Data security interaction method and system for tablet computer

Abstract

The present invention discloses a data security interaction method and system for a tablet computer, which relates to the technical field of data interaction, including: establishing a virus database, establishing a virus removal database; setting a transfer storage area in the tablet computer; obtaining known abnormal data and unknown abnormal data; deleting the known abnormal data; finding a method for removing unknown abnormal data based on big data; performing data monitoring, triggering approval when an abnormality occurs in the interaction flow, terminating the interaction when the approval is abnormal, and continuing the interaction when there is no abnormality in the approval; the data to be interacted is encrypted, and after being interacted from the transfer storage area to the tablet computer, it is decrypted. By setting a database establishment module, an abnormality classification module, an abnormality removal module and an interaction monitoring module, it is ensured that the virus implanted in the data to be interacted can be removed, thereby ensuring that the sensitive data in the tablet computer will not be stolen, tampered with or leaked.

Description

Technical Field

[0001] The present invention relates to the technical field of data interaction, and in particular to a data security interaction method and system for a tablet computer. Background Art

[0002] In tablet systems, data interaction is very important. Different applications and systems need to access and share data to implement various functions and services. For example, social networking platforms need to access users' personal information and activity records to provide personalized recommendations and advertisements; search engines need to access the content of web pages and documents to provide search results; cloud computing platforms need to access users' files and data to provide storage and computing services.

[0003] However, data interaction also brings security and privacy issues. Although authentication and authorization mechanisms are set up, it is impossible to prevent the data to be interacted from being infected with viruses. Without proper protection, malicious data may steal, tamper with or leak sensitive data. Summary of the invention

[0004] In order to solve the above technical problems, a data security interaction method and system for a tablet computer is provided. This technical solution solves the problem that although the authentication and authorization mechanism is set up in the above background technology, it is impossible to prevent the data to be interacted with from being implanted with viruses. If proper protection is not performed, malicious data may steal, tamper with or leak sensitive data.

[0005] In order to achieve the above purpose, the technical solution adopted by the present invention is:

[0006] A data security interaction method for a tablet computer, comprising:

[0007] Establish virus database and virus removal database;

[0008] Update the virus database and virus removal database in real time;

[0009] A transfer storage area is set in the tablet computer, and when the data to be interacted is transferred to the transfer storage area, the transfer storage area is initially disconnected from the tablet computer;

[0010] Evenly divide the data to be interacted into at least one data block, perform parallel detection on at least one data block to obtain at least one abnormal data, classify the abnormal data, and obtain known abnormal data and unknown abnormal data;

[0011] Use the virus removal database to delete known abnormal data;

[0012] Based on big data, a method for clearing unknown abnormal data is sought. When the method for clearing unknown abnormal data is obtained, the method for clearing unknown abnormal data is used to clear the unknown abnormal data. When the method for clearing unknown abnormal data is not obtained, the data to be interacted is regarded as abnormal interaction data, and the interaction of the data to be interacted from the transfer storage area to the tablet computer is terminated.

[0013] After the abnormal data of the interaction data is cleared, the transfer storage area is connected to the tablet computer to interact with the data. During the interaction of the interaction data from the transfer storage area to the tablet computer, data monitoring is performed. When the interaction traffic is abnormal, the approval is triggered. When the approval is abnormal, the interaction is terminated. When there is no abnormality in the approval, the interaction continues.

[0014] The data to be interacted with is encrypted and then decrypted after being interacted with from the transit storage area to the tablet computer. The encryption key is changed regularly.

[0015] Preferably, the establishment of a virus database comprises the following steps:

[0016] Data collection: Based on big data, obtain at least one virus sample that causes data security risks, and extract key feature information of the virus sample, including file hash value, behavior pattern, and infection method;

[0017] Data classification: Classify and sort the collected virus feature information to obtain at least one virus classification. The classification indicators include virus family, transmission mode, and degree of harm. The classification indicators of viruses in the same virus classification are consistent, and the degree of harm is the speed at which the virus destroys the data.

[0018] Data storage: Aggregate at least one virus classification and use distributed storage technology to store it to obtain a virus database.

[0019] Preferably, the establishment of a virus removal database comprises the following steps:

[0020] Randomly obtain a virus from the virus classification as the target virus;

[0021] Based on the big data, a removal solution for at least one virus is obtained, and the virus removal solutions are classified according to the classification index of the virus to obtain a classification of the removal solutions;

[0022] Obtain a removal solution classification that is consistent with the classification index of the target virus as the target removal solution classification;

[0023] The cleaning solution in the target cleaning solution classification is used as the cleaning method of the target virus;

[0024] At least one removal scheme classification is summarized and stored using a distributed storage technology to obtain a virus removal database.

[0025] Preferably, the real-time updating of the virus database and the real-time updating of the virus removal database comprises the following steps:

[0026] Based on big data, obtain newly generated viruses;

[0027] Searching the virus database to see if there is a virus classification that is consistent with the classification index of the newly generated virus, if so, the newly generated virus is classified into the corresponding virus classification, and the virus removal database is not updated; if not, a new virus classification is established in the virus database, and the newly generated virus is classified into the new virus classification;

[0028] Based on big data, new virus removal solutions are obtained, new removal solution categories are formed, and the new removal solution categories are supplemented in the virus removal database.

[0029] Preferably, the performing parallel detection on at least one data block to obtain at least one abnormal data comprises the following steps:

[0030] Get sample data and use the sample data to pre-interact with data blocks;

[0031] Check whether there is data anomaly in the sample data. If not, no processing is performed. If yes, the part of the data block that causes the anomaly is treated as abnormal data.

[0032] After the detection is completed, the data blocks are restored to the state before the interaction.

[0033] Preferably, the classifying of abnormal data to obtain known abnormal data and unknown abnormal data comprises the following steps:

[0034] Slicing the abnormal data to obtain at least one slice to be detected;

[0035] Slicing the viruses in the virus database to obtain at least one virus slice;

[0036] The slice to be detected is compared with the virus slice. When the overlap between the slice to be detected and the virus slice is greater than a preset value, the abnormal data is known abnormal data; otherwise, the abnormal data is unknown abnormal data.

[0037] Preferably, the use of a virus removal database to delete known abnormal data includes the following steps:

[0038] Obtain at least one virus slice that is consistent with the to-be-detected slice of known abnormal data, and obtain viruses in a virus removal database corresponding to the at least one virus slice as characteristic viruses;

[0039] Pairing a cleaning solution in the cleaning solution classification corresponding to at least one characteristic virus with known abnormal data;

[0040] Use a cleaning solution paired with known outlier data to remove known outlier data.

[0041] Preferably, the method for finding and removing unknown abnormal data based on big data comprises the following steps:

[0042] Based on big data, obtain a solution to remove at least one virus;

[0043] A search is performed in at least one virus, and when there is a virus that is consistent with the classification index of the unknown abnormal data, a solution for removing the virus that is consistent with the classification index of the unknown abnormal data is obtained as a method for removing the unknown abnormal data.

[0044] Preferably, when the interactive traffic is abnormal, triggering approval includes the following steps:

[0045] Compare the viruses in the virus database with the data to be interacted with in the transfer storage area;

[0046] When the data to be interacted contains viruses in the virus database, the approval is abnormal;

[0047] When the data to be interacted does not contain any virus in the virus database, the approval is normal.

[0048] A data security interaction system for a tablet computer, used to implement the data security interaction method for the tablet computer, comprising:

[0049] A database establishment module, wherein the database establishment module establishes a virus database and a virus removal database;

[0050] A data update module, which updates the virus database and the virus removal database in real time;

[0051] A transfer setting module, wherein the transfer setting module sets a transfer storage area in the tablet computer and transfers the data to be interacted to the transfer storage area;

[0052] An abnormality classification module, wherein the abnormality classification module obtains at least one abnormal data, classifies the abnormal data, and obtains known abnormal data and unknown abnormal data;

[0053] An abnormality clearing module, wherein the abnormality clearing module deletes known abnormal data, and based on big data, finds a method for clearing unknown abnormal data. When a method for clearing unknown abnormal data is obtained, the method for clearing unknown abnormal data is used to clear the unknown abnormal data. When a method for clearing unknown abnormal data is not obtained, the data to be interacted is regarded as abnormal interaction data, and the interaction of the data to be interacted from the transfer storage area to the tablet computer is terminated;

[0054] An interaction monitoring module, which monitors data during the process of data to be interacted from the transfer storage area to the tablet computer;

[0055] The data encryption module controls the encryption of the data to be interacted with, and decrypts the data after interacting from the transfer storage area to the tablet computer. The encryption key is changed regularly.

[0056] Compared with the prior art, the present invention has the following beneficial effects:

[0057] By setting up a database establishment module, a data update module, an anomaly classification module, an anomaly clearing module and an interaction monitoring module, multiple protections are set up to detect the interactive data to be interacted with, thereby ensuring that there is no virus implanted in the interactive data. At the same time, a virus database and a virus clearing database are established, and the abnormal data in the interactive data to be interacted with are classified according to the virus database. According to the classification result, the abnormal data in the interactive data to be interacted with is deleted using the corresponding solution, thereby ensuring that the virus implanted in the interactive data to be interacted with can be cleared, thereby ensuring that the sensitive data in the tablet computer will not be stolen, tampered with or leaked. Before the interaction, combined with the general authentication and authorization mechanism, the data security interaction can be further guaranteed. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Figure 1 A schematic diagram of a data security interaction method for a tablet computer of the present invention;

[0059] Figure 2 A schematic diagram of the process of establishing a virus database according to the present invention;

[0060] Figure 3 A schematic diagram of the process of establishing a virus removal database according to the present invention;

[0061] Figure 4 A schematic diagram of a process of updating a virus database and a virus removal database in real time according to the present invention;

[0062] Figure 5 The present invention performs parallel detection on at least one data block to obtain at least one abnormal data flow diagram;

[0063] Figure 6A schematic diagram of the process of classifying abnormal data to obtain known abnormal data and unknown abnormal data according to the present invention;

[0064] Figure 7 A schematic diagram of a flow chart of deleting known abnormal data using a virus removal database according to the present invention;

[0065] Figure 8 This is a flow chart of a method for finding and removing unknown abnormal data based on big data according to the present invention;

[0066] Fig. 9 This is a schematic diagram of the approval process that is triggered when an abnormality occurs in the interactive traffic of the present invention. DETAILED DESCRIPTION

[0067] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are only examples, and those skilled in the art may think of other obvious variations.

[0068] Reference Figure 1 As shown, a data security interaction method of a tablet computer includes:

[0069] Establish virus database and virus removal database;

[0070] Update the virus database and virus removal database in real time;

[0071] A transfer storage area is set in the tablet computer, and when the data to be interacted is transferred to the transfer storage area, the transfer storage area is initially disconnected from the tablet computer;

[0072] Evenly divide the data to be interacted into at least one data block, perform parallel detection on at least one data block to obtain at least one abnormal data, classify the abnormal data, and obtain known abnormal data and unknown abnormal data;

[0073] Use the virus removal database to delete known abnormal data;

[0074] Based on big data, a method for clearing unknown abnormal data is sought. When the method for clearing unknown abnormal data is obtained, the method for clearing unknown abnormal data is used to clear the unknown abnormal data. When the method for clearing unknown abnormal data is not obtained, the data to be interacted is regarded as abnormal interaction data, and the interaction of the data to be interacted from the transfer storage area to the tablet computer is terminated.

[0075] After the abnormal data of the interaction data is cleared, the transfer storage area is connected to the tablet computer to interact with the data. During the interaction of the interaction data from the transfer storage area to the tablet computer, data monitoring is performed. When the interaction traffic is abnormal, the approval is triggered. When the approval is abnormal, the interaction is terminated. When there is no abnormality in the approval, the interaction continues.

[0076] The data to be interacted with is encrypted and then decrypted after being interacted with from the transit storage area to the tablet computer. The encryption key is changed regularly.

[0077] Reference Figure 2 As shown, establishing a virus database includes the following steps:

[0078] Data collection: Based on big data, obtain at least one virus sample that causes data security risks, and extract key feature information of the virus sample, including file hash value, behavior pattern, and infection method;

[0079] Data classification: Classify and sort the collected virus feature information to obtain at least one virus classification. The classification indicators include virus family, transmission mode, and degree of harm. The classification indicators of viruses in the same virus classification are consistent, and the degree of harm is the speed at which the virus destroys the data.

[0080] Data storage: Aggregate at least one virus classification and use distributed storage technology to store it to obtain a virus database.

[0081] The virus database can be used to detect abnormal data in the data to be interacted with, because it is virus data that will affect the data in the tablet computer. Therefore, the virus data is summarized in advance, and then detection can be carried out based on it to obtain the abnormal data in the data to be interacted with, and then the abnormal data can be eliminated, and the data interaction can continue. At the same time, it will not affect the data in the tablet computer.

[0082] Reference Figure 3 As shown, establishing a virus removal database includes the following steps:

[0083] Randomly obtain a virus from the virus classification as the target virus;

[0084] Based on the big data, a removal solution for at least one virus is obtained, and the virus removal solutions are classified according to the classification index of the virus to obtain a classification of the removal solutions;

[0085] Obtain a removal solution classification that is consistent with the classification index of the target virus as the target removal solution classification;

[0086] The cleaning solution in the target cleaning solution classification is used as the cleaning method of the target virus;

[0087] At least one removal scheme classification is summarized and stored using a distributed storage technology to obtain a virus removal database.

[0088] The purpose of establishing a virus removal database is that each virus has a different corresponding removal method. The virus cannot be cleaned using an inappropriate removal method, and the virus cannot be processed by simple deletion. Therefore, it is necessary to establish a virus removal database based on the existing virus removal methods. When removing abnormal data, most of the abnormal data can be removed according to the removal methods in the virus removal database, and for the remaining small amount of abnormal data, targeted search can be used to complete it.

[0089] Reference Figure 4 As shown, updating the virus database in real time and updating the virus removal database in real time include the following steps:

[0090] Based on big data, obtain newly generated viruses;

[0091] Searching the virus database to see if there is a virus classification that is consistent with the classification index of the newly generated virus, if so, the newly generated virus is classified into the corresponding virus classification, and the virus removal database is not updated; if not, a new virus classification is established in the virus database, and the newly generated virus is classified into the new virus classification;

[0092] Based on big data, new virus removal solutions are obtained, new removal solution categories are formed, and the new removal solution categories are supplemented in the virus removal database.

[0093] Since viruses are constantly generated, using a fixed virus database cannot completely remove abnormal data, which can easily lead to incomplete cleaning of abnormal data, because the data to be interacted with may be new viruses that have not been updated. Therefore, the virus database needs to be updated. At the same time, the virus removal database also needs to be updated synchronously to obtain the corresponding removal solutions for new viruses.

[0094] Reference Figure 5 As shown, performing parallel detection on at least one data block to obtain at least one abnormal data includes the following steps:

[0095] Get sample data and use the sample data to pre-interact with data blocks;

[0096] Check whether there is data anomaly in the sample data. If not, no processing is performed. If yes, the part of the data block that causes the anomaly is treated as abnormal data.

[0097] After the detection is completed, the data blocks are restored to the state before the interaction.

[0098] Some viruses are implanted covertly and cannot be discovered directly. They will only be triggered during interaction. Therefore, abnormal data blocks will cause anomalies in the sample data during data interaction. From this, the data causing the anomaly can be determined.

[0099] Reference Figure 6 As shown, classifying abnormal data to obtain known abnormal data and unknown abnormal data includes the following steps:

[0100] Slicing the abnormal data to obtain at least one slice to be detected;

[0101] Slicing the viruses in the virus database to obtain at least one virus slice;

[0102] The slice to be detected is compared with the virus slice. When the overlap between the slice to be detected and the virus slice is greater than a preset value, the abnormal data is known abnormal data; otherwise, the abnormal data is unknown abnormal data.

[0103] Due to the wide variety of abnormal data, even if the virus database is updated in real time, it cannot be guaranteed that it summarizes all viruses. Therefore, it is necessary to classify the abnormal data to obtain known abnormal data and unknown abnormal data. For known abnormal data, use the data in the virus removal database to clean it. For unknown abnormal data, use big data for targeted search to obtain its corresponding cleaning method.

[0104] Reference Figure 7 As shown, using the virus removal database to delete known abnormal data includes the following steps:

[0105] Obtain at least one virus slice that is consistent with the to-be-detected slice of known abnormal data, and obtain viruses in a virus removal database corresponding to the at least one virus slice as characteristic viruses;

[0106] Pairing a cleaning solution in the cleaning solution classification corresponding to at least one characteristic virus with known abnormal data;

[0107] Use a cleaning solution paired with known outlier data to remove known outlier data.

[0108] Reference Figure 8 As shown, based on big data, the method for finding and removing unknown abnormal data includes the following steps:

[0109] Based on big data, obtain a solution to remove at least one virus;

[0110] A search is performed in at least one virus, and when there is a virus that is consistent with the classification index of the unknown abnormal data, a solution for removing the virus that is consistent with the classification index of the unknown abnormal data is obtained as a method for removing the unknown abnormal data.

[0111] Reference Fig. 9 As shown in the figure, when the interactive traffic is abnormal, the approval is triggered and includes the following steps:

[0112] Compare the viruses in the virus database with the data to be interacted with in the transfer storage area;

[0113] When the data to be interacted contains viruses in the virus database, the approval will be abnormal;

[0114] When the data to be interacted does not contain any virus in the virus database, the approval is normal.

[0115] The purpose of approval is to prevent unexpected situations. Due to the diversity of virus types, no method can ensure complete removal. Therefore, it is necessary to monitor the interaction process to determine whether there is any abnormality. Since the transfer storage area is initially disconnected from the tablet computer during interaction, it will not affect the data in the tablet computer.

[0116] A data security interaction system for a tablet computer, used to implement the data security interaction method for the tablet computer, comprising:

[0117] A database establishment module, wherein the database establishment module establishes a virus database and a virus removal database;

[0118] A data update module, which updates the virus database and the virus removal database in real time;

[0119] A transfer setting module, wherein the transfer setting module sets a transfer storage area in the tablet computer and transfers the data to be interacted to the transfer storage area;

[0120] An abnormality classification module, wherein the abnormality classification module obtains at least one abnormal data, classifies the abnormal data, and obtains known abnormal data and unknown abnormal data;

[0121] An abnormality clearing module, wherein the abnormality clearing module deletes known abnormal data, and based on big data, finds a method for clearing unknown abnormal data. When a method for clearing unknown abnormal data is obtained, the method for clearing unknown abnormal data is used to clear the unknown abnormal data. When a method for clearing unknown abnormal data is not obtained, the data to be interacted is regarded as abnormal interaction data, and the interaction of the data to be interacted from the transfer storage area to the tablet computer is terminated;

[0122] An interaction monitoring module, which monitors data during the process of data to be interacted from the transfer storage area to the tablet computer;

[0123] The data encryption module controls the encryption of the data to be interacted with, and decrypts the data after interacting from the transfer storage area to the tablet computer. The encryption key is changed regularly.

[0124] The working process of the data security interaction system of the above tablet computer is as follows:

[0125] Step 1: The database establishment module establishes a virus database and a virus removal database;

[0126] Step 2: The data update module updates the virus database and the virus removal database in real time;

[0127] Step 3: The transfer setting module sets a transfer storage area in the tablet computer, and when the data to be interacted is transferred to the transfer storage area, the transfer storage area is initially disconnected from the tablet computer;

[0128] Step 4: The anomaly classification module evenly divides the data to be interacted into at least one data block, performs parallel detection on at least one data block to obtain at least one anomaly data, and classifies the anomaly data to obtain known anomaly data and unknown anomaly data;

[0129] Step 5: The abnormality removal module uses the virus removal database to delete known abnormal data;

[0130] Step 6: The abnormality clearing module searches for a method for clearing unknown abnormal data based on big data. When the method for clearing unknown abnormal data is obtained, the method for clearing unknown abnormal data is used to clear the unknown abnormal data. When the method for clearing unknown abnormal data is not obtained, the data to be interacted is regarded as abnormal interaction data, and the interaction of the data to be interacted from the transfer storage area to the tablet computer is terminated.

[0131] Step 7: After the abnormal data of the interaction data is cleared, the transfer storage area is connected to the tablet computer to interact with the data. The interaction monitoring module monitors the data during the interaction of the interaction data from the transfer storage area to the tablet computer. When the interaction traffic is abnormal, the approval is triggered. When the approval is abnormal, the interaction is terminated. When there is no abnormality in the approval, the interaction continues.

[0132] Step 8: The data encryption module controls the encryption of the data to be interacted with. After interacting from the transfer storage area to the tablet computer, it is decrypted and the encryption key is changed regularly.

[0133] Furthermore, the present solution also proposes a storage medium on which a computer-readable program is stored, and when the computer-readable program is called, the above-mentioned data security interaction method of the tablet computer is executed.

[0134] It is understandable that the storage medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; an optical medium, such as a DVD; or a semiconductor medium, such as a solid state drive (SSD).

[0135] In summary, the advantages of the present invention are: by setting up a database establishment module, a data update module, an abnormal classification module, an abnormal clearing module and an interaction monitoring module, multiple protections are set up, the data to be interacted with is detected, and then it is ensured that there is no virus implanted in the data to be interacted with. At the same time, a virus database and a virus clearing database are established, and the abnormal data in the data to be interacted with are classified according to the virus database, and according to the classification result, the corresponding scheme is used to delete the abnormal data in the data to be interacted with, thereby ensuring that the virus implanted in the data to be interacted with can be cleared, thereby ensuring that the sensitive data in the tablet computer will not be stolen, tampered with or leaked. Before the interaction, combined with the general authentication and authorization mechanism, the data security interaction can be further guaranteed.

[0136] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions only describe the principles of the present invention. The present invention may be subject to various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A data security interaction method for a tablet computer, characterized in that: include: Establish virus database and virus removal database; Update the virus database and virus removal database in real time; A transfer storage area is set in the tablet computer, and when the data to be interacted is transferred to the transfer storage area, the transfer storage area is initially disconnected from the tablet computer; Evenly divide the data to be interacted into at least one data block, perform parallel detection on at least one data block to obtain at least one abnormal data, classify the abnormal data, and obtain known abnormal data and unknown abnormal data; Use the virus removal database to delete known abnormal data; Based on big data, a method for clearing unknown abnormal data is sought. When the method for clearing unknown abnormal data is obtained, the method for clearing unknown abnormal data is used to clear the unknown abnormal data. When the method for clearing unknown abnormal data is not obtained, the data to be interacted is regarded as abnormal interaction data, and the interaction of the data to be interacted from the transfer storage area to the tablet computer is terminated. After the abnormal data of the interaction data is cleared, the transfer storage area is connected to the tablet computer to interact with the data. During the interaction of the interaction data from the transfer storage area to the tablet computer, data monitoring is performed. When the interaction traffic is abnormal, the approval is triggered. When the approval is abnormal, the interaction is terminated. When there is no abnormality in the approval, the interaction continues. The data to be interacted with is encrypted and then decrypted after being interacted with from the transfer storage area to the tablet computer. The encryption key is changed regularly. The performing parallel detection on at least one data block to obtain at least one abnormal data comprises the following steps: Get sample data and use the sample data to pre-interact with data blocks; Check whether there is data anomaly in the sample data. If not, no processing is performed. If yes, the part of the data block that causes the anomaly is treated as abnormal data. After the detection is completed, the data blocks are restored to the state before the interaction; The classification of abnormal data to obtain known abnormal data and unknown abnormal data includes the following steps: Slicing the abnormal data to obtain at least one slice to be detected; Slicing the viruses in the virus database to obtain at least one virus slice; Compare the slice to be tested with the virus slice. When the overlap between the slice to be tested and the virus slice is greater than a preset value, the abnormal data is known abnormal data; otherwise, the abnormal data is unknown abnormal data. The method for finding and removing unknown abnormal data based on big data includes the following steps: Based on big data, obtain a solution to remove at least one virus; Searching for at least one virus, and when there is a virus that is consistent with the classification index of the unknown abnormal data, obtaining a solution for removing the virus that is consistent with the classification index of the unknown abnormal data as a method for removing the unknown abnormal data; When the interactive traffic is abnormal, the approval is triggered and includes the following steps: Compare the viruses in the virus database with the data to be interacted with in the transfer storage area; When the data to be interacted contains viruses in the virus database, the approval is abnormal; When the data to be interacted does not contain any virus in the virus database, the approval is normal.

2. A data security interaction method for a tablet computer according to claim 1, characterized in that: The establishment of the virus database comprises the following steps: Data collection: Based on big data, obtain at least one virus sample that causes data security risks, and extract key feature information of the virus sample, including file hash value, behavior pattern, and infection method; Data classification: Classify and sort the collected virus feature information to obtain at least one virus classification. The classification indicators include virus family, transmission mode, and degree of harm. The classification indicators of viruses in the same virus classification are consistent, and the degree of harm is the speed at which the virus destroys the data. Data storage: Aggregate at least one virus classification and use distributed storage technology to store it to obtain a virus database.

3. The data security interaction method of a tablet computer according to claim 2, characterized in that: The establishment of a virus removal database comprises the following steps: Randomly obtain a virus from the virus classification as the target virus; Based on the big data, a removal solution for at least one virus is obtained, and the virus removal solutions are classified according to the classification index of the virus to obtain a classification of the removal solutions; Obtain a removal solution classification that is consistent with the classification index of the target virus as the target removal solution classification; The cleaning solution in the target cleaning solution classification is used as the cleaning method of the target virus; At least one removal scheme classification is summarized and stored using a distributed storage technology to obtain a virus removal database.

4. The data security interaction method of a tablet computer according to claim 3, characterized in that: The real-time updating of the virus database and the real-time updating of the virus removal database comprises the following steps: Based on big data, obtain newly generated viruses; Searching the virus database to see if there is a virus classification that is consistent with the classification index of the newly generated virus, if so, the newly generated virus is classified into the corresponding virus classification, and the virus removal database is not updated; if not, a new virus classification is established in the virus database, and the newly generated virus is classified into the new virus classification; Based on big data, new virus removal solutions are obtained, new removal solution categories are formed, and the new removal solution categories are supplemented in the virus removal database.

5. A data security interaction method for a tablet computer according to claim 4, characterized in that: Deleting known abnormal data using the virus removal database includes the following steps: Obtain at least one virus slice that is consistent with the to-be-detected slice of known abnormal data, and obtain viruses in a virus removal database corresponding to the at least one virus slice as characteristic viruses; Pairing a cleaning solution in the cleaning solution classification corresponding to at least one characteristic virus with known abnormal data; Use a cleaning solution paired with known outlier data to remove known outlier data.

6. A data security interaction system for a tablet computer, used to implement the data security interaction method for a tablet computer according to any one of claims 1 to 5, characterized in that: include: A database establishment module, wherein the database establishment module establishes a virus database and a virus removal database; A data update module, which updates the virus database and the virus removal database in real time; A transfer setting module, wherein the transfer setting module sets a transfer storage area in the tablet computer and transfers the data to be interacted to the transfer storage area; An abnormality classification module, wherein the abnormality classification module obtains at least one abnormal data, classifies the abnormal data, and obtains known abnormal data and unknown abnormal data; An abnormality clearing module, wherein the abnormality clearing module deletes known abnormal data, and based on big data, finds a method for clearing unknown abnormal data. When a method for clearing unknown abnormal data is obtained, the method for clearing unknown abnormal data is used to clear the unknown abnormal data. When a method for clearing unknown abnormal data is not obtained, the data to be interacted is regarded as abnormal interaction data, and the interaction of the data to be interacted from the transfer storage area to the tablet computer is terminated; An interaction monitoring module, which monitors data during the process of data to be interacted from the transfer storage area to the tablet computer; The data encryption module controls the encryption of the data to be interacted with, and decrypts the data after interacting from the transfer storage area to the tablet computer. The encryption key is changed regularly.

Images