration is the total duration of the communication connection between the client device and the data server;

[0085] S340, determining the permission index of the client device based on the first total duration, the second total duration and the access rights corresponding to the user identity information; wherein the permission index is positively correlated with the first total duration and the second total duration, and the permission index does not exceed the access rights of the user identity information.

[0086] In some embodiments, the calculation formula of the authority index is:

[0087] Q=ln(k0*T0 / (t0+∑ i∈C ki*Ti))*S0;

[0088] Wherein, Q is the permission index, k0 is the weight coefficient of the client device, T0 is the second total duration of the client device, ki is the weight coefficient of the i-th client device in the same family of devices, Ti is the first total duration of the i-th client device in the same family of devices, C is the set of devices in the same family, S0 is the access permission of the user identity information, and t0 is the benchmark duration.

[0089] It should be noted that k0, t0 and ki can be preset manually to adjust the authority index, but the authority index calculated according to the authority index calculation formula is less than or equal to the access authority of the user identity information. In some embodiments, 0<k0<1, 0<ki<1, n is the total number of devices in the same family.

[0090] This embodiment weights the access rights of the user identity information based on the first total duration and the second total duration, gradually increasing the size of the permission index, thereby gradually increasing the trustworthiness of the client device. By determining the permission index in real time, dynamic adjustment of the access rights of the client device can be achieved. When the permission index of the client device changes, the address access table can be updated in a timely manner to ensure the legality of the client device's access to teaching data. In addition, real-time updating of the permission index can also improve system security and prevent illegal access to teaching data.

[0091] In some preferred embodiments, in S500, the client device obtains teaching data according to the authorized address list, including:

[0092] S510, the client device determines a data server corresponding to an address stored in the authorized address list;

[0093] S520, the client device sends an access request to the data server, where the access request includes the authority index;

[0094] S530, after receiving the access request, the data server matches the authorized address list with the address access table to determine the storage address accessible to the client device;

[0095] Specifically, the data server uses the storage addresses that exist in both the address access table and the authorized address list as storage addresses accessible to the client device, and sets the attribute value of the accessible storage address to true.

[0096] S540, the data server sends the accessible storage address to the client device;

[0097] S550. The client device accesses the teaching data in the data server according to the accessible storage address.

[0098] In this embodiment, by setting an address access table in the data server, corresponding storage addresses can be pushed according to the permission index of the client device, ensuring the legality of the client device accessing the teaching data.

[0099] In some preferred embodiments, in S550, the client device accesses the teaching data in the data server according to the accessible storage address, including:

[0100] S551. After receiving the accessible storage address, the client device displays it and uses the storage address selected by the user from the accessible storage addresses as the designated address.

[0101] S552. The client device encrypts the designated address and the second public key using the first public key and sends them to the data server to request access to the teaching data stored at the designated address; wherein, the designated address is selected from the accessible storage addresses, and the second public key is generated by the client device using an asymmetric encryption algorithm.

[0102] It should be noted that after receiving the accessible storage address, the client device displays it for the user to select, and uses the storage address selected by the user as the designated address.

[0103] S553. After decrypting the designated address and the second public key using the first private key, the data server reads the teaching data stored at the designated address and generates corresponding digest information for the teaching data.

[0104] S554. After generating a teaching data list from the digest information, the data server encrypts the teaching data list using the second public key and sends it to the client device.

[0105] S555. After decrypting the teaching data list using the second private key, the client device displays it and sends the digest information selected by the user from the teaching data list to the data server.

[0106] S556. After receiving the digest information sent by the client device, the data server determines the teaching data corresponding to the digest information and sends the teaching data to the client device.

[0107] In some embodiments, the data server monitors and analyzes the access behavior of client devices. For example, when the data server receives an access request sent by a client device, it records information such as the source IP address of the request, the access time, and the accessed teaching data. Furthermore, it statistically analyzes the access behavior of the client device to generate an access behavior report, so as to dynamically adjust the access permissions of the teaching data based on the access behavior report in the subsequent process, thereby improving the security and access efficiency of the teaching data. Through the above technical solutions, the present invention effectively ensures the security, integrity, and access efficiency of the teaching data.

[0108] In summary, the present invention provides a method for controlling access to teaching data. The authentication server authenticates the client device, and dynamically adjusts the access permissions according to the permission index of the client device to ensure the legitimacy of the client device's access to the teaching data. At the same time, the present invention pushes the storage address through the data server, divides the storage address according to the permission index of the client device, and realizes the control of the access permissions of the client device to the teaching data. The present invention has high security and practicability and is applicable to the field of educational informatization.

[0109] Through the above embodiments, the method for controlling access to teaching data has the following advantages:

[0110] 1. Security: The authentication server authenticates the client device to ensure that only legitimate client devices can access the teaching data.

[0111] 2. Dynamic permission adjustment: According to the permission index of the client device, the access permissions are adjusted in real time to realize the dynamic management of the teaching data.

[0112] 3. High efficiency: The data server pushes the storage address, reducing the interaction steps between the client and the authentication server and improving the access efficiency.

[0113] 4. Flexibility: According to the permission index of the client device, the storage address is dynamically divided to realize the control of the access permissions of the client device to the teaching data.

[0114] 5. Ease of use: The client device directly accesses the teaching data in the data server according to the accessible storage address, simplifying the operation process.

[0115] The method for controlling access to teaching data provided by the present invention can be widely applied to the field of educational informatization, providing a safe, efficient, and flexible teaching data access management solution for educational institutions, enterprises, and individuals.

[0116] Reference Figure 3 , the embodiment of the present invention also provides a secure access system for teaching data, including:

[0117] At least one processor;

[0118] At least one memory for storing at least one program;

[0119] When the at least one program is executed by the at least one processor, the at least one processor implements the above method.

[0120] The content in the above method embodiments is applicable to this embodiment. The functions specifically implemented in this embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those in the above method embodiments, and will not be elaborated here.

[0121] Although the description of the present disclosure has been quite detailed and specifically describes several of the described embodiments, it is not intended to be limited to any of these details or embodiments or any particular embodiment, but rather should be regarded as effectively covering the intended scope of the present disclosure by reference to the appended claims, considering the prior art to provide a broad interpretation of these claims. In addition, the present disclosure is described above in terms of embodiments foreseeable by the inventors for the purpose of providing a useful description, and those non-substantive modifications to the present disclosure that are not currently foreseeable may still represent equivalent modifications of the present disclosure.

Claims

1. A method for securely accessing teaching data, characterized in that: The method comprises the following steps: S100, a client device establishes a communication connection with at least one data server, receives a storage address pushed by the data server, and generates a storage address list based on the received storage address; wherein the data server has multiple storage addresses, each of which is used to store teaching data of a corresponding security level; S200, the client device reports access authentication information to the authentication server in response to access request information for accessing teaching data; wherein the access request information includes user identity information, and the access authentication information includes the user identity information, the storage address list, and a device identification code of the client device; S300, the authentication server, in response to the access authentication information sent by the client device, determines an authority index of the client device based on the access authentication information; wherein the authority index indicates a security level allowing the user identity information to access the teaching data through the client device; if the authentication server is able to decrypt the access authentication information sent by the client device, it indicates that the client device has been authenticated by the authentication server; S400, the authentication server filters out storage addresses with a security level lower than the permission index from the storage address list, forms an authorized address list with the filtered storage addresses, and sends the list to the client device respectively; S500, the client device obtains teaching data according to the authorized address list; In S300, determining the authority index of the client device according to the access authentication information includes: S310, obtaining the IP address of the client device; S320, determining peer devices of the client device based on the IP address, where the peer devices include the remaining client devices in the communication network where the client device is located; S330, obtaining a first total duration, a second total duration, and access rights to the user identity information; wherein the first total duration is the total duration of the communication connection between the client device and the data server after logging in to the same family device using the user identity information; and the second total duration is the total duration of the communication connection between the client device and the data server; S340, determining the permission index of the client device based on the first total duration, the second total duration and the access rights corresponding to the user identity information; wherein the permission index is positively correlated with the first total duration and the second total duration, and the permission index does not exceed the access rights of the user identity information.

2. A method for securely accessing teaching data according to claim 1, characterized in that: Before S100, the method further includes: S101, the authentication server obtains registration request information sent by the client device, wherein the registration request information includes a device identification code; S102: The authentication server queries the access authority corresponding to the device identification code according to a preset permission correspondence table, wherein the permission correspondence table includes multiple access authorities, each of which corresponds to at least one device identification code and at least one security level; S103, determining a security level corresponding to the access authority, and using a storage address corresponding to the security level as a storage address corresponding to the device identification code; S104: The authentication server forms an address access table with the device identification code and the corresponding storage address and sends it to the data server.

3. A method for securely accessing teaching data according to claim 2, characterized in that: In S100, the client device establishes a communication connection with at least one data server, receives storage addresses pushed by the data server, and generates a storage address list based on the received storage addresses, including: S110, the client device establishes a communication connection with the data server and receives a first public key generated by the data server using an asymmetric encryption algorithm; S130: The client device encrypts the device identification code of the client device using the first public key and sends the encrypted code to the data server. S130: The data server decrypts the encrypted device identification code using the first private key used to generate the first public key. If the device identification code is matched in the address access table, the data server sets the attribute value of each storage address in the address access table to true and pushes the decrypted device identification code to the client device. If the device identification code is not matched in the address access table, the data server sets the attribute values of all storage addresses in the data server to false and pushes the decrypted device identification code to the client device. S140: The client device divides the received storage addresses according to security levels and generates a storage address list.

4. A method for securely accessing teaching data according to claim 3, characterized in that: In S500, the client device obtains teaching data according to the authorized address list, including: S510, the client device determines a data server corresponding to an address stored in the authorized address list; S520, the client device sends an access request to the data server, where the access request includes the authority index; S530, after receiving the access request, the data server matches the authorized address list with the address access table to determine the storage address accessible to the client device; S540, the data server sends the accessible storage address to the client device; S550: The client device accesses the teaching data in the data server according to the accessible storage address.

5. A method for securely accessing teaching data according to claim 4, characterized in that: In S550, the client device accesses the teaching data in the data server according to the accessible storage address, including: S551, the client device displays the accessible storage addresses after receiving them, and uses the storage address selected by the user from the accessible storage addresses as the designated address; S552: The client device encrypts the designated address and the second public key using the first public key and sends the encrypted data to the data server, requesting access to the teaching data stored at the designated address; wherein the designated address is selected from the accessible storage addresses, and the second public key is generated by the client device using an asymmetric encryption algorithm; S553: After decrypting the data using the first private key to obtain the designated address and the second public key, the data server reads the teaching data stored in the designated address and generates corresponding summary information for the teaching data; S554, after the data server generates a teaching data list from the summary information, it encrypts the teaching data list using the second public key and sends the encrypted data to the client device; S555, the client device uses the second private key to decrypt the obtained teaching data list and displays it, and sends the summary information selected by the user from the teaching data list to the data server; S556 , after receiving the summary information sent by the client device, the data server determines the teaching data corresponding to the summary information and sends the teaching data to the client device.

6. A secure access system for teaching data, characterized in that: include: at least one processor; at least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor implements the method according to any one of claims 1 to 5.

Images